This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft File: rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft (raw, json) Hash identifier: oJ889jATac4kM8c3RpiJoyKt+PmMB0Cq7bObdMQ76dU= Subject key identifier: B2:42:AE:D0:3F:5E:71:CF:6F:86:2F:FE:40:F8:17:1D:E7:90:86:5E Authority key identifier: AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF Certificate issuer: /CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af Certificate serial: 019BFBE4DFF47C90805771ABDF841EA18195 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft Manifest number: 02A1 Signing time: Mon 26 Jan 2026 20:00:39 +0000 Manifest this update: Mon 26 Jan 2026 20:00:39 +0000 Manifest next update: Tue 27 Jan 2026 20:00:39 +0000 Files and hashes: 1: 15iMLkZijLxFQhyhHpyZVO_Pbh0.roa (hash: 4vg9pvNIz6AeHAhcqTYuN2xhMEHA7ity8ku3fgSFNxI=) 2: rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl (hash: jaXY54lBBpRv28qqQ5mC/YpJ/zsfRt4j9QNzb19X2YA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e4:df:f4:7c:90:80:57:71:ab:df:84:1e:a1:81:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af Validity Not Before: Jan 26 20:00:39 2026 GMT Not After : Jan 27 20:00:39 2026 GMT Subject: CN=b242aed03f5e71cf6f862ffe40f8171de790865e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0f:37:a8:8b:c7:7b:7a:ac:cf:64:5c:10:2d: 48:be:34:4b:08:b2:db:03:d3:be:e2:d2:c6:74:d3: a2:fe:36:9f:28:44:37:f0:bb:63:39:96:33:fb:44: e9:cf:ea:09:e3:e5:57:81:e5:c9:a6:1e:e9:0c:d9: b1:f7:55:fa:e8:d2:26:69:07:ed:d7:a4:68:d2:db: 2e:f7:12:18:06:fc:d0:fd:14:86:b0:76:47:2d:11: b7:46:c7:4f:0f:99:0b:3f:7e:f2:f9:49:10:10:09: 67:4d:d1:4c:d6:45:ce:46:6e:30:8c:ad:f6:90:bf: ad:7a:b4:2c:c2:48:45:61:25:68:27:69:9a:87:55: bb:09:1d:0a:9a:ab:db:49:bd:50:19:57:89:ba:22: 4b:1e:a4:a4:64:f9:7a:51:d2:fa:38:dc:8e:3f:31: 6b:69:09:d4:5c:7b:ec:25:0e:aa:5e:17:30:f7:ec: 33:3e:74:1b:0c:7e:69:e4:0c:01:4f:31:5e:5e:cc: 19:a4:1c:6e:7a:bd:89:2a:b0:90:03:c6:0e:9b:df: d4:a2:a7:be:c5:4c:ce:3b:fc:b4:65:5f:bc:ad:2d: 0e:55:38:b2:64:ff:cc:81:25:c4:b1:05:de:93:51: 25:35:01:e9:7b:b3:f7:04:f9:1a:dc:8c:d4:6b:4b: 19:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:42:AE:D0:3F:5E:71:CF:6F:86:2F:FE:40:F8:17:1D:E7:90:86:5E X509v3 Authority Key Identifier: keyid:AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:bf:7d:52:4c:7e:45:6c:7f:50:09:c5:da:67:31:2a:3e:b1: 8f:89:fc:e3:fd:cc:93:e2:75:e1:3a:c4:a4:e6:87:50:3c:bb: