This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft File: C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft (raw, json) Hash identifier: teikvyFMz2kumevG7XI4JM5LGWIkuTBHSXRQl0DQdP0= Subject key identifier: 31:FA:D5:96:E6:D5:C1:D2:B1:C1:86:EB:D0:0C:5A:82:11:A2:C7:D9 Authority key identifier: 0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2 Certificate issuer: /CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2 Certificate serial: 019BFB778582D0C28C5AF9434DD80884E6F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft Manifest number: 02C6 Signing time: Mon 26 Jan 2026 18:01:12 +0000 Manifest this update: Mon 26 Jan 2026 18:01:12 +0000 Manifest next update: Tue 27 Jan 2026 18:01:12 +0000 Files and hashes: 1: C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl (hash: KZDQSD8OGhHO9LnismVjQsMsyReOmGnFePPh1DioLTU=) 2: GTbIIUIo-dUPXDDNc0IDT6FB8t4.roa (hash: 8J7E94r3VGtcxGoE3/Ht7FS8OoqmAYFunNkzFd6kzqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:85:82:d0:c2:8c:5a:f9:43:4d:d8:08:84:e6:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2 Validity Not Before: Jan 26 18:01:12 2026 GMT Not After : Jan 27 18:01:12 2026 GMT Subject: CN=31fad596e6d5c1d2b1c186ebd00c5a8211a2c7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8b:61:46:c9:e4:c8:91:b3:d7:97:23:3a:74: 58:b3:e6:8c:45:2c:54:49:51:4b:a1:43:d9:7e:8d: 00:81:2b:6d:90:27:27:20:da:fa:c3:2b:19:6e:67: 5e:c8:40:19:ef:7a:47:7c:2b:1e:aa:2e:50:07:22: f6:0f:0b:67:fd:ec:c5:df:82:55:e5:58:bd:2b:01: 94:2c:d4:66:db:01:39:72:6b:72:b3:df:a0:38:9b: f8:dc:99:ce:20:e4:e6:99:6a:48:70:4e:8f:87:4e: 76:97:a9:b8:77:ae:af:eb:71:b2:85:d7:56:60:8e: 26:55:f4:7b:7d:17:fd:80:b0:23:be:df:3f:99:bb: 50:d2:85:bb:2b:a7:14:c1:12:91:0e:65:6c:a6:23: b1:3b:40:23:47:6f:61:f6:ac:dd:5a:16:49:cf:3c: c9:d5:32:eb:55:a2:fd:3b:ee:0e:2d:cd:43:5d:d8: 24:30:b8:87:53:ad:49:ec:7b:d6:a6:5d:8f:35:79: 04:3e:f2:7e:49:bd:77:74:53:01:91:4c:ee:97:ed: 5c:01:67:3e:b0:3b:30:29:9b:2f:63:1a:03:57:81: bd:2b:ce:09:fc:ce:86:64:50:b2:2d:3b:5d:51:51: 4d:a5:7b:e7:6c:94:ab:50:3e:54:ff:53:28:2f:41: 1c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FA:D5:96:E6:D5:C1:D2:B1:C1:86:EB:D0:0C:5A:82:11:A2:C7:D9 X509v3 Authority Key Identifier: keyid:0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:9b:e1:ab:98:3d:e4:e8:e9:50:93:d2:c8:42:f9:7b:a9:ac: 4d:46:41:7e:06:3c:71:1e:45:df:00:a7:ea:ca:cd:eb:38:36: 35:10:15:05:27:6f:3d:67:45:da:bd:71:b4:cc:f2:de:45:f7: 17:c3:51:57:c7:6b:8d:e4:be:a6:8b:c5:33:33:86:12:69:9a: 93:13:b7:fa:ac:ee:80:86:04:38:35:39:99:1e:67:b0:90:7e: d0:ee:8d:cf:ce:06:86:5a:bd:49:4d:07:35:be:08:ec:e2:94: fe:e1:e7:98:a0:95:61:f8:28:3c:95:bd:42:1f:47:4b:f0:e9: 61:4a:7d:f5:cf:01:a7:34:d2:c5:d4:7c:9d:6a:b2:44:6e:c4: 83:09:b4:76:b1:d6:ce:41:44:dc:59:57:12:93:12:1d:7c:8f: e9:fd:d0:69:64:d6:17:6f:52:d3:ba:47:b8:e3:20:28:a5:27: 6e:d6:60:28:52:83:a5:af:f7:2e:38:1b:3f:f3:67:2e:49:8b: e9:07:a1:f4:02:28:a6:a2:b4:fc:97:92:77:a6:86:26:0e:f8: d4:8e:72:6d:16:ad:4d:36:56:f5:0f:05:19:74:31:8c:18:9c: 47:a8:c9:d4:4e:01:8b:ca:ed:3c:df:b5:a6:7a:96:56:e0:87: 15:c9:ac:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d4WC0MKMWvlDTdgIhOb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZmNmZGUwYTc3MmZhN2MzZTlkMTlmYTcwNzdmNzAyNmJk NzcxYjIwHhcNMjYwMTI2MTgwMTEyWhcNMjYwMTI3MTgwMTEyWjAzMTEwLwYDVQQD EygzMWZhZDU5NmU2ZDVjMWQyYjFjMTg2ZWJkMDBjNWE4MjExYTJjN2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5othRsnkyJGz15cjOnRYs+aMRSxU SVFLoUPZfo0AgSttkCcnINr6wysZbmdeyEAZ73pHfCseqi5QByL2Dwtn/ezF34JV 5Vi9KwGULNRm2wE5cmtys9+gOJv43JnOIOTmmWpIcE6Ph052l6m4d66v63GyhddW YI4mVfR7fRf9gLAjvt8/mbtQ0oW7K6cUwRKRDmVspiOxO0AjR29h9qzdWhZJzzzJ 1TLrVaL9O+4OLc1DXdgkMLiHU61J7HvWpl2PNXkEPvJ+Sb13dFMBkUzul+1cAWc+ sDswKZsvYxoDV4G9K84J/M6GZFCyLTtdUVFNpXvnbJSrUD5U/1MoL0Ec8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDH61Zbm1cHSscGG69AMWoIRosfZMB8GA1UdIwQY MBaAFAv8/eCncvp8Pp0Z+nB39wJr13GyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81Y2UzZGMtMDNlMi00NzgzLWEzNGMt NDM3NWQ2NzVmY2YzLzEvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81Y2UzZGMtMDNlMi00NzgzLWEzNGMtNDM3NWQ2NzVmY2Yz LzEvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpvhq5g9 5OjpUJPSyEL5e6msTUZBfgY8cR5F3wCn6srN6zg2NRAVBSdvPWdF2r1xtMzy3kX3 F8NRV8drjeS+povFMzOGEmmakxO3+qzugIYEODU5mR5nsJB+0O6Nz84Ghlq9SU0H Nb4I7OKU/uHnmKCVYfgoPJW9Qh9HS/DpYUp99c8BpzTSxdR8nWqyRG7Egwm0drHW zkFE3FlXEpMSHXyP6f3QaWTWF29S07pHuOMgKKUnbtZgKFKDpa/3LjgbP/NnLkmL 6Qeh9AIopqK0/JeSd6aGJg741I5ybRatTTZW9Q8FGXQxjBicR6jJ1E4Bi8rtPN+1 pnqWVuCHFcmsiQ== -----END CERTIFICATE-----Generated at Tue Jan 27 01:07:31 2026 by rpki-client