This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft File: Z8Os-SmiIzjys4AYDMhS20d5qtA.mft (raw, json) Hash identifier: ZLTUfoajn/TsNO0lUlwZbI5Svb70rpkfIHw9XuPPLgs= Subject key identifier: 09:BA:A4:5A:DF:86:57:67:DE:E7:0F:C6:25:DA:2D:74:2E:BA:4D:F4 Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0 Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0 Certificate serial: 019BF2AB445593FEA9B072559E272E352EFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft Manifest number: 12D9 Signing time: Sun 25 Jan 2026 01:01:08 +0000 Manifest this update: Sun 25 Jan 2026 01:01:08 +0000 Manifest next update: Mon 26 Jan 2026 01:01:08 +0000 Files and hashes: 1: TfIi7I3WgDvXNjupkEjxzP8GxkI.roa (hash: Qym68UnT2HiOSpZ3+9brbjDLO7IA/zFl9AhYdT/LiLQ=) 2: Z8Os-SmiIzjys4AYDMhS20d5qtA.crl (hash: 3neM1QYtfzu0YKHqag9Hg8BzaISrrD7jnlsVcR3rHns=) 3: zBxBTpibLrslxHWch5H0k9kNNd0.roa (hash: kLIKoJKwnkX2C7p3Y1VY7at5dd/MwDeXCZmhRXuoHg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:ab:44:55:93:fe:a9:b0:72:55:9e:27:2e:35:2e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0 Validity Not Before: Jan 25 01:01:08 2026 GMT Not After : Jan 26 01:01:08 2026 GMT Subject: CN=09baa45adf865767dee70fc625da2d742eba4df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1d:de:2e:58:7c:fd:2d:1e:d5:4f:f3:96:24: 02:79:c0:33:41:b4:4d:46:c3:01:21:40:c2:54:d1: e7:cc:a9:58:86:52:81:d4:cf:ed:30:b5:53:6a:71: 0c:ee:41:bf:67:51:b5:d0:4b:88:95:d2:25:bf:16: 27:f8:e9:63:62:fd:e6:68:ea:46:85:96:78:7c:d6: 27:91:0f:e4:fc:eb:1e:76:c6:be:fa:93:d2:d6:14: 4b:bd:13:8a:c9:2f:8c:9f:05:02:43:eb:ee:f3:30: 1a:28:fe:c1:c2:b2:59:5f:97:6a:7c:bf:cf:08:86: 13:49:d4:81:bb:c3:dd:88:e3:93:56:3c:d6:04:72: 45:e6:9c:9f:67:08:2f:8d:39:ea:61:2c:8e:a9:ef: 16:64:bc:8a:12:c8:31:37:cf:32:8e:87:40:ae:54: 50:c6:5c:1b:c7:de:b3:13:88:d3:80:51:ce:0c:b2: 8b:85:a4:69:64:f0:93:c7:4d:49:d1:95:49:14:b2: 97:e2:ea:fd:20:5a:68:42:25:2b:90:49:18:94:06: 77:f1:8e:06:71:ad:18:69:d8:71:99:02:9a:58:4a: 62:c1:5d:84:7a:7b:01:b8:09:30:1d:77:8b:be:4a: 08:b4:3f:76:98:7a:49:30:2e:8d:d7:dc:34:62:4b: ea:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BA:A4:5A:DF:86:57:67:DE:E7:0F:C6:25:DA:2D:74:2E:BA:4D:F4 X509v3 Authority Key Identifier: keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:34:f2:9b:39:c8:4c:fd:c8:b3:73:39:d0:87:f3:e8:a3:bb: 72:6b:0b:e5:63:eb:9f:52:e7:cb:54:b6:e5:6c:66:fa:ca:9d: 97:e6:bb:a2:0e:5f:5c:5e:1f:b5:fd:d4:f2:65:24:4b:b5:dc: c0:4b:d3:02:35:59:29:ac:8a:3d:49:19:11:68:02:18:05:9a: 8c:f9:7e:ae:81:58:56:27:47:ca:fa:fe:eb:2b:00:81:ce:9a: ea:86:e3:df:62:da:66:12:b3:20:1b:c9:13:5e:57:4c:85:47: 44:1f:82:a8:1a:d6:6f:c7:dc:3c:8c:8b:ae:80:d5:28:44:e9: 47:bc:2e:a3:9d:14:91:5f:6c:0e:0f:02:b4:ac:d6:80:48:76: 8d:d3:42:68:8a:44:07:73:42:c6:75:b2:9f:8e:fb:10:58:a5: f3:2b:c4:82:4f:60:1c:bc:24:4a:3b:7c:0a:9b:4b:33:63:dd: 90:d9:c8:4b:02:b7:49:b7:d6:0b:f4:ce:66:19:da:ac:a0:2e: 7c:cc:ab:80:c8:ca:56:00:67:bc:64:bc:a0:a7:62:04:9e:fb: d9:e9:96:eb:72:13:fb:8d:6a:79:0a:1f:1e:02:32:8b:3c:b7: 50:24:78:b9:98:43:07:02:fe:fc:b7:12:42:ca:97:5a:80:5f: 95:7b:32:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyq0RVk/6psHJVnicuNS7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YzNhY2Y5MjlhMjIzMzhmMmIzODAxODBjYzg1MmRiNDc3 OWFhZDAwHhcNMjYwMTI1MDEwMTA4WhcNMjYwMTI2MDEwMTA4WjAzMTEwLwYDVQQD EygwOWJhYTQ1YWRmODY1NzY3ZGVlNzBmYzYyNWRhMmQ3NDJlYmE0ZGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh3eLlh8/S0e1U/zliQCecAzQbRN RsMBIUDCVNHnzKlYhlKB1M/tMLVTanEM7kG/Z1G10EuIldIlvxYn+OljYv3maOpG hZZ4fNYnkQ/k/Osedsa++pPS1hRLvROKyS+MnwUCQ+vu8zAaKP7BwrJZX5dqfL/P CIYTSdSBu8PdiOOTVjzWBHJF5pyfZwgvjTnqYSyOqe8WZLyKEsgxN88yjodArlRQ xlwbx96zE4jTgFHODLKLhaRpZPCTx01J0ZVJFLKX4ur9IFpoQiUrkEkYlAZ38Y4G ca0YadhxmQKaWEpiwV2EensBuAkwHXeLvkoItD92mHpJMC6N19w0YkvqZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAm6pFrfhldn3ucPxiXaLXQuuk30MB8GA1UdIwQY MBaAFGfDrPkpoiM48rOAGAzIUttHearQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jYTQ4MTUtMGUwMC00OWJmLTg4ZjUt Y2FjYThiODBjOTFjLzEvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9jYTQ4MTUtMGUwMC00OWJmLTg4ZjUtY2FjYThiODBjOTFj LzEvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzTymznI TP3Is3M50Ifz6KO7cmsL5WPrn1Lny1S25Wxm+sqdl+a7og5fXF4ftf3U8mUkS7Xc wEvTAjVZKayKPUkZEWgCGAWajPl+roFYVidHyvr+6ysAgc6a6obj32LaZhKzIBvJ E15XTIVHRB+CqBrWb8fcPIyLroDVKETpR7wuo50UkV9sDg8CtKzWgEh2jdNCaIpE B3NCxnWyn477EFil8yvEgk9gHLwkSjt8CptLM2PdkNnISwK3SbfWC/TOZhnarKAu fMyrgMjKVgBnvGS8oKdiBJ772emW63IT+41qeQofHgIyizy3UCR4uZhDBwL+/LcS QsqXWoBflXsyzw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:47:26 2026 by rpki-client