This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft File: rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft (raw, json) Hash identifier: gyI3s9zb9apDDOZclqjkEPDI4uECDmm66C5ubX8R5xY= Subject key identifier: E8:F0:C3:39:43:9E:83:66:4B:50:F5:5B:22:BD:B1:7E:9D:11:A3:59 Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C Certificate issuer: /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c Certificate serial: 019BFC1C720E74DB1F5ABE06AA906F613572 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft Manifest number: 040E Signing time: Mon 26 Jan 2026 21:01:21 +0000 Manifest this update: Mon 26 Jan 2026 21:01:21 +0000 Manifest next update: Tue 27 Jan 2026 21:01:21 +0000 Files and hashes: 1: D1uepCAmRlFVjKTUqfMxFmzOti0.roa (hash: pf7DS73sBkltlYtAHV2Wkt/8vgHhRENJ2syRZHBzVdQ=) 2: rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl (hash: CiBFZyl8wTb+m4XFSPysejTAd4gJ1CqvZsa6hiCBasU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:72:0e:74:db:1f:5a:be:06:aa:90:6f:61:35:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c Validity Not Before: Jan 26 21:01:21 2026 GMT Not After : Jan 27 21:01:21 2026 GMT Subject: CN=e8f0c339439e83664b50f55b22bdb17e9d11a359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e8:a2:7c:6c:00:ca:b9:ce:a5:f1:0b:a1:83: 85:2a:90:d4:26:cc:ac:85:f3:c6:e4:81:4b:6e:8e: 5a:b5:82:51:a3:e9:be:40:1d:09:a9:48:b3:c4:11: 22:7e:8f:1b:56:a1:4b:f4:a4:7e:5a:aa:b2:15:f5: 06:44:cd:02:04:f8:87:ea:9d:ec:91:e8:73:17:7c: 80:21:2f:b7:be:5f:48:51:19:77:4f:fb:56:75:f4: 35:33:64:d5:25:a8:68:b7:56:b1:72:5a:15:f7:63: b8:c7:99:bf:ff:2e:6f:5e:67:cc:2c:68:3e:46:93: a4:54:d4:21:f9:ba:ca:cb:86:bd:3e:fd:4b:5d:85: 16:9b:09:07:93:17:15:b3:d7:a4:2d:af:e5:41:53: 82:8e:bf:de:77:2b:dc:2a:3b:4a:2b:a8:d5:63:6d: 76:78:02:7c:f6:cf:9a:a3:f2:2f:b9:bf:e6:82:3f: db:4c:df:b6:17:da:80:74:95:69:e5:76:3f:d0:d3: 74:e4:a5:48:de:79:d6:66:5a:90:c1:cf:33:be:5e: 19:d2:0c:7d:35:da:df:1a:fd:8d:ea:5a:51:2e:20: 52:c8:c0:10:2b:3f:8f:19:2a:cb:09:e2:4d:b9:8d: 2a:9d:c1:a9:bb:a3:ff:59:b8:48:1a:8e:06:cc:db: 67:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F0:C3:39:43:9E:83:66:4B:50:F5:5B:22:BD:B1:7E:9D:11:A3:59 X509v3 Authority Key Identifier: keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:f9:24:ff:b1:d0:e9:7a:74:9b:55:fc:fd:e1:2b:e4:d8:46: 35:d9:7e:8b:8e:d3:fb:c3:49:81:56:94:a6:a9:4d:81:ce:15: 