This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft File: isRzGj7jlC0ljQZjVwuJTo4akjM.mft (raw, json) Hash identifier: Tla53NoOi+erHsU0I2XttJeHOiX/BMl5TAhXprPTnVg= Subject key identifier: 58:E7:B6:E8:C9:8B:9B:A3:12:45:20:74:8E:EC:B0:14:FD:A0:6E:37 Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33 Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233 Certificate serial: 019BF5E406EEE707E023B38172C5D7809CEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft Manifest number: 0B13 Signing time: Sun 25 Jan 2026 16:02:00 +0000 Manifest this update: Sun 25 Jan 2026 16:02:00 +0000 Manifest next update: Mon 26 Jan 2026 16:02:00 +0000 Files and hashes: 1: isRzGj7jlC0ljQZjVwuJTo4akjM.crl (hash: QZu3IT5KffhEpcUAaaEM6V5Tn34fkhtkX0JRAd+Q3ic=) 2: wBlQV8roNYOAgb5G0Nj_HH5ZUbY.roa (hash: KZkndcTrNEzitWfaZ4uzKEh3xzfx2DJf1eZMDvFa5Fg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e4:06:ee:e7:07:e0:23:b3:81:72:c5:d7:80:9c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233 Validity Not Before: Jan 25 16:02:00 2026 GMT Not After : Jan 26 16:02:00 2026 GMT Subject: CN=58e7b6e8c98b9ba3124520748eecb014fda06e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4e:9c:3e:cb:e2:2f:7b:ea:75:d2:44:a2:95: fb:a9:13:ee:47:5f:c5:82:45:12:4e:55:b5:ed:b9: b6:3a:18:d7:8f:8e:19:64:75:c9:a8:98:09:56:3d: d2:2e:4a:53:35:e7:e2:07:4c:e9:41:38:d0:d5:d8: 58:b2:90:6a:03:19:fa:04:3e:4e:ec:86:79:e8:a3: 82:bb:d3:5e:e6:c2:6c:1a:bc:9b:9a:d5:cb:6e:a5: d9:b4:4c:b2:87:3d:bd:16:9f:41:9c:79:1f:7b:99: 71:c9:63:c1:bc:77:5d:67:d3:60:85:6a:bc:1f:17: a6:34:c8:bf:e8:db:e0:45:0b:ba:29:43:b1:3f:e9: 21:65:45:25:41:59:42:7e:50:33:d2:03:56:9b:e0: 07:c5:7c:35:1b:d7:b8:d7:b9:6b:54:3f:b5:9a:e2: 52:fc:12:e8:03:a3:fa:95:97:f0:88:fa:31:c5:45: 3b:79:be:f1:3e:c4:1b:c8:cb:0b:ab:a5:02:bd:f4: 3f:32:d7:50:cd:ce:33:54:af:b2:ae:5f:81:48:c6: a5:9f:72:9e:59:7d:42:d8:8b:cc:aa:fb:13:78:44: 0c:92:87:65:41:ea:5f:b5:a5:cb:f8:64:7c:2d:90: 2d:03:aa:81:6a:80:3a:8a:e3:d4:a0:38:03:f0:e6: 70:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E7:B6:E8:C9:8B:9B:A3:12:45:20:74:8E:EC:B0:14:FD:A0:6E:37 X509v3 Authority Key Identifier: keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:35:0c:ed:0e:9e:6b:a7:4b:59:f1:d3:89:e7:4a:cc:02:0f: 19:87:c9:5b:2e:e9:30:8a:0c:90:4c:f6:27:93:16:7b:41:17: fe:bf:d9:61:09:bc:d1:c3:57:6c:d5:37:17:e4:f1:bb:15:4d: 37:cf:c3:7b:2f:b4:42:d1:87:21:6f:71:b2:de:9b:40:6d:3f: 5f:02:db:82:f0:13:7b:7e:f4:e8:87:07:ff:6b:9e:40:e6:96: 52:d6:2e:d3:ad:b8:85:30:e5:ca:2f:e5:c4:f8:64:f7:02:3e: 51:f9:6c:6b:7b:3b:6f:d5:09:70:3e:40:dc:e2:d7:34:46:d1: 0f:71:c3:4e:9a:75:5c:f3:f9:4e:e6:c0:33:48:5b:2a:6d:1d: c1:17:68:58:30:44:8c:5e:c8:ad:d5:d2:4f:30:8e:1a:d9:df: a2:de:b9:6e:ce:7b:aa:02:2b:c7:2a:dc:78:84:c6:09:fe:a6: 01:b7:78:35:85:4e:eb:97:43:77:80:f2:15:62:65:af:85:09: 78:a4:82:81:f4:62:d8:e6:74:85:32:e3:10:81:3c:e7:b1:f2: e2:6e:51:5b:3a:2d:fc:bb:b3:dc:ab:73:ad:ee:87:57:a7:2f: 39:2e:ae:b3:80:d8:6d:5f:1c:50:25:07:c8:a3:6b:fe:bd:96: a7:1b:bf:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv15Abu5wfgI7OBcsXXgJzsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYzQ3MzFhM2VlMzk0MmQyNThkMDY2MzU3MGI4OTRlOGUx YTkyMzMwHhcNMjYwMTI1MTYwMjAwWhcNMjYwMTI2MTYwMjAwWjAzMTEwLwYDVQQD Eyg1OGU3YjZlOGM5OGI5YmEzMTI0NTIwNzQ4ZWVjYjAxNGZkYTA2ZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr06cPsviL3vqddJEopX7qRPuR1/F gkUSTlW17bm2OhjXj44ZZHXJqJgJVj3SLkpTNefiB0zpQTjQ1dhYspBqAxn6BD5O 7IZ56KOCu9Ne5sJsGrybmtXLbqXZtEyyhz29Fp9BnHkfe5lxyWPBvHddZ9NghWq8 HxemNMi/6NvgRQu6KUOxP+khZUUlQVlCflAz0gNWm+AHxXw1G9e417lrVD+1muJS /BLoA6P6lZfwiPoxxUU7eb7xPsQbyMsLq6UCvfQ/MtdQzc4zVK+yrl+BSMaln3Ke WX1C2IvMqvsTeEQMkodlQepftaXL+GR8LZAtA6qBaoA6iuPUoDgD8OZw9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjntujJi5ujEkUgdI7ssBT9oG43MB8GA1UdIwQY MBaAFIrEcxo+45QtJY0GY1cLiU6OGpIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgt NWFkZmUzMGZmZGE1LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgtNWFkZmUzMGZmZGE1 LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApTUM7Q6e a6dLWfHTiedKzAIPGYfJWy7pMIoMkEz2J5MWe0EX/r/ZYQm80cNXbNU3F+TxuxVN N8/Dey+0QtGHIW9xst6bQG0/XwLbgvATe3706IcH/2ueQOaWUtYu0624hTDlyi/l xPhk9wI+Uflsa3s7b9UJcD5A3OLXNEbRD3HDTpp1XPP5TubAM0hbKm0dwRdoWDBE jF7IrdXSTzCOGtnfot65bs57qgIrxyrceITGCf6mAbd4NYVO65dDd4DyFWJlr4UJ eKSCgfRi2OZ0hTLjEIE857Hy4m5RWzot/Luz3Ktzre6HV6cvOS6us4DYbV8cUCUH yKNr/r2Wpxu/Ug== -----END CERTIFICATE-----Generated at Sun Jan 25 18:16:05 2026 by rpki-client