This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft File: _0zNsS_CLrhX-GxWWovFFR0FMrA.mft (raw, json) Hash identifier: OwjnxVvPLpZKr4K9MHDRPnvPtLPbjuFZtQBZm69VR9A= Subject key identifier: FF:2A:34:62:CA:29:0C:A7:1B:40:A7:FB:B0:8A:20:57:E2:E3:7D:C8 Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0 Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0 Certificate serial: 019C1B70686EB52F5A1C87D06200E0067635 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft Manifest number: 0883 Signing time: Sun 01 Feb 2026 23:01:17 +0000 Manifest this update: Sun 01 Feb 2026 23:01:17 +0000 Manifest next update: Mon 02 Feb 2026 23:01:17 +0000 Files and hashes: 1: NRwpyOICf9wpmUhYO5Fr_XrzFgA.roa (hash: GlJA+r+paBvGWHeLeGh00UUVFovocNKsI8qh86ZLz2A=) 2: _0zNsS_CLrhX-GxWWovFFR0FMrA.crl (hash: UwhIIYYRE+OTEQI1XVQCB+UK8eU7yOW9kf2eJ92xEzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:70:68:6e:b5:2f:5a:1c:87:d0:62:00:e0:06:76:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0 Validity Not Before: Feb 1 23:01:17 2026 GMT Not After : Feb 2 23:01:17 2026 GMT Subject: CN=ff2a3462ca290ca71b40a7fbb08a2057e2e37dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9f:6b:61:c9:4f:37:fd:00:35:98:c5:d9:e8: 2a:48:a3:c4:4d:9b:e8:e6:30:15:17:83:ed:f5:07: 54:3d:53:c2:9a:3a:5a:7c:a0:33:4a:dd:40:73:5d: 39:53:6f:13:ef:fd:29:f7:ff:18:fd:fa:5d:8f:c6: 53:c3:0e:3f:dc:08:7f:94:60:5c:f0:c4:da:73:4f: 97:34:1d:04:e2:47:ab:0c:4e:d6:5c:8f:92:c7:10: d0:b1:d6:7b:70:bc:bf:c7:61:ed:c1:12:39:6e:19: 07:bb:26:9f:cd:b2:8f:15:94:b6:25:04:20:d3:2d: 40:bd:f6:58:dc:62:2f:66:ab:95:57:9c:dc:7d:b3: 48:df:07:04:9b:e8:6c:34:ec:80:58:18:5e:9b:40: 4c:9e:cf:5a:da:62:7c:69:f4:e0:49:82:41:a7:5a: 8b:6f:0d:4f:1a:61:12:0e:7e:a9:e7:a8:1f:68:04: 21:c4:29:46:3f:93:7d:e8:96:ce:5b:35:b7:cb:4b: ca:aa:37:b9:80:1c:f8:83:3b:86:5f:65:b5:b2:18: c0:b9:8c:c6:f3:86:a3:7f:67:bc:e8:b0:bb:88:bf: 0e:38:bb:f4:b1:72:c0:50:73:b0:4a:a3:5a:29:12: 57:ce:d5:f1:bd:86:a7:38:39:8c:13:83:3c:a7:25: 0e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2A:34:62:CA:29:0C:A7:1B:40:A7:FB:B0:8A:20:57:E2:E3:7D:C8 X509v3 Authority Key Identifier: keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:1f:d6:0b:2e:75:0b:78:da:05:36:0c:59:16:4d:cc:46:d0: a8:72:e8:f0:70:c5:bc:44:1e:67:94:ff:be:fd:8d:46:f5:de: e2:10:ad:9e:c7:a9:f2:53:de:03:6a:00:00:93:55:eb:67:84: a7:3c:46:df:93:82:a3:47:b6:2c:3b:8f:25:b3:bc:b5:b8:ae: 0a:78:28:30:24:01:d7:9f:1c:d4:36:21:25:75:8e:cd:86:9f: 8c:fd:53:37:0d:09:c3:a9:22:c2:e7:37:3c:c9:88:99:01:26: 60:69:17:f6:c3:90:52:3e:8c:f5:cf:90:26:6a:c7:d5:2a:de: 95:37:40:23:76:ed:aa:09:be:de:37:ed:ef:32:52:e7:87:f9: 26:b5:08:23:f7:93:5b:25:bc:55:53:c7:c9:c4:a3:70:43:ba: cc:d0:d2:ab:68:17:82:2b:c7:06:8d:ee:60:51:99:c0:6f:7b: e0:47:2b:3e:50:22:b5:c9:46:95:64:85:78:f6:7c:5e:4e:73: 97:98:70:3a:0d:65:e9:b3:38:2c:f9:00:b6:0a:9f:76:ac:28: b3:f3:7f:5d:64:7c:2b:d6:8a:44:e4:1a:1d:f5:b2:d3:b7:a1: c3:ac:8f:cc:6c:a2:64:4b:3c:7a:b9:99:65:09:05:4e:48:ef: d4:d1:8f:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbcGhutS9aHIfQYgDgBnY1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNGNjZGIxMmZjMjJlYjg1N2Y4NmM1NjVhOGJjNTE1MWQw NTMyYjAwHhcNMjYwMjAxMjMwMTE3WhcNMjYwMjAyMjMwMTE3WjAzMTEwLwYDVQQD EyhmZjJhMzQ2MmNhMjkwY2E3MWI0MGE3ZmJiMDhhMjA1N2UyZTM3ZGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp59rYclPN/0ANZjF2egqSKPETZvo 5jAVF4Pt9QdUPVPCmjpafKAzSt1Ac105U28T7/0p9/8Y/fpdj8ZTww4/3Ah/lGBc 8MTac0+XNB0E4kerDE7WXI+SxxDQsdZ7cLy/x2HtwRI5bhkHuyafzbKPFZS2JQQg 0y1AvfZY3GIvZquVV5zcfbNI3wcEm+hsNOyAWBhem0BMns9a2mJ8afTgSYJBp1qL bw1PGmESDn6p56gfaAQhxClGP5N96JbOWzW3y0vKqje5gBz4gzuGX2W1shjAuYzG 84ajf2e86LC7iL8OOLv0sXLAUHOwSqNaKRJXztXxvYanODmME4M8pyUOLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8qNGLKKQynG0Cn+7CKIFfi433IMB8GA1UdIwQY MBaAFP9MzbEvwi64V/hsVlqLxRUdBTKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81ZTMwNzAtNDIyYS00YjU4LTgwMGEt ZGJhN2NjYWM5NGUyLzEvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy81ZTMwNzAtNDIyYS00YjU4LTgwMGEtZGJhN2NjYWM5NGUy LzEvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcx/WCy51 C3jaBTYMWRZNzEbQqHLo8HDFvEQeZ5T/vv2NRvXe4hCtnsep8lPeA2oAAJNV62eE pzxG35OCo0e2LDuPJbO8tbiuCngoMCQB158c1DYhJXWOzYafjP1TNw0Jw6kiwuc3 PMmImQEmYGkX9sOQUj6M9c+QJmrH1SrelTdAI3btqgm+3jft7zJS54f5JrUII/eT WyW8VVPHycSjcEO6zNDSq2gXgivHBo3uYFGZwG974EcrPlAitclGlWSFePZ8Xk5z l5hwOg1l6bM4LPkAtgqfdqwos/N/XWR8K9aKROQaHfWy07ehw6yPzGyiZEs8ermZ ZQkFTkjv1NGPcQ== -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:18 2026 by rpki-client