This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft File: U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json) Hash identifier: aKrWTX1YNtcoJ79yG1TLI+91uUTh4OSqEVkIM7/DuWE= Subject key identifier: C0:73:00:7B:C1:D8:65:97:26:94:58:08:6C:47:B8:DB:A4:3C:92:88 Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3 Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3 Certificate serial: 019BD9C80ED3FC2112DFC2FB5FEA26C931F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft Manifest number: 17DF Signing time: Tue 20 Jan 2026 05:02:05 +0000 Manifest this update: Tue 20 Jan 2026 05:02:05 +0000 Manifest next update: Wed 21 Jan 2026 05:02:05 +0000 Files and hashes: 1: 1-UcYB_bC1Q74xvMeMptRl_v4GSM.roa (hash: CZsJE/C7u1KFT+BSHVUsJyL6cOqDP5qXckw/MXkpdZw=) 2: IADl1Gv9BuddIG-0OHvNCj39-5w.roa (hash: S9Dxk12pt58eWH9jO5GDFxrOLIjhAQo2JWChQTtOvm0=) 3: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: ZCljX2zua6T61+DrqtfTWyiUy8tKoTsZabioyABc3O4=) 4: ctdO6KeqKtoQl8jil7v642rgLAY.roa (hash: 0Ysbxgr5wlnCLuuipo5HyI6PWUVSDIOqUxGUbxE7UC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:c8:0e:d3:fc:21:12:df:c2:fb:5f:ea:26:c9:31:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3 Validity Not Before: Jan 20 05:02:05 2026 GMT Not After : Jan 21 05:02:05 2026 GMT Subject: CN=c073007bc1d86597269458086c47b8dba43c9288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f9:5c:e9:ff:2d:c0:e5:1a:6e:1d:61:f4:6d: fd:b0:b9:f2:c8:6b:bc:29:fb:b5:c5:b9:ba:b0:5d: 37:bb:8b:6c:52:91:de:c8:1c:7a:d9:f2:c3:35:cc: 2f:89:1a:2a:ee:3d:d3:4a:bf:de:51:d5:9a:9d:92: b7:7e:8c:72:32:44:5c:97:63:89:3f:2a:6d:d0:e2: 3c:3d:7a:62:4c:7c:f6:29:b5:e2:eb:2d:c4:21:13: b2:f5:d3:ba:22:f5:05:5c:f1:06:6a:62:79:d5:c8: 99:dd:81:82:4f:70:54:03:22:c0:99:12:40:80:c3: 39:88:3d:5a:5a:d7:09:b6:b2:b9:34:6e:0a:7b:95: b9:0e:9e:4a:a9:75:25:23:fe:d5:4e:0b:f8:54:08: fb:36:b3:27:5b:43:51:a1:d1:5e:64:2a:88:bd:0f: ec:46:39:34:8b:fc:f3:ae:2a:21:ea:b9:bd:2f:df: f1:4f:a9:26:2e:23:7a:a6:e8:1f:37:28:9a:eb:b4: ee:ee:79:07:eb:1f:70:f4:96:d7:7f:b2:24:7c:88: 02:73:96:41:8f:ef:3c:5e:75:b5:47:32:39:05:45: 28:eb:19:43:b7:8b:61:83:77:9f:5b:17:cb:3f:09: 50:0f:90:5f:97:b1:bb:d2:a8:b1:6b:ef:ab:32:8b: 62:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:73:00:7B:C1:D8:65:97:26:94:58:08:6C:47:B8:DB:A4:3C:92:88 X509v3 Authority Key Identifier: keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:dc:ec:b3:64:45:e3:05:37:26:f1:e9:42:da:c4:eb:8a:75: e9:66:e1:91:71:ac:86:f9:be:4f:87:b9:25:0f:95:9a:6c:8a: 28:68:10:d2:a1:98:ba:ea:08:c4:88:60:34:64:b0:5e:46:25: d3:1c:14:47:c2:f3:77:24:c4:69:65:64:e7:09:70:57:ae:2b: 6f:90:17:dc:c7:7d:b8:ca:5b:46:05:5d:e9:21:00:a3:6a:ea: af:4d:90:d0:b9:83:00:66:70:93:1f:71:6b:02:4b:75:47:d3: 16:5a:74:9a:9e:03:40:2e:87:ed:a6:34:c1:c4:39:46:ad:62: 8b:14:36:24:a0:d7:4d:88:20:e7:b8:e9:6c:4d:3a:41:b5:b8: 53:6e:e1:dd:80:53:65:0d:04:c1:60:92:e4:e1:01:fa:07:b7: 33:f8:1c:d3:80:fb:d8:5a:bd:28:61:c3:e7:b3:71:be:d6:b6: f6:e2:a9:6e:8f:1b:e5:74:11:30:69:1a:f9:8e:d7:05:d9:6e: 38:4c:97:08:cd:f3:09:fb:61:c0:ff:a7:4c:73:c6:40:e4:a8: 3a:c7:95:2c:da:07:04:0b:02:d7:be:0d:9d:e0:2c:bd:a1:18: 40:ca:a0:96:cc:2e:11:d0:ee:98:ae:97:99:87:86:74:cc:3d: 66:83:54:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZyA7T/CES38L7X+omyTHxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZjM1OTA4MDlkMTg3ZjdiMzYxZmIyNGNkNDNmOTNmNjY0 YjIwYjMwHhcNMjYwMTIwMDUwMjA1WhcNMjYwMTIxMDUwMjA1WjAzMTEwLwYDVQQD EyhjMDczMDA3YmMxZDg2NTk3MjY5NDU4MDg2YzQ3YjhkYmE0M2M5Mjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuflc6f8twOUabh1h9G39sLnyyGu8 Kfu1xbm6sF03u4tsUpHeyBx62fLDNcwviRoq7j3TSr/eUdWanZK3foxyMkRcl2OJ Pypt0OI8PXpiTHz2KbXi6y3EIROy9dO6IvUFXPEGamJ51ciZ3YGCT3BUAyLAmRJA gMM5iD1aWtcJtrK5NG4Ke5W5Dp5KqXUlI/7VTgv4VAj7NrMnW0NRodFeZCqIvQ/s Rjk0i/zzrioh6rm9L9/xT6kmLiN6pugfNyia67Tu7nkH6x9w9JbXf7IkfIgCc5ZB j+88XnW1RzI5BUUo6xlDt4thg3efWxfLPwlQD5Bfl7G70qixa++rMoti9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBzAHvB2GWXJpRYCGxHuNukPJKIMB8GA1UdIwQY MBaAFFPzWQgJ0Yf3s2H7JM1D+T9mSyCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9kZTYzODMtNGFkNS00NTdiLTk1M2Mt YTc3NmZlZGU5OTA1LzEvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9kZTYzODMtNGFkNS00NTdiLTk1M2MtYTc3NmZlZGU5OTA1 LzEvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9zss2RF 4wU3JvHpQtrE64p16WbhkXGshvm+T4e5JQ+VmmyKKGgQ0qGYuuoIxIhgNGSwXkYl 0xwUR8LzdyTEaWVk5wlwV64rb5AX3Md9uMpbRgVd6SEAo2rqr02Q0LmDAGZwkx9x awJLdUfTFlp0mp4DQC6H7aY0wcQ5Rq1iixQ2JKDXTYgg57jpbE06QbW4U27h3YBT ZQ0EwWCS5OEB+ge3M/gc04D72Fq9KGHD57Nxvta29uKpbo8b5XQRMGka+Y7XBdlu OEyXCM3zCfthwP+nTHPGQOSoOseVLNoHBAsC174NneAsvaEYQMqglswuEdDumK6X mYeGdMw9ZoNUPw== -----END CERTIFICATE-----Generated at Tue Jan 20 08:22:06 2026 by rpki-client