This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft File: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft (raw, json) Hash identifier: tKIZxTjId8sPNvY0TrNOJJAPPbrXXGLETBHdC9Tbn2I= Subject key identifier: 90:06:65:0A:AC:C5:F5:B1:8C:BC:D8:19:07:5B:D8:F5:9A:2B:84:B2 Authority key identifier: 69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15 Certificate issuer: /CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15 Certificate serial: 019BFBAEE94D3E8CD318006E4F2E7A69D074 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft Manifest number: 018C Signing time: Mon 26 Jan 2026 19:01:42 +0000 Manifest this update: Mon 26 Jan 2026 19:01:42 +0000 Manifest next update: Tue 27 Jan 2026 19:01:42 +0000 Files and hashes: 1: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl (hash: cdGjRpGu2wfPxBBZ7brr2+9g9XYJhYCF6/LbE9xwnl4=) 2: zIyAUwF-LJlT9SOUOwU0Pdyt4G4.roa (hash: /Tmx9Ly9zFoq7yV+T0VGCTT8klLFQNZ6UtKDdkPo4ik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:e9:4d:3e:8c:d3:18:00:6e:4f:2e:7a:69:d0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15 Validity Not Before: Jan 26 19:01:42 2026 GMT Not After : Jan 27 19:01:42 2026 GMT Subject: CN=9006650aacc5f5b18cbcd819075bd8f59a2b84b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0d:e9:56:f9:6d:22:21:04:46:9d:23:f5:ac: 5b:9f:5e:15:86:02:4c:a7:98:1c:5e:a7:cb:9e:5f: 0f:07:47:3b:87:96:92:b7:78:4f:99:fe:a2:05:7c: ea:aa:27:35:2e:d6:20:ef:de:8b:1a:d2:95:e9:8d: 1e:63:37:33:21:bf:2f:bf:8a:43:26:7e:ef:d3:d0: 09:23:b9:fb:d3:f2:38:a8:1e:75:49:2f:f2:fa:6e: 50:98:5d:b8:9a:ad:fb:42:c0:49:60:24:d1:6c:1c: 5c:77:78:0e:d2:b2:fd:cb:9a:89:e2:c3:f2:3c:3d: 5a:3f:33:86:7e:43:17:d3:85:7c:c0:6d:50:c4:a8: 13:9b:94:14:f5:74:68:2e:06:86:c5:46:0b:e4:f7: 0a:bb:6c:7b:5d:09:72:27:c2:0a:5f:4f:6c:e5:e2: 20:3b:14:d4:f2:fa:72:5d:9a:90:18:81:23:52:ae: 30:6b:68:9a:6b:15:bf:cd:bb:d7:e4:26:d1:0b:9f: 8b:8c:59:91:c1:db:51:91:98:b6:db:be:d5:aa:9d: 96:07:b9:e9:20:80:da:93:70:a6:74:5b:3a:7b:65: 7f:56:9c:40:81:56:bf:09:ff:16:1b:e5:7f:2a:1a: 51:99:c0:79:24:72:a7:d2:9e:6c:d9:e7:c2:ca:e3: 0e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:06:65:0A:AC:C5:F5:B1:8C:BC:D8:19:07:5B:D8:F5:9A:2B:84:B2 X509v3 Authority Key Identifier: keyid:69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:98:72:54:45:87:1b:7d:2e:ac:14:f6:5a:02:f9:16:a7:41: 01:44:63:fb:22:b9:5a:2a:99:48:8b:d0:fc:60:59:6d:40:8e: 