This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json) Hash identifier: 49+RaN7auo9Rr7/CUSiHt4+hJEbdEhWja3fqxMETKEE= Subject key identifier: 8C:0D:4C:ED:F2:72:14:4B:6F:10:73:38:0B:9D:AD:6D:95:3E:63:D0 Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85 Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885 Certificate serial: 019B9EC5A0322B29BAE2BCF6B6CA44B6A0D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft Manifest number: 0A86 Signing time: Thu 08 Jan 2026 18:01:50 +0000 Manifest this update: Thu 08 Jan 2026 18:01:50 +0000 Manifest next update: Fri 09 Jan 2026 18:01:50 +0000 Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: nBBuORzonnIvn2fwJOflYGu/osq0svkvzWhuY2NoMbg=) 2: KVXgF5z3zvUbDWDR9vEfB08gTrE.roa (hash: UHAb4fioT9YjE1AokUnZfVbvlTm8HooTgsw5q7QUcZ0=) 3: p_71hNByXrDuNYKSNzWqmsK9r-A.roa (hash: KH7XFzdKacxa7PKL/12r22Uz9GNXLSLW65hXt/t41hQ=) 4: wO6fRWt8N7XMvIeyLTRMhJ0-t94.roa (hash: HaZn3L1Ow7LzOKxqi0hwoJYvNFRFIKrjZGo6K0g1OtQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:c5:a0:32:2b:29:ba:e2:bc:f6:b6:ca:44:b6:a0:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885 Validity Not Before: Jan 8 18:01:50 2026 GMT Not After : Jan 9 18:01:50 2026 GMT Subject: CN=8c0d4cedf272144b6f1073380b9dad6d953e63d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d1:20:d3:c1:ec:7e:e3:57:ec:27:dc:1e:2e: 65:60:a4:a8:c5:0d:52:9c:8b:0f:59:46:36:61:44: b6:01:77:26:3a:66:51:3f:8d:a6:d4:8f:33:5d:ec: b9:24:94:94:59:72:50:91:f2:bb:b8:58:b7:ca:8d: 5d:ed:39:de:19:ad:43:f0:6e:22:aa:58:e6:ad:9c: df:c9:04:d6:01:98:0f:c6:0b:69:f9:1c:b7:ce:cc: ae:ca:a4:eb:d6:dd:49:3b:34:8e:a5:f7:21:2f:85: 89:eb:0b:05:4f:ff:89:54:15:ef:ad:b3:18:da:44: 83:33:e2:6d:5b:44:32:ee:21:89:c2:4e:04:d2:fd: b2:f8:de:ed:88:9e:97:da:70:f3:0b:4c:ec:20:26: 9f:8c:79:2f:58:8c:92:16:1e:f9:29:5a:88:19:a1: 9d:58:ac:27:96:d8:dc:60:de:77:f5:e0:e4:6c:4c: 44:fe:81:76:6c:87:ce:00:1b:95:7e:b4:60:05:2b: fb:01:33:49:9c:8b:b7:77:a4:fc:55:d4:fa:74:74: da:db:03:75:66:fe:16:e7:db:3a:5a:91:c6:2b:ee: 0a:71:e3:e9:74:10:8b:08:38:b8:60:63:40:64:40: 89:f6:2c:de:52:15:2c:26:4f:94:51:06:f7:04:65: 7e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0D:4C:ED:F2:72:14:4B:6F:10:73:38:0B:9D:AD:6D:95:3E:63:D0 X509v3 Authority Key Identifier: keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e3:ca:f3:3a:46:27:c4:0e:fb:37:6f:1d:54:f2:2e:45:b7: 0f:55:1e:7b:61:77:9f:05:39:38:be:bd:c6:55:44:c6:9d:95: 85:66:54:f7:60:8b:f0:92:fc:44:ea:26:e8:3f:92:19:63:59: b6:f4:34:40:55:5c:a7:1e:4f:34:ce:a1:2b:ec:fc:9d:33:29: 50:34:d9:80:c4:5a:36:73:33:c8:d1:1d:6c:13:f9:e3:cb:20: 8e:3a:fc:2e:be:13:cd:53:3d:ab:2a:3a:ef:d0:c7:63:c4:3c: 93:7c:f0:8c:7e:f7:13:f9:ba:37:a4:c5:a5:2c:17:b6:4a:01: 7b:a7:41:2a:eb:ad:7f:f8:e3:59:49:a6:1f:56:24:13:f3:14: 66:72:04:e9:1b:ca:73:19:d4:e2:c1:a3:dc:4f:35:b6:61:d8: b1:8d:a6:f7:8c:34:7c:1a:36:05:b2:c7:5a:31:f5:db:55:78: 7a:25:6c:44:fd:e1:9e:d6:d0:29:74:d7:4c:57:dd:80:b3:bf: 90:2b:4f:a5:49:c5:96:b7:60:e9:d0:a6:d5:45:0e:cb:ad:a7: 93:68:33:f0:0e:08:39:01:3a:b2:b3:3b:35:4b:66:17:2e:27: eb:58:8e:7e:77:8e:15:b2:21:5b:86:54:d4:68:1a:3f:b4:05: a2:e4:9c:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuexaAyKym64rz2tspEtqDRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MzAxZjc3Mjc1M2Q4MGE3YjYyYzJkMjEzZDM0N2EzYjll YmU4ODUwHhcNMjYwMTA4MTgwMTUwWhcNMjYwMTA5MTgwMTUwWjAzMTEwLwYDVQQD Eyg4YzBkNGNlZGYyNzIxNDRiNmYxMDczMzgwYjlkYWQ2ZDk1M2U2M2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tEg08HsfuNX7CfcHi5lYKSoxQ1S nIsPWUY2YUS2AXcmOmZRP42m1I8zXey5JJSUWXJQkfK7uFi3yo1d7TneGa1D8G4i qljmrZzfyQTWAZgPxgtp+Ry3zsyuyqTr1t1JOzSOpfchL4WJ6wsFT/+JVBXvrbMY 2kSDM+JtW0Qy7iGJwk4E0v2y+N7tiJ6X2nDzC0zsICafjHkvWIySFh75KVqIGaGd WKwnltjcYN539eDkbExE/oF2bIfOABuVfrRgBSv7ATNJnIu3d6T8VdT6dHTa2wN1 Zv4W59s6WpHGK+4KcePpdBCLCDi4YGNAZECJ9izeUhUsJk+UUQb3BGV+awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwNTO3ychRLbxBzOAudrW2VPmPQMB8GA1UdIwQY MBaAFNcwH3cnU9gKe2LC0hPTR6O56+iFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2It MmY2NzY5ZTc1ZjI0LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2ItMmY2NzY5ZTc1ZjI0 LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+PK8zpG J8QO+zdvHVTyLkW3D1Uee2F3nwU5OL69xlVExp2VhWZU92CL8JL8ROom6D+SGWNZ tvQ0QFVcpx5PNM6hK+z8nTMpUDTZgMRaNnMzyNEdbBP548sgjjr8Lr4TzVM9qyo6 79DHY8Q8k3zwjH73E/m6N6TFpSwXtkoBe6dBKuutf/jjWUmmH1YkE/MUZnIE6RvK cxnU4sGj3E81tmHYsY2m94w0fBo2BbLHWjH121V4eiVsRP3hntbQKXTXTFfdgLO/ kCtPpUnFlrdg6dCm1UUOy62nk2gz8A4IOQE6srM7NUtmFy4n61iOfneOFbIhW4ZU 1GgaP7QFouScnw== -----END CERTIFICATE-----Generated at Fri Jan 9 01:10:29 2026 by rpki-client