This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft File: rOzREmnuoGcmJ3zjYatRzkIEnjY.mft (raw, json) Hash identifier: hiaXdCu6RpNYPwKHwmFfcinmnTiFXQB0EqSSi83Ih2g= Subject key identifier: 9D:B7:16:17:8B:66:3E:6B:6D:4B:5D:7B:F8:50:F6:B5:D9:5A:92:29 Authority key identifier: AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36 Certificate issuer: /CN=acecd11269eea06726277ce361ab51ce42049e36 Certificate serial: 019BF72CBE555F8A8184BA90723DCC0B7597 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft Manifest number: 0155 Signing time: Sun 25 Jan 2026 22:01:03 +0000 Manifest this update: Sun 25 Jan 2026 22:01:03 +0000 Manifest next update: Mon 26 Jan 2026 22:01:03 +0000 Files and hashes: 1: 1oXMdBZ5QwBEktq29jlZeTysc3c.roa (hash: WrwjvmGXn9QS/QC9EfjjK7O+1t52HaSP06M7BN2wY4Q=) 2: BsHhOGPLqv_b-i7lbkWetPhmogc.roa (hash: 6b/HByXr0kCEfte6/E55VHhk+GpSly1EQ1fovYfyDC0=) 3: LQ4p4FWR2wiOfJ7GYUxYWopRPko.roa (hash: QCy7JHnHp3e55OkboH/41OR5K91quYIv15ltvpwox8U=) 4: qZ6mNAnH1X0WEvWvCW48xFHIAzM.roa (hash: bRXqasdQMNLOjthWLYT2MOp9X0uzuSjiftrzVa+XjXU=) 5: rOzREmnuoGcmJ3zjYatRzkIEnjY.crl (hash: Ef8akpsFSohmgpWMvthpSX2RXspjfAm13DPwEhWvDDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:be:55:5f:8a:81:84:ba:90:72:3d:cc:0b:75:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acecd11269eea06726277ce361ab51ce42049e36 Validity Not Before: Jan 25 22:01:03 2026 GMT Not After : Jan 26 22:01:03 2026 GMT Subject: CN=9db716178b663e6b6d4b5d7bf850f6b5d95a9229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1f:dc:17:fa:b3:29:6e:78:03:f8:32:c9:1e: db:6d:48:2e:0f:76:27:26:83:0c:b7:ef:61:d3:79: 0b:a8:b6:ab:67:e8:e7:f7:f8:1e:79:7a:c1:53:4b: 42:50:90:b4:d8:fb:42:79:f0:f1:8a:2e:32:7b:48: c1:3f:39:34:b8:bd:f3:a1:07:c8:c6:df:a3:bf:a1: 05:39:9b:dd:c1:e0:1b:0e:2c:bf:0d:dd:14:d4:4d: 88:ff:a7:01:cf:24:e7:f5:ab:88:45:3d:7a:86:1e: bf:3c:72:f4:bb:c0:f0:e0:e4:8d:c8:09:aa:3b:48: b3:b1:f9:c1:e1:b8:2f:78:46:fa:27:e8:0d:d2:f4: 95:38:30:0f:0e:58:b9:02:cd:89:92:24:e3:90:00: 3f:05:13:f5:76:5b:10:fe:85:fe:6e:89:ea:aa:7e: 28:f6:61:67:b0:da:9c:58:7f:16:be:85:0a:84:ef: 8b:e5:47:ff:f4:ba:2b:16:32:b9:95:1e:a0:21:dc: 9a:e8:69:bf:8f:ea:a0:29:df:2b:36:12:5e:27:db: 6c:85:60:a4:c3:35:91:3d:ac:93:d5:55:d0:c3:c5: 3c:46:d4:64:fd:3c:c3:ee:f6:c9:39:0e:2d:45:b3: 25:11:ac:75:86:4e:70:e1:47:31:45:41:97:a2:fe: 34:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B7:16:17:8B:66:3E:6B:6D:4B:5D:7B:F8:50:F6:B5:D9:5A:92:29 