This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft File: dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json) Hash identifier: tIsOs14IKgQ0rLtS4mr2Xqqno+9hFgs6HUkgIXPCSC8= Subject key identifier: 25:92:A6:40:11:C3:EA:DE:74:2C:9C:6D:52:6B:DE:F7:8C:C2:2C:7F Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda Certificate serial: 019BF687A0E24867B9C6ECF342EA2DE7D16A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 19:00:42 +0000 Manifest this update: Sun 25 Jan 2026 19:00:42 +0000 Manifest next update: Mon 26 Jan 2026 19:00:42 +0000 Files and hashes: 1: CN-YBDFfJ_MolBe276I9XevEuB8.roa (hash: GrTaXSgf/YZ10gbgtBsOa25F1Liht2flF1Xb3WbreJM=) 2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: fWR7056Nq76WdIVj7QFX6rvpYDQbXW+BO7jCULOq0F8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:a0:e2:48:67:b9:c6:ec:f3:42:ea:2d:e7:d1:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda Validity Not Before: Jan 25 19:00:42 2026 GMT Not After : Jan 26 19:00:42 2026 GMT Subject: CN=2592a64011c3eade742c9c6d526bdef78cc22c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d7:cd:da:f2:5c:ec:b7:01:b3:dc:01:da:9b: 50:af:7e:74:48:1b:18:03:78:71:53:e1:84:c2:78: 01:29:3a:e0:b3:04:4a:0c:ce:49:59:f6:94:ea:80: 30:94:da:28:af:8b:54:ed:f3:90:52:0b:73:39:b4: e0:e2:fd:6e:7c:51:74:b7:2b:db:73:38:ce:22:b8: 54:85:e6:08:7d:dd:3d:19:48:67:1f:22:9c:38:54: 1c:73:57:4b:56:68:c8:40:0f:64:f0:38:ce:32:76: ff:c4:6f:d3:ff:84:67:f2:7c:59:b3:ca:10:fb:83: 2e:40:58:24:83:ca:04:36:12:30:fe:cb:97:1d:95: 78:90:c1:3c:c1:e9:e3:9a:1c:31:e1:3c:31:a1:c6: 8c:c6:df:40:05:42:7a:45:67:a7:b3:a5:02:02:60: f6:79:75:c3:85:67:01:3d:a9:16:4d:87:56:a6:d9: ef:d9:f2:16:68:12:f3:08:55:06:4c:bb:35:90:5f: f6:e2:60:40:df:4e:fb:40:4d:39:95:25:c4:9b:16: 07:1f:e2:40:53:fd:94:ac:4c:3b:b9:0a:17:df:01: 82:fa:47:1f:ad:9d:6a:d6:5f:3b:4f:88:01:b5:f0: 30:68:d5:6e:36:6f:6d:f0:18:55:20:dc:15:ff:c4: c7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:92:A6:40:11:C3:EA:DE:74:2C:9C:6D:52:6B:DE:F7:8C:C2:2C:7F X509v3 Authority Key Identifier: keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:db:a6:d6:e7:f2:8e:ec:82:ef:03:c3:0e:22:10:a2:e9:43: ce:32:4e:31:d1:95:4b:4b:a4:c4:0b:8e:69:df:52:6f:1e:6e: 99:7e:7c:7c:30:99:f5:04:bf:dc:5f:cb:c6:3c:c8:3f:4f:d5: 65:12:74:a0:bb:29:e8:7a:18:7a:1b:06:29:ad:94:22:e5:18: b0:53:58:c5:c0:15:b3:91:49:28:d4:6a:64:41:79:48:6f:ca: 06:ec:12:96:8d:58:f2:1d:5f:54:d2:35:87:63:5c:2d:4e:1b: 3d:7e:cd:cf:c0:30:9a:b8:e7:23:1f:a5:eb:35:96:62:21:63: c4:31:96:15:02:a3:9c:34:1a:f5:1c:36:02:84:46:89:12:57: 0c:86:01:0c:82:28:9d:be:eb:c4:13:16:b1:e7:61:7e:dd:1f: b6:8d:9d:96:21:17:16:3d:78:d8:68:bd:da:0c:13:90:b5:18: 61:58:63:29:5e:5a:b2:91:6b:33:b9:67:06:7c:ea:7a:3e:64: 14:af:e8:02:78:24:60:3d:3d:a9:15:44:83:c8:86:5c:1d:af: 21:73:c9:5a:21:19:b9:60:30:6e:58:90:23:0a:47:8f:dd:d9: 2e:a7:28:c9:c4:5b:97:e1:06:da:fc:db:68:9d:fa:ba:73:62: 0c:7e:75:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h6DiSGe5xuzzQuot59FqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3M2JlN2NmMzI1MmE2ODk3NWQ1ZTIyNDU4OThjMDNjNGZi NjBkZGEwHhcNMjYwMTI1MTkwMDQyWhcNMjYwMTI2MTkwMDQyWjAzMTEwLwYDVQQD EygyNTkyYTY0MDExYzNlYWRlNzQyYzljNmQ1MjZiZGVmNzhjYzIyYzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9fN2vJc7LcBs9wB2ptQr350SBsY A3hxU+GEwngBKTrgswRKDM5JWfaU6oAwlNoor4tU7fOQUgtzObTg4v1ufFF0tyvb czjOIrhUheYIfd09GUhnHyKcOFQcc1dLVmjIQA9k8DjOMnb/xG/T/4Rn8nxZs8oQ +4MuQFgkg8oENhIw/suXHZV4kME8wenjmhwx4TwxocaMxt9ABUJ6RWens6UCAmD2 eXXDhWcBPakWTYdWptnv2fIWaBLzCFUGTLs1kF/24mBA3077QE05lSXEmxYHH+JA U/2UrEw7uQoX3wGC+kcfrZ1q1l87T4gBtfAwaNVuNm9t8BhVINwV/8THMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWSpkARw+redCycbVJr3veMwix/MB8GA1UdIwQY MBaAFHc7588yUqaJddXiJFiYwDxPtg3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYmEwZDMtNTk0NC00NzQ3LTg4MzUt YmVkMDU2N2VmYTZiLzEvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jYmEwZDMtNTk0NC00NzQ3LTg4MzUtYmVkMDU2N2VmYTZi LzEvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdum1ufy juyC7wPDDiIQoulDzjJOMdGVS0ukxAuOad9Sbx5umX58fDCZ9QS/3F/LxjzIP0/V ZRJ0oLsp6HoYehsGKa2UIuUYsFNYxcAVs5FJKNRqZEF5SG/KBuwSlo1Y8h1fVNI1 h2NcLU4bPX7Nz8AwmrjnIx+l6zWWYiFjxDGWFQKjnDQa9Rw2AoRGiRJXDIYBDIIo nb7rxBMWsedhft0fto2dliEXFj142Gi92gwTkLUYYVhjKV5aspFrM7lnBnzqej5k FK/oAngkYD09qRVEg8iGXB2vIXPJWiEZuWAwbliQIwpHj93ZLqcoycRbl+EG2vzb aJ36unNiDH512A== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:23 2026 by rpki-client