This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft File: RZO5rApIawA3dl1gXIscgQQEbwo.mft (raw, json) Hash identifier: Gp/GWMP2FOsv1cpcTfckyvfy7sNKAvoKP2GgI8nF37c= Subject key identifier: 34:E6:9D:A1:3A:F3:0E:36:D1:A7:8F:32:BB:EC:DA:FD:BC:4C:14:73 Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a Certificate serial: 019BD08CBB7B510EBD961DA29230EC3CC724 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft Manifest number: 01B7 Signing time: Sun 18 Jan 2026 10:00:42 +0000 Manifest this update: Sun 18 Jan 2026 10:00:42 +0000 Manifest next update: Mon 19 Jan 2026 10:00:42 +0000 Files and hashes: 1: 0GGyirColDCbufJKo9AkegU8ypY.roa (hash: 7QPLCEclN6a9EBsfMNfOKHLR6P6jqQdzgzwlX2uR1Mk=) 2: MiiR7VB3wjpz1-IYU3ksc-cRZtc.roa (hash: czs+Ay4tcJGJ7KwqRCeDmXFn2JgmJD3EKq749KWblW4=) 3: RZO5rApIawA3dl1gXIscgQQEbwo.crl (hash: +ZSMYbCVfIuK1TP0hpziIW9gO0OnSaHnPFbenAZdqX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:8c:bb:7b:51:0e:bd:96:1d:a2:92:30:ec:3c:c7:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a Validity Not Before: Jan 18 10:00:42 2026 GMT Not After : Jan 19 10:00:42 2026 GMT Subject: CN=34e69da13af30e36d1a78f32bbecdafdbc4c1473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:3b:8a:ac:80:21:09:d0:f2:b0:6f:eb:23:5b: a9:3f:27:5d:be:ee:f7:61:c3:d9:88:ee:e3:07:05: 09:34:88:be:00:d0:c6:ed:82:7d:f8:41:46:67:c9: ad:55:d8:96:03:32:dd:3a:ac:e0:a5:9f:69:5b:30: d0:82:09:39:04:85:53:ae:fe:bb:42:84:07:1c:65: 4c:5e:f0:10:69:16:00:0f:33:7b:4b:c1:fe:29:fa: c1:3c:3a:6a:13:e8:30:8b:3e:fc:bb:e2:a0:5d:a9: b0:9e:7e:41:e3:a5:fc:bd:d5:c6:59:a6:ae:1f:e3: c3:d9:88:6c:ce:f1:45:e5:56:bc:f0:92:92:c4:1d: ac:df:b2:fb:56:61:8e:d7:34:03:9d:7b:a2:6f:59: 78:7d:42:26:69:7d:cb:b6:94:bd:ed:e0:1d:00:13: 7a:69:ba:9d:0b:40:aa:5f:79:f1:7d:1e:22:e1:74: 6b:47:bb:71:1d:33:f1:0c:5d:99:c9:ff:20:51:06: 58:35:a4:ea:77:f3:41:66:e1:52:ae:b3:73:94:53: 6a:c0:e1:9c:6b:c6:61:4e:23:60:d6:52:d2:c2:00: 93:5d:28:76:ec:ab:8d:30:cd:2c:b6:e6:36:11:02: c1:29:9d:2a:7e:e8:4c:8a:01:ab:8b:67:32:2e:0b: 6e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E6:9D:A1:3A:F3:0E:36:D1:A7:8F:32:BB:EC:DA:FD:BC:4C:14:73 X509v3 Authority Key Identifier: keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:80:83:08:4e:61:aa:75:7f:bd:73:05:e9:86:e5:44:a7:2a: 9b:6c:7a:f5:06:45:bd:21:9e:84:40:7e:17:8d:97:44:a3:a2: 