This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft File: czmHDhAmLGcJt7YWNxNLX5pseMo.mft (raw, json) Hash identifier: snyu8+34UW9qJXo5KLCmyv2T0BiJYUqFHBByDyOMAMU= Subject key identifier: B7:3E:A5:09:41:41:5B:B1:5C:DF:88:E7:D8:7C:04:55:08:E7:9A:2B Authority key identifier: 73:39:87:0E:10:26:2C:67:09:B7:B6:16:37:13:4B:5F:9A:6C:78:CA Certificate issuer: /CN=7339870e10262c6709b7b61637134b5f9a6c78ca Certificate serial: 019BD131827E6DF03A79AE6D79EF343CFBEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft Manifest number: 17D5 Signing time: Sun 18 Jan 2026 13:00:41 +0000 Manifest this update: Sun 18 Jan 2026 13:00:41 +0000 Manifest next update: Mon 19 Jan 2026 13:00:41 +0000 Files and hashes: 1: Amuu6Txw-fMcXNv05W6lA1k97YQ.roa (hash: XAwaHImrJWvBTZ1p8VHnIGXkYFDyyQQtG8lODIvH8Sk=) 2: czmHDhAmLGcJt7YWNxNLX5pseMo.crl (hash: INvFn+k81jNAOsGbbVh1RKKR5W5z0REqnDJvMTottrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.crl rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d1:31:82:7e:6d:f0:3a:79:ae:6d:79:ef:34:3c:fb:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7339870e10262c6709b7b61637134b5f9a6c78ca Validity Not Before: Jan 18 13:00:41 2026 GMT Not After : Jan 19 13:00:41 2026 GMT Subject: CN=b73ea50941415bb15cdf88e7d87c045508e79a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2b:2b:cb:e7:bd:2c:99:83:24:ec:5c:c0:60: 79:f5:c6:7f:66:66:7d:f4:50:2b:50:77:f6:b3:2c: 89:7c:bb:a4:15:e5:ac:66:fc:11:d3:c4:5d:66:79: 93:5f:67:a2:df:dd:13:ac:66:e2:0b:49:2b:0c:75: 8d:0c:96:16:9c:e2:98:fd:76:73:89:47:99:60:84: 76:43:ef:9d:1f:35:b6:9a:ec:5d:98:98:6f:07:58: 3d:1d:7e:ec:64:7a:36:3b:f2:31:d8:fd:c9:7d:3e: 84:f3:16:ad:63:ff:ee:d0:97:f9:dc:3c:58:81:4c: ee:05:9d:e2:a5:56:c4:95:36:7f:7c:ac:9e:03:b3: fe:18:62:1d:71:0f:c8:f1:47:0a:51:31:0a:d0:bb: 59:f2:d1:dc:db:ca:07:1e:52:e8:f9:4b:2f:d0:42: 91:01:39:f4:60:e8:35:13:77:cb:4a:1e:37:42:fe: f0:9b:f9:a7:41:2d:c8:e1:3f:78:f0:f3:8b:02:0b: 33:9a:64:54:47:4d:41:26:4e:b2:e4:24:a1:d4:6c: 46:25:80:af:d9:ce:b6:68:fe:bd:17:f0:82:ad:2f: 54:f8:07:af:3c:16:87:38:8a:48:4c:00:62:0c:e1: 1d:6f:97:f0:81:15:39:c8:ad:5c:b5:d2:f4:39:3b: a2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3E:A5:09:41:41:5B:B1:5C:DF:88:E7:D8:7C:04:55:08:E7:9A:2B X509v3 Authority Key Identifier: keyid:73:39:87:0E:10:26:2C:67:09:B7:B6:16:37:13:4B:5F:9A:6C:78:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:43:4a:c3:f1:81:7d:97:1c:77:46:8f:52:d6:8f:7d:39:1c: 