This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft File: isRzGj7jlC0ljQZjVwuJTo4akjM.mft (raw, json) Hash identifier: +GNUWuHWYhrFyYUDYav71qcwlRB2u4Be2dkr5eEnuQE= Subject key identifier: F7:C5:2E:FD:F1:13:B7:36:72:60:B8:C2:95:73:AE:69:AA:8E:16:96 Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33 Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233 Certificate serial: 019BF9C0DA036C93F514AD3FE0871A591119 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft Manifest number: 0B15 Signing time: Mon 26 Jan 2026 10:02:03 +0000 Manifest this update: Mon 26 Jan 2026 10:02:03 +0000 Manifest next update: Tue 27 Jan 2026 10:02:03 +0000 Files and hashes: 1: isRzGj7jlC0ljQZjVwuJTo4akjM.crl (hash: ODMWM24gdQ8sJTTOrJzC+Q7LnlwUheh0Hv7kvg8gdFs=) 2: wBlQV8roNYOAgb5G0Nj_HH5ZUbY.roa (hash: KZkndcTrNEzitWfaZ4uzKEh3xzfx2DJf1eZMDvFa5Fg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c0:da:03:6c:93:f5:14:ad:3f:e0:87:1a:59:11:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233 Validity Not Before: Jan 26 10:02:03 2026 GMT Not After : Jan 27 10:02:03 2026 GMT Subject: CN=f7c52efdf113b7367260b8c29573ae69aa8e1696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:39:35:5d:b8:99:13:6f:ba:2b:ef:4b:e6:ad: a5:95:f8:d8:65:b2:0e:e2:d7:20:5e:51:fa:f3:bf: 0e:4a:6f:4e:5d:ca:67:8e:28:18:bc:72:46:ef:e5: fc:ee:89:5c:13:39:a2:90:2b:b8:ad:92:1b:95:b6: dc:a8:c7:1a:d0:b0:dd:c2:96:6e:ca:05:35:30:8f: 2d:a6:75:e5:75:b2:c9:f1:03:87:c5:35:23:73:f9: 0b:56:0f:52:b9:af:bc:81:10:bf:91:07:0e:e9:c6: 5b:3a:bf:ac:e6:2d:0e:8a:41:32:d7:57:b7:87:97: 8d:99:25:91:7e:fb:0b:6f:86:26:5b:a9:33:0b:2c: 63:cd:5b:c0:80:4b:b4:69:9a:c4:96:30:99:08:60: 2a:cb:b0:7b:91:f0:23:b8:43:c3:47:d3:42:00:82: b2:ce:44:46:89:17:a8:13:9d:9b:ca:fc:ec:db:b4: eb:f0:f9:1a:a7:f5:8e:31:5e:80:af:fc:ad:ef:42: 19:60:06:f8:37:7d:86:c9:ba:0c:df:12:5f:5f:24: 5f:ed:7a:12:85:70:dc:3a:09:cb:72:11:3c:1f:bc: 3f:0e:77:e1:fb:9b:ef:8c:8b:b2:5a:de:23:d2:de: 75:63:27:84:3e:6b:2f:e2:27:32:f8:80:e6:56:0b: a8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C5:2E:FD:F1:13:B7:36:72:60:B8:C2:95:73:AE:69:AA:8E:16:96 X509v3 Authority Key Identifier: keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:6c:63:a3:8f:bb:39:26:67:5a:28:93:80:67:18:33:f3:1f: bc:e9:c1:f8:5b:12:3f:9e:f0:74:00:1b:f5:92:19:15:ce:63: c4:c4:88:d7:42:b6:ba:dc:ff:ca:bd:84:e8:25:ae:0f:15:15: 8e:43:2f:db:3c:35:2e:28:dd:ae:3c:aa:f6:8f:88:27:c6:8c: 02:d1:08:4e:e2:12:2a:06:27:44:4b:57:83:63:69:53:1e:c6: 9f:8c:6f:d5:3d:7a:4c:7c:9d:14:53:a7:9c:39:01:fa:a9:b6: fc:e1:ea:d9:1e:d8:19:c3:a2:f3:f4:b3:bc:23:ea:f6:fe:c2: f0:64:0f:a4:3d:73:e8:e5:89:00:f0:03:15:92:10:9d:ef:2e: 28:0d:b8:8f:55:63:22:b3:34:b4:36:9e:1a:c5:fa:c6:0f:e0: 33:61:bb:82:04:b7:7b:ff:7c:c7:1b:e4:f6:e0:3e:fe:23:90: 69:bd:8f:a4:84:5b:46:1b:04:a4:e9:17:59:03:47:1d:eb:c7: 40:1a:f2:cd:f7:32:9d:26:4b:06:b5:f6:b1:10:56:d5:1f:02: f9:b2:2a:75:5e:f8:81:23:0c:97:53:ea:19:f0:58:10:a3:da: 13:09:a4:fe:d7:a9:da:38:a6:7f:f7:01:e1:34:3e:ad:98:e8: 19:3b:35:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5wNoDbJP1FK0/4IcaWREZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYzQ3MzFhM2VlMzk0MmQyNThkMDY2MzU3MGI4OTRlOGUx YTkyMzMwHhcNMjYwMTI2MTAwMjAzWhcNMjYwMTI3MTAwMjAzWjAzMTEwLwYDVQQD EyhmN2M1MmVmZGYxMTNiNzM2NzI2MGI4YzI5NTczYWU2OWFhOGUxNjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTk1XbiZE2+6K+9L5q2llfjYZbIO 4tcgXlH6878OSm9OXcpnjigYvHJG7+X87olcEzmikCu4rZIblbbcqMca0LDdwpZu ygU1MI8tpnXldbLJ8QOHxTUjc/kLVg9Sua+8gRC/kQcO6cZbOr+s5i0OikEy11e3 h5eNmSWRfvsLb4YmW6kzCyxjzVvAgEu0aZrEljCZCGAqy7B7kfAjuEPDR9NCAIKy zkRGiReoE52byvzs27Tr8Pkap/WOMV6Ar/yt70IZYAb4N32GyboM3xJfXyRf7XoS hXDcOgnLchE8H7w/Dnfh+5vvjIuyWt4j0t51YyeEPmsv4icy+IDmVguojwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfFLv3xE7c2cmC4wpVzrmmqjhaWMB8GA1UdIwQY MBaAFIrEcxo+45QtJY0GY1cLiU6OGpIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgt NWFkZmUzMGZmZGE1LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgtNWFkZmUzMGZmZGE1 LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2xjo4+7 OSZnWiiTgGcYM/MfvOnB+FsSP57wdAAb9ZIZFc5jxMSI10K2utz/yr2E6CWuDxUV jkMv2zw1Lijdrjyq9o+IJ8aMAtEITuISKgYnREtXg2NpUx7Gn4xv1T16THydFFOn nDkB+qm2/OHq2R7YGcOi8/SzvCPq9v7C8GQPpD1z6OWJAPADFZIQne8uKA24j1Vj IrM0tDaeGsX6xg/gM2G7ggS3e/98xxvk9uA+/iOQab2PpIRbRhsEpOkXWQNHHevH QBryzfcynSZLBrX2sRBW1R8C+bIqdV74gSMMl1PqGfBYEKPaEwmk/tep2jimf/cB 4TQ+rZjoGTs1dg== -----END CERTIFICATE-----Generated at Mon Jan 26 13:30:31 2026 by rpki-client