02:98:58:54:e2:ce:31:27:41:c3:77:7c:b6:e3:fd:3f:f7:d2: 86:3a:1d:38:8c:f6:b7:88:4a:f2:f9:14:0d:99:83:c5:31:ab: 6b:af:79:de:16:c2:ff:dc:0a:6d:d0:ec:2a:b1:88:08:28:70: 00:ca:2f:5f:05:1d:d2:83:54:9d:0b:d1:6a:75:eb:b6:12:eb: 8d:47:6d:54:a8:1d:31:26:a7:16:b0:6f:f0:f7:7e:54:9e:a6: 34:95:70:d1:10:8e:71:f9:79:72:f7:14:95:ce:89:70:5b:b9: 5a:6d:c7:0a:ae:ce:10:b2:aa:68:ff:31:4e:7d:37:12:0b:4c: 20:6c:ca:51:64:63:c1:80:72:db:79:1e:e3:9c:89:7e:39:11: f0:cf:84:6a:ff:eb:a1:0d:ec:66:78:02:7a:95:6c:7b:0a:27: 57:12:46:68:f1:5e:8e:bc:2c:b2:f9:94:4e:50:7c:d7:28:4f: 20:4e:0a:e1:a8:ae:08:b4:55:06:67:ae:25:dc:61:25:c5:a0: d7:f9:9c:43:a3:e6:2a:8e:5c:84:b5:8f:f4:7b:d2:f8:e1:df: 8b:3e:3e:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvQjLt7UQ69lh2ikjDsPMckMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OTNiOWFjMGE0ODZiMDAzNzc2NWQ2MDVjOGIxYzgxMDQw NDZmMGEwHhcNMjYwMTE4MTAwMDQyWhcNMjYwMTE5MTAwMDQyWjAzMTEwLwYDVQQD EygzNGU2OWRhMTNhZjMwZTM2ZDFhNzhmMzJiYmVjZGFmZGJjNGMxNDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9zuKrIAhCdDysG/rI1upPyddvu73 YcPZiO7jBwUJNIi+ANDG7YJ9+EFGZ8mtVdiWAzLdOqzgpZ9pWzDQggk5BIVTrv67 QoQHHGVMXvAQaRYADzN7S8H+KfrBPDpqE+gwiz78u+KgXamwnn5B46X8vdXGWaau H+PD2YhszvFF5Va88JKSxB2s37L7VmGO1zQDnXuib1l4fUImaX3LtpS97eAdABN6 abqdC0CqX3nxfR4i4XRrR7txHTPxDF2Zyf8gUQZYNaTqd/NBZuFSrrNzlFNqwOGc a8ZhTiNg1lLSwgCTXSh27KuNMM0stuY2EQLBKZ0qfuhMigGri2cyLgtunwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTmnaE68w420aePMrvs2v28TBRzMB8GA1UdIwQY MBaAFEWTuawKSGsAN3ZdYFyLHIEEBG8KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpPNXJBcElhd0EzZGwxZ1hJc2NnUVFFYndvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wNWIwZDItMTZiYS00ZDcxLWEyMTgt NDNlNmJmZjlhMjVlLzEvUlpPNXJBcElhd0EzZGwxZ1hJc2NnUVFFYndvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8wNWIwZDItMTZiYS00ZDcxLWEyMTgtNDNlNmJmZjlhMjVl LzEvUlpPNXJBcElhd0EzZGwxZ1hJc2NnUVFFYndvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4CDCE5h qnV/vXMF6YblRKcqm2x69QZFvSGehEB+F42XRKOiAphYVOLOMSdBw3d8tuP9P/fS hjodOIz2t4hK8vkUDZmDxTGra6953hbC/9wKbdDsKrGICChwAMovXwUd0oNUnQvR anXrthLrjUdtVKgdMSanFrBv8Pd+VJ6mNJVw0RCOcfl5cvcUlc6JcFu5Wm3HCq7O ELKqaP8xTn03EgtMIGzKUWRjwYBy23ke45yJfjkR8M+Eav/roQ3sZngCepVsewon VxJGaPFejrwssvmUTlB81yhPIE4K4aiuCLRVBmeuJdxhJcWg1/mcQ6PmKo5chLWP 9HvS+OHfiz4+bg== -----END CERTIFICATE-----Generated at Sun Jan 18 12:07:55 2026 by rpki-client