bd:d7:66:76:1c:b6:77:5f:1b:be:a3:fc:a3:e5:69:f2:be:98: 05:3e:90:ee:4b:5c:d3:5c:e8:91:d1:c6:a5:67:3e:d8:7e:9e: c4:bf:0a:bf:83:5e:5b:78:e3:07:94:da:5d:8b:81:b6:4f:57: 0f:30:c0:45:e5:d6:7b:25:4e:b8:c0:b3:08:d2:ba:88:39:c8: ec:c1:47:e2:c8:9d:ed:c0:89:49:2a:e9:2d:87:7d:3c:7b:27: b9:6e:9b:1e:59:40:52:2b:c3:ab:0e:54:f5:56:e2:6c:3b:bc: 3b:8e:33:69:11:86:33:1a:d9:12:d1:cc:35:08:07:5f:80:de: e9:cc:02:c5:4a:fc:0b:14:14:10:f7:87:1e:af:76:9d:1e:5c: 63:23:06:14:d1:77:d3:3e:37:f9:9a:28:b1:06:fa:e1:66:82: 20:08:b9:58:34:05:10:af:2c:f1:7c:0c:0e:a1:e5:71:51:d2: 16:8f:58:87:aa:9f:05:ff:9e:d3:28:ce:d5:5a:f2:d8:6d:cf: d4:b6:95:96:76:67:bb:64:fc:17:cd:5d:91:9d:ae:60:34:ff: 21:ce:54:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75N/0fJCAV3Gr34QeoYGVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOTQ3OWFmZTNhOWExOGUxYzM3NGZjYTAyMmQxZmYyYTI1 NWIxYWYwHhcNMjYwMTI2MjAwMDM5WhcNMjYwMTI3MjAwMDM5WjAzMTEwLwYDVQQD EyhiMjQyYWVkMDNmNWU3MWNmNmY4NjJmZmU0MGY4MTcxZGU3OTA4NjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg83qIvHe3qsz2RcEC1IvjRLCLLb A9O+4tLGdNOi/jafKEQ38LtjOZYz+0Tpz+oJ4+VXgeXJph7pDNmx91X66NImaQft 16Ro0tsu9xIYBvzQ/RSGsHZHLRG3RsdPD5kLP37y+UkQEAlnTdFM1kXORm4wjK32 kL+terQswkhFYSVoJ2mah1W7CR0KmqvbSb1QGVeJuiJLHqSkZPl6UdL6ONyOPzFr aQnUXHvsJQ6qXhcw9+wzPnQbDH5p5AwBTzFeXswZpBxuer2JKrCQA8YOm9/Uoqe+ xUzOO/y0ZV+8rS0OVTiyZP/MgSXEsQXek1ElNQHpe7P3BPka3IzUa0sZJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJCrtA/XnHPb4Yv/kD4Fx3nkIZeMB8GA1UdIwQY MBaAFK2Uea/jqaGOHDdPygItH/KiVbGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclpSNXItT3BvWTRjTjBfS0FpMGY4cUpWc2E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9iMmY5NjMtMzkzOS00NGM1LTliOWQt YjE2MjQyYjliZGU3LzEvclpSNXItT3BvWTRjTjBfS0FpMGY4cUpWc2E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9iMmY5NjMtMzkzOS00NGM1LTliOWQtYjE2MjQyYjliZGU3 LzEvclpSNXItT3BvWTRjTjBfS0FpMGY4cUpWc2E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ799Ukx+ RWx/UAnF2mcxKj6xj4n84/3Mk+J14TrEpOaHUDy7vddmdhy2d18bvqP8o+Vp8r6Y BT6Q7ktc01zokdHGpWc+2H6exL8Kv4NeW3jjB5TaXYuBtk9XDzDAReXWeyVOuMCz CNK6iDnI7MFH4sid7cCJSSrpLYd9PHsnuW6bHllAUivDqw5U9VbibDu8O44zaRGG MxrZEtHMNQgHX4De6cwCxUr8CxQUEPeHHq92nR5cYyMGFNF30z43+ZoosQb64WaC IAi5WDQFEK8s8XwMDqHlcVHSFo9Yh6qfBf+e0yjO1Vry2G3P1LaVlnZnu2T8F81d kZ2uYDT/Ic5UwA== -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:42 2026 by rpki-client