This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json) Hash identifier: affRHoE+zTt/1/IsJooSiA4TbK94q2vpwNiEgnhLd3U= Subject key identifier: 44:10:CE:7D:1B:16:4F:24:D8:00:F8:51:B0:CE:35:FC:87:9E:6A:23 Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c Certificate serial: 019BA3479FEE2FEE222DDA490CD4E2257929 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft Manifest number: 10A5 Signing time: Fri 09 Jan 2026 15:02:18 +0000 Manifest this update: Fri 09 Jan 2026 15:02:18 +0000 Manifest next update: Sat 10 Jan 2026 15:02:18 +0000 Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: 1feLe0Hh3CQ5TYhlAA/pxvaKIkE7o9cT5RhxllZUR1A=) 2: f4oZ944cKaclf3H6nV0hXsulctQ.roa (hash: a37helEeh9rd8vAJtERuFqCFLk/+7T/8DDcBlfCEHS8=) 3: s44uN6WA03-69O83KoxBpdROnOs.roa (hash: m6tv0wnAPyB40bmbjEukGtEqHI9oybLvGh9JpX5oodY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:47:9f:ee:2f:ee:22:2d:da:49:0c:d4:e2:25:79:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c Validity Not Before: Jan 9 15:02:18 2026 GMT Not After : Jan 10 15:02:18 2026 GMT Subject: CN=4410ce7d1b164f24d800f851b0ce35fc879e6a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:17:dd:2d:b9:91:d0:22:ce:e0:08:65:59: ab:04:b8:06:c3:30:3c:fc:35:e5:06:79:b6:57:71: 0a:d4:f5:72:ab:a0:f3:81:a3:c4:b4:75:05:1a:8e: c8:cb:ae:68:07:c9:bf:20:15:9f:5e:5f:1d:67:59: c2:f7:dc:17:14:81:98:e7:92:93:62:81:f3:0e:40: e5:f8:fa:80:ea:48:fe:28:6e:f4:b7:5a:e8:0a:bb: 0a:77:7c:3c:4b:54:d1:82:c7:e2:7e:06:f5:01:15: 4d:5b:fd:01:66:d7:45:e0:07:96:90:11:86:87:44: 85:55:1f:25:27:08:89:ed:41:c6:e9:58:84:e2:2f: 2b:db:96:fb:38:31:70:89:0c:2d:1f:7f:dc:d0:48: 9e:35:7d:40:f1:cd:fe:b4:e0:27:bf:7e:df:21:17: 9c:e2:5c:bd:a0:e3:bd:db:c1:a8:48:89:b9:98:ed: a6:6c:d6:1b:63:0c:04:36:8e:77:f7:d6:9b:2d:1c: 0e:f2:b3:8a:43:c5:39:97:31:08:fa:87:4a:ca:95: 36:f6:5e:8b:cb:07:7b:12:5a:eb:04:95:2a:4b:98: e5:4e:86:5c:28:71:80:61:c6:c5:01:ac:fd:5a:21: 4b:35:38:d7:04:2e:c6:65:20:d0:e6:de:fd:6c:80: c4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:10:CE:7D:1B:16:4F:24:D8:00:F8:51:B0:CE:35:FC:87:9E:6A:23 X509v3 Authority Key Identifier: keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:83:4d:a0:bc:e9:33:18:1a:8e:38:43:d0:21:49:49:a2:c5: f3:b0:9e:81:80:22:9e:ac:ac:fa:6d:14:cf:26:5c:71:3c:9f: ec:f9:19:a0:2d:a3:96:5a:de:ed:e7:78:96:04:e7:f0:63:c2: ca:ef:88:54:46:4e:5c:ac:be:ae:f0:09:2e:d9:47:33:de:35: 18:5c:9d:56:01:b1:ca:cf:9e:b6:5e:93:82:ce:0a:bf:8a:7d: be:ad:a2:58:e7:e1:18:a5:46:48:37:aa:20:45:e3:11:df:c5: ee:4b:1f:06:7d:cc:ce:3e:2c:cc:f5:0d:34:fd:d1:dd:d0:ce: a0:04:3c:7d:31:5d:13:22:92:96:0c:05:1b:3d:c1:6e:5a:e7: 05:20:76:9a:1b:a9:03:42:1e:26:f3:22:22:81:d9:ed:05:f6: 8a:2f:0b:25:7d:ab:db:2f:33:9a:4c:2b:15:4a:44:44:d9:7b: 41:c8:dd:96:2b:ae:bb:18:de:bf:3a:3b:5b:6a:6b:32:e9:5c: 21:07:c9:6f:f5:e2:00:b5:c8:38:7b:9b:d9:cf:90:43:71:09: 03:e3:a3:0d:88:16:c0:0e:75:89:46:3c:13:ef:f9:ba:4f:f3: 87:50:36:7b:f6:c8:34:c9:71:43:c2:93:24:10:03:e6:47:e2: ed:36:63:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZujR5/uL+4iLdpJDNTiJXkpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMzY3ZGJhM2EyMjAwNjBlNjdkNGVjNjgwYjBmOTlmMjQ3 YTg3MmMwHhcNMjYwMTA5MTUwMjE4WhcNMjYwMTEwMTUwMjE4WjAzMTEwLwYDVQQD Eyg0NDEwY2U3ZDFiMTY0ZjI0ZDgwMGY4NTFiMGNlMzVmYzg3OWU2YTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwoX3S25kdAizuAIZVmrBLgGwzA8 /DXlBnm2V3EK1PVyq6DzgaPEtHUFGo7Iy65oB8m/IBWfXl8dZ1nC99wXFIGY55KT YoHzDkDl+PqA6kj+KG70t1roCrsKd3w8S1TRgsfifgb1ARVNW/0BZtdF4AeWkBGG h0SFVR8lJwiJ7UHG6ViE4i8r25b7ODFwiQwtH3/c0EieNX1A8c3+tOAnv37fIRec 4ly9oOO928GoSIm5mO2mbNYbYwwENo5399abLRwO8rOKQ8U5lzEI+odKypU29l6L ywd7ElrrBJUqS5jlToZcKHGAYcbFAaz9WiFLNTjXBC7GZSDQ5t79bIDEDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQQzn0bFk8k2AD4UbDONfyHnmojMB8GA1UdIwQY MBaAFNM2fbo6IgBg5n1OxoCw+Z8keocsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2It NWNhNWJmNjdlNjlkLzEvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2ItNWNhNWJmNjdlNjlk LzEvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvoNNoLzp MxgajjhD0CFJSaLF87CegYAinqys+m0UzyZccTyf7PkZoC2jllre7ed4lgTn8GPC yu+IVEZOXKy+rvAJLtlHM941GFydVgGxys+etl6Tgs4Kv4p9vq2iWOfhGKVGSDeq IEXjEd/F7ksfBn3Mzj4szPUNNP3R3dDOoAQ8fTFdEyKSlgwFGz3BblrnBSB2mhup A0IeJvMiIoHZ7QX2ii8LJX2r2y8zmkwrFUpERNl7Qcjdliuuuxjevzo7W2prMulc IQfJb/XiALXIOHub2c+QQ3EJA+OjDYgWwA51iUY8E+/5uk/zh1A2e/bINMlxQ8KT JBAD5kfi7TZj4g== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:31 2026 by rpki-client