X509v3 Authority Key Identifier: keyid:AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:47:51:22:56:77:0b:0a:c1:5e:d5:1b:73:5d:d1:18:10:ca: df:a8:13:ed:8b:6d:57:ab:88:e0:57:56:8f:e5:c5:87:94:9c: cf:c4:ab:fb:61:83:b4:d1:c5:db:c0:41:cd:ed:be:29:cb:b3: b4:46:1a:1c:76:42:bc:b8:be:00:1c:71:85:5c:80:ae:ed:41: 1e:ee:7e:dc:37:d8:f8:1d:2a:b7:04:a4:3a:5b:d5:bd:a6:c6: 79:6b:d0:03:fe:5f:74:82:60:1f:02:0f:15:c2:71:a4:40:2c: fe:e5:72:77:5b:77:5f:fd:08:51:ea:3e:76:92:78:68:51:3a: 06:12:4c:5c:16:5e:fb:71:c8:8d:d1:9b:08:9b:96:df:89:a2: b3:03:c8:28:28:f1:36:fb:7a:0e:cb:ab:58:4f:86:ff:52:1b: b3:7a:64:e7:5b:b9:e2:15:29:89:aa:26:2d:75:ad:94:c0:e5: 6b:49:1c:6b:2c:fa:10:4a:f8:8c:37:48:24:5d:57:6c:55:7d: 45:83:bc:87:c0:19:32:d7:3b:f6:e7:01:85:29:45:f9:c7:88: 71:ce:14:fe:65:d7:58:2f:54:8b:7e:7a:76:66:f1:4b:77:d6: 68:08:23:88:e9:a3:8e:21:91:bf:92:fa:f5:65:c6:a3:8a:83: 1d:db:2b:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LL5VX4qBhLqQcj3MC3WXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZWNkMTEyNjllZWEwNjcyNjI3N2NlMzYxYWI1MWNlNDIw NDllMzYwHhcNMjYwMTI1MjIwMTAzWhcNMjYwMTI2MjIwMTAzWjAzMTEwLwYDVQQD Eyg5ZGI3MTYxNzhiNjYzZTZiNmQ0YjVkN2JmODUwZjZiNWQ5NWE5MjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx/cF/qzKW54A/gyyR7bbUguD3Yn JoMMt+9h03kLqLarZ+jn9/geeXrBU0tCUJC02PtCefDxii4ye0jBPzk0uL3zoQfI xt+jv6EFOZvdweAbDiy/Dd0U1E2I/6cBzyTn9auIRT16hh6/PHL0u8Dw4OSNyAmq O0izsfnB4bgveEb6J+gN0vSVODAPDli5As2JkiTjkAA/BRP1dlsQ/oX+bonqqn4o 9mFnsNqcWH8WvoUKhO+L5Uf/9LorFjK5lR6gIdya6Gm/j+qgKd8rNhJeJ9tshWCk wzWRPayT1VXQw8U8RtRk/TzD7vbJOQ4tRbMlEax1hk5w4UcxRUGXov40VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ23FheLZj5rbUtde/hQ9rXZWpIpMB8GA1UdIwQY MBaAFKzs0RJp7qBnJid842GrUc5CBJ42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUt NDA0N2UwZmJlOWNiLzEvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUtNDA0N2UwZmJlOWNi LzEvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUdRIlZ3 CwrBXtUbc13RGBDK36gT7YttV6uI4FdWj+XFh5Scz8Sr+2GDtNHF28BBze2+Kcuz tEYaHHZCvLi+ABxxhVyAru1BHu5+3DfY+B0qtwSkOlvVvabGeWvQA/5fdIJgHwIP FcJxpEAs/uVyd1t3X/0IUeo+dpJ4aFE6BhJMXBZe+3HIjdGbCJuW34miswPIKCjx Nvt6DsurWE+G/1Ibs3pk51u54hUpiaomLXWtlMDla0kcayz6EEr4jDdIJF1XbFV9 RYO8h8AZMtc79ucBhSlF+ceIcc4U/mXXWC9Ui356dmbxS3fWaAgjiOmjjiGRv5L6 9WXGo4qDHdsrqw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:42:31 2026 by rpki-client