This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json) Hash identifier: 3Ayou/4JUt7itldBU4qYpKZLQaoLcbLWFTIG710PeeQ= Subject key identifier: 38:BA:51:9D:97:4E:E8:28:65:5B:4B:33:6B:1C:B2:6C:84:EA:11:0C Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c Certificate serial: 019BF8E3B86DEF3F92367790A5B1F742FE69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft Manifest number: 1491 Signing time: Mon 26 Jan 2026 06:00:32 +0000 Manifest this update: Mon 26 Jan 2026 06:00:32 +0000 Manifest next update: Tue 27 Jan 2026 06:00:32 +0000 Files and hashes: 1: CmEbUhenhDmMKvHKSkFpe9LG8X0.roa (hash: Jsb+hfYBWXp4dm2lj3dTAoFqYAK6O+6kl4dBC77ANZE=) 2: GtNJ0lmoQ9ZuqCpl3-J4Re7um1k.roa (hash: OD5qNfz5l9josRO/cRdoZZIkXHpha2NNc9udJTgh6/s=) 3: SQ9ZxRxAMd1xoAu9tA2c2yS9YUQ.roa (hash: MYiap9ADnfYQb/YwxbWyM4PVhhzPTbhg8edINlxn310=) 4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: HYm6Q7V7SLuyPHDo14etVUl1UXlLPzElmwvyEVWeX/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e3:b8:6d:ef:3f:92:36:77:90:a5:b1:f7:42:fe:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c Validity Not Before: Jan 26 06:00:32 2026 GMT Not After : Jan 27 06:00:32 2026 GMT Subject: CN=38ba519d974ee828655b4b336b1cb26c84ea110c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a9:19:1e:42:97:a0:d4:f8:a2:c9:bd:e3:ad: 1a:0e:bc:9b:76:bb:6f:2a:39:24:b4:48:78:94:a2: 37:0e:6f:7d:45:4b:db:8c:87:d5:95:90:88:f5:6c: 0b:ef:60:e8:41:f1:93:f5:71:82:2e:6d:c3:0a:8c: 09:93:52:6f:0b:a4:a5:f9:4f:12:cc:a0:40:99:d7: 2d:9d:5f:b2:00:b1:0b:28:5d:b3:98:7d:c3:da:36: ef:89:06:fc:0a:d5:60:62:55:18:5b:80:0b:8a:7f: a6:5e:76:43:ac:f2:74:a5:4a:f1:b6:5a:95:b0:ad: 58:54:2d:98:ed:a1:c0:24:78:cb:f8:04:f4:6a:3b: c4:86:6d:ca:76:4e:29:db:96:55:03:eb:88:02:ad: bf:2c:50:03:4e:ec:be:53:45:f7:89:df:22:33:a0: e8:eb:34:4f:95:a7:16:8a:55:21:4e:9f:2d:57:6f: 16:01:e9:f7:c3:4c:53:0b:9f:a9:9d:7e:09:7b:1d: 2e:f2:84:50:e1:a9:61:fb:08:05:45:e6:2b:dd:bc: 4d:9e:ab:a9:b5:25:9d:23:ec:b2:db:b0:c0:2a:27: 45:35:ad:ac:ae:50:7d:6b:a4:44:3a:05:57:46:27: c2:e4:85:5c:74:a7:c5:bc:55:a6:15:bf:68:93:a4: 0f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BA:51:9D:97:4E:E8:28:65:5B:4B:33:6B:1C:B2:6C:84:EA:11:0C X509v3 Authority Key Identifier: keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:88:f8:00:41:d6:37:fc:5f:3e:6d:8c:93:c8:4b:a4:70:18: 71:84:0e:b8:de:90:c8:f7:08:06:b6:91:f9:d1:77:89:ed:6b: 12:cc:cb:f1:22:4a:b0:a3:c6:6b:3b:6b:60:57:d0:76:89:f5: 20:1e:ab:ac:73:44:78:15:53:fd:d1:dc:93:24:f5:70:c1:ff: 12:33:75:dc:78:99:57:31:c5:a5:56:d7:f8:1c:da:24:1e:5a: 63:4b:cd:08:80:f3:57:6a:93:8b:2b:2f:fe:2d:ee:72:d0:22: ae:bb:5c:ab:ac:6b:87:ff:66:16:87:37:38:a2:95:57:6e:3d: b9:35:04:23:21:da:f4:bf:71:45:ac:5d:f7:28:29:21:2a:af: df:30:bc:6b:7b:75:56:c7:f5:9c:1a:4f:c1:fb:16:59:32:36: 20:38:4d:45:f5:ff:fa:f2:8f:06:9e:6f:a5:15:2b:30:c9:4f: 34:a8:4e:e1:a5:0f:a5:85:33:60:18:5b:7a:7c:3b:3f:0c:fe: ab:92:83:89:b0:0b:37:55:e2:89:27:14:77:e1:78:b6:23:8c: ee:7e:07:f6:d7:d4:b9:9f:4d:bf:37:63:19:6e:f9:03:9b:f3: ac:a7:c7:b1:4b:8c:88:13:de:ca:7a:44:83:ad:08:87:77:00: 12:e1:dd:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv447ht7z+SNneQpbH3Qv5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNzE4MGM0YmFkM2NmNDI1YTUwNjcyZTFjYjdhOWQyYWM3 OGUyMGMwHhcNMjYwMTI2MDYwMDMyWhcNMjYwMTI3MDYwMDMyWjAzMTEwLwYDVQQD EygzOGJhNTE5ZDk3NGVlODI4NjU1YjRiMzM2YjFjYjI2Yzg0ZWExMTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKkZHkKXoNT4osm9460aDrybdrtv KjkktEh4lKI3Dm99RUvbjIfVlZCI9WwL72DoQfGT9XGCLm3DCowJk1JvC6Sl+U8S zKBAmdctnV+yALELKF2zmH3D2jbviQb8CtVgYlUYW4ALin+mXnZDrPJ0pUrxtlqV sK1YVC2Y7aHAJHjL+AT0ajvEhm3Kdk4p25ZVA+uIAq2/LFADTuy+U0X3id8iM6Do 6zRPlacWilUhTp8tV28WAen3w0xTC5+pnX4Jex0u8oRQ4alh+wgFReYr3bxNnqup tSWdI+yy27DAKidFNa2srlB9a6REOgVXRifC5IVcdKfFvFWmFb9ok6QPSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDi6UZ2XTugoZVtLM2scsmyE6hEMMB8GA1UdIwQY MBaAFM5xgMS6089CWlBnLhy3qdKseOIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQt MDQ2ZDJlMmFkY2Q1LzEvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQtMDQ2ZDJlMmFkY2Q1 LzEvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4j4AEHW N/xfPm2Mk8hLpHAYcYQOuN6QyPcIBraR+dF3ie1rEszL8SJKsKPGaztrYFfQdon1 IB6rrHNEeBVT/dHckyT1cMH/EjN13HiZVzHFpVbX+BzaJB5aY0vNCIDzV2qTiysv /i3uctAirrtcq6xrh/9mFoc3OKKVV249uTUEIyHa9L9xRaxd9ygpISqv3zC8a3t1 Vsf1nBpPwfsWWTI2IDhNRfX/+vKPBp5vpRUrMMlPNKhO4aUPpYUzYBhbenw7Pwz+ q5KDibALN1XiiScUd+F4tiOM7n4H9tfUuZ9NvzdjGW75A5vzrKfHsUuMiBPeynpE g60Ih3cAEuHd/Q== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:12 2026 by rpki-client