This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft File: RZO5rApIawA3dl1gXIscgQQEbwo.mft (raw, json) Hash identifier: pjTthqHPth48Cy4k4VT0bPQiLlkC594YdY+C8q45ifo= Subject key identifier: D2:A2:ED:DA:75:56:40:F0:E9:6D:94:51:8D:D1:6C:7F:96:53:1E:86 Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a Certificate serial: 019BF53DE0D90D0635051DAC2164F7A24F63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft Manifest number: 01CA Signing time: Sun 25 Jan 2026 13:00:31 +0000 Manifest this update: Sun 25 Jan 2026 13:00:31 +0000 Manifest next update: Mon 26 Jan 2026 13:00:31 +0000 Files and hashes: 1: 0GGyirColDCbufJKo9AkegU8ypY.roa (hash: 7QPLCEclN6a9EBsfMNfOKHLR6P6jqQdzgzwlX2uR1Mk=) 2: MiiR7VB3wjpz1-IYU3ksc-cRZtc.roa (hash: czs+Ay4tcJGJ7KwqRCeDmXFn2JgmJD3EKq749KWblW4=) 3: RZO5rApIawA3dl1gXIscgQQEbwo.crl (hash: 4PP8c2ao/Lg1zH8p30Fwq7nzLxjAYuw05FcUImD5ZcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3d:e0:d9:0d:06:35:05:1d:ac:21:64:f7:a2:4f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a Validity Not Before: Jan 25 13:00:31 2026 GMT Not After : Jan 26 13:00:31 2026 GMT Subject: CN=d2a2edda755640f0e96d94518dd16c7f96531e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c1:8a:88:66:b9:d5:ad:9b:f3:da:00:60:ed: 72:41:87:87:83:ab:40:7f:a7:94:09:85:cd:3a:c2: 13:11:7c:32:dd:9d:14:3f:a3:7c:2c:87:1c:ca:e1: ba:2d:3d:8c:12:46:27:69:3e:96:fc:cd:43:f7:bb: 97:b9:05:31:28:a1:0b:9a:b3:a3:be:41:d7:2b:44: 5b:66:ed:f2:5a:f3:af:8f:e2:c1:10:e6:93:a3:a8: 89:0d:0e:5f:11:b4:2b:ad:a4:12:c7:9f:17:79:ff: c3:41:26:ca:ab:0c:34:d7:6f:8c:e0:85:1e:cf:36: ae:9e:cd:5e:8e:87:dc:66:67:70:ba:ba:09:08:39: 29:e1:4c:94:3e:97:84:94:90:03:79:c6:f5:d6:a8: e9:c4:1e:f3:f2:29:d4:97:9a:ca:c5:ab:1c:e9:64: 5c:0d:40:a0:e8:e4:6c:51:40:af:a0:bd:86:6f:9f: 92:a7:47:58:4c:d1:e8:27:5a:ce:c1:3d:f9:c6:56: 52:3a:e1:d2:e5:0d:6c:7d:7c:06:a3:6d:a1:8a:df: e2:56:7d:d2:62:1b:a5:9c:34:45:ac:de:0c:24:10: d8:9e:a4:39:92:a6:1f:19:1b:c1:b7:65:4f:f0:78: ad:15:b6:33:ea:79:81:2b:ed:86:c1:ce:82:8f:f0: 80:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A2:ED:DA:75:56:40:F0:E9:6D:94:51:8D:D1:6C:7F:96:53:1E:86 X509v3 Authority Key Identifier: keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6d:4d:66:f5:0e:95:49:8f:ee:3d:83:a2:5b:c4:43:56:83: 1e:c6:08:ba:c8:fe:18:58:a3:62:37:a1:f7:7d:a0:ae:4e:6d: 