1e:92:9a:59:c9:e1:ae:3b:79:be:17:56:8f:b9:e8:01:ec:88: bf:40:fe:1f:31:54:88:ea:11:5b:1b:41:f0:26:bc:ca:2e:f9: 45:a5:9c:ab:54:19:2f:ca:44:6c:1b:aa:ac:7f:99:4d:49:29: 32:ba:af:8e:d9:ff:19:d8:f1:40:3d:62:69:94:7e:17:75:7e: 55:c7:b1:dd:e4:50:16:f5:da:35:26:83:44:fd:10:f4:ce:a7: e1:58:5f:7a:95:3a:13:40:b1:b6:be:2a:81:bc:c3:95:ae:cf: e5:02:39:be:16:91:31:5d:38:f1:e1:92:1b:13:81:64:2e:00: 80:3a:3a:3d:fa:89:7a:3d:5a:e7:eb:43:d0:4c:94:b1:e1:67: 73:9f:22:54:e9:52:55:20:b2:67:ca:3e:5c:dd:d6:e6:48:e2: 85:c4:b7:8f:bc:76:6e:c9:56:4a:85:fc:b8:e9:0b:bd:1e:3b: e9:43:e1:6c:3d:64:bd:10:58:41:48:8a:9d:e3:a9:27:d0:d6: 49:bf:98:ab:84:b8:b2:a5:76:e6:e9:37:a7:70:ac:08:d3:e7: 31:35:8a:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HHIOdNsfWr4GqpBvYTVyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZWNmMDliODVkOTFjZDY4MmIwNjc0M2NiNmM1OTMwZTFm YzU1MWMwHhcNMjYwMTI2MjEwMTIxWhcNMjYwMTI3MjEwMTIxWjAzMTEwLwYDVQQD EyhlOGYwYzMzOTQzOWU4MzY2NGI1MGY1NWIyMmJkYjE3ZTlkMTFhMzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OiifGwAyrnOpfELoYOFKpDUJsys hfPG5IFLbo5atYJRo+m+QB0JqUizxBEifo8bVqFL9KR+WqqyFfUGRM0CBPiH6p3s kehzF3yAIS+3vl9IURl3T/tWdfQ1M2TVJahot1axcloV92O4x5m//y5vXmfMLGg+ RpOkVNQh+brKy4a9Pv1LXYUWmwkHkxcVs9ekLa/lQVOCjr/edyvcKjtKK6jVY212 eAJ89s+ao/Ivub/mgj/bTN+2F9qAdJVp5XY/0NN05KVI3nnWZlqQwc8zvl4Z0gx9 NdrfGv2N6lpRLiBSyMAQKz+PGSrLCeJNuY0qncGpu6P/WbhIGo4GzNtn2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjwwzlDnoNmS1D1WyK9sX6dEaNZMB8GA1UdIwQY MBaAFKzs8JuF2RzWgrBnQ8tsWTDh/FUcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck96d200WFpITmFDc0dkRHkyeFpNT0g4VlJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNWY0ZjQtYTU0Ny00MjM4LWExZGEt ZjE4ZDc4MThmODRhLzEvck96d200WFpITmFDc0dkRHkyeFpNT0g4VlJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8yNWY0ZjQtYTU0Ny00MjM4LWExZGEtZjE4ZDc4MThmODRh LzEvck96d200WFpITmFDc0dkRHkyeFpNT0g4VlJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtvkk/7HQ 6Xp0m1X8/eEr5NhGNdl+i47T+8NJgVaUpqlNgc4VHpKaWcnhrjt5vhdWj7noAeyI v0D+HzFUiOoRWxtB8Ca8yi75RaWcq1QZL8pEbBuqrH+ZTUkpMrqvjtn/GdjxQD1i aZR+F3V+Vcex3eRQFvXaNSaDRP0Q9M6n4VhfepU6E0Cxtr4qgbzDla7P5QI5vhaR MV048eGSGxOBZC4AgDo6PfqJej1a5+tD0EyUseFnc58iVOlSVSCyZ8o+XN3W5kji hcS3j7x2bslWSoX8uOkLvR476UPhbD1kvRBYQUiKneOpJ9DWSb+Yq4S4sqV25uk3 p3CsCNPnMTWKRA== -----END CERTIFICATE-----Generated at Tue Jan 27 01:18:56 2026 by rpki-client