This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json) Hash identifier: mtXUs+WzZ0CuKY/ZLxyjIq/vltxZYk4WCnHQrXazlm0= Subject key identifier: 34:08:EA:1D:37:0E:BD:A9:89:C9:12:0C:E9:D2:3B:A3:3A:0B:90:8F Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5 Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5 Certificate serial: 019BF79A798947D8A376B4AC069C040DBBDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 00:00:54 +0000 Manifest this update: Mon 26 Jan 2026 00:00:54 +0000 Manifest next update: Tue 27 Jan 2026 00:00:54 +0000 Files and hashes: 1: 1HXGb5-BWji6FxKqR9J69GxxjeY.roa (hash: +4VLoXs2I/t3CPnVmm9jbZnZFGbEot/glqmRqD+Blr8=) 2: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: fF3VQ1m6Y0UNQOBqMzOSkhVBLuDy6iUEtqKUrujdaaQ=) 3: WQdZNfyoXAF_mZl28cfENCrtIMs.roa (hash: U3LDO+4WO64Jt5h3Mz2CbjqUHfSHcu4yyw0WNvXOY9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:79:89:47:d8:a3:76:b4:ac:06:9c:04:0d:bb:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5 Validity Not Before: Jan 26 00:00:54 2026 GMT Not After : Jan 27 00:00:54 2026 GMT Subject: CN=3408ea1d370ebda989c9120ce9d23ba33a0b908f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:22:10:08:a1:1e:01:f8:40:0b:1a:95:ac:5a: 52:ad:80:2a:11:5f:21:f4:b9:ea:e0:da:42:0d:28: 88:7f:bf:12:d1:68:cc:e4:a0:eb:d8:1f:56:cb:0d: 02:f8:d2:17:1e:22:9f:a2:b5:cb:52:f1:d5:bd:6a: 77:0e:e4:d9:a2:c9:1c:b7:97:90:ae:d8:2f:9b:a7: 21:ce:25:d9:7f:94:a6:99:b6:af:cf:8c:3b:7d:cb: e0:ef:2d:ad:49:47:f8:0e:e5:1b:c1:ef:25:ee:44: e5:ad:59:83:a7:58:28:2a:22:ca:a7:9e:3b:bf:5c: 03:35:d8:45:95:5f:e4:cc:71:1b:ca:86:8e:88:46: 27:55:9a:f9:f6:61:dc:fb:54:d4:f5:ad:5f:bc:32: 9e:85:19:be:0d:e6:e9:52:73:37:c3:4e:fe:ee:c0: 0d:1d:4b:f9:12:0c:a5:48:91:71:20:6b:95:4f:29: eb:29:6d:e1:57:96:59:d5:71:1e:f2:cf:38:10:90: b3:47:ef:7d:1a:24:03:88:39:5d:74:51:b9:de:64: 02:6e:97:e9:18:32:52:d4:0f:af:07:16:ac:35:7b: 8f:67:67:4b:a1:fd:5e:85:0e:98:28:67:b8:93:db: 2b:83:95:7b:38:82:17:36:21:6f:ae:72:1d:67:89: 54:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:08:EA:1D:37:0E:BD:A9:89:C9:12:0C:E9:D2:3B:A3:3A:0B:90:8F X509v3 Authority Key Identifier: keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7b:ca:ef:e9:0e:1d:c4:ae:64:d0:e0:ba:e8:e6:1e:6b:7e: 02:f3:a6:b9:bd:25:52:f6:7a:57:bd:db:ba:ac:90:21:6e:aa: 5e:e4:94:da:d6:96:5d:62:aa:5c:e1:0e:c5:fd:2b:8b:4e:46: e1:59:cc:ef:d5:fb:de:cf:fe:c1:2d:bb:63:fb:4d:e6:a9:ce: 6f:30:31:15:70:88:97:07:a7:9f:09:79:58:26:0c:9e:6c:74: ec:d7:70:ef:e0:f8:99:3c:71:7b:fe:9f:86:b9:0c:b5:3a:36: 10:df:7c:77:e8:63:4b:82:5b:42:a3:de:12:8d:5b:57:a0:8e: e7:c5:8b:3d:c1:49:b5:c7:63:5c:32:4a:4c:b6:3e:c8:b3:82: 5b:96:0e:09:93:fc:08:d6:c1:fd:5f:a1:fe:7d:3f:a6:0c:23: 14:8f:46:b6:62:e4:7b:2e:69:e4:ab:9e:a8:f1:7d:db:cc:e9: 51:36:41:a3:4b:13:2b:ad:4b:ab:2c:d9:97:92:4d:74:20:ef: 67:62:3b:ac:d6:09:21:31:82:f7:20:96:17:56:13:99:cb:f9: ec:54:a7:10:2d:50:b8:bb:37:d3:e7:26:89:92:f5:f4:2a:f9: 61:e8:da:1e:79:fd:e2:6a:34:d5:29:ad:39:93:61:ce:88:e7: bd:4a:21:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mnmJR9ijdrSsBpwEDbvaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OWIyZmQwMDUzYmRkN2U3Nzc1Mzk4ZGIxNjNiZWU4Nzcy NDc4YTUwHhcNMjYwMTI2MDAwMDU0WhcNMjYwMTI3MDAwMDU0WjAzMTEwLwYDVQQD EygzNDA4ZWExZDM3MGViZGE5ODljOTEyMGNlOWQyM2JhMzNhMGI5MDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSIQCKEeAfhACxqVrFpSrYAqEV8h 9Lnq4NpCDSiIf78S0WjM5KDr2B9Wyw0C+NIXHiKforXLUvHVvWp3DuTZoskct5eQ rtgvm6chziXZf5Smmbavz4w7fcvg7y2tSUf4DuUbwe8l7kTlrVmDp1goKiLKp547 v1wDNdhFlV/kzHEbyoaOiEYnVZr59mHc+1TU9a1fvDKehRm+DebpUnM3w07+7sAN HUv5EgylSJFxIGuVTynrKW3hV5ZZ1XEe8s84EJCzR+99GiQDiDlddFG53mQCbpfp GDJS1A+vBxasNXuPZ2dLof1ehQ6YKGe4k9srg5V7OIIXNiFvrnIdZ4lUcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQI6h03Dr2pickSDOnSO6M6C5CPMB8GA1UdIwQY MBaAFEWbL9AFO91+d3U5jbFjvuh3JHilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZGRkNTgtNjAzNy00OTRiLTk5MmYt YWI4ZTk3ZDg1NWNjLzEvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8yZGRkNTgtNjAzNy00OTRiLTk5MmYtYWI4ZTk3ZDg1NWNj LzEvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnvK7+kO HcSuZNDguujmHmt+AvOmub0lUvZ6V73buqyQIW6qXuSU2taWXWKqXOEOxf0ri05G 4VnM79X73s/+wS27Y/tN5qnObzAxFXCIlwennwl5WCYMnmx07Ndw7+D4mTxxe/6f hrkMtTo2EN98d+hjS4JbQqPeEo1bV6CO58WLPcFJtcdjXDJKTLY+yLOCW5YOCZP8 CNbB/V+h/n0/pgwjFI9GtmLkey5p5KueqPF928zpUTZBo0sTK61LqyzZl5JNdCDv Z2I7rNYJITGC9yCWF1YTmcv57FSnEC1QuLs30+cmiZL19Cr5YejaHnn94mo01Smt OZNhzojnvUohAg== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:59 2026 by rpki-client