This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json) Hash identifier: BEFOoSIBkhY1q1J4kB82Pw/zshagyY2mgjfyXaYo/ZI= Subject key identifier: 14:5D:D1:AF:B1:39:27:10:A9:EF:C2:8B:D5:03:DF:F2:36:FD:0B:77 Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c Certificate serial: 019BF4633CFFE6910686736C818897A79476 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft Manifest number: 10CF Signing time: Sun 25 Jan 2026 09:01:42 +0000 Manifest this update: Sun 25 Jan 2026 09:01:42 +0000 Manifest next update: Mon 26 Jan 2026 09:01:42 +0000 Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: TnRR7YshD4JMmJdb+l3SzxELM8/SjnLO0RJJFGRwIVo=) 2: f4oZ944cKaclf3H6nV0hXsulctQ.roa (hash: a37helEeh9rd8vAJtERuFqCFLk/+7T/8DDcBlfCEHS8=) 3: s44uN6WA03-69O83KoxBpdROnOs.roa (hash: m6tv0wnAPyB40bmbjEukGtEqHI9oybLvGh9JpX5oodY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:3c:ff:e6:91:06:86:73:6c:81:88:97:a7:94:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c Validity Not Before: Jan 25 09:01:42 2026 GMT Not After : Jan 26 09:01:42 2026 GMT Subject: CN=145dd1afb1392710a9efc28bd503dff236fd0b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:95:91:7b:52:cb:d3:f5:ae:c3:c1:15:cf:f5: 0b:7d:21:88:bf:c7:7a:e5:38:7c:19:4d:e1:44:d5: f3:27:bb:ce:4a:cb:e3:d7:b4:99:61:c7:15:eb:d4: a6:bd:fa:f2:8c:bd:19:79:2c:5b:ab:c5:aa:38:df: a9:0c:aa:f8:e3:1c:67:45:20:20:b1:17:be:58:9c: 61:0e:25:19:3a:4b:be:67:eb:a5:9e:23:b8:6d:cd: 66:03:15:45:04:87:78:5b:f9:c3:e3:fc:b1:dd:37: 01:1a:1e:2c:fb:de:d6:fb:14:60:81:10:d5:04:bc: 12:51:da:fe:f3:b1:65:68:bf:6d:4d:d3:fd:9b:14: 7d:af:9e:6d:81:4d:20:ce:7b:2b:45:6a:28:ae:66: 63:8c:a4:86:f0:87:12:7f:d3:c9:2a:6d:d6:6d:4c: 69:9e:b1:26:28:c9:7a:b7:9d:7f:16:0c:f3:ab:c4: cc:48:c2:6f:3d:ef:13:26:e0:97:9f:67:d1:d1:c2: 28:fb:47:f7:77:63:e0:eb:3b:6f:8a:f3:57:7c:50: 02:04:dd:d0:c4:35:a5:cc:5b:c8:63:fa:f6:51:fe: ea:39:4a:43:54:c9:8f:aa:ca:37:75:da:d4:df:f7: fe:b3:e1:92:0d:71:51:01:ef:59:77:7a:26:c7:59: d3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5D:D1:AF:B1:39:27:10:A9:EF:C2:8B:D5:03:DF:F2:36:FD:0B:77 X509v3 Authority Key Identifier: keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ef:9f:ae:48:07:c1:67:cb:f4:5f:4b:26:68:2a:5c:40:bd: cf:e9:1a:e5:3a:4b:3f:8d:23:51:e4:1a:8f:85:ab:d8:da:df: 06:3e:c2:19:f6:7a:a4:88:4a:a5:e9:34:bf:69:e4:a9:ee:96: 55:44:ab:03:b6:a8:52:d6:b3:4c:76:06:a2:62:c7:59:e4:51: bf:f6:61:15:99:a8:a3:60:dc:74:e7:ed:92:19:23:8a:f6:13: fd:f1:b7:ab:aa:51:a7:47:fd:e4:fe:62:7f:98:de:4a:16:97: 3c:de:53:b8:f6:e2:56:92:ca:b9:ec:64:9d:7c:f3:88:42:93: 60:bd:9c:65:c7:7a:e4:f2:11:ce:67:b3:7f:24:3d:96:be:8b: 63:7e:89:d7:7f:31:8d:7b:e1:ad:5f:22:53:57:13:9d:e1:bb: 31:4f:f5:22:f8:74:41:44:c4:fe:b4:b5:33:25:13:f0:77:8d: 50:8b:0a:d0:2a:1c:ec:1b:66:9d:88:22:b0:31:ee:11:49:3f: 86:3c:71:61:d6:66:29:48:49:40:e0:c7:c3:3b:cb:38:6e:09: 5b:d1:18:b5:1f:4d:3f:2e:f6:74:36:0d:14:4d:a8:ab:0b:73: a8:bc:bb:af:67:30:bf:d2:85:fb:3b:6d:d4:a7:d0:f9:31:a9: 27:15:e4:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yzz/5pEGhnNsgYiXp5R2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMzY3ZGJhM2EyMjAwNjBlNjdkNGVjNjgwYjBmOTlmMjQ3 YTg3MmMwHhcNMjYwMTI1MDkwMTQyWhcNMjYwMTI2MDkwMTQyWjAzMTEwLwYDVQQD EygxNDVkZDFhZmIxMzkyNzEwYTllZmMyOGJkNTAzZGZmMjM2ZmQwYjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15WRe1LL0/Wuw8EVz/ULfSGIv8d6 5Th8GU3hRNXzJ7vOSsvj17SZYccV69SmvfryjL0ZeSxbq8WqON+pDKr44xxnRSAg sRe+WJxhDiUZOku+Z+ulniO4bc1mAxVFBId4W/nD4/yx3TcBGh4s+97W+xRggRDV BLwSUdr+87FlaL9tTdP9mxR9r55tgU0gznsrRWoormZjjKSG8IcSf9PJKm3WbUxp nrEmKMl6t51/Fgzzq8TMSMJvPe8TJuCXn2fR0cIo+0f3d2Pg6ztvivNXfFACBN3Q xDWlzFvIY/r2Uf7qOUpDVMmPqso3ddrU3/f+s+GSDXFRAe9Zd3omx1nTkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRd0a+xOScQqe/Ci9UD3/I2/Qt3MB8GA1UdIwQY MBaAFNM2fbo6IgBg5n1OxoCw+Z8keocsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2It NWNhNWJmNjdlNjlkLzEvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2ItNWNhNWJmNjdlNjlk LzEvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKe+frkgH wWfL9F9LJmgqXEC9z+ka5TpLP40jUeQaj4Wr2NrfBj7CGfZ6pIhKpek0v2nkqe6W VUSrA7aoUtazTHYGomLHWeRRv/ZhFZmoo2DcdOftkhkjivYT/fG3q6pRp0f95P5i f5jeShaXPN5TuPbiVpLKuexknXzziEKTYL2cZcd65PIRzmezfyQ9lr6LY36J138x jXvhrV8iU1cTneG7MU/1Ivh0QUTE/rS1MyUT8HeNUIsK0Coc7BtmnYgisDHuEUk/ hjxxYdZmKUhJQODHwzvLOG4JW9EYtR9NPy72dDYNFE2oqwtzqLy7r2cwv9KF+ztt 1KfQ+TGpJxXkHQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:53:34 2026 by rpki-client