This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft File: rOzREmnuoGcmJ3zjYatRzkIEnjY.mft (raw, json) Hash identifier: muv+IYeq/2uX/I4fngjnVl8LXTr5mAv8S/iZTr7nAkw= Subject key identifier: 95:B4:5E:94:56:AC:CD:9C:2A:D9:FE:AF:C8:98:8D:C4:4C:27:C1:13 Authority key identifier: AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36 Certificate issuer: /CN=acecd11269eea06726277ce361ab51ce42049e36 Certificate serial: 019BF53E1A1BFAE5B2E8C80CD2462F42C419 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft Manifest number: 0154 Signing time: Sun 25 Jan 2026 13:00:46 +0000 Manifest this update: Sun 25 Jan 2026 13:00:46 +0000 Manifest next update: Mon 26 Jan 2026 13:00:46 +0000 Files and hashes: 1: 1oXMdBZ5QwBEktq29jlZeTysc3c.roa (hash: WrwjvmGXn9QS/QC9EfjjK7O+1t52HaSP06M7BN2wY4Q=) 2: BsHhOGPLqv_b-i7lbkWetPhmogc.roa (hash: 6b/HByXr0kCEfte6/E55VHhk+GpSly1EQ1fovYfyDC0=) 3: LQ4p4FWR2wiOfJ7GYUxYWopRPko.roa (hash: QCy7JHnHp3e55OkboH/41OR5K91quYIv15ltvpwox8U=) 4: qZ6mNAnH1X0WEvWvCW48xFHIAzM.roa (hash: bRXqasdQMNLOjthWLYT2MOp9X0uzuSjiftrzVa+XjXU=) 5: rOzREmnuoGcmJ3zjYatRzkIEnjY.crl (hash: vTBll2U86JWzkV2LE6M7uJtGfOfeQl84cQyw00Cn6nc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:1a:1b:fa:e5:b2:e8:c8:0c:d2:46:2f:42:c4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acecd11269eea06726277ce361ab51ce42049e36 Validity Not Before: Jan 25 13:00:46 2026 GMT Not After : Jan 26 13:00:46 2026 GMT Subject: CN=95b45e9456accd9c2ad9feafc8988dc44c27c113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ec:ad:32:0d:7f:74:cc:9e:c2:79:86:47:76: de:b7:25:b8:42:24:4d:6e:ed:fc:59:31:02:b8:b5: 07:c7:29:bd:8d:82:5c:97:b4:ba:ae:d1:8f:18:a0: 03:bd:22:b6:d7:22:de:1d:46:b6:ce:41:08:5e:06: 52:b4:28:10:22:8b:35:4f:ec:52:5a:cf:49:06:ef: ca:87:bb:44:31:b0:c7:ba:14:6e:b4:57:96:49:31: ae:dd:6b:e0:8d:43:f7:1d:4f:96:c8:22:a0:de:30: 66:2a:43:81:3f:4c:e6:9f:23:27:23:97:e4:6c:fd: d8:b2:dc:26:bc:4c:b1:c8:f7:04:de:55:fc:b4:95: 4e:91:1d:7c:d5:d1:3b:56:b3:d1:19:39:1c:92:cb: 1f:0e:45:68:05:f8:ba:40:e9:57:40:d0:32:cb:ee: 2e:95:33:9a:11:01:e7:07:fc:68:ad:dc:b5:94:7c: e5:3a:f3:33:40:ca:5a:d6:23:54:bc:36:eb:c7:a8: 96:0e:1a:ee:03:9c:de:7d:4c:a4:bf:3d:20:02:cb: 17:44:37:6c:08:ee:2e:ef:d4:bb:53:1b:2e:a3:89: e3:3a:8d:76:bd:1c:92:06:a1:1f:df:98:f5:16:08: ac:10:4f:5c:46:d5:d8:10:12:8d:ad:0a:2b:1e:69: 4d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B4:5E:94:56:AC:CD:9C:2A:D9:FE:AF:C8:98:8D:C4:4C:27:C1:13 