This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft File: fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft (raw, json) Hash identifier: VCrXhIyxC9FAY7NfK7tWCLYynbLKM2RkCg6sMR/zUbU= Subject key identifier: EC:C8:5B:90:50:1E:D8:E7:64:02:9B:F7:00:49:D1:8A:E0:3B:6C:21 Authority key identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86 Certificate issuer: /CN=7d9656d5867b43ce506445290bba705722260586 Certificate serial: 019BFB092A93DECFD3EA596871C7B538BBCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft Manifest number: 0D4C Signing time: Mon 26 Jan 2026 16:00:40 +0000 Manifest this update: Mon 26 Jan 2026 16:00:40 +0000 Manifest next update: Tue 27 Jan 2026 16:00:40 +0000 Files and hashes: 1: PKYw-eZEzQNrOovkMIOID6kPu5g.roa (hash: CAOXiOcVk96zpJFNWaRrMbvyB0Kjprfs/tXqbC7lysk=) 2: fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl (hash: 7/3cPKKZYQ3gkXjRGf0NGUtUw6qg+vid7XhrnrvaWms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:2a:93:de:cf:d3:ea:59:68:71:c7:b5:38:bb:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d9656d5867b43ce506445290bba705722260586 Validity Not Before: Jan 26 16:00:40 2026 GMT Not After : Jan 27 16:00:40 2026 GMT Subject: CN=ecc85b90501ed8e764029bf70049d18ae03b6c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fb:bf:14:db:3e:73:b0:c9:ca:c4:13:3b:e4: 44:12:1f:dc:fe:fd:fa:8a:ff:3c:26:6b:2b:88:64: c0:e7:93:73:86:81:8e:16:ef:7e:63:21:54:34:5c: 4f:2c:55:ae:df:e7:91:69:7f:38:b5:8e:f3:c3:25: e3:87:1c:e9:fd:93:b0:c1:4e:93:b8:63:0d:aa:0f: 17:c1:a1:6a:77:f1:c2:d9:1f:bb:e5:24:59:75:f9: cf:c4:83:a4:21:29:9d:5a:64:92:f3:ae:b1:a6:40: 6b:ab:1e:09:a6:ba:5a:ca:f8:9d:a8:3e:c6:11:a3: 17:b3:5d:e4:fc:07:16:e5:db:8e:fe:66:0e:ed:00: c6:9c:29:98:1a:dd:6c:67:a6:dd:3b:91:c1:16:74: 9e:66:0e:fb:35:73:df:9b:31:b7:fa:ab:10:f0:7e: 37:56:fc:8f:f3:8a:75:fe:58:f4:98:b0:50:ac:c3: ad:19:34:8a:29:4e:ae:e1:eb:7a:c5:3a:99:18:6d: 09:bf:c6:50:ad:72:02:9e:3e:35:3f:4e:05:3c:41: 02:b4:2d:0d:e3:3f:cf:f0:b8:4b:dd:ab:c3:0c:21: 17:45:64:f8:28:d0:23:f2:10:1e:8d:ee:a5:d9:ec: 24:60:ec:5a:74:87:79:24:00:24:c1:13:88:a3:49: 1f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C8:5B:90:50:1E:D8:E7:64:02:9B:F7:00:49:D1:8A:E0:3B:6C:21 X509v3 Authority Key Identifier: keyid:7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:6f:81:df:7c:81:42:40:a0:38:2a:67:33:de:9e:02:0f:cf: d5:ca:df:92:48:40:47:c2:26:4d:b1:fc:69:0d:9c:f5:7d:86: