This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json) Hash identifier: PtRvAqxu0SmFv3cFEr5txnJQV6LqTOO5KDXu+T0FsT8= Subject key identifier: 1F:0B:D9:73:EA:24:BC:6A:E1:13:5C:41:EB:CB:0A:1A:13:A7:50:69 Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5 Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5 Certificate serial: 019BAE38A25A6A48C5BBFA9B0DB02B915BBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft Manifest number: 17C7 Signing time: Sun 11 Jan 2026 18:01:45 +0000 Manifest this update: Sun 11 Jan 2026 18:01:45 +0000 Manifest next update: Mon 12 Jan 2026 18:01:45 +0000 Files and hashes: 1: 1HXGb5-BWji6FxKqR9J69GxxjeY.roa (hash: +4VLoXs2I/t3CPnVmm9jbZnZFGbEot/glqmRqD+Blr8=) 2: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: amc4iZd6ccBzAiYMfu27J8Ghmc98kJrL53Z4P8n+q1c=) 3: WQdZNfyoXAF_mZl28cfENCrtIMs.roa (hash: U3LDO+4WO64Jt5h3Mz2CbjqUHfSHcu4yyw0WNvXOY9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:38:a2:5a:6a:48:c5:bb:fa:9b:0d:b0:2b:91:5b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5 Validity Not Before: Jan 11 18:01:45 2026 GMT Not After : Jan 12 18:01:45 2026 GMT Subject: CN=1f0bd973ea24bc6ae1135c41ebcb0a1a13a75069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:5b:85:e0:01:6b:55:e6:5f:99:53:cb:a3:3d: 34:df:64:62:2a:23:ac:db:f7:e4:12:e7:0f:4a:17: 57:24:68:a9:f9:3d:e3:9f:e8:c8:14:da:a7:50:96: e3:65:80:ff:27:6f:0b:3d:03:a3:0e:2c:20:aa:d6: 0f:38:d1:a7:1c:ad:99:cd:fd:e2:0a:d3:8f:8b:0d: e5:c8:97:d5:8b:ca:15:46:9c:a4:72:0d:f7:b7:80: cb:cb:52:50:43:58:1a:79:fc:00:06:3d:dd:d0:c6: 34:27:84:85:4e:f2:7c:dd:fe:79:35:4d:dd:42:10: b7:e1:91:b4:49:c1:8f:e6:8a:dc:67:3d:93:a9:fc: 4d:cd:24:fd:46:ce:df:73:64:8a:67:54:59:36:27: db:6d:94:1a:bd:a0:45:1f:f3:94:d3:8b:56:d0:27: a1:2d:7e:0c:4a:01:9a:4b:40:02:2c:3d:26:f6:40: c5:88:fe:e8:2c:16:29:97:18:4d:bb:f1:70:2c:1f: 0e:da:d7:91:94:c5:2f:af:70:ed:3b:ff:14:9b:23: 62:de:b2:be:95:c4:7a:c0:cb:ba:1e:c7:39:12:33: f2:9c:20:53:ff:e1:e9:c1:8b:0b:6a:41:04:8a:ef: 6e:45:25:a4:dc:eb:91:27:61:e8:9c:31:46:d9:66: 90:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0B:D9:73:EA:24:BC:6A:E1:13:5C:41:EB:CB:0A:1A:13:A7:50:69 X509v3 Authority Key Identifier: keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:7f:3e:41:bd:de:18:41:bf:a0:76:0a:4a:e8:0f:28:cd:4d: d9:1c:b6:58:0a:aa:83:4e:ca:82:4b:28:a8:67:f8:63:6f:cf: 5d:25:0f:6c:9d:04:b4:c1:52:80:5e:e0:55:98:5c:e3:33:d3: 3f:aa:79:bb:6c:9f:9e:16:fb:ee:58:7f:c0:8d:d6:68:d1:99: ff:05:b6:ca:8e:8c:41:b4:31:38:e1:1f:90:2e:01:17:7e:d5: 2f:ce:01:06:09:a1:b4:d3:8d:29:40:c0:17:57:b0:cc:09:d6: 8b:3c:e5:7d:34:f9:f2:19:f1:bd:c9:52:00:ab:d2:86:88:69: 7a:d7:e5:10:38:cb:29:91:ab:a3:43:d9:11:a1:5b:89:3c:7e: ce:aa:8c:b4:d7:f9:8f:59:6e:c1:fa:5a:df:5d:e0:cf:4b:fb: e9:94:52:c2:6b:48:13:71:c9:89:ca:89:c8:01:bd:c6:74:a1: ee:4f:01:b2:58:72:1e:6e:4f:fb:a3:42:b5:a4:00:8c:95:40: 8b:50:c0:87:95:a2:65:5b:9e:e9:79:ce:0a:5c:6b:59:64:28: 30:ca:bb:34:f9:d8:8b:57:fe:f3:cc:f3:3a:32:55:28:27:e9: ee:0f:58:3d:7f:47:61:52:fe:e1:6f:5e:09:af:cb:aa:34:9f: e7:11:b8:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuuOKJaakjFu/qbDbArkVu6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OWIyZmQwMDUzYmRkN2U3Nzc1Mzk4ZGIxNjNiZWU4Nzcy NDc4YTUwHhcNMjYwMTExMTgwMTQ1WhcNMjYwMTEyMTgwMTQ1WjAzMTEwLwYDVQQD EygxZjBiZDk3M2VhMjRiYzZhZTExMzVjNDFlYmNiMGExYTEzYTc1MDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8luF4AFrVeZfmVPLoz0032RiKiOs 2/fkEucPShdXJGip+T3jn+jIFNqnUJbjZYD/J28LPQOjDiwgqtYPONGnHK2Zzf3i CtOPiw3lyJfVi8oVRpykcg33t4DLy1JQQ1gaefwABj3d0MY0J4SFTvJ83f55NU3d QhC34ZG0ScGP5orcZz2TqfxNzST9Rs7fc2SKZ1RZNifbbZQavaBFH/OU04tW0Ceh LX4MSgGaS0ACLD0m9kDFiP7oLBYplxhNu/FwLB8O2teRlMUvr3DtO/8UmyNi3rK+ lcR6wMu6Hsc5EjPynCBT/+HpwYsLakEEiu9uRSWk3OuRJ2HonDFG2WaQHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8L2XPqJLxq4RNcQevLChoTp1BpMB8GA1UdIwQY MBaAFEWbL9AFO91+d3U5jbFjvuh3JHilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZGRkNTgtNjAzNy00OTRiLTk5MmYt YWI4ZTk3ZDg1NWNjLzEvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8yZGRkNTgtNjAzNy00OTRiLTk5MmYtYWI4ZTk3ZDg1NWNj LzEvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQX8+Qb3e GEG/oHYKSugPKM1N2Ry2WAqqg07KgksoqGf4Y2/PXSUPbJ0EtMFSgF7gVZhc4zPT P6p5u2yfnhb77lh/wI3WaNGZ/wW2yo6MQbQxOOEfkC4BF37VL84BBgmhtNONKUDA F1ewzAnWizzlfTT58hnxvclSAKvShohpetflEDjLKZGro0PZEaFbiTx+zqqMtNf5 j1luwfpa313gz0v76ZRSwmtIE3HJicqJyAG9xnSh7k8BslhyHm5P+6NCtaQAjJVA i1DAh5WiZVue6XnOClxrWWQoMMq7NPnYi1f+88zzOjJVKCfp7g9YPX9HYVL+4W9e Ca/LqjSf5xG4sQ== -----END CERTIFICATE-----Generated at Mon Jan 12 02:22:58 2026 by rpki-client