This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft File: zM1YPI1xokJ-AGDjzJJPMtwaggs.mft (raw, json) Hash identifier: 8s99ohJ1NM23FkEkRF+oAAjdtHsbPwwS6Y5x+4Y3HCk= Subject key identifier: EB:F1:A6:51:E1:1A:9E:97:0F:A2:EA:A8:BC:9E:9A:49:99:4C:A3:36 Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B Certificate issuer: /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b Certificate serial: 019BDF5BED52976CD40D8C4AE572238C3FFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft Manifest number: 0D79 Signing time: Wed 21 Jan 2026 07:01:42 +0000 Manifest this update: Wed 21 Jan 2026 07:01:42 +0000 Manifest next update: Thu 22 Jan 2026 07:01:42 +0000 Files and hashes: 1: 06k5D3ZBmEUBxIHBnu9co1Dnn_Q.roa (hash: 23+3ygARGKHv+NTUhNap77ASbjdhDMj7SUzDTySx8Mk=) 2: 2tOQcNqia9FY_EgjlzJvmLqEZvk.roa (hash: vCVW24gm0Il+L7GD5QhbLKqrNdBKimfTZajv5G9G6e0=) 3: AXgiXKGJ_GI28CfbDTbrhhKV71A.roa (hash: Nt0Y8chc5qRx7gXH46hyD0eSELR+V1CAAH5JbXj+q9k=) 4: N-M1_Gcs5nz1z-RZbD5F2Zwy0ik.roa (hash: Eebmmc2rhKXOb9UxpkjpYhhaoAIhvKS+3sRa+Rf9xxc=) 5: S7xMn2WZ6tpb12ZzK2bfHpgj_jQ.roa (hash: a6xOII9rFzlXhVP9cTBhXZN2z2bq0zGYQLqbGgEi7x8=) 6: UnAAO5LZUpGqAlAFH0cTVQdXrPQ.roa (hash: +0fvTCTz6t0CVUgBJlyimNyAqahKNROglBmjcNIj20s=) 7: zM1YPI1xokJ-AGDjzJJPMtwaggs.crl (hash: hJHvOtRsJcXRwxL8N5pa0fUtfrOwleS4czkGIgTgwuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:5b:ed:52:97:6c:d4:0d:8c:4a:e5:72:23:8c:3f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b Validity Not Before: Jan 21 07:01:42 2026 GMT Not After : Jan 22 07:01:42 2026 GMT Subject: CN=ebf1a651e11a9e970fa2eaa8bc9e9a49994ca336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:a9:57:62:cb:f5:08:67:ad:6a:30:d8:80: a3:05:65:c1:8c:85:6c:83:b0:25:44:3a:d3:d1:b7: 79:73:d5:6d:10:5e:10:6f:1d:09:cb:f8:09:fb:4d: d8:64:86:b0:5c:6e:da:dc:a0:81:eb:87:89:f2:e0: 5c:1f:f2:2d:80:1c:40:fa:0f:f5:a9:80:ed:34:4f: 2e:93:33:ab:27:13:03:e7:2c:70:07:7f:f3:a5:36: d4:f6:16:c5:8f:0b:ab:77:cc:82:c2:ac:9b:b9:3b: 01:d7:bb:69:81:fd:06:88:ac:00:d8:fb:16:c0:83: bc:8b:89:5a:52:20:1a:1f:07:a3:8a:ae:7d:8f:3a: 49:37:17:20:6b:c1:f6:8a:d4:d6:db:84:3d:d9:65: ec:cf:94:3c:ba:5b:eb:3a:8b:e3:77:ca:1e:49:28: 92:50:88:e8:f2:2a:01:ae:3a:63:71:fd:42:1e:8f: c6:5e:ab:23:8e:99:36:13:0e:96:80:c3:19:2f:f6: 5d:e8:59:08:0e:36:43:af:37:d2:ad:d2:5d:f3:1d: ce:ae:20:d9:e5:39:b4:29:a0:b3:f1:05:c0:ea:b7: 08:cf:13:bf:0c:34:5d:c7:a9:06:7e:b8:1b:48:11: 0a:18:e4:89:02:e3:ac:f2:db:df:e7:88:ef:84:34: 