This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json) Hash identifier: 3qjc6LcQtX0LSv+358Rv1wagbPJDRYxLKOSGjD+5oAE= Subject key identifier: A2:A4:79:0B:D7:F0:A7:0E:8A:67:82:1F:14:7B:A2:99:65:31:2A:37 Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5 Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5 Certificate serial: 019BF57580C53B6708A0C64EAF76502D6F68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft Manifest number: 0A10 Signing time: Sun 25 Jan 2026 14:01:17 +0000 Manifest this update: Sun 25 Jan 2026 14:01:17 +0000 Manifest next update: Mon 26 Jan 2026 14:01:17 +0000 Files and hashes: 1: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: PACTCv3kcJ0fnwm21JH6xt9wWTFyZNnf1LWM97Ec8PI=) 2: Fi9A7ox4EzBVsjYUvBuYzjfrMx4.roa (hash: yPzWCEaVWwitvSN0VQpWfi2iaiWGTDPLLRlVVcJ92AY=) 3: Ll0Gj_SjhJJUWHEqEOxVUi_RvoE.roa (hash: q6CIzrdvKmBT9JVBSFTLQZT7mTH390SBselZNRU06Sc=) 4: lcFMLBJ4Qsm2pQ6VUD3RYi3MSqw.roa (hash: jCb7ZL+Zyxb7PMRFxkMl8BDTxyWFfiSmgO42R7iSszA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:80:c5:3b:67:08:a0:c6:4e:af:76:50:2d:6f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5 Validity Not Before: Jan 25 14:01:17 2026 GMT Not After : Jan 26 14:01:17 2026 GMT Subject: CN=a2a4790bd7f0a70e8a67821f147ba29965312a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a5:75:3c:1e:91:fd:75:6b:a9:5a:9e:ff:62: 8c:9d:f2:bc:25:d5:9c:53:37:f4:5a:66:1f:62:80: 48:dc:7e:b4:97:f3:d3:c5:bd:55:60:9a:bc:82:7f: 6c:8a:50:86:86:9c:93:c2:0c:84:5b:93:48:95:9a: 48:10:8c:6d:74:03:cf:2f:f5:79:69:a6:9a:fe:cf: 8b:10:66:92:a4:7b:ce:c8:0a:72:6f:ac:bc:b8:68: b4:01:49:c7:39:e0:64:ea:4c:55:99:e1:42:54:07: cd:e6:45:d2:94:da:1a:26:f8:da:88:d2:c3:5d:16: fc:a6:f3:57:5a:e8:fe:df:20:7d:2c:f0:dc:9b:94: fe:09:53:8d:93:a3:bb:f2:c4:d4:eb:05:cb:ec:d1: f6:2f:22:04:aa:ef:95:a9:14:b4:2d:c4:a0:09:1d: d7:c3:2c:ae:27:b8:49:95:41:41:6b:93:cf:60:c5: 39:84:63:07:8e:78:b3:6c:55:e6:f5:bf:66:2e:b6: 91:1c:cc:0b:ff:5b:f6:ca:78:59:b0:75:9b:6f:94: d2:2d:b6:27:86:9e:2d:21:b6:c9:23:53:69:14:9b: 51:25:5f:35:83:05:6a:