This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json) Hash identifier: Qa2ts2sRoWk3A+zydfzxfdUtMF7W2+bNwZ53hvA/NNE= Subject key identifier: 7C:BC:C7:E0:F3:0F:24:C1:67:81:80:A2:7C:7E:8C:2E:43:48:AA:A3 Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39 Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39 Certificate serial: 019BFD2F188AF7C54F23BF435E898DB4837C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft Manifest number: 11E7 Signing time: Tue 27 Jan 2026 02:01:20 +0000 Manifest this update: Tue 27 Jan 2026 02:01:20 +0000 Manifest next update: Wed 28 Jan 2026 02:01:20 +0000 Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: Uzptg8kwS9iDDO8A7G5zNCD5JCmpDP57Y+WtRWaWI/I=) 2: q5b2DuF1EAMOC22AlAeZQWFkxpU.roa (hash: 6KXA/tbOOb8+a5Q0zFi+dIBOh0aAYoOzdzGbwggmS5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 02:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2f:18:8a:f7:c5:4f:23:bf:43:5e:89:8d:b4:83:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39 Validity Not Before: Jan 27 02:01:20 2026 GMT Not After : Jan 28 02:01:20 2026 GMT Subject: CN=7cbcc7e0f30f24c1678180a27c7e8c2e4348aaa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f9:31:ad:55:37:33:9f:cc:67:77:86:c2:b8: 2f:6a:ff:e1:f4:a0:63:a0:a9:66:71:5f:6c:19:c9: e0:bd:bd:32:88:3d:32:ab:c7:65:ef:00:16:dd:29: 9e:1a:43:00:8a:50:12:97:d9:52:37:04:a7:25:1a: 40:85:18:87:db:38:c8:7d:22:04:53:43:cd:77:44: ad:30:df:9e:8c:96:84:e0:0b:6a:6a:e6:0d:98:f5: f3:3e:e2:2e:d3:ac:71:ad:82:bb:d8:e3:83:15:29: f8:d0:c4:eb:6c:9a:f3:22:93:0c:80:12:2c:e5:d2: d2:ed:bb:4c:07:f3:c6:ce:46:e6:15:f2:f3:05:5e: 52:77:c0:43:e2:c9:10:36:e8:0c:fe:dc:10:94:11: 8c:b8:a6:5f:50:41:4b:5d:16:7f:b3:43:66:af:d9: a1:7d:58:f0:5b:cd:64:36:e2:32:29:3c:bd:2f:2b: 4d:ca:c6:55:09:b3:67:d9:eb:57:08:60:a0:78:f5: 42:a3:fc:8b:8c:f6:2f:9f:84:1e:65:61:5d:4a:97: 89:d7:c2:78:e9:08:b9:7c:c6:b4:53:de:de:2f:4e: da:99:f0:50:ea:6a:1f:43:67:bd:b1:d9:c6:8c:06: e6:f9:9d:93:d3:a6:fe:e5:5c:e7:b8:fa:05:44:38: 4a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BC:C7:E0:F3:0F:24:C1:67:81:80:A2:7C:7E:8C:2E:43:48:AA:A3 X509v3 Authority Key Identifier: keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:fb:eb:2e:1f:d1:1d:89:a7:10:54:9f:fe:56:69:e8:1d:5d: 44:da:18:7b:5b:00:92:04:48:2f:d3:b2:c5:8d:c4:71:c0:d8: b3:a3:c1:57:ec:a4:37:43:d6:73:4d:f6:8a:9f:5f:97:28:02: ef:4b:f3:bf:2d:7d:c2:1a:01:dc:46:85:56:45:5b:be:29:8f: 72:5e:9f:dd:33:5e:3c:fe:dd:5d:f8:c7:09:bc:cc:fb:2d:d4: c7:14:10:e2:cd:2a:1d:4b:1c:da:fc:a2:2a:bc:d1:b5:c3:09: ed:f8:e1:4b:63:2f:82:24:5d:6a:9f:18:a3:ae:10:e3:fa:81: cd:53:aa:7f:0b:68:26:3d:56:cd:ce:6c:57:cc:ca:70:5d:4a: c3:f2:6f:b5:02:f8:57:2c:11:04:c9:2d:aa:cb:23:ff:69:1f: e6:a9:78:09:a3:0a:27:a6:0b:e6:00:f7:e9:3f:fa:25:5d:b8: 39:13:57:aa:c2:2f:f4:7b:b1:ac:be:84:7b:59:39:34:24:82: 98:c7:55:58:da:7c:28:33:70:e5:0c:17:dd:03:23:19:fc:d3: 15:40:5f:d0:0c:82:d3:b6:e8:ef:c9:04:a3:c7:fa:6c:48:a8: 39:13:18:fd:d3:77:32:f1:6a:e2:f9:36:6d:1b:0d:28:52:3a: aa:0c:60:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LxiK98VPI79DXomNtIN8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzM2UxMzEwMDhkZWY3MDVhNDE3ZjBkNDBkMTQ4YTM2ZjI1 YTFhMzkwHhcNMjYwMTI3MDIwMTIwWhcNMjYwMTI4MDIwMTIwWjAzMTEwLwYDVQQD Eyg3Y2JjYzdlMGYzMGYyNGMxNjc4MTgwYTI3YzdlOGMyZTQzNDhhYWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfkxrVU3M5/MZ3eGwrgvav/h9KBj oKlmcV9sGcngvb0yiD0yq8dl7wAW3SmeGkMAilASl9lSNwSnJRpAhRiH2zjIfSIE U0PNd0StMN+ejJaE4AtqauYNmPXzPuIu06xxrYK72OODFSn40MTrbJrzIpMMgBIs 5dLS7btMB/PGzkbmFfLzBV5Sd8BD4skQNugM/twQlBGMuKZfUEFLXRZ/s0Nmr9mh fVjwW81kNuIyKTy9LytNysZVCbNn2etXCGCgePVCo/yLjPYvn4QeZWFdSpeJ18J4 6Qi5fMa0U97eL07amfBQ6mofQ2e9sdnGjAbm+Z2T06b+5VznuPoFRDhKvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHy8x+DzDyTBZ4GAonx+jC5DSKqjMB8GA1UdIwQY MBaAFNM+ExAI3vcFpBfw1A0UijbyWho5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NDZkZDktYWE0OC00NDVlLWJlNjAt MDkwN2FkMzRjYjlmLzEvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81NDZkZDktYWE0OC00NDVlLWJlNjAtMDkwN2FkMzRjYjlm LzEvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifvrLh/R HYmnEFSf/lZp6B1dRNoYe1sAkgRIL9OyxY3EccDYs6PBV+ykN0PWc032ip9flygC 70vzvy19whoB3EaFVkVbvimPcl6f3TNePP7dXfjHCbzM+y3UxxQQ4s0qHUsc2vyi KrzRtcMJ7fjhS2MvgiRdap8Yo64Q4/qBzVOqfwtoJj1Wzc5sV8zKcF1Kw/JvtQL4 VywRBMktqssj/2kf5ql4CaMKJ6YL5gD36T/6JV24ORNXqsIv9HuxrL6Ee1k5NCSC mMdVWNp8KDNw5QwX3QMjGfzTFUBf0AyC07bo78kEo8f6bEioORMY/dN3MvFq4vk2 bRsNKFI6qgxgxw== -----END CERTIFICATE-----Generated at Tue Jan 27 11:52:50 2026 by rpki-client