This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft File: 16ZlNCCQlS8gfQiiPci2w3dnSSc.mft (raw, json) Hash identifier: 72FHXY4mey8K03dUkm9khSqHAc2ETYyBmf7RBCwoLGw= Subject key identifier: 91:B5:E7:6A:C1:02:0E:23:FA:A6:B6:97:B4:AC:E7:49:BB:49:35:1F Authority key identifier: D7:A6:65:34:20:90:95:2F:20:7D:08:A2:3D:C8:B6:C3:77:67:49:27 Certificate issuer: /CN=d7a665342090952f207d08a23dc8b6c377674927 Certificate serial: 019BFA567BADF74066E7AE40FB1FDA596FFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft Manifest number: 02 Signing time: Mon 26 Jan 2026 12:45:30 +0000 Manifest this update: Mon 26 Jan 2026 12:45:30 +0000 Manifest next update: Tue 27 Jan 2026 12:45:30 +0000 Files and hashes: 1: 16ZlNCCQlS8gfQiiPci2w3dnSSc.crl (hash: Z6UGAwwHS6+KkTfUy7dP9vveeUFvwe7O4/u867Z+HBU=) 2: canLnJd_jCaH_72Oj6UCIKIOE58.roa (hash: /cGlqxOKpBrPfukC3P3Q0OKrmNXwEAQ9aDsDAL44JQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:56:7b:ad:f7:40:66:e7:ae:40:fb:1f:da:59:6f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7a665342090952f207d08a23dc8b6c377674927 Validity Not Before: Jan 26 12:45:30 2026 GMT Not After : Jan 27 12:45:30 2026 GMT Subject: CN=91b5e76ac1020e23faa6b697b4ace749bb49351f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b3:e4:7d:6e:fa:1d:e4:76:b1:75:fe:bd:52: a7:cf:56:53:01:a9:86:a8:bc:a3:38:5b:7c:f3:a8: 85:48:af:62:53:c5:09:bf:77:95:f7:75:07:87:d0: c6:d6:30:06:d7:a5:53:60:83:6a:80:b6:c9:0e:d2: 72:53:be:9f:a7:55:11:1a:08:b6:d5:f3:bd:9e:6a: e9:5c:ce:0d:33:f0:40:5d:b3:ca:c9:d2:78:75:75: 31:40:a0:cb:7a:7d:d5:ee:a9:07:1a:6d:47:29:b9: 08:85:67:60:a0:bb:eb:20:9e:1e:d4:6a:7d:b9:f5: af:61:f6:3e:23:db:50:1c:ac:38:0d:58:13:80:5a: 6d:82:c1:ca:76:df:23:91:65:b8:e4:38:20:00:67: e6:50:f0:6a:3a:aa:95:9f:20:77:66:05:0f:ea:f2: 84:83:b7:f9:f6:51:fd:ee:b4:f4:cf:59:ca:c7:7e: 72:94:4f:4b:53:55:c6:83:ca:54:7d:a8:c9:4a:90: be:1c:12:79:40:6e:d8:80:a0:6a:dc:98:ed:0e:f6: 47:17:16:2e:bd:92:35:37:ac:90:cd:d2:95:9d:8a: 2f:3e:10:a3:f2:12:5d:5b:45:d5:f2:5f:7f:5a:d0: 69:be:0d:88:c4:94:a4:1f:65:8b:e6:e2:05:ce:46: 28:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B5:E7:6A:C1:02:0E:23:FA:A6:B6:97:B4:AC:E7:49:BB:49:35:1F X509v3 Authority Key Identifier: keyid:D7:A6:65:34:20:90:95:2F:20:7D:08:A2:3D:C8:B6:C3:77:67:49:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:00:68:88:6a:a1:c4:c4:d7:f0:d8:a2:09:e8:9d:d3:8c:83: 