f9:da:0f:cd:d7:12:58:a5:ae:2d:d1:ae:18:71:3f:16:90:38: 40:c9:2f:60:e6:3c:d8:92:f7:cd:29:75:65:e1:77:14:6a:7f: 97:1c:e9:38:36:67:ee:2a:cf:8c:e0:e8:d2:53:1e:9b:03:d7: fa:66:4b:a9:2a:01:9f:6f:e0:89:91:40:c3:42:cd:34:8c:da: 9f:cb:54:ef:1f:32:44:7f:b0:f8:41:e7:5d:76:8f:0a:7d:5b: 23:2b:51:f0:b0:f9:17:19:9e:8a:aa:7a:26:c5:e8:82:b6:ec: 2c:55:08:a0:b8:4e:68:c2:16:1b:3a:8c:8a:08:a8:a2:6b:10: c2:03:dd:b1:a5:79:c8:3c:97:31:8d:43:69:6d:02:84:02:da: f8:61:1f:93:34:21:d6:60:9d:82:b6:4d:14:a5:ec:16:b2:1a: 4f:2a:e5:81:a8:e6:c7:61:29:ff:16:b5:c8:d1:2d:92:be:f0: 83:3b:85:87:c9:aa:9c:3e:8d:c0:7c:1a:9f:2c:eb:ca:11:f2: 0a:f2:37:1d:4f:63:b6:18:51:ea:99:4f:76:71:19:18:81:9a: 1e:b1:28:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CSqT3s/T6llocce1OLvNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkOTY1NmQ1ODY3YjQzY2U1MDY0NDUyOTBiYmE3MDU3MjIy NjA1ODYwHhcNMjYwMTI2MTYwMDQwWhcNMjYwMTI3MTYwMDQwWjAzMTEwLwYDVQQD EyhlY2M4NWI5MDUwMWVkOGU3NjQwMjliZjcwMDQ5ZDE4YWUwM2I2YzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfu/FNs+c7DJysQTO+REEh/c/v36 iv88JmsriGTA55NzhoGOFu9+YyFUNFxPLFWu3+eRaX84tY7zwyXjhxzp/ZOwwU6T uGMNqg8XwaFqd/HC2R+75SRZdfnPxIOkISmdWmSS866xpkBrqx4JprpayvidqD7G EaMXs13k/AcW5duO/mYO7QDGnCmYGt1sZ6bdO5HBFnSeZg77NXPfmzG3+qsQ8H43 VvyP84p1/lj0mLBQrMOtGTSKKU6u4et6xTqZGG0Jv8ZQrXICnj41P04FPEECtC0N 4z/P8LhL3avDDCEXRWT4KNAj8hAeje6l2ewkYOxadId5JAAkwROIo0kfRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzIW5BQHtjnZAKb9wBJ0YrgO2whMB8GA1UdIwQY MBaAFH2WVtWGe0POUGRFKQu6cFciJgWGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlpaVzFZWjdRODVRWkVVcEM3cHdWeUltQllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iMGYzMWQtYjRiZi00NTBkLTlhY2Qt MGE2YjUzNmM0Mzk0LzEvZlpaVzFZWjdRODVRWkVVcEM3cHdWeUltQllZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9iMGYzMWQtYjRiZi00NTBkLTlhY2QtMGE2YjUzNmM0Mzk0 LzEvZlpaVzFZWjdRODVRWkVVcEM3cHdWeUltQllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2+B33yB QkCgOCpnM96eAg/P1crfkkhAR8ImTbH8aQ2c9X2G+doPzdcSWKWuLdGuGHE/FpA4 QMkvYOY82JL3zSl1ZeF3FGp/lxzpODZn7irPjODo0lMemwPX+mZLqSoBn2/giZFA w0LNNIzan8tU7x8yRH+w+EHnXXaPCn1bIytR8LD5Fxmeiqp6JsXogrbsLFUIoLhO aMIWGzqMigioomsQwgPdsaV5yDyXMY1DaW0ChALa+GEfkzQh1mCdgrZNFKXsFrIa Tyrlgajmx2Ep/xa1yNEtkr7wgzuFh8mqnD6NwHwanyzryhHyCvI3HU9jthhR6plP dnEZGIGaHrEoWw== -----END CERTIFICATE-----Generated at Mon Jan 26 23:48:30 2026 by rpki-client