This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json) Hash identifier: 8Gid65rN+un1+DH/BQcbyHlXIpztyZ7PaJokSSJbh+g= Subject key identifier: E4:17:27:37:E4:5E:7A:EF:29:0C:36:A3:90:3D:72:41:0B:2B:61:92 Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2 Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2 Certificate serial: 019BF7D22C4F12458CFCAEDF5E35F42CEB24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft Manifest number: 0795 Signing time: Mon 26 Jan 2026 01:01:44 +0000 Manifest this update: Mon 26 Jan 2026 01:01:44 +0000 Manifest next update: Tue 27 Jan 2026 01:01:44 +0000 Files and hashes: 1: E907k5QYJtLiwC_jK3iFvXI9RdI.roa (hash: snQqBx0r+DlkIlsrsM46ddsGDow3XlKtABIHB2rzqdc=) 2: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: YnH/Ly4s8MwtexvsOEuIVLNuSE5TVYmjARxtDS5/9WY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:2c:4f:12:45:8c:fc:ae:df:5e:35:f4:2c:eb:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2 Validity Not Before: Jan 26 01:01:44 2026 GMT Not After : Jan 27 01:01:44 2026 GMT Subject: CN=e4172737e45e7aef290c36a3903d72410b2b6192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2f:c1:58:73:74:39:b3:22:d2:7d:1a:c7:41: 44:88:3a:34:11:04:a6:fd:07:61:68:6a:b6:26:fd: c4:b9:a4:73:4a:f6:0b:f4:19:6f:0a:89:1a:e5:13: a4:ab:d2:95:fd:04:ea:2c:fb:1f:70:2c:83:e4:4e: 31:92:82:c2:06:c3:ce:dc:b2:90:05:55:9b:ce:ef: b7:58:db:5e:ab:80:88:80:1c:f6:0e:a1:02:06:6e: 77:d3:75:fc:17:10:a9:30:df:d6:38:09:55:8a:47: 9d:1d:8c:a5:ad:fd:a4:56:ab:52:61:96:2f:8a:e8: 82:ad:dd:b4:96:33:1a:96:54:b8:c6:67:4f:ee:a7: b3:bd:d5:2c:51:cf:6e:0b:62:8c:f3:08:1e:87:4e: a4:30:ac:66:9f:68:5e:b2:aa:2f:d8:e0:38:8a:88: 1b:19:35:04:a2:43:dc:9a:00:fb:78:74:4b:be:ca: a5:78:a4:96:ae:5d:88:c0:50:2d:a1:98:bd:39:b2: a0:bc:be:ae:23:bd:9b:15:5b:35:d7:74:7b:b4:aa: bf:96:f9:11:97:98:7e:41:dc:8a:1c:1d:47:83:50: 78:01:ea:8f:bb:7b:47:35:7f:b3:2c:46:32:59:fe: a4:2c:af:11:87:6d:c1:9c:09:1a:c3:36:b9:f6:a5: cf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:17:27:37:E4:5E:7A:EF:29:0C:36:A3:90:3D:72:41:0B:2B:61:92 X509v3 Authority Key Identifier: keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:eb:c0:e0:4d:5c:c6:25:3a:bb:1b:5d:56:5b:9f:65:ba:14: 7f:06:b3:68:a4:32:13:f3:a0:eb:9d:89:9b:70:83:97:b8:b6: 25:0c:71:0e:ac:b3:3e:64:13:d7:32:46:94:3d:6e:7b:0a:94: 8b:7c:3c:8c:04:3e:fb:30:2a:ca:e6:96:7a:c2:b2:f6:85:80: 5f:ec:04:8d:48:1b:28:0f:a3:ae:77:36:42:b8:ed:d7:e9:f7: c6:94:31:b8:73:3c:2e:58:85:4b:c7:77:16:76:1e:95:6d:35: 69:a7:cb:4d:4f:37:4a:77:94:c4:71:77:56:4c:8a:8c:3c:db: 85:de:d5:a8:82:cd:dd:85:18:e9:dc:1e:63:34:38:bb:23:f7: 32:aa:ab:1e:d5:41:c5:e6:21:72:83:c9:4f:11:f2:84:5a:d5: 2f:46:b1:33:26:28:a7:e8:f7:49:d3:54:7a:9e:73:a6:7b:76: 0f:e9:07:b6:16:e2:fb:34:44:ba:54:e4:0a:19:c5:08:a7:24: 1c:23:77:aa:0b:52:11:ef:c8:1d:cd:15:51:cd:12:16:20:ae: e8:01:78:a5:30:91:fd:d2:b5:a3:95:1c:c7:f4:4a:45:cc:b8: d4:3c:57:20:6a:bd:c6:0f:bb:d6:a0:30:2d:a2:cc:ca:45:85: a0:1d:51:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30ixPEkWM/K7fXjX0LOskMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmMzM2Q1YmE1ODUyMzRjY2NlZjhhNTdhZDg2Y2ExZWFm YzRhYTIwHhcNMjYwMTI2MDEwMTQ0WhcNMjYwMTI3MDEwMTQ0WjAzMTEwLwYDVQQD EyhlNDE3MjczN2U0NWU3YWVmMjkwYzM2YTM5MDNkNzI0MTBiMmI2MTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji/BWHN0ObMi0n0ax0FEiDo0EQSm /QdhaGq2Jv3EuaRzSvYL9BlvCoka5ROkq9KV/QTqLPsfcCyD5E4xkoLCBsPO3LKQ BVWbzu+3WNteq4CIgBz2DqECBm5303X8FxCpMN/WOAlVikedHYylrf2kVqtSYZYv iuiCrd20ljMallS4xmdP7qezvdUsUc9uC2KM8wgeh06kMKxmn2hesqov2OA4iogb GTUEokPcmgD7eHRLvsqleKSWrl2IwFAtoZi9ObKgvL6uI72bFVs113R7tKq/lvkR l5h+QdyKHB1Hg1B4AeqPu3tHNX+zLEYyWf6kLK8Rh23BnAkawza59qXPwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQXJzfkXnrvKQw2o5A9ckELK2GSMB8GA1UdIwQY MBaAFK68M9W6WFI0zM74pXrYbKHq/EqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJ3ejFicFlValRNenZpbGV0aHNvZXI4U3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iNjc1NTEtMzVlMy00MmYxLTkxMmIt OTZhNWI1ZGFkNjcxLzEvcnJ3ejFicFlValRNenZpbGV0aHNvZXI4U3FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iNjc1NTEtMzVlMy00MmYxLTkxMmItOTZhNWI1ZGFkNjcx LzEvcnJ3ejFicFlValRNenZpbGV0aHNvZXI4U3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+vA4E1c xiU6uxtdVlufZboUfwazaKQyE/Og652Jm3CDl7i2JQxxDqyzPmQT1zJGlD1uewqU i3w8jAQ++zAqyuaWesKy9oWAX+wEjUgbKA+jrnc2Qrjt1+n3xpQxuHM8LliFS8d3 FnYelW01aafLTU83SneUxHF3VkyKjDzbhd7VqILN3YUY6dweYzQ4uyP3MqqrHtVB xeYhcoPJTxHyhFrVL0axMyYop+j3SdNUep5zpnt2D+kHthbi+zREulTkChnFCKck HCN3qgtSEe/IHc0VUc0SFiCu6AF4pTCR/dK1o5Ucx/RKRcy41DxXIGq9xg+71qAw LaLMykWFoB1RWA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:50:41 2026 by rpki-client