This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft File: mRLZRawqSfO02iIhwnuCmq_MsvI.mft (raw, json) Hash identifier: niLOEL4wp4uynjjPUuQwXr4SRD3jVHTDMaKzSb59o+4= Subject key identifier: F9:8C:96:BE:C8:CE:6D:6E:3F:AE:1D:FA:1F:2F:08:A9:23:99:8C:06 Authority key identifier: 99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2 Certificate issuer: /CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2 Certificate serial: 019BF79A736A362F9A5F4687D5ED0693A016 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft Manifest number: 1605 Signing time: Mon 26 Jan 2026 00:00:52 +0000 Manifest this update: Mon 26 Jan 2026 00:00:52 +0000 Manifest next update: Tue 27 Jan 2026 00:00:52 +0000 Files and hashes: 1: K3IkaDvOsxRDnW5ivwAMwt2TUdw.roa (hash: 4pub90rA78k1OuNqh4u/EQwhdsIyW78nZyVBnumMV8E=) 2: mRLZRawqSfO02iIhwnuCmq_MsvI.crl (hash: RDXG8H1Lx0+JvHYpdv4xVTFx3vIydO/Ucilcy5QpsO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:73:6a:36:2f:9a:5f:46:87:d5:ed:06:93:a0:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2 Validity Not Before: Jan 26 00:00:52 2026 GMT Not After : Jan 27 00:00:52 2026 GMT Subject: CN=f98c96bec8ce6d6e3fae1dfa1f2f08a923998c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:61:ea:96:71:26:fb:ae:c0:d5:ec:a5:3f:c9: 13:cf:ae:41:0b:71:16:ca:58:e1:a2:1c:40:36:a9: 31:e2:8f:ce:97:ed:63:e2:0a:0e:81:54:7b:f1:f7: 47:25:48:0c:75:b8:22:d9:38:58:12:e4:ea:5e:55: d4:c9:b1:6d:3e:c4:f5:1e:39:81:f0:33:8d:5a:d2: 94:d3:79:10:79:f4:1e:e1:10:89:47:28:f4:45:d0: 7e:8e:a3:b6:0f:7e:7b:21:23:38:e1:f2:c2:ed:d5: c6:eb:d9:2f:ab:ef:46:50:33:11:b2:2f:3c:41:d4: 82:e9:5e:31:5f:e3:14:0f:f2:70:08:28:b3:5c:3d: f7:f5:58:b6:d4:a1:a1:86:e0:bb:8c:c8:d5:ee:c9: ff:52:6c:87:f9:a9:3f:e3:eb:6d:c2:ec:56:53:63: 8b:df:75:bc:a6:b2:56:f7:d6:21:7c:8a:33:1c:71: 1b:f8:6d:1c:83:fb:8d:4c:ba:c6:7c:53:0f:5c:99: cb:d6:50:84:52:38:0a:be:48:27:15:1a:26:e0:09: b0:e8:73:39:5a:55:48:9b:75:e5:7a:49:36:ca:d3: 01:60:1a:e9:77:03:f3:07:30:00:30:71:79:03:8c: a8:1b:bf:94:82:c4:d2:9a:05:5c:02:bc:7f:c9:38: 67:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8C:96:BE:C8:CE:6D:6E:3F:AE:1D:FA:1F:2F:08:A9:23:99:8C:06 X509v3 Authority Key Identifier: keyid:99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:68:5f:3f:a5:d3:26:82:c9:7c:03:78:75:28:af:c3:0a:34: 54:d8:3b:e6:f7:d4:81:9b:71:ea:eb:58:5d:ff:7c:13:b4:74: 