21:18:bf:29:b8:8b:eb:94:a8:ba:59:f6:af:9a:99:7a:04:05: 95:02:0f:52:24:e1:93:bd:4b:73:fe:42:60:a4:3b:bc:cc:ce: 0c:ca:c1:19:ec:d4:bb:e4:78:25:90:94:51:58:c8:ce:6f:2b: f7:3f:dd:9a:6c:0f:a8:c5:65:f6:b9:dd:e0:d6:3a:73:ae:53: 26:65:e6:dc:a7:ad:58:8d:bd:25:ed:12:35:98:de:d5:2b:76: 49:e5:d9:4f:a4:22:0f:69:fe:30:5e:15:7a:df:c0:ea:26:2f: e0:55:38:eb:66:b3:43:53:79:86:f6:ee:25:31:a6:b2:8c:7c: d2:7d:62:08:4d:e7:17:aa:85:5b:d7:99:bc:ff:b2:71:52:7f: 37:b6:25:1e:93:1f:4a:60:0f:07:33:23:55:95:0e:d4:98:05: 23:07:80:c7:7b:16:50:c4:05:8b:ac:16:3d:1a:56:03:6c:c2: 9e:c7:8c:35:cc:fc:87:d3:fc:e1:9d:e9:4e:5e:81:ca:be:15: fc:23:78:9a:c7:32:cb:25:9e:70:79:4c:17:f2:33:71:6d:fb: ec:47:88:d9:3a:41:46:28:87:13:c2:6a:d4:c5:fe:00:eb:e3: 8e:a5:9a:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6Vnut90Bm565A+x/aWW/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YTY2NTM0MjA5MDk1MmYyMDdkMDhhMjNkYzhiNmMzNzc2 NzQ5MjcwHhcNMjYwMTI2MTI0NTMwWhcNMjYwMTI3MTI0NTMwWjAzMTEwLwYDVQQD Eyg5MWI1ZTc2YWMxMDIwZTIzZmFhNmI2OTdiNGFjZTc0OWJiNDkzNTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrPkfW76HeR2sXX+vVKnz1ZTAamG qLyjOFt886iFSK9iU8UJv3eV93UHh9DG1jAG16VTYINqgLbJDtJyU76fp1URGgi2 1fO9nmrpXM4NM/BAXbPKydJ4dXUxQKDLen3V7qkHGm1HKbkIhWdgoLvrIJ4e1Gp9 ufWvYfY+I9tQHKw4DVgTgFptgsHKdt8jkWW45DggAGfmUPBqOqqVnyB3ZgUP6vKE g7f59lH97rT0z1nKx35ylE9LU1XGg8pUfajJSpC+HBJ5QG7YgKBq3JjtDvZHFxYu vZI1N6yQzdKVnYovPhCj8hJdW0XV8l9/WtBpvg2IxJSkH2WL5uIFzkYogQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJG152rBAg4j+qa2l7Ss50m7STUfMB8GA1UdIwQY MBaAFNemZTQgkJUvIH0Ioj3ItsN3Z0knMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTZabE5DQ1FsUzhnZlFpaVBjaTJ3M2RuU1NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jNjAxZDctMWY1MS00ODBjLWI5ZmMt ZGM4MjY4ZWIyNzE4LzEvMTZabE5DQ1FsUzhnZlFpaVBjaTJ3M2RuU1NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jNjAxZDctMWY1MS00ODBjLWI5ZmMtZGM4MjY4ZWIyNzE4 LzEvMTZabE5DQ1FsUzhnZlFpaVBjaTJ3M2RuU1NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjABoiGqh xMTX8NiiCeid04yDIRi/KbiL65Souln2r5qZegQFlQIPUiThk71Lc/5CYKQ7vMzO DMrBGezUu+R4JZCUUVjIzm8r9z/dmmwPqMVl9rnd4NY6c65TJmXm3KetWI29Je0S NZje1St2SeXZT6QiD2n+MF4Vet/A6iYv4FU462azQ1N5hvbuJTGmsox80n1iCE3n F6qFW9eZvP+ycVJ/N7YlHpMfSmAPBzMjVZUO1JgFIweAx3sWUMQFi6wWPRpWA2zC nseMNcz8h9P84Z3pTl6Byr4V/CN4mscyyyWecHlMF/IzcW377EeI2TpBRiiHE8Jq 1MX+AOvjjqWasw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:58:29 2026 by rpki-client