This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json) Hash identifier: rLM+TlZuWCVJwzRAa/hxWOVK0PoLNPdoXYiymUoxIYE= Subject key identifier: A9:69:3A:7B:64:11:6A:66:0C:5C:08:7F:1F:08:EC:27:17:48:A0:47 Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06 Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006 Certificate serial: 019BFBE5493B808FD1CDC7FA6183CA0CD720 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft Manifest number: 0924 Signing time: Mon 26 Jan 2026 20:01:06 +0000 Manifest this update: Mon 26 Jan 2026 20:01:06 +0000 Manifest next update: Tue 27 Jan 2026 20:01:06 +0000 Files and hashes: 1: cAzWD4UWlj70EiLaNqvrtRF-AdQ.roa (hash: dJLOsH5nvudA2pqcaJR1TYffAi1mHqotSh6hinQkzBk=) 2: cfMAhppJ5CyKXBaqPDK_J7Wmc74.roa (hash: jioy4y0gWPQQEn7QCTikqbEqNukHGaADZBFFgBQAWQI=) 3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: SFTxIlAcTkxnFLnqiWyjU3D/L8h4ZiU2V2ajm22y5OM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e5:49:3b:80:8f:d1:cd:c7:fa:61:83:ca:0c:d7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006 Validity Not Before: Jan 26 20:01:06 2026 GMT Not After : Jan 27 20:01:06 2026 GMT Subject: CN=a9693a7b64116a660c5c087f1f08ec271748a047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:31:23:05:33:22:21:72:9b:1f:90:c7:7f:8d: d9:b7:a5:53:eb:69:6e:42:14:05:5c:45:6f:61:89: 96:5b:bb:28:61:46:c2:d0:bc:b8:a7:e8:c5:1e:a0: cf:99:53:6d:f7:51:57:d3:a4:6f:a5:52:1e:87:95: d6:57:93:9e:3b:22:18:25:2e:2f:14:fa:17:d4:56: 16:c8:54:2b:df:b4:ea:cb:9a:92:d2:49:92:70:b7: b4:21:35:ad:1b:73:d7:d5:a0:71:1a:90:99:be:88: 93:65:9e:aa:be:75:b7:62:b5:90:5c:4c:c7:b1:42: 15:3d:df:08:af:c7:1a:10:f0:ed:44:37:16:bd:15: 13:fe:e6:3e:68:b7:0e:21:0b:bf:e9:67:22:1f:18: 04:69:22:5b:a4:84:1c:43:ca:76:de:a4:79:c0:47: 0d:3c:b8:65:d2:26:10:e2:da:ec:84:fa:c1:4f:67: cd:57:36:bc:4e:ee:fe:b3:81:2b:f5:54:2f:f4:fb: 02:62:cb:8c:d7:18:a0:fd:c5:33:ad:b0:2b:fb:b6: 53:26:8b:e7:91:c2:19:b9:d6:74:76:20:0e:b2:b7: cd:90:5e:f1:d0:53:e5:f7:56:76:04:00:87:4d:97: 64:8e:16:ff:94:01:2a:9c:f8:8d:a3:ec:5c:43:ea: 38:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:69:3A:7B:64:11:6A:66:0C:5C:08:7F:1F:08:EC:27:17:48:A0:47 X509v3 Authority Key Identifier: keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:27:2b:0a:72:18:ac:92:19:2b:50:8d:91:5a:14:74:bd:63: 48:d8:80:b5:f5:bd:64:d3:c3:b9:3e:ce:ff:79:8a:68:4b:a9: ff:05:96:cb:c7:d4:7d:94:4e:48:c8:f0:8c:e1:1b:93:84:81: e8:8b:e4:d3:35:7c:5f:22:8f:f6:12:a1:5d:73:74:34:83:e8: 76:e1:76:d1:62:27:9f:2f:c8:a4:9a:34:99:10:45:d3:86:10: 27:e0:ff:a5:c4:a2:87:08:dc:89:28:b8:00:61:b0:66:f0:a6: 2b:aa:93:a6:d6:6e:a8:cd:00:e1:bb:b8:cf:54:5f:51:bd:d5: 78:64:b8:b7:66:e6:60:9c:83:93:9c:29:e6:4f:bd:96:54:62: bb:de:54:8d:42:34:18:25:59:7a:4b:12:70:20:0b:3e:4d:f1: d0:c4:d1:4c:68:61:32:3c:a9:7d:4e:11:57:e5:15:5c:cf:36: bd:34:7d:b1:e7:97:b9:f0:61:7a:4b:c8:9f:d4:3e:0f:bd:4c: 4a:b8:66:4a:30:6c:84:82:40:78:ca:08:95:ff:32:3b:46:6f: ec:85:de:3c:c8:cc:cd:2e:98:b3:80:c0:c8:07:37:1a:e6:5f: 8e:99:e9:cc:19:9a:a6:8e:1d:d6:0b:76:01:e1:d9:16:65:49: fb:b9:da:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75Uk7gI/Rzcf6YYPKDNcgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzQ3ZTE2OGQ2OTY1ODU0NTM3NGU2YTBiNjhkMjRiOTdm Y2QwMDYwHhcNMjYwMTI2MjAwMTA2WhcNMjYwMTI3MjAwMTA2WjAzMTEwLwYDVQQD EyhhOTY5M2E3YjY0MTE2YTY2MGM1YzA4N2YxZjA4ZWMyNzE3NDhhMDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTEjBTMiIXKbH5DHf43Zt6VT62lu QhQFXEVvYYmWW7soYUbC0Ly4p+jFHqDPmVNt91FX06RvpVIeh5XWV5OeOyIYJS4v FPoX1FYWyFQr37Tqy5qS0kmScLe0ITWtG3PX1aBxGpCZvoiTZZ6qvnW3YrWQXEzH sUIVPd8Ir8caEPDtRDcWvRUT/uY+aLcOIQu/6WciHxgEaSJbpIQcQ8p23qR5wEcN PLhl0iYQ4trshPrBT2fNVza8Tu7+s4Er9VQv9PsCYsuM1xig/cUzrbAr+7ZTJovn kcIZudZ0diAOsrfNkF7x0FPl91Z2BACHTZdkjhb/lAEqnPiNo+xcQ+o4gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlpOntkEWpmDFwIfx8I7CcXSKBHMB8GA1UdIwQY MBaAFHc0fhaNaWWFRTdOagto0kuX/NAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2Qt NjdlYmJjOGM2ODYyLzEvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2QtNjdlYmJjOGM2ODYy LzEvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgycrCnIY rJIZK1CNkVoUdL1jSNiAtfW9ZNPDuT7O/3mKaEup/wWWy8fUfZROSMjwjOEbk4SB 6Ivk0zV8XyKP9hKhXXN0NIPoduF20WInny/IpJo0mRBF04YQJ+D/pcSihwjciSi4 AGGwZvCmK6qTptZuqM0A4bu4z1RfUb3VeGS4t2bmYJyDk5wp5k+9llRiu95UjUI0 GCVZeksScCALPk3x0MTRTGhhMjypfU4RV+UVXM82vTR9seeXufBhekvIn9Q+D71M SrhmSjBshIJAeMoIlf8yO0Zv7IXePMjMzS6Ys4DAyAc3GuZfjpnpzBmapo4d1gt2 AeHZFmVJ+7naQQ== -----END CERTIFICATE-----Generated at Tue Jan 27 00:29:39 2026 by rpki-client