84:ef:74:57:31:55:12:ff:23:84:bf:42:9e:03:3c:f2:34:23: 52:5b:b5:23:dd:1e:1d:3a:c0:60:82:25:d9:d6:d5:02:15:9a: f0:b3:61:1a:02:a8:c0:02:fa:12:4c:34:96:ba:80:0a:7f:e4: 85:11:5b:ec:47:21:84:88:93:39:db:31:61:fb:e6:79:26:2c: c9:3c:f9:0e:d7:82:ff:0e:9e:84:f7:34:4c:a9:f5:6b:b3:ef: c6:2c:96:c0:c8:ed:02:fa:11:92:b0:72:5d:92:e9:09:43:e9: 13:3e:97:f2:50:37:cc:5e:49:50:3b:01:8d:82:c1:24:87:db: 35:b5:8a:96:51:ff:ac:e3:f0:91:22:9a:52:d6:61:77:35:a1: 67:a1:3f:0d:51:6d:02:ed:2a:be:39:ba:ed:98:5e:5a:b2:92: 8d:2e:0a:1f:a6:b8:3d:66:aa:d3:24:ca:75:ae:aa:f3:b3:b8: 27:df:ce:5c:9b:76:64:58:1c:30:37:52:92:f3:25:ff:48:68: a6:14:75:14:c8:37:b3:27:d1:5e:66:3d:84:54:68:36:50:01: 22:bf:ed:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mnNqNi+aX0aH1e0Gk6AWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MTJkOTQ1YWMyYTQ5ZjNiNGRhMjIyMWMyN2I4MjlhYWZj Y2IyZjIwHhcNMjYwMTI2MDAwMDUyWhcNMjYwMTI3MDAwMDUyWjAzMTEwLwYDVQQD EyhmOThjOTZiZWM4Y2U2ZDZlM2ZhZTFkZmExZjJmMDhhOTIzOTk4YzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmHqlnEm+67A1eylP8kTz65BC3EW yljhohxANqkx4o/Ol+1j4goOgVR78fdHJUgMdbgi2ThYEuTqXlXUybFtPsT1HjmB 8DONWtKU03kQefQe4RCJRyj0RdB+jqO2D357ISM44fLC7dXG69kvq+9GUDMRsi88 QdSC6V4xX+MUD/JwCCizXD339Vi21KGhhuC7jMjV7sn/UmyH+ak/4+ttwuxWU2OL 33W8prJW99YhfIozHHEb+G0cg/uNTLrGfFMPXJnL1lCEUjgKvkgnFRom4Amw6HM5 WlVIm3Xlekk2ytMBYBrpdwPzBzAAMHF5A4yoG7+UgsTSmgVcArx/yThnJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmMlr7Izm1uP64d+h8vCKkjmYwGMB8GA1UdIwQY MBaAFJkS2UWsKknztNoiIcJ7gpqvzLLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVJMWlJhd3FTZk8wMmlJaHdudUNtcV9Nc3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83OWFiNzYtOWJmOS00N2NkLWI1NDQt NWVlMDlmZWFkNTYxLzEvbVJMWlJhd3FTZk8wMmlJaHdudUNtcV9Nc3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83OWFiNzYtOWJmOS00N2NkLWI1NDQtNWVlMDlmZWFkNTYx LzEvbVJMWlJhd3FTZk8wMmlJaHdudUNtcV9Nc3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2hfP6XT JoLJfAN4dSivwwo0VNg75vfUgZtx6utYXf98E7R0hO90VzFVEv8jhL9CngM88jQj Ulu1I90eHTrAYIIl2dbVAhWa8LNhGgKowAL6Ekw0lrqACn/khRFb7EchhIiTOdsx YfvmeSYsyTz5DteC/w6ehPc0TKn1a7PvxiyWwMjtAvoRkrByXZLpCUPpEz6X8lA3 zF5JUDsBjYLBJIfbNbWKllH/rOPwkSKaUtZhdzWhZ6E/DVFtAu0qvjm67ZheWrKS jS4KH6a4PWaq0yTKda6q87O4J9/OXJt2ZFgcMDdSkvMl/0hophR1FMg3syfRXmY9 hFRoNlABIr/txw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:21 2026 by rpki-client