This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft File: rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft (raw, json) Hash identifier: Ina92eL4FpM3eh/g5z9hkCLoAf0wzCUEmY9+zOBgLNM= Subject key identifier: 2D:CD:D6:7C:1D:C9:0F:30:3A:2B:AB:40:64:F4:7C:88:A6:2B:83:3D Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C Certificate issuer: /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c Certificate serial: 019BF83FB24F2FF734CF4A2798190AE0B560 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft Manifest number: 040C Signing time: Mon 26 Jan 2026 03:01:22 +0000 Manifest this update: Mon 26 Jan 2026 03:01:22 +0000 Manifest next update: Tue 27 Jan 2026 03:01:22 +0000 Files and hashes: 1: D1uepCAmRlFVjKTUqfMxFmzOti0.roa (hash: pf7DS73sBkltlYtAHV2Wkt/8vgHhRENJ2syRZHBzVdQ=) 2: rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl (hash: aRhLKwHdeXT47t/Y/n2q6cZCK4brdXFiABy4XgxtgWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:b2:4f:2f:f7:34:cf:4a:27:98:19:0a:e0:b5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c Validity Not Before: Jan 26 03:01:22 2026 GMT Not After : Jan 27 03:01:22 2026 GMT Subject: CN=2dcdd67c1dc90f303a2bab4064f47c88a62b833d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f9:0e:03:b7:0b:8a:e9:e4:0a:91:3d:f9:0e: 89:19:c0:93:f3:6e:58:f9:7a:cb:b2:62:86:27:42: 7d:33:35:8b:fa:61:41:9e:da:51:90:1d:b2:06:02: a3:41:d5:6a:2f:49:73:a3:03:21:df:9c:82:cf:19: 3a:22:87:4d:c0:de:ad:71:52:2b:5a:c0:04:3c:ef: 8a:bf:75:c7:dd:1d:a2:b0:b4:00:33:3e:1e:99:9d: f8:96:d3:69:4d:28:8e:57:49:69:15:9d:2b:0f:07: ed:f0:3b:c8:ae:c9:ae:24:d1:21:13:4f:d7:c1:1f: 77:ae:7f:ea:00:26:0e:d0:19:7c:9b:85:70:f2:81: 19:f0:79:6a:d7:2d:df:8d:42:1d:0c:0e:70:ed:70: b3:c4:d2:7f:73:cc:8d:93:47:c1:8f:71:41:f2:46: 4c:cb:57:27:b4:e6:52:23:38:0e:7b:d3:66:c8:87: 4f:13:ad:a9:2a:d6:f2:54:ed:87:b2:fc:d0:93:14: 12:ee:6f:3b:59:9a:38:ad:24:38:27:bf:15:34:e0: 1e:ac:d6:21:91:38:d9:9f:af:bf:80:29:a9:2a:d8: 4a:54:34:b7:82:25:81:68:4b:52:6e:e5:88:2b:22: 8b:40:56:fe:a7:e2:9a:62:23:76:48:a4:99:52:e5: cc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CD:D6:7C:1D:C9:0F:30:3A:2B:AB:40:64:F4:7C:88:A6:2B:83:3D X509v3 Authority Key Identifier: keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:07:e1:ff:f5:1b:95:ff:b3:d8:e1:0a:20:d5:6b:a7:f7:22: c1:47:33:83:92:67:3c:43:8b:40:0c:ed:5e:2b:8d:85:fd:4a: c1:84:3b:f1:cc:1f:86:52:02:ee:f6:22:fd:bb:ac:1c:bf:aa: cc:eb:89:f9:04:4b:39:28:1c:c3:ed:ab:4f:1c:79:cd:72:1b: e1:8b:0b:14:42:64:98:36:c5:c5:cc:16:7f:e3:48:29:16:3e: 71:fd:24:1e:3c:a0:cf:fd:a5:82:1a:86:e9:7c:8d:cd:ed:a5: d4:84:a8:43:2e:f5:6a:e8:1c:06:a1:33:ec:c6:37:63:d8:74: 40:3e:6d:e8:e3:ca:8a:f6:80:20:fe:c8:f0:b8:63:f8:48:39: 99:96:2b:4a:58:ca:e0:c5:5c:86:f3:bc:26:0e:62:41:7c:32: 78:fe:22:83:8d:56:be:73:95:c1:48:5b:d4:da:7c:da:f2:0b: 52:39:1d:ee:6c:61:a8:51:2d:e4:5b:c6:9d:8b:0b:ee:9a:ae: 1a:03:35:aa:5e:63:f7:65:ed:30:e5:bf:32:cd:88:45:37:f5: ff:3c:f1:36:4a:f4:d5:19:75:bc:95:c7:5d:16:ef:e5:63:74: 37:f4:6f:45:7c:ff:93:48:aa:b1:48:af:77:85:e2:23:71:58: 93:47:30:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P7JPL/c0z0onmBkK4LVgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZWNmMDliODVkOTFjZDY4MmIwNjc0M2NiNmM1OTMwZTFm YzU1MWMwHhcNMjYwMTI2MDMwMTIyWhcNMjYwMTI3MDMwMTIyWjAzMTEwLwYDVQQD EygyZGNkZDY3YzFkYzkwZjMwM2EyYmFiNDA2NGY0N2M4OGE2MmI4MzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvkOA7cLiunkCpE9+Q6JGcCT825Y +XrLsmKGJ0J9MzWL+mFBntpRkB2yBgKjQdVqL0lzowMh35yCzxk6IodNwN6tcVIr WsAEPO+Kv3XH3R2isLQAMz4emZ34ltNpTSiOV0lpFZ0rDwft8DvIrsmuJNEhE0/X wR93rn/qACYO0Bl8m4Vw8oEZ8Hlq1y3fjUIdDA5w7XCzxNJ/c8yNk0fBj3FB8kZM y1cntOZSIzgOe9NmyIdPE62pKtbyVO2HsvzQkxQS7m87WZo4rSQ4J78VNOAerNYh kTjZn6+/gCmpKthKVDS3giWBaEtSbuWIKyKLQFb+p+KaYiN2SKSZUuXMUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3N1nwdyQ8wOiurQGT0fIimK4M9MB8GA1UdIwQY MBaAFKzs8JuF2RzWgrBnQ8tsWTDh/FUcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck96d200WFpITmFDc0dkRHkyeFpNT0g4VlJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNWY0ZjQtYTU0Ny00MjM4LWExZGEt ZjE4ZDc4MThmODRhLzEvck96d200WFpITmFDc0dkRHkyeFpNT0g4VlJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8yNWY0ZjQtYTU0Ny00MjM4LWExZGEtZjE4ZDc4MThmODRh LzEvck96d200WFpITmFDc0dkRHkyeFpNT0g4VlJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQfh//Ub lf+z2OEKINVrp/ciwUczg5JnPEOLQAztXiuNhf1KwYQ78cwfhlIC7vYi/busHL+q zOuJ+QRLOSgcw+2rTxx5zXIb4YsLFEJkmDbFxcwWf+NIKRY+cf0kHjygz/2lghqG 6XyNze2l1ISoQy71augcBqEz7MY3Y9h0QD5t6OPKivaAIP7I8Lhj+Eg5mZYrSljK 4MVchvO8Jg5iQXwyeP4ig41WvnOVwUhb1Np82vILUjkd7mxhqFEt5FvGnYsL7pqu GgM1ql5j92XtMOW/Ms2IRTf1/zzxNkr01Rl1vJXHXRbv5WN0N/RvRXz/k0iqsUiv d4XiI3FYk0cw0g== -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:28 2026 by rpki-client