This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft File: RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json) Hash identifier: NgUVwgIyNKT4VJVBZvvukBFTEA0BKHIkvC1B/KyVNUQ= Subject key identifier: 3D:C6:C3:99:84:85:87:F7:42:19:03:92:84:F4:A7:E4:7A:8B:0B:22 Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7 Certificate issuer: /CN=459ad2ece3e5911093d964753b656459c9bc05a7 Certificate serial: 019BF4D115235FEBC6D8FC3F36CE40C2FB74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft Manifest number: 106E Signing time: Sun 25 Jan 2026 11:01:41 +0000 Manifest this update: Sun 25 Jan 2026 11:01:41 +0000 Manifest next update: Mon 26 Jan 2026 11:01:41 +0000 Files and hashes: 1: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: j2rTwprdvNhyBHMRmzkST52ZxsPAPa3wQEk8sgK6NNg=) 2: oxM4weLdM3j7jrYJT8BJG0W0cJ4.roa (hash: JzjynEnEp0mde9J1/ZPR8Pa7VycJrBNUsALJMI999+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d1:15:23:5f:eb:c6:d8:fc:3f:36:ce:40:c2:fb:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7 Validity Not Before: Jan 25 11:01:41 2026 GMT Not After : Jan 26 11:01:41 2026 GMT Subject: CN=3dc6c399848587f74219039284f4a7e47a8b0b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b9:00:ea:98:87:4b:5b:c5:b0:2e:84:ca:20: cf:24:02:a5:c9:84:01:69:e7:15:08:dc:07:59:78: 26:54:47:92:44:04:40:93:e7:9a:91:0a:7e:96:e0: 75:25:ee:34:4f:ec:f7:44:73:ae:a9:14:d2:21:83: 77:f2:67:3b:e4:40:57:bd:96:37:ff:a9:0d:f1:e7: 17:57:e4:ce:2d:46:55:7b:a4:07:47:c8:56:0a:24: 7d:ae:8e:52:9c:11:76:ea:4d:5c:ba:30:1f:87:f0: cc:1b:f9:74:b4:8f:94:a1:2a:dc:1a:74:cc:88:19: 82:1b:ed:29:f8:f6:3b:6b:ae:26:ad:13:01:76:65: 9c:1c:bf:09:c3:0d:7d:12:ed:37:57:0d:0d:fe:f4: 34:fe:ee:09:f2:0d:eb:29:20:d8:88:52:e8:d3:46: 75:17:37:78:55:87:1f:ce:3a:21:7e:42:18:03:6f: 99:fb:4a:ee:21:38:2a:75:cb:71:f2:3f:4e:e1:ae: c3:7c:2f:63:ea:e9:ac:4e:1f:cd:1f:ae:70:9f:3e: 1a:90:1d:b4:c0:df:ee:4e:06:fb:15:7e:02:2a:ee: 67:b3:72:cb:ea:3d:2c:e8:24:dc:67:15:55:ad:ca: 51:89:cb:3f:38:ad:91:58:b0:77:72:22:10:66:e1: c9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C6:C3:99:84:85:87:F7:42:19:03:92:84:F4:A7:E4:7A:8B:0B:22 X509v3 Authority Key Identifier: keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:1a:1f:b4:93:1d:42:db:3e:34:26:c8:0b:aa:4f:41:a0:df: 4b:55:35:15:46:50:a0:ce:1a:be:b4:83:18:f8:ef:cd:f5:a2: ea:80:74:5c:c8:73:85:6e:b7:0d:9c:f0:a6:68:34:11:f0:7b: 14:65:9e:7e:52:2c:2e:6a:3f:ee:76:9d:1e:f5:6d:08:74:14: a9:5b:fa:fc:0f:a6:d6:16:eb:fd:f0:b8:e3:ef:fd:c7:37:db: 65:e6:25:c1:b2:fe:d0:34:d7:8e:33:12:32:f4:cb:8f:21:6b: 26:dd:ee:3a:57:a9:08:9d:56:b4:43:74:ad:88:43:93:fc:58: 6e:0b:3f:3f:81:d7:92:55:e3:05:94:71:2d:db:56:18:d5:34: a1:74:a7:01:a0:34:4f:26:c7:a4:64:38:6b:90:ac:f8:cd:0f: c5:54:10:db:5f:8f:e6:94:34:47:83:ea:94:eb:3e:49:15:25: 18:1e:96:fd:62:62:98:81:c7:ea:9f:ec:7c:04:e4:c8:ec:00: 7a:0f:e4:7e:9c:e4:72:75:9a:cf:6e:ec:51:de:81:02:a2:b2: f4:00:b4:e2:09:a2:9a:56:a3:4f:67:c4:9d:30:56:bc:75:ee: 4c:da:64:b6:da:5f:d5:76:ab:a6:2a:f9:30:64:e4:95:d5:8d: 6e:02:fc:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00RUjX+vG2Pw/Ns5Awvt0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OWFkMmVjZTNlNTkxMTA5M2Q5NjQ3NTNiNjU2NDU5Yzli YzA1YTcwHhcNMjYwMTI1MTEwMTQxWhcNMjYwMTI2MTEwMTQxWjAzMTEwLwYDVQQD EygzZGM2YzM5OTg0ODU4N2Y3NDIxOTAzOTI4NGY0YTdlNDdhOGIwYjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LkA6piHS1vFsC6EyiDPJAKlyYQB aecVCNwHWXgmVEeSRARAk+eakQp+luB1Je40T+z3RHOuqRTSIYN38mc75EBXvZY3 /6kN8ecXV+TOLUZVe6QHR8hWCiR9ro5SnBF26k1cujAfh/DMG/l0tI+UoSrcGnTM iBmCG+0p+PY7a64mrRMBdmWcHL8Jww19Eu03Vw0N/vQ0/u4J8g3rKSDYiFLo00Z1 Fzd4VYcfzjohfkIYA2+Z+0ruITgqdctx8j9O4a7DfC9j6umsTh/NH65wnz4akB20 wN/uTgb7FX4CKu5ns3LL6j0s6CTcZxVVrcpRics/OK2RWLB3ciIQZuHJmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3Gw5mEhYf3QhkDkoT0p+R6iwsiMB8GA1UdIwQY MBaAFEWa0uzj5ZEQk9lkdTtlZFnJvAWnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYt MmQzNGRjNmU1NjU2LzEvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYtMmQzNGRjNmU1NjU2 LzEvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBoftJMd Qts+NCbIC6pPQaDfS1U1FUZQoM4avrSDGPjvzfWi6oB0XMhzhW63DZzwpmg0EfB7 FGWeflIsLmo/7nadHvVtCHQUqVv6/A+m1hbr/fC44+/9xzfbZeYlwbL+0DTXjjMS MvTLjyFrJt3uOlepCJ1WtEN0rYhDk/xYbgs/P4HXklXjBZRxLdtWGNU0oXSnAaA0 TybHpGQ4a5Cs+M0PxVQQ21+P5pQ0R4PqlOs+SRUlGB6W/WJimIHH6p/sfATkyOwA eg/kfpzkcnWaz27sUd6BAqKy9AC04gmimlajT2fEnTBWvHXuTNpkttpf1Xarpir5 MGTkldWNbgL8gQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:42:15 2026 by rpki-client