20:fc:a6:25:7c:6e:b9:cb:69:0c:1a:03:c4:24:0e:5a:ac:5d: 9c:0a:9d:53:aa:a2:d1:86:6f:06:79:84:a0:b4:fa:c4:05:a9: c9:d2:f2:c7:aa:42:d2:b1:5b:39:4c:f4:aa:ec:37:9f:f8:4f: 23:50:8b:40:a0:62:c4:60:02:a7:1b:f2:7c:57:8c:7b:f0:59: 3d:3f:1d:a9:a0:c2:4b:64:a3:f6:ae:3c:bd:01:de:e3:0b:35: 2d:6d:be:ab:8b:96:63:58:e3:36:e9:f8:04:b0:40:09:22:4a: f2:1c:8f:2e:26:aa:66:48:b6:25:83:1b:45:e4:91:a7:b7:2c: c2:32:8f:a7:33:0d:4c:0f:43:f2:f3:37:82:ce:cb:79:65:ef: 77:dc:3c:13:40:be:c8:5a:50:b8:f3:35:aa:44:c7:33:11:e0: 2c:6d:7c:ec:06:a9:c4:34:09:e7:b7:b0:04:5e:46:ad:24:c8: 0a:b9:c3:e6:fb:aa:46:cd:9e:75:c2:95:a5:c8:a5:85:c3:fd: 32:b0:b4:67:55:c6:48:b8:01:d0:59:2a:63:de:a5:28:b7:38: 32:a4:b1:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PeDZDQY1BR2sIWT3ok9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OTNiOWFjMGE0ODZiMDAzNzc2NWQ2MDVjOGIxYzgxMDQw NDZmMGEwHhcNMjYwMTI1MTMwMDMxWhcNMjYwMTI2MTMwMDMxWjAzMTEwLwYDVQQD EyhkMmEyZWRkYTc1NTY0MGYwZTk2ZDk0NTE4ZGQxNmM3Zjk2NTMxZTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8GKiGa51a2b89oAYO1yQYeHg6tA f6eUCYXNOsITEXwy3Z0UP6N8LIccyuG6LT2MEkYnaT6W/M1D97uXuQUxKKELmrOj vkHXK0RbZu3yWvOvj+LBEOaTo6iJDQ5fEbQrraQSx58Xef/DQSbKqww012+M4IUe zzauns1ejofcZmdwuroJCDkp4UyUPpeElJADecb11qjpxB7z8inUl5rKxasc6WRc DUCg6ORsUUCvoL2Gb5+Sp0dYTNHoJ1rOwT35xlZSOuHS5Q1sfXwGo22hit/iVn3S YhulnDRFrN4MJBDYnqQ5kqYfGRvBt2VP8HitFbYz6nmBK+2Gwc6Cj/CAiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKi7dp1VkDw6W2UUY3RbH+WUx6GMB8GA1UdIwQY MBaAFEWTuawKSGsAN3ZdYFyLHIEEBG8KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpPNXJBcElhd0EzZGwxZ1hJc2NnUVFFYndvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wNWIwZDItMTZiYS00ZDcxLWEyMTgt NDNlNmJmZjlhMjVlLzEvUlpPNXJBcElhd0EzZGwxZ1hJc2NnUVFFYndvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8wNWIwZDItMTZiYS00ZDcxLWEyMTgtNDNlNmJmZjlhMjVl LzEvUlpPNXJBcElhd0EzZGwxZ1hJc2NnUVFFYndvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGm1NZvUO lUmP7j2DolvEQ1aDHsYIusj+GFijYjeh932grk5tIPymJXxuuctpDBoDxCQOWqxd nAqdU6qi0YZvBnmEoLT6xAWpydLyx6pC0rFbOUz0quw3n/hPI1CLQKBixGACpxvy fFeMe/BZPT8dqaDCS2Sj9q48vQHe4ws1LW2+q4uWY1jjNun4BLBACSJK8hyPLiaq Zki2JYMbReSRp7cswjKPpzMNTA9D8vM3gs7LeWXvd9w8E0C+yFpQuPM1qkTHMxHg LG187AapxDQJ57ewBF5GrSTICrnD5vuqRs2edcKVpcilhcP9MrC0Z1XGSLgB0Fkq Y96lKLc4MqSxzQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:52 2026 by rpki-client