This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft File: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft (raw, json) Hash identifier: +UauW5Cr/7/m3Fk6VF/tT+1b4Dlclfbi6Mk9wrVSmtQ= Subject key identifier: 0A:11:73:99:6E:A3:E7:90:F3:AA:49:82:2E:FA:FB:18:BE:A6:C9:19 Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA Certificate issuer: /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa Certificate serial: 019BF5ABFC5E40E831E3EF44EF50CD60054A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 15:00:47 +0000 Manifest this update: Sun 25 Jan 2026 15:00:47 +0000 Manifest next update: Mon 26 Jan 2026 15:00:47 +0000 Files and hashes: 1: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl (hash: yxMDBAzmDKRfZASAxLkxIjtQC69/uktsPlfClQwVrmI=) 2: b15waVmeZUiAPXdSgALdQ8K_I1k.roa (hash: 8OOWK/04HtqvAlybr5ZST2AvUlB+dJIHZXLz3leFYTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:fc:5e:40:e8:31:e3:ef:44:ef:50:cd:60:05:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa Validity Not Before: Jan 25 15:00:47 2026 GMT Not After : Jan 26 15:00:47 2026 GMT Subject: CN=0a1173996ea3e790f3aa49822efafb18bea6c919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:51:93:c7:f7:4e:ea:36:5a:34:09:cc:8b:b1: b2:e7:3e:8f:13:4f:7b:d3:5e:33:2a:f1:3c:d3:a4: 8b:3f:09:48:05:3e:8a:42:31:a1:5d:62:31:ec:10: eb:7d:3a:40:b8:de:a5:da:99:05:a0:de:7c:9c:a2: bf:c1:e6:b3:58:a6:48:d4:55:2b:ae:a8:8c:f5:1a: 9f:f6:99:6f:a5:b9:57:35:c9:1c:2c:76:e1:75:b2: ad:57:a8:00:25:78:f5:40:6e:ee:27:f3:ea:93:a3: 8b:6c:a4:c0:5a:aa:24:93:27:75:45:88:29:56:73: 94:1c:34:66:3f:58:c3:b0:84:44:3d:85:53:8e:28: 5b:dc:c7:24:ea:1a:98:a3:3a:a7:1e:9d:0c:d2:e3: 53:79:a0:db:9d:19:88:9c:3c:7f:f2:db:c9:38:a5: 27:cd:24:af:2b:a1:cb:9a:18:01:af:6a:0b:a0:e0: b5:37:04:31:1a:7f:04:ea:2c:0d:fa:79:2a:4f:12: 4f:ee:2f:ff:fa:d6:41:3a:72:0a:db:ca:22:dc:fa: 8e:28:9f:99:c1:d3:12:63:14:3b:be:54:57:f9:37: 3a:79:20:85:06:3c:09:a3:35:7d:29:7f:47:d4:2f: f9:43:78:b1:4a:e0:9d:41:92:a3:17:cc:57:ca:f7: c3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:11:73:99:6E:A3:E7:90:F3:AA:49:82:2E:FA:FB:18:BE:A6:C9:19 X509v3 Authority Key Identifier: keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:0e:b4:ea:be:23:88:27:e8:2b:75:43:ec:91:04:6c:18:8d: 2e:55:43:53:a0:dc:92:db:88:a3:6c:ba:4d:2b:ec:83:b0:63: 7d:40:95:47:c3:d9:d0:e0:d2:ea:bb:6a:c6:e5:50:23:fe:68: e2:8d:7c:b2:0c:14:a2:a8:9a:1d:c2:f7:7e:08:cf:98:3d:64: dc:c1:e5:2d:74:77:d5:ce:3d:bd:98:b8:c1:9f:cf:56:f4:35: fc:3f:32:35:cf:cc:cc:bc:84:13:e0:18:81:a3:6b:0c:f7:23: 4e:2d:d3:5f:db:ab:69:1b:a0:db:66:d3:19:d2:e8:2f:38:b7: cc:d9:b2:5a:99:91:4c:05:4e:f0:bc:4d:46:cb:62:1d:ed:02: f3:17:0d:50:37:1c:37:68:e0:c0:8e:51:06:8a:aa:39:13:b3: f9:a9:ff:55:e0:96:21:66:37:31:4e:de:f4:ac:30:8b:ff:f7: 98:30:3a:e8:cb:da:87:c5:26:c9:07:e9:10:b1:5d:02:f7:6d: 0b:8a:a3:81:5b:80:22:3c:f2:8f:f5:17:e7:8d:6c:a2:a6:16: 02:e0:be:ed:e4:aa:31:6b:35:15:b4:ef:74:6e:7b:1c:09:3b: a1:d9:aa:ed:08:5c:e0:1a:6d:9f:37:4c:c2:de:f6:05:23:24: d9:a9:ff:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q/xeQOgx4+9E71DNYAVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MzY3ZmMyNGQwMDRmNzFkZDJhZWYwM2Y5Y2I0ZjJlM2Y5 MDg2YWEwHhcNMjYwMTI1MTUwMDQ3WhcNMjYwMTI2MTUwMDQ3WjAzMTEwLwYDVQQD EygwYTExNzM5OTZlYTNlNzkwZjNhYTQ5ODIyZWZhZmIxOGJlYTZjOTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolGTx/dO6jZaNAnMi7Gy5z6PE097 014zKvE806SLPwlIBT6KQjGhXWIx7BDrfTpAuN6l2pkFoN58nKK/weazWKZI1FUr rqiM9Rqf9plvpblXNckcLHbhdbKtV6gAJXj1QG7uJ/Pqk6OLbKTAWqokkyd1RYgp VnOUHDRmP1jDsIREPYVTjihb3Mck6hqYozqnHp0M0uNTeaDbnRmInDx/8tvJOKUn zSSvK6HLmhgBr2oLoOC1NwQxGn8E6iwN+nkqTxJP7i//+tZBOnIK28oi3PqOKJ+Z wdMSYxQ7vlRX+Tc6eSCFBjwJozV9KX9H1C/5Q3ixSuCdQZKjF8xXyvfDYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoRc5luo+eQ86pJgi76+xi+pskZMB8GA1UdIwQY MBaAFNc2f8JNAE9x3SrvA/nLTy4/kIaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kOGM2YjgtZDE0YS00N2Q5LWEwNTQt YjljNzk0ZTAzY2JhLzEvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kOGM2YjgtZDE0YS00N2Q5LWEwNTQtYjljNzk0ZTAzY2Jh LzEvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACA606r4j iCfoK3VD7JEEbBiNLlVDU6DcktuIo2y6TSvsg7BjfUCVR8PZ0ODS6rtqxuVQI/5o 4o18sgwUoqiaHcL3fgjPmD1k3MHlLXR31c49vZi4wZ/PVvQ1/D8yNc/MzLyEE+AY gaNrDPcjTi3TX9uraRug22bTGdLoLzi3zNmyWpmRTAVO8LxNRstiHe0C8xcNUDcc N2jgwI5RBoqqOROz+an/VeCWIWY3MU7e9Kwwi//3mDA66Mvah8UmyQfpELFdAvdt C4qjgVuAIjzyj/UX541soqYWAuC+7eSqMWs1FbTvdG57HAk7odmq7Qhc4BptnzdM wt72BSMk2an/9A== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:28 2026 by rpki-client