This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft File: rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json) Hash identifier: bJqMGFYary3Y3oUxkKp7cDYs3FLj4xRdGqnXzdjhpCs= Subject key identifier: 04:6A:DF:BF:5A:C5:2F:4D:1F:A9:E8:3A:78:D5:D5:BD:B3:25:88:83 Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2 Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2 Certificate serial: 019BFD9CC387F14B0D0DB5CA510D0AF4B9B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft Manifest number: 14C0 Signing time: Tue 27 Jan 2026 04:01:07 +0000 Manifest this update: Tue 27 Jan 2026 04:01:07 +0000 Manifest next update: Wed 28 Jan 2026 04:01:07 +0000 Files and hashes: 1: 4QHBn9ucdlKQY-OkJvc7Ig6NIBo.roa (hash: 7wIOmcrsKNPm1pT+25Dr7MjY3mEMyojJiBNkSyV1lM0=) 2: Hz2CwE5wcYXTB8FSwWDK5Rt2kgM.roa (hash: IDDqSWOczA2q2urCjohT5PUeAUF0bht4zqH2G2v0ftg=) 3: KSdM6O1FKkRc_JqGqlUg5PGDzE4.roa (hash: l71hLYxyaBfjnzVG3OAC3KkLtPDUSTDHWl+YWeICYgs=) 4: Zrny0yg3TVa-9PfRlD4jNDdwvaQ.roa (hash: KV55zi4mSfveBw4rPTBhd4Q9yfOZ75ZlhzyzEJkhajg=) 5: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: PVhIyNpDQa7Ofaw9G7VhnmtIsbyyvw46qwnWuoj8OEg=) 6: tbYt_1HgZu11ZUlS_9RFIWiny-Q.roa (hash: 0H367OeDFx32BeCSB2rFjNElX2FtZo0+OiydPHLocnQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:9c:c3:87:f1:4b:0d:0d:b5:ca:51:0d:0a:f4:b9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2 Validity Not Before: Jan 27 04:01:07 2026 GMT Not After : Jan 28 04:01:07 2026 GMT Subject: CN=046adfbf5ac52f4d1fa9e83a78d5d5bdb3258883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a8:8e:ba:d5:02:fb:1d:f8:43:71:f6:8b:b6: be:1a:1f:f6:c8:5a:2c:06:ea:cb:6e:13:c8:51:53: 8f:c7:44:9f:be:60:27:f8:0f:28:3e:01:2d:a8:b6: 41:2c:42:3b:8c:0a:e5:bd:00:92:e3:4f:90:29:bc: fd:8b:89:56:09:3c:fb:4d:26:7a:77:b7:c9:7e:ac: 70:2a:56:62:82:08:62:70:d0:82:d4:32:f3:f8:f9: 40:dd:cd:28:67:d6:95:cb:a9:7e:a5:59:30:b1:05: 06:72:31:88:b3:e8:70:fe:d0:9c:6a:0a:8e:79:01: bd:c5:1b:59:68:eb:00:a8:95:89:72:77:b2:d6:9c: 97:47:0e:f7:62:e0:cd:37:a0:10:d9:02:9d:6c:07: c8:2e:bf:20:8e:20:de:2d:a1:cc:c6:b4:ed:3c:ad: e2:79:72:bf:d0:b6:31:35:1f:16:5e:1f:2e:e9:f4: d3:33:4d:41:8a:ea:3f:5a:12:4c:f6:02:8f:ee:25: d2:e9:fa:4f:4d:81:e6:b2:72:3b:a6:ef:26:a9:d4: 80:60:f6:d1:36:00:04:88:e8:99:b0:38:d0:6e:9d: 9b:ee:16:33:fe:15:5e:81:a4:c6:c7:72:61:34:79: 81:10:09:bb:b9:7d:a7:ee:46:b6:06:78:a2:3d:e7: 87:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6A:DF:BF:5A:C5:2F:4D:1F:A9:E8:3A:78:D5:D5:BD:B3:25:88:83 X509v3 Authority Key Identifier: keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:d2:8c:cb:65:38:e2:11:4b:5d:dc:83:42:b0:b8:96:39:25: ec:5e:3e:fc:dd:0b:e9:45:a8:99:bf:aa:1a:3f:9f:81:77:1b: ee:8d:c2:da:89:ed:0e:b4:54:52:9c:9f:cd:0a:43:b3:28:55: e7:1f:9c:f6:dc:68:d7:06:a6:f1:38:3c:b5:20:43:34:02:22: 41:c7:e4:88:3a:f5:de:88:cf:9f:84:eb:a2:48:7c:e7:1b:c0: 61:47:21:2f:78:e4:5f:9e:ca:27:b8:26:c5:32:ee:16:84:63: ee:03:01:ec:52:79:c6:39:9c:98:09:fa:87:ca:2b:e4:95:0d: 47:24:51:7d:ab:19:55:04:53:27:94:a9:86:bc:99:53:2e:a4: 02:a8:76:86:4f:6e:4b:11:2e:5d:58:66:67:44:be:37:c6:73: fa:a9:84:be:d3:0c:8d:0f:77:49:e3:b4:9d:1e:19:9b:44:df: 0f:ac:96:c8:8d:e5:4d:a4:03:21:ef:66:3c:cc:30:1a:1a:e6: 56:9f:a1:f5:22:0f:ac:37:77:a9:c3:d0:51:94:70:e3:42:d7: 5e:12:9f:79:eb:83:d7:3a:61:1b:ee:a8:1d:93:c4:b0:1a:b9: ca:7a:dc:99:f2:f3:8d:68:33:78:e1:88:8d:3f:a4:ee:45:7b: 12:79:31:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9nMOH8UsNDbXKUQ0K9LmyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOTY4MWYxNDRkYjE0MzBhYzMxNWM4MzA2ZTFjMTQ3MzBj NWZlYzIwHhcNMjYwMTI3MDQwMTA3WhcNMjYwMTI4MDQwMTA3WjAzMTEwLwYDVQQD EygwNDZhZGZiZjVhYzUyZjRkMWZhOWU4M2E3OGQ1ZDViZGIzMjU4ODgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqiOutUC+x34Q3H2i7a+Gh/2yFos BurLbhPIUVOPx0SfvmAn+A8oPgEtqLZBLEI7jArlvQCS40+QKbz9i4lWCTz7TSZ6 d7fJfqxwKlZigghicNCC1DLz+PlA3c0oZ9aVy6l+pVkwsQUGcjGIs+hw/tCcagqO eQG9xRtZaOsAqJWJcney1pyXRw73YuDNN6AQ2QKdbAfILr8gjiDeLaHMxrTtPK3i eXK/0LYxNR8WXh8u6fTTM01Biuo/WhJM9gKP7iXS6fpPTYHmsnI7pu8mqdSAYPbR NgAEiOiZsDjQbp2b7hYz/hVegaTGx3JhNHmBEAm7uX2n7ka2BniiPeeHtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARq379axS9NH6noOnjV1b2zJYiDMB8GA1UdIwQY MBaAFK2WgfFE2xQwrDFcgwbhwUcwxf7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2Yt YTNhMTNlM2E3ZDgwLzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2YtYTNhMTNlM2E3ZDgw LzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxdKMy2U4 4hFLXdyDQrC4ljkl7F4+/N0L6UWomb+qGj+fgXcb7o3C2ontDrRUUpyfzQpDsyhV 5x+c9txo1wam8Tg8tSBDNAIiQcfkiDr13ojPn4Trokh85xvAYUchL3jkX57KJ7gm xTLuFoRj7gMB7FJ5xjmcmAn6h8or5JUNRyRRfasZVQRTJ5SphryZUy6kAqh2hk9u SxEuXVhmZ0S+N8Zz+qmEvtMMjQ93SeO0nR4Zm0TfD6yWyI3lTaQDIe9mPMwwGhrm Vp+h9SIPrDd3qcPQUZRw40LXXhKfeeuD1zphG+6oHZPEsBq5ynrcmfLzjWgzeOGI jT+k7kV7Enkxlg== -----END CERTIFICATE-----Generated at Tue Jan 27 07:16:33 2026 by rpki-client