54:8b:6f:1c:0b:6c:50:db:3e:43:ef:01:0b:47:8a:da:9d:35: 6d:72:5f:e6:ed:39:17:bd:23:e6:ed:d9:e7:72:7f:cf:bc:be: 6b:53:f4:7f:ff:67:70:f1:6e:4b:60:d4:8d:aa:fc:b7:15:9d: 99:74:92:0a:e8:ae:b2:8f:ea:ab:70:8d:c6:5d:27:c1:db:09: 82:e6:4b:44:47:ed:5a:92:d2:46:4f:01:63:b0:fb:46:0c:5a: 81:6b:1d:41:3e:0d:cf:3c:e4:4a:d1:f1:f1:07:88:12:7c:04: 5c:18:8a:50:4c:73:53:22:c0:1d:d1:c0:ff:3e:d5:39:b2:94: dd:bd:f3:eb:77:ed:68:0c:a3:b1:5c:d5:65:f2:9e:8d:58:c3: b6:fe:08:15:bf:82:05:24:66:7f:75:d2:7f:c1:64:bd:a2:ef: d6:18:a7:55:92:46:c6:6a:fc:07:90:01:96:8f:9b:8e:82:61: fb:64:8d:05:c2:72:10:32:72:1d:f5:e4:04:f1:05:4f:c0:bd: ea:e1:c8:ac:a5:6c:53:af:52:d5:30:1f:3a:a3:0b:a3:2c:aa: 8d:6c:a5:85:d9:44:c6:ef:bc:1d:14:da:f8:d6:3c:9e:60:3b: 4c:41:14:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvRMYJ+bfA6ea5tee80PPvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMzk4NzBlMTAyNjJjNjcwOWI3YjYxNjM3MTM0YjVmOWE2 Yzc4Y2EwHhcNMjYwMTE4MTMwMDQxWhcNMjYwMTE5MTMwMDQxWjAzMTEwLwYDVQQD EyhiNzNlYTUwOTQxNDE1YmIxNWNkZjg4ZTdkODdjMDQ1NTA4ZTc5YTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSsry+e9LJmDJOxcwGB59cZ/ZmZ9 9FArUHf2syyJfLukFeWsZvwR08RdZnmTX2ei390TrGbiC0krDHWNDJYWnOKY/XZz iUeZYIR2Q++dHzW2muxdmJhvB1g9HX7sZHo2O/Ix2P3JfT6E8xatY//u0Jf53DxY gUzuBZ3ipVbElTZ/fKyeA7P+GGIdcQ/I8UcKUTEK0LtZ8tHc28oHHlLo+Usv0EKR ATn0YOg1E3fLSh43Qv7wm/mnQS3I4T948POLAgszmmRUR01BJk6y5CSh1GxGJYCv 2c62aP69F/CCrS9U+AevPBaHOIpITABiDOEdb5fwgRU5yK1ctdL0OTui6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLc+pQlBQVuxXN+I59h8BFUI55orMB8GA1UdIwQY MBaAFHM5hw4QJixnCbe2FjcTS1+abHjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3ptSERoQW1MR2NKdDdZV054TkxYNXBzZU1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS80YjgzZGItZjRmZi00ZjBjLWEzZjYt MTU0NTc0ZmJiMzg5LzEvY3ptSERoQW1MR2NKdDdZV054TkxYNXBzZU1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS80YjgzZGItZjRmZi00ZjBjLWEzZjYtMTU0NTc0ZmJiMzg5 LzEvY3ptSERoQW1MR2NKdDdZV054TkxYNXBzZU1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuUNKw/GB fZccd0aPUtaPfTkcVItvHAtsUNs+Q+8BC0eK2p01bXJf5u05F70j5u3Z53J/z7y+ a1P0f/9ncPFuS2DUjar8txWdmXSSCuiuso/qq3CNxl0nwdsJguZLREftWpLSRk8B Y7D7RgxagWsdQT4NzzzkStHx8QeIEnwEXBiKUExzUyLAHdHA/z7VObKU3b3z63ft aAyjsVzVZfKejVjDtv4IFb+CBSRmf3XSf8FkvaLv1hinVZJGxmr8B5ABlo+bjoJh +2SNBcJyEDJyHfXkBPEFT8C96uHIrKVsU69S1TAfOqMLoyyqjWylhdlExu+8HRTa +NY8nmA7TEEUvQ== -----END CERTIFICATE-----Generated at Sun Jan 18 22:17:57 2026 by rpki-client