41:e8:3d:b3:01:24:31:71:2b:0e:45:50:d8:5f:2f:dd:27:15: 73:ba:e0:4e:de:3d:a2:ed:74:1b:b6:28:32:17:20:65:1a:5b: 1c:28:73:ef:e3:4c:82:03:b7:08:e5:93:79:f4:87:8c:16:80: a5:ea:12:2d:a2:33:dd:c7:38:97:b9:f3:ae:0a:b1:78:ab:cb: cd:2f:f0:7d:75:c5:60:8c:19:93:a6:5a:9a:99:17:0f:86:ec: 1f:3c:64:7c:f4:32:93:40:c1:8f:b1:bb:ef:08:05:e2:35:ca: 6e:bf:1f:53:05:44:0c:65:21:69:62:8f:3b:51:7f:c5:f8:a1: 42:d6:00:38:c3:bd:b9:c4:7c:e2:23:27:1c:83:e3:14:1a:cf: b1:a6:ee:5e:60:df:12:21:df:d2:c9:b5:bf:57:e0:8b:8e:d8: e9:1f:e9:01:f5:75:21:98:ef:0c:8e:43:16:72:58:b4:1d:38: 8e:cb:b2:63:77:4d:f3:0e:d5:43:10:2b:22:f0:af:dd:3e:ce: af:ae:c7:b4:76:91:78:c4:df:17:6f:68:f8:ff:b0:54:60:0d: 19:ef:1a:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rulNPozTGABuTy56adB0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OWVlMDhmZjY3MTYwMGQ0MDM0YTNlMWQ5ZDVhOTAyNDVj YzljMTUwHhcNMjYwMTI2MTkwMTQyWhcNMjYwMTI3MTkwMTQyWjAzMTEwLwYDVQQD Eyg5MDA2NjUwYWFjYzVmNWIxOGNiY2Q4MTkwNzViZDhmNTlhMmI4NGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA3pVvltIiEERp0j9axbn14VhgJM p5gcXqfLnl8PB0c7h5aSt3hPmf6iBXzqqic1LtYg796LGtKV6Y0eYzczIb8vv4pD Jn7v09AJI7n70/I4qB51SS/y+m5QmF24mq37QsBJYCTRbBxcd3gO0rL9y5qJ4sPy PD1aPzOGfkMX04V8wG1QxKgTm5QU9XRoLgaGxUYL5PcKu2x7XQlyJ8IKX09s5eIg OxTU8vpyXZqQGIEjUq4wa2iaaxW/zbvX5CbRC5+LjFmRwdtRkZi2277Vqp2WB7np IIDak3CmdFs6e2V/VpxAgVa/Cf8WG+V/KhpRmcB5JHKn0p5s2efCyuMOewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAGZQqsxfWxjLzYGQdb2PWaK4SyMB8GA1UdIwQY MBaAFGme4I/2cWANQDSj4dnVqQJFzJwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVo3Z2pfWnhZQTFBTktQaDJkV3BBa1hNbkJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lNjcyN2MtMDgwMy00YTAzLTk3NzEt MWQwOGFkZGNhMjcxLzEvYVo3Z2pfWnhZQTFBTktQaDJkV3BBa1hNbkJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9lNjcyN2MtMDgwMy00YTAzLTk3NzEtMWQwOGFkZGNhMjcx LzEvYVo3Z2pfWnhZQTFBTktQaDJkV3BBa1hNbkJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZphyVEWH G30urBT2WgL5FqdBAURj+yK5WiqZSIvQ/GBZbUCOQeg9swEkMXErDkVQ2F8v3ScV c7rgTt49ou10G7YoMhcgZRpbHChz7+NMggO3COWTefSHjBaApeoSLaIz3cc4l7nz rgqxeKvLzS/wfXXFYIwZk6ZampkXD4bsHzxkfPQyk0DBj7G77wgF4jXKbr8fUwVE DGUhaWKPO1F/xfihQtYAOMO9ucR84iMnHIPjFBrPsabuXmDfEiHf0sm1v1fgi47Y 6R/pAfV1IZjvDI5DFnJYtB04jsuyY3dN8w7VQxArIvCv3T7Or67HtHaReMTfF29o +P+wVGANGe8aFg== -----END CERTIFICATE-----Generated at Mon Jan 26 23:02:33 2026 by rpki-client