This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft File: AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json) Hash identifier: zsWkbDYtQr6rmH854qpuCUAWY6Jl93HuoTdetpmRM5s= Subject key identifier: 95:F6:A4:95:AB:54:C7:A0:CA:AE:A9:76:57:80:86:36:BA:1E:30:97 Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a Certificate serial: 019BF6BEECECCA227466A553A95ED1A9FFFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft Manifest number: 05D7 Signing time: Sun 25 Jan 2026 20:01:06 +0000 Manifest this update: Sun 25 Jan 2026 20:01:06 +0000 Manifest next update: Mon 26 Jan 2026 20:01:06 +0000 Files and hashes: 1: 4xB4yyr6YEm-yvCmxKG_UezWjuY.roa (hash: CVgnePl3GtGgUJvx3YbVJ3pRj6ajgpXzxG/fkBKNNBE=) 2: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: XHAGDVcTBvU3f39/Ojrqn7cRPCXQaHAPNeQQDcMhwA0=) 3: ZC50pBO67qVHzN1c7SEa1kzzD6E.roa (hash: IAgaovaJhzFt2Ft+5OuMmXTJSQzhtUgFmcVOJJam/YA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:ec:ec:ca:22:74:66:a5:53:a9:5e:d1:a9:ff:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a Validity Not Before: Jan 25 20:01:06 2026 GMT Not After : Jan 26 20:01:06 2026 GMT Subject: CN=95f6a495ab54c7a0caaea97657808636ba1e3097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a0:6a:09:2e:ca:be:6d:48:32:5d:42:a7:19: db:73:38:d2:37:e7:3a:8c:06:57:18:05:ef:25:00: db:ad:ee:73:2f:59:9a:3c:95:1b:03:f7:ca:06:4a: ad:34:9d:b8:41:90:5a:b8:a7:a2:4b:84:2e:19:2d: 35:b7:4e:0d:0a:d0:b8:97:70:19:d9:e0:03:bf:ca: f9:82:bc:29:f5:45:25:5f:ab:cc:f6:c3:cc:43:17: 39:13:77:b5:11:68:83:e2:52:d5:35:2b:97:9e:d1: 0d:ab:86:cb:e3:a0:81:99:4d:dc:29:b0:9c:64:41: d8:30:3e:5d:d6:9a:84:b8:a8:c8:ba:83:d1:81:96: d3:29:80:c1:dd:87:8f:df:40:05:cb:35:60:aa:bf: 9d:3d:a4:24:af:5e:cf:27:7d:56:e9:24:17:c8:f2: b0:47:43:eb:5e:dd:36:f2:87:ab:5f:39:8a:5a:e3: 8e:f5:06:a5:71:e5:1b:35:6c:8e:53:e7:fd:23:4b: 78:16:bf:a0:5e:c8:84:e6:67:fc:97:57:4c:63:6e: 93:44:b0:ce:41:e8:92:b6:18:a6:ad:c5:30:94:58: 01:6e:c4:a1:d7:93:47:83:72:e8:b7:93:cf:56:4e: 51:c6:d8:03:81:25:64:e1:29:61:4f:1b:de:6b:3c: d0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F6:A4:95:AB:54:C7:A0:CA:AE:A9:76:57:80:86:36:BA:1E:30:97 X509v3 Authority Key Identifier: keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:9c:1e:d8:6a:2a:61:73:34:30:4d:7a:28:7b:d1:7f:ba:e2: a9:f2:be:88:bf:89:fb:b5:c6:cc:5e:a3:9e:46:2b:c3:be:3f: 73:ea:c2:34:b7:28:47:39:07:2d:fc:fa:92:c0:14:8d:a9:3a: a1:8f:3c:24:ab:82:09:4e:df:92:74:f7:58:9e:fd:ba:f2:0d: 15:4b:98:da:4b:69:09:e2:1e:53:54:82:0c:3c:16:3d:5f:ac: 33:d1:b2:ee:5a:0f:b2:15:dd:97:1c:01:24:e4:0b:fd:a4:9d: e5:e3:ed:fe:48:20:fd:ab:d8:e0:01:71:a2:6e:56:e1:71:e6: 78:8d:a9:43:3b:1c:30:62:6f:8c:01:32:2f:f8:84:22:a1:e1: 43:7e:cc:9b:25:b5:a5:15:7a:f3:71:cd:57:5b:ef:6d:82:22: d3:1b:47:fa:de:c3:51:04:53:a5:0f:fd:f0:7c:a0:06:04:71: 87:71:c4:0c:7c:fa:95:5d:91:8d:75:b0:13:65:b7:e8:e6:e0: 44:24:1e:82:f9:d1:2f:be:f9:70:1f:2c:68:7b:81:56:0a:49: cc:d4:62:13:e8:13:d1:f7:73:fa:30:bd:fd:c3:bc:71:bf:cb: 2c:93:55:75:47:e0:c9:92:b4:d3:d5:2b:7e:2e:22:d1:d8:d4: 32:9c:c4:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vuzsyiJ0ZqVTqV7Rqf/9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMzY0ZmNlZGQ2OTEzNTc3MzNjZDVjY2Q3MDI5ZGI4ZTYx ZDFlM2EwHhcNMjYwMTI1MjAwMTA2WhcNMjYwMTI2MjAwMTA2WjAzMTEwLwYDVQQD Eyg5NWY2YTQ5NWFiNTRjN2EwY2FhZWE5NzY1NzgwODYzNmJhMWUzMDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6BqCS7Kvm1IMl1CpxnbczjSN+c6 jAZXGAXvJQDbre5zL1maPJUbA/fKBkqtNJ24QZBauKeiS4QuGS01t04NCtC4l3AZ 2eADv8r5grwp9UUlX6vM9sPMQxc5E3e1EWiD4lLVNSuXntENq4bL46CBmU3cKbCc ZEHYMD5d1pqEuKjIuoPRgZbTKYDB3YeP30AFyzVgqr+dPaQkr17PJ31W6SQXyPKw R0PrXt028oerXzmKWuOO9QalceUbNWyOU+f9I0t4Fr+gXsiE5mf8l1dMY26TRLDO QeiSthimrcUwlFgBbsSh15NHg3Lot5PPVk5RxtgDgSVk4SlhTxveazzQuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJX2pJWrVMegyq6pdleAhja6HjCXMB8GA1UdIwQY MBaAFAM2T87daRNXczzVzNcCnbjmHR46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81NmY1MjYtNTNkZS00YzlkLWI0MDEt YWJmMGI1OTQ2NDZmLzEvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi81NmY1MjYtNTNkZS00YzlkLWI0MDEtYWJmMGI1OTQ2NDZm LzEvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipwe2Goq YXM0ME16KHvRf7riqfK+iL+J+7XGzF6jnkYrw74/c+rCNLcoRzkHLfz6ksAUjak6 oY88JKuCCU7fknT3WJ79uvINFUuY2ktpCeIeU1SCDDwWPV+sM9Gy7loPshXdlxwB JOQL/aSd5ePt/kgg/avY4AFxom5W4XHmeI2pQzscMGJvjAEyL/iEIqHhQ37MmyW1 pRV683HNV1vvbYIi0xtH+t7DUQRTpQ/98HygBgRxh3HEDHz6lV2RjXWwE2W36Obg RCQegvnRL775cB8saHuBVgpJzNRiE+gT0fdz+jC9/cO8cb/LLJNVdUfgyZK009Ur fi4i0djUMpzEog== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:00 2026 by rpki-client