X509v3 Authority Key Identifier: keyid:AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fc:05:be:bb:8d:a1:c8:d2:5d:c8:51:c7:bb:a4:d7:3f:29: 00:20:c2:ce:c3:da:5e:6c:5c:bc:4f:e4:33:06:a8:44:45:43: f0:95:a2:a1:e2:a7:84:6d:f7:4c:09:fa:fd:0f:11:de:c9:fc: f9:b7:bf:6d:1b:5b:f4:bf:b5:5a:cc:02:79:20:5b:65:9c:69: 18:ea:93:21:27:cd:fc:16:87:e5:8a:ad:fe:37:da:db:6e:8e: 30:04:3d:fe:98:04:a0:1a:1d:f4:98:f3:f6:5e:cf:bc:91:2d: 35:b0:78:74:5f:35:6a:ec:f0:a8:d7:a4:8e:fa:e5:92:ed:32: 58:39:59:0c:74:b4:4a:bb:f9:ef:a7:8d:22:4c:41:8c:7a:1f: 5a:38:c9:1c:a3:06:40:30:95:20:6f:53:b9:10:01:62:93:7c: 11:89:a3:65:bd:17:99:70:4c:07:c4:d4:f5:1d:19:a4:99:58: ea:b0:06:2e:25:9e:a7:f2:5c:f6:36:e1:93:e0:3d:50:eb:af: 50:69:bf:45:cd:d0:27:6c:af:0c:08:3f:40:71:51:3e:57:b9: f6:12:43:f2:4e:9b:9b:15:08:b2:4b:19:da:32:b4:b9:d0:9b: 93:91:43:dd:63:db:27:28:47:9b:d3:fa:72:af:7d:0b:08:94: 5b:dd:ad:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Phob+uWy6MgM0kYvQsQZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZWNkMTEyNjllZWEwNjcyNjI3N2NlMzYxYWI1MWNlNDIw NDllMzYwHhcNMjYwMTI1MTMwMDQ2WhcNMjYwMTI2MTMwMDQ2WjAzMTEwLwYDVQQD Eyg5NWI0NWU5NDU2YWNjZDljMmFkOWZlYWZjODk4OGRjNDRjMjdjMTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneytMg1/dMyewnmGR3betyW4QiRN bu38WTECuLUHxym9jYJcl7S6rtGPGKADvSK21yLeHUa2zkEIXgZStCgQIos1T+xS Ws9JBu/Kh7tEMbDHuhRutFeWSTGu3WvgjUP3HU+WyCKg3jBmKkOBP0zmnyMnI5fk bP3YstwmvEyxyPcE3lX8tJVOkR181dE7VrPRGTkckssfDkVoBfi6QOlXQNAyy+4u lTOaEQHnB/xordy1lHzlOvMzQMpa1iNUvDbrx6iWDhruA5zefUykvz0gAssXRDds CO4u79S7Uxsuo4njOo12vRySBqEf35j1FgisEE9cRtXYEBKNrQorHmlNUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJW0XpRWrM2cKtn+r8iYjcRMJ8ETMB8GA1UdIwQY MBaAFKzs0RJp7qBnJid842GrUc5CBJ42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUt NDA0N2UwZmJlOWNiLzEvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUtNDA0N2UwZmJlOWNi LzEvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/wFvruN ocjSXchRx7uk1z8pACDCzsPaXmxcvE/kMwaoREVD8JWioeKnhG33TAn6/Q8R3sn8 +be/bRtb9L+1WswCeSBbZZxpGOqTISfN/BaH5Yqt/jfa226OMAQ9/pgEoBod9Jjz 9l7PvJEtNbB4dF81auzwqNekjvrlku0yWDlZDHS0Srv576eNIkxBjHofWjjJHKMG QDCVIG9TuRABYpN8EYmjZb0XmXBMB8TU9R0ZpJlY6rAGLiWep/Jc9jbhk+A9UOuv UGm/Rc3QJ2yvDAg/QHFRPle59hJD8k6bmxUIsksZ2jK0udCbk5FD3WPbJyhHm9P6 cq99CwiUW92t4A== -----END CERTIFICATE-----Generated at Sun Jan 25 17:56:46 2026 by rpki-client