This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json) Hash identifier: SognhfoVNCcugQK09ZHi6q9x6sN8+qz/ljChUlDOVUY= Subject key identifier: 18:AC:C4:B4:14:55:12:68:85:D8:96:13:19:CA:1A:F9:9B:0B:67:32 Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80 Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680 Certificate serial: 019BF5E323621F07D30624D48656334A142B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft Manifest number: 17FE Signing time: Sun 25 Jan 2026 16:01:02 +0000 Manifest this update: Sun 25 Jan 2026 16:01:02 +0000 Manifest next update: Mon 26 Jan 2026 16:01:02 +0000 Files and hashes: 1: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: NtwdcjDl+4zNqozz3x4Mb9ppRMZ5+Q/WWeqOOUJE7eQ=) 2: p4odwBPCjK_f_cbe3suhJpjfBd4.roa (hash: BbTKrvDIk3p4mxNlC+Mfbr4gEXADSPPB2996OHBG8d0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:23:62:1f:07:d3:06:24:d4:86:56:33:4a:14:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680 Validity Not Before: Jan 25 16:01:02 2026 GMT Not After : Jan 26 16:01:02 2026 GMT Subject: CN=18acc4b41455126885d8961319ca1af99b0b6732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:21:62:d7:b9:76:56:db:24:09:5e:05:94:d1: 58:a3:fd:50:c4:63:e7:72:10:da:32:0e:9f:81:d9: 45:3b:0d:34:86:a1:a5:65:e9:25:e9:78:9f:e4:b5: de:c1:8c:66:87:4a:0f:f7:9e:1e:5c:ff:c0:85:bc: 46:cf:09:fb:13:47:d7:96:a3:0c:bc:7b:b0:f5:f1: b8:b4:fd:04:8d:03:55:d8:f0:1d:90:25:c0:bb:73: 70:94:78:bd:6c:f1:cb:ac:b7:14:4a:4f:b3:b7:51: 82:58:eb:c1:60:6f:fa:f0:70:a4:8a:19:ea:27:4e: 23:94:8a:db:66:b3:75:3b:1f:37:5b:a1:a7:18:0f: 92:7f:11:a8:d7:28:a7:0e:d7:fa:6d:69:ab:36:09: 1e:80:8e:58:18:6e:c9:9e:2c:a9:6e:cb:d9:26:b9: 04:e7:2f:72:98:a8:e4:86:4f:f1:c6:48:26:9e:b5: b9:4b:5d:b2:df:c1:18:96:84:16:f5:4f:2f:15:8b: 71:0a:69:3d:7a:2d:cf:87:c7:77:8f:4d:16:97:19: 0b:3c:47:aa:c2:03:10:7e:fe:a2:c5:67:9a:4c:11: 7a:5b:a3:31:09:56:ec:19:14:92:05:8c:76:32:7d: 27:f4:95:a0:9b:16:00:80:37:b8:4c:20:7e:15:31: da:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AC:C4:B4:14:55:12:68:85:D8:96:13:19:CA:1A:F9:9B:0B:67:32 X509v3 Authority Key Identifier: keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:59:e8:7a:3b:07:88:98:87:45:e7:b1:f1:f6:57:2a:3b:1e: 4f:0b:05:fe:95:d1:88:2b:19:26:28:27:af:db:16:80:1a:a2: e9:e9:af:05:07:06:1f:c1:12:0f:a7:b7:ce:83:44:77:f3:7e: 94:78:48:38:51:9c:bd:77:a7:d4:ec:30:c0:99:55:1c:20:59: bb:b9:70:e0:d8:f8:40:1a:56:3d:1e:d6:a0:2f:23:ac:85:1d: a5:d1:e6:1e:2c:f2:6d:b5:4d:d7:c6:68:e8:f5:47:88:6d:ac: 7c:48:f6:84:02:71:2c:22:97:e3:fc:35:3c:97:72:ef:5d:ae: 13:98:86:e7:24:a3:89:fa:33:51:e1:02:cb:63:5f:94:58:05: d0:19:e7:3e:aa:f6:d5:c4:67:8c:90:6f:a6:a9:7d:8a:d5:85: 26:a8:5f:89:30:47:ae:81:b6:28:8a:94:24:64:49:4e:c9:28: 6d:8a:5f:4e:09:28:75:f4:e3:aa:50:7a:2e:42:bd:d3:0b:78: 79:a6:cb:1f:69:c2:76:8e:79:89:f5:c3:8a:05:e1:27:81:e1: c0:42:c3:3d:e5:6d:eb:71:78:45:9a:8d:72:f6:c0:14:a1:ba: d2:07:0a:d6:62:2c:95:1d:96:e6:a5:5b:ac:5d:d0:b9:a6:ed: 40:b2:73:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14yNiHwfTBiTUhlYzShQrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OWRmN2RjMGVkNTE4ZjFlYzY5OTc0Y2Y5OGNlY2FhZGEx YTg2ODAwHhcNMjYwMTI1MTYwMTAyWhcNMjYwMTI2MTYwMTAyWjAzMTEwLwYDVQQD EygxOGFjYzRiNDE0NTUxMjY4ODVkODk2MTMxOWNhMWFmOTliMGI2NzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSFi17l2VtskCV4FlNFYo/1QxGPn chDaMg6fgdlFOw00hqGlZekl6Xif5LXewYxmh0oP954eXP/AhbxGzwn7E0fXlqMM vHuw9fG4tP0EjQNV2PAdkCXAu3NwlHi9bPHLrLcUSk+zt1GCWOvBYG/68HCkihnq J04jlIrbZrN1Ox83W6GnGA+SfxGo1yinDtf6bWmrNgkegI5YGG7JniypbsvZJrkE 5y9ymKjkhk/xxkgmnrW5S12y38EYloQW9U8vFYtxCmk9ei3Ph8d3j00WlxkLPEeq wgMQfv6ixWeaTBF6W6MxCVbsGRSSBYx2Mn0n9JWgmxYAgDe4TCB+FTHa1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBisxLQUVRJohdiWExnKGvmbC2cyMB8GA1UdIwQY MBaAFJmd99wO1Rjx7GmXTPmM7KraGoaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYt MTM4Yjc4N2RlM2UzLzEvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYtMTM4Yjc4N2RlM2Uz LzEvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFnoejsH iJiHReex8fZXKjseTwsF/pXRiCsZJignr9sWgBqi6emvBQcGH8ESD6e3zoNEd/N+ lHhIOFGcvXen1OwwwJlVHCBZu7lw4Nj4QBpWPR7WoC8jrIUdpdHmHizybbVN18Zo 6PVHiG2sfEj2hAJxLCKX4/w1PJdy712uE5iG5ySjifozUeECy2NflFgF0BnnPqr2 1cRnjJBvpql9itWFJqhfiTBHroG2KIqUJGRJTskobYpfTgkodfTjqlB6LkK90wt4 eabLH2nCdo55ifXDigXhJ4HhwELDPeVt63F4RZqNcvbAFKG60gcK1mIslR2W5qVb rF3QuabtQLJziw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:28 2026 by rpki-client