This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft File: z-DfghIUOCcckTwk_1D9O2LUDcY.mft (raw, json) Hash identifier: QoIs5sVxCCSAj7mk08Q4y+L9oixSDQbrCGi3eBZbcLI= Subject key identifier: 20:D8:23:86:3F:F4:1A:39:6C:42:A8:7E:B1:8E:CE:60:1F:EA:C5:5C Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6 Certificate issuer: /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6 Certificate serial: 019BD81017F145B387098E7DB86E2652AC68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft Manifest number: 07F9 Signing time: Mon 19 Jan 2026 21:01:31 +0000 Manifest this update: Mon 19 Jan 2026 21:01:31 +0000 Manifest next update: Tue 20 Jan 2026 21:01:31 +0000 Files and hashes: 1: 9Lw22K23J7w-6XzIDg67QJLRG6o.roa (hash: ztr8UWAWB/buB6JT5GD2YfXKLhYvXE9x4n0VRU8ceQo=) 2: G5FnSUz31AbVLph_XF_b2V-WE4k.roa (hash: OyarEjklBShgcZGA7xw5r7NANY/GN4xIbQ4B1wFv/ow=) 3: RQ8xC9T79eYAnKVx9VhVrpoNTMY.roa (hash: exNJaK8lpq9kvpL01DCgkaVHl771CgqPSPw4MI32Txo=) 4: Uh0-hSK_XWDc2RnwMwkKmaaS-80.roa (hash: BJW5l+5BPbkG+XCltX7aXXNnUzSiJ2XCIUfhxIHiCPk=) 5: fU0ZyKezfFg3A0ASimWS_vDf2Ag.roa (hash: WGVPl1NHnlzzsePSOzjj+Gl8SDY0jb2m343GSbYT0V4=) 6: z-DfghIUOCcckTwk_1D9O2LUDcY.crl (hash: zSHtPw+xDMxk5P7BD9NJEcX8OjMW7bq/pWWu/JaVey4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:10:17:f1:45:b3:87:09:8e:7d:b8:6e:26:52:ac:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6 Validity Not Before: Jan 19 21:01:31 2026 GMT Not After : Jan 20 21:01:31 2026 GMT Subject: CN=20d823863ff41a396c42a87eb18ece601feac55c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:09:0d:fa:c3:f1:df:30:e5:a4:2c:43:07:23: 75:97:3f:c5:e4:bd:de:62:87:0a:ac:25:6f:ef:96: 60:23:44:ff:2c:47:31:d7:7c:9f:57:ea:c9:db:af: 22:83:26:b3:79:02:3c:fe:a2:77:8e:2e:fe:99:67: 8d:be:1f:af:1c:63:54:a4:d2:2c:d9:a0:a2:74:7a: 32:9e:bd:cb:2e:79:be:a4:19:27:9d:ec:91:ad:24: cc:12:d7:fc:a0:df:e4:a1:26:1f:03:41:1f:27:a4: 72:8b:9c:33:ce:78:87:3e:a4:5b:23:5e:71:23:5b: 6f:1a:57:58:76:57:19:e3:a6:94:07:14:9c:bd:2e: a9:01:d1:41:29:d4:1d:c8:d9:ed:0e:07:20:70:48: 00:a0:81:52:f3:c9:0b:80:22:75:aa:c0:53:bb:61: 05:17:9a:98:1d:40:1f:6d:da:f1:bb:1b:c1:8e:d0: f3:a6:64:1e:db:cb:da:cb:86:f7:00:64:64:c2:9c: f1:9a:42:d3:57:30:0e:1e:f3:76:b7:8d:55:ed:b1: 4b:b2:93:5a:c1:12:80:f6:cc:48:29:33:f4:37:c1: 97:db:6c:9e:6a:37:70:fe:ad:b8:d7:4b:6a:ab:3b: 9f:34:c5:42:7b:af:28:8f:15:8b:89:2d:28:1f:2e: 43:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D8:23:86:3F:F4:1A:39:6C:42:A8:7E:B1:8E:CE:60:1F:EA:C5:5C X509v3 Authority Key Identifier: keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:a0:43:f9:70:ae:b9:0f:5c:8e:b0:18:7a:c3:bf:71:96:95: e8:52:18:bf:b1:38:5c:a6:31:e2:5a:e0:96:13:25:b2:59:fd: 52:c5:23:16:4a:82:cd:86:ef:65:27:c7:04:0e:7d:7c:d8:7a: 76:a5:a3:b3:99:bd:14:07:b5:75:0a:8e:7d:fd:d3:12:a2:14: 5e:f7:4d:0a:60:a4:6d:37:19:54:0a:f8:f0:7a:d8:60:cc:2f: b6:54:df:a8:bb:f1:93:62:01:52:1c:02:2f:88:f7:3a:7f:05: 9b:0e:66:77:29:05:ae:90:c0:51:30:be:78:69:df:e7:5f:f0: d1:24:23:3a:89:5c:a9:e0:6e:9e:d7:28:ec:05:e0:bb:12:6d: c5:bb:31:ec:80:f5:d6:11:3b:69:3b:76:ef:31:4a:f5:29:98: 9a:08:ab:09:b4:0a:a7:82:ef:a1:26:a7:90:f8:1a:75:a2:35: 8b:29:c1:8e:5f:87:72:39:c1:35:90:df:6c:bc:90:50:46:ad: 87:1e:1d:df:2a:97:94:c1:95:8e:44:a3:0a:bd:a8:c3:52:6e: 48:cd:6c:81:63:00:17:21:0d:62:55:d0:fa:e6:09:8b:2b:9f: 89:cf:64:08:73:86:d7:d6:d4:fa:ff:c5:33:a6:67:f6:54:f7: cf:01:dd:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYEBfxRbOHCY59uG4mUqxoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZTBkZjgyMTIxNDM4MjcxYzkxM2MyNGZmNTBmZDNiNjJk NDBkYzYwHhcNMjYwMTE5MjEwMTMxWhcNMjYwMTIwMjEwMTMxWjAzMTEwLwYDVQQD EygyMGQ4MjM4NjNmZjQxYTM5NmM0MmE4N2ViMThlY2U2MDFmZWFjNTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AkN+sPx3zDlpCxDByN1lz/F5L3e YocKrCVv75ZgI0T/LEcx13yfV+rJ268igyazeQI8/qJ3ji7+mWeNvh+vHGNUpNIs 2aCidHoynr3LLnm+pBknneyRrSTMEtf8oN/koSYfA0EfJ6Ryi5wzzniHPqRbI15x I1tvGldYdlcZ46aUBxScvS6pAdFBKdQdyNntDgcgcEgAoIFS88kLgCJ1qsBTu2EF F5qYHUAfbdrxuxvBjtDzpmQe28vay4b3AGRkwpzxmkLTVzAOHvN2t41V7bFLspNa wRKA9sxIKTP0N8GX22yeajdw/q2410tqqzufNMVCe68ojxWLiS0oHy5DxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDYI4Y/9Bo5bEKofrGOzmAf6sVcMB8GA1UdIwQY MBaAFM/g34ISFDgnHJE8JP9Q/Tti1A3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMt ZjJjNzkyMmZhZjMyLzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMtZjJjNzkyMmZhZjMy LzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKBD+XCu uQ9cjrAYesO/cZaV6FIYv7E4XKYx4lrglhMlsln9UsUjFkqCzYbvZSfHBA59fNh6 dqWjs5m9FAe1dQqOff3TEqIUXvdNCmCkbTcZVAr48HrYYMwvtlTfqLvxk2IBUhwC L4j3On8Fmw5mdykFrpDAUTC+eGnf51/w0SQjOolcqeBuntco7AXguxJtxbsx7ID1 1hE7aTt27zFK9SmYmgirCbQKp4LvoSankPgadaI1iynBjl+HcjnBNZDfbLyQUEat hx4d3yqXlMGVjkSjCr2ow1JuSM1sgWMAFyENYlXQ+uYJiyufic9kCHOG19bU+v/F M6Zn9lT3zwHdPA== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:30 2026 by rpki-client