This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft File: rkZkQGbOrznTr7D9c1sBnOydo2Q.mft (raw, json) Hash identifier: PbLCw31+9xnMGiF0z1bkxy42hD00rVsLgfbxbKRj8QI= Subject key identifier: 74:C3:E0:18:01:69:3B:2A:AD:43:78:9A:02:35:D6:A6:EF:B7:70:8F Authority key identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64 Certificate issuer: /CN=ae46644066ceaf39d3afb0fd735b019cec9da364 Certificate serial: 019BFBAF121C9D6E0FD99E64B759465898E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft Manifest number: 046B Signing time: Mon 26 Jan 2026 19:01:53 +0000 Manifest this update: Mon 26 Jan 2026 19:01:53 +0000 Manifest next update: Tue 27 Jan 2026 19:01:53 +0000 Files and hashes: 1: YwZPhm_oPIIN_h73HSe7_TwtVu4.roa (hash: L8RiSrI3D8+7xc9Avh/47HaCMGihyyrZJ30e+0TUw7M=) 2: rkZkQGbOrznTr7D9c1sBnOydo2Q.crl (hash: jj/aGi1VYyYoUpqxajXHb+WnVC6QpRxNHa+7kURYR34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:af:12:1c:9d:6e:0f:d9:9e:64:b7:59:46:58:98:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae46644066ceaf39d3afb0fd735b019cec9da364 Validity Not Before: Jan 26 19:01:53 2026 GMT Not After : Jan 27 19:01:53 2026 GMT Subject: CN=74c3e01801693b2aad43789a0235d6a6efb7708f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:be:5e:8b:21:02:06:ec:d2:e8:ad:07:25:ae: 7f:9e:34:00:f3:cb:c1:6d:75:09:f8:9e:54:4d:77: 13:1f:12:d1:d4:fd:7e:43:cb:73:94:4b:ec:30:5f: 0b:34:b7:3a:a5:73:bf:07:3e:7b:4c:4f:d5:7c:79: fd:92:52:fc:18:0b:3a:3c:d5:e7:d7:21:f8:34:fb: b5:1c:bf:05:88:74:0f:de:05:39:78:ac:49:49:49: 4b:50:84:71:cc:28:a5:ea:a2:e6:ef:97:74:ef:7c: 51:96:38:ce:f5:cd:dc:06:47:f8:5c:51:32:10:f3: 5c:dc:fd:27:1b:24:5c:34:40:24:e5:79:9f:24:71: 0c:fb:f5:26:10:37:4d:d1:7e:c7:3f:ec:d2:64:e4: 71:1e:b2:d9:22:5a:68:c2:1d:2b:ca:89:68:40:1a: 5a:c1:bf:03:81:e3:6e:98:6c:de:36:27:d8:f4:e5: fd:37:d6:20:c3:b3:87:bc:f1:01:c8:30:f9:13:f3: 44:e7:3a:c5:28:87:23:7b:30:6f:a3:10:27:57:c8: 77:6d:93:71:48:2e:b6:22:ae:02:d7:4a:65:2a:3b: 01:fa:18:d7:39:85:1b:c5:55:b0:02:f9:05:87:bf: ed:e4:aa:67:1a:44:69:04:f2:8e:dd:d6:82:9c:3d: 28:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C3:E0:18:01:69:3B:2A:AD:43:78:9A:02:35:D6:A6:EF:B7:70:8F X509v3 Authority Key Identifier: keyid:AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e0:4f:24:34:9f:23:f1:6d:9b:9f:fc:da:9e:be:c0:5a:d1: de:ea:dd:ae:a3:ed:3b:e6:ce:29:67:c9:cc:e5:d6:e7:44:b3: f2:a9:cd:34:a6:2d:c3:54:55:12:af:78:ba:fe:39:85:fd:59: 75:2d:c5:31:a8:29:1d:c9:c2:76:d7:e1:06:03:30:cb:56:03: c8:73:a8:5d:3f:c6:39:72:20:d2:a0:c5:c8:75:1d:57:e6:53: 30:32:b7:fa:94:85:43:4b:c1:74:db:b2:e7:55:4e:7b:6b:2c: 12:91:27:81:d5:f2:96:8d:1d:5a:b4:07:bf:f2:2e:f4:17:8f: 2d:96:8c:87:46:4f:a0:e6:ad:8d:a8:6b:0f:90:0d:63:a7:cf: 9d:76:27:f3:56:d2:b5:6c:cb:7f:8f:cd:ad:6e:9e:51:79:ce: e2:c9:cc:de:63:e1:ff:53:33:dc:b1:42:29:3f:98:cb:d1:ae: a2:19:ca:a1:b9:b6:3a:4b:d4:ce:06:40:77:ca:f9:52:4e:2f: ca:6b:86:ef:b0:c5:37:0c:6e:88:ec:4a:95:d6:84:56:f7:2a: e0:6d:ae:b6:c8:fa:ec:0e:06:20:f5:f5:0b:b3:37:cf:8c:a6: 11:bf:db:b1:8c:4f:db:a5:47:00:81:f0:08:48:72:a7:e1:9d: ba:3e:98:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rxIcnW4P2Z5kt1lGWJjkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNDY2NDQwNjZjZWFmMzlkM2FmYjBmZDczNWIwMTljZWM5 ZGEzNjQwHhcNMjYwMTI2MTkwMTUzWhcNMjYwMTI3MTkwMTUzWjAzMTEwLwYDVQQD Eyg3NGMzZTAxODAxNjkzYjJhYWQ0Mzc4OWEwMjM1ZDZhNmVmYjc3MDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs75eiyECBuzS6K0HJa5/njQA88vB bXUJ+J5UTXcTHxLR1P1+Q8tzlEvsMF8LNLc6pXO/Bz57TE/VfHn9klL8GAs6PNXn 1yH4NPu1HL8FiHQP3gU5eKxJSUlLUIRxzCil6qLm75d073xRljjO9c3cBkf4XFEy EPNc3P0nGyRcNEAk5XmfJHEM+/UmEDdN0X7HP+zSZORxHrLZIlpowh0ryoloQBpa wb8DgeNumGzeNifY9OX9N9Ygw7OHvPEByDD5E/NE5zrFKIcjezBvoxAnV8h3bZNx SC62Iq4C10plKjsB+hjXOYUbxVWwAvkFh7/t5KpnGkRpBPKO3daCnD0oawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTD4BgBaTsqrUN4mgI11qbvt3CPMB8GA1UdIwQY MBaAFK5GZEBmzq8506+w/XNbAZzsnaNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iYzE3OGUtOWRjMC00Njg4LWEyZTMt OGQ5ZjExZjkxNmU5LzEvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iYzE3OGUtOWRjMC00Njg4LWEyZTMtOGQ5ZjExZjkxNmU5 LzEvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOBPJDSf I/Ftm5/82p6+wFrR3urdrqPtO+bOKWfJzOXW50Sz8qnNNKYtw1RVEq94uv45hf1Z dS3FMagpHcnCdtfhBgMwy1YDyHOoXT/GOXIg0qDFyHUdV+ZTMDK3+pSFQ0vBdNuy 51VOe2ssEpEngdXylo0dWrQHv/Iu9BePLZaMh0ZPoOatjahrD5ANY6fPnXYn81bS tWzLf4/NrW6eUXnO4snM3mPh/1Mz3LFCKT+Yy9GuohnKobm2OkvUzgZAd8r5Uk4v ymuG77DFNwxuiOxKldaEVvcq4G2utsj67A4GIPX1C7M3z4ymEb/bsYxP26VHAIHw CEhyp+Gduj6YKQ== -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:42 2026 by rpki-client