This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json) Hash identifier: PUeVAk2rfYg1df2CXkUrriWjIiBzmWfzAtjfmxLtgoo= Subject key identifier: 15:66:D4:AC:56:A3:33:E8:87:99:D2:C8:26:F9:20:D5:F7:CE:40:24 Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86 Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786 Certificate serial: 019BF650DA14DCFF2202ABB4F4B2A1153CED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft Manifest number: 0603 Signing time: Sun 25 Jan 2026 18:00:52 +0000 Manifest this update: Sun 25 Jan 2026 18:00:52 +0000 Manifest next update: Mon 26 Jan 2026 18:00:52 +0000 Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: q4aJhwP3ZcDTWsFNT6xzRaOot5d8ftPeJwvYTpnKikY=) 2: G33itK1qq3WeYfI2JZv_Df-F-kM.roa (hash: M48oQ7e0L/CLHTbH2STVHWlHyf+bv796hviSQB+beow=) 3: lSqq2t5j5uhQNwBWbI6WL7tpfgY.roa (hash: O4mt9ymqocsZDQGjjG1ro7L0no6+r2S8A/5/+O3vsZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:da:14:dc:ff:22:02:ab:b4:f4:b2:a1:15:3c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099da06b80fa749068028b597be3e50e8b118786 Validity Not Before: Jan 25 18:00:52 2026 GMT Not After : Jan 26 18:00:52 2026 GMT Subject: CN=1566d4ac56a333e88799d2c826f920d5f7ce4024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5d:60:8e:de:bd:b9:74:38:e4:2a:71:8f:2b: 2d:c9:51:76:32:e2:26:ef:e4:9f:24:5a:a4:07:fd: 95:4b:85:89:a2:4e:15:fa:4f:4e:51:54:09:67:9d: 86:52:8d:f1:d6:01:95:2b:4e:2b:e6:50:32:85:1b: d4:40:e4:c1:7f:a3:bd:e2:af:26:6d:c1:63:2f:1f: 0b:78:1f:58:0e:08:3b:da:65:c3:de:a0:5d:77:de: 1a:26:b8:0a:1d:d4:08:41:cd:ff:7b:d1:50:51:9f: ea:21:66:57:19:20:87:c7:2a:12:7b:c2:d8:0e:6a: 9b:8c:65:29:b8:a7:9a:fc:96:4d:17:ce:84:44:be: b8:3f:a7:29:d2:e6:ee:cf:df:2a:58:83:50:69:85: c2:1f:d0:b9:ac:3c:be:f2:0f:0f:17:d8:aa:c0:6f: 82:d6:44:cc:40:cc:51:0c:6c:9b:10:a4:df:69:0e: 03:25:09:18:f0:cb:aa:94:4d:79:08:5d:16:3d:3b: 0b:1f:f9:52:b8:e2:02:1e:a2:49:42:7b:23:1b:2c: ff:41:47:51:ab:39:15:53:64:3d:8b:15:17:f0:20: e9:45:1e:5a:5b:24:f9:ba:0a:a3:8a:6e:c2:f5:21: 75:05:e6:a9:de:b3:d7:4a:5d:67:23:0a:02:a8:5c: ca:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:66:D4:AC:56:A3:33:E8:87:99:D2:C8:26:F9:20:D5:F7:CE:40:24 X509v3 Authority Key Identifier: keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:4e:6e:ab:59:81:3e:2a:8f:14:70:44:e2:33:a4:90:e3:0a: d1:8a:fc:67:72:b4:af:e7:a3:54:3f:4c:74:c6:96:db:3e:69: 50:43:55:59:ba:98:ae:5a:b1:cd:24:74:4d:19:17:1b:79:8c: f8:53:a6:51:34:13:68:4e:63:fb:da:51:63:42:e4:4a:e8:00: f1:98:92:09:83:18:ff:1a:fc:fd:c9:29:a4:68:e6:fa:08:ec: 98:fe:93:0b:62:06:c5:75:e2:4c:ea:16:84:14:fb:bd:94:5f: e2:a0:44:04:e2:af:74:7d:2b:97:88:a4:aa:36:72:6e:6b:bf: 39:df:1d:72:63:56:bf:73:e2:e6:28:22:5e:d7:44:4a:94:9f: 28:d9:82:0f:e8:c4:5f:92:cf:a3:7d:7e:a9:43:58:fc:40:5e: 65:b4:e0:78:ac:2d:cd:ef:fd:29:50:8e:45:58:db:8e:5a:eb: 4e:75:07:8f:db:dd:b1:59:63:29:1c:31:83:f3:ea:2e:b6:48: ce:b0:20:58:43:d8:e7:75:98:06:93:be:e1:ac:1a:0e:7e:55: 77:e5:cd:05:51:cd:d6:e5:9b:21:26:70:d5:34:96:a6:36:86: 56:f5:e2:70:41:fc:af:2c:2d:92:0b:48:af:49:9c:a1:3a:89: ab:32:7b:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UNoU3P8iAqu09LKhFTztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWRhMDZiODBmYTc0OTA2ODAyOGI1OTdiZTNlNTBlOGIx MTg3ODYwHhcNMjYwMTI1MTgwMDUyWhcNMjYwMTI2MTgwMDUyWjAzMTEwLwYDVQQD EygxNTY2ZDRhYzU2YTMzM2U4ODc5OWQyYzgyNmY5MjBkNWY3Y2U0MDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2F1gjt69uXQ45CpxjystyVF2MuIm 7+SfJFqkB/2VS4WJok4V+k9OUVQJZ52GUo3x1gGVK04r5lAyhRvUQOTBf6O94q8m bcFjLx8LeB9YDgg72mXD3qBdd94aJrgKHdQIQc3/e9FQUZ/qIWZXGSCHxyoSe8LY DmqbjGUpuKea/JZNF86ERL64P6cp0ubuz98qWINQaYXCH9C5rDy+8g8PF9iqwG+C 1kTMQMxRDGybEKTfaQ4DJQkY8MuqlE15CF0WPTsLH/lSuOICHqJJQnsjGyz/QUdR qzkVU2Q9ixUX8CDpRR5aWyT5ugqjim7C9SF1Beap3rPXSl1nIwoCqFzKaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVm1KxWozPoh5nSyCb5INX3zkAkMB8GA1UdIwQY MBaAFAmdoGuA+nSQaAKLWXvj5Q6LEYeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUt MzFmY2M0NTU1NzVlLzEvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUtMzFmY2M0NTU1NzVl LzEvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHE5uq1mB PiqPFHBE4jOkkOMK0Yr8Z3K0r+ejVD9MdMaW2z5pUENVWbqYrlqxzSR0TRkXG3mM +FOmUTQTaE5j+9pRY0LkSugA8ZiSCYMY/xr8/ckppGjm+gjsmP6TC2IGxXXiTOoW hBT7vZRf4qBEBOKvdH0rl4ikqjZybmu/Od8dcmNWv3Pi5igiXtdESpSfKNmCD+jE X5LPo31+qUNY/EBeZbTgeKwtze/9KVCORVjbjlrrTnUHj9vdsVljKRwxg/PqLrZI zrAgWEPY53WYBpO+4awaDn5Vd+XNBVHN1uWbISZw1TSWpjaGVvXicEH8rywtkgtI r0mcoTqJqzJ7yg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:03:30 2026 by rpki-client