2a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F1:A6:51:E1:1A:9E:97:0F:A2:EA:A8:BC:9E:9A:49:99:4C:A3:36 X509v3 Authority Key Identifier: keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e0:33:42:f9:70:3f:99:56:7a:f2:e3:da:7f:1e:13:6a:4f: ee:ea:70:04:76:9b:e3:9d:7c:a0:94:36:99:0c:b0:d4:b5:ee: ba:85:0d:a3:49:3e:b2:07:fb:bd:ce:87:44:05:40:7d:37:a8: aa:b4:65:63:54:5e:cd:c9:51:6c:f9:b9:01:e1:b0:a1:75:24: ab:9b:47:3f:49:72:c4:45:87:96:f5:c4:0f:b0:46:61:30:3b: 40:d7:37:66:b9:bf:32:b3:5c:ef:a4:ee:1f:23:a2:c8:81:a3: 86:d0:06:58:25:d2:25:5b:3e:54:3f:5d:a9:a8:84:a8:af:ef: 68:a9:dc:ab:c2:29:70:44:0a:95:62:5e:4e:c3:04:63:51:91: 06:4e:87:3f:9f:32:74:54:25:48:26:ab:49:6a:36:37:ee:ea: 2c:83:99:dd:06:79:46:fb:e2:47:8d:b4:c8:29:ca:37:da:81: 52:01:7b:d6:e3:89:2b:3a:08:59:97:c5:8b:c0:ac:2f:ee:4c: b2:93:35:09:10:be:2a:0f:ab:81:13:79:36:d9:6f:7e:5b:1d: 99:0b:ec:c4:be:a5:2c:15:54:ff:ac:ef:cb:2f:bd:9e:17:ff: fb:b3:91:c2:4f:95:3e:54:30:e2:38:e0:7d:d6:e7:eb:ae:97: ce:13:4a:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvfW+1Sl2zUDYxK5XIjjD/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjY2Q1ODNjOGQ3MWEyNDI3ZTAwNjBlM2NjOTI0ZjMyZGMx YTgyMGIwHhcNMjYwMTIxMDcwMTQyWhcNMjYwMTIyMDcwMTQyWjAzMTEwLwYDVQQD EyhlYmYxYTY1MWUxMWE5ZTk3MGZhMmVhYThiYzllOWE0OTk5NGNhMzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgapV2LL9QhnrWow2ICjBWXBjIVs g7AlRDrT0bd5c9VtEF4Qbx0Jy/gJ+03YZIawXG7a3KCB64eJ8uBcH/ItgBxA+g/1 qYDtNE8ukzOrJxMD5yxwB3/zpTbU9hbFjwurd8yCwqybuTsB17tpgf0GiKwA2PsW wIO8i4laUiAaHwejiq59jzpJNxcga8H2itTW24Q92WXsz5Q8ulvrOovjd8oeSSiS UIjo8ioBrjpjcf1CHo/GXqsjjpk2Ew6WgMMZL/Zd6FkIDjZDrzfSrdJd8x3OriDZ 5Tm0KaCz8QXA6rcIzxO/DDRdx6kGfrgbSBEKGOSJAuOs8tvf54jvhDQqMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvxplHhGp6XD6LqqLyemkmZTKM2MB8GA1UdIwQY MBaAFMzNWDyNcaJCfgBg48ySTzLcGoILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NmEwMmEtYzVmZC00MTE5LThjNWYt ZjQ4NTAyZDEzOTQ4LzEvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81NmEwMmEtYzVmZC00MTE5LThjNWYtZjQ4NTAyZDEzOTQ4 LzEvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuAzQvlw P5lWevLj2n8eE2pP7upwBHab4518oJQ2mQyw1LXuuoUNo0k+sgf7vc6HRAVAfTeo qrRlY1RezclRbPm5AeGwoXUkq5tHP0lyxEWHlvXED7BGYTA7QNc3Zrm/MrNc76Tu HyOiyIGjhtAGWCXSJVs+VD9dqaiEqK/vaKncq8IpcEQKlWJeTsMEY1GRBk6HP58y dFQlSCarSWo2N+7qLIOZ3QZ5RvviR420yCnKN9qBUgF71uOJKzoIWZfFi8CsL+5M spM1CRC+Kg+rgRN5NtlvflsdmQvsxL6lLBVU/6zvyy+9nhf/+7ORwk+VPlQw4jjg fdbn666XzhNK2Q== -----END CERTIFICATE-----Generated at Wed Jan 21 12:48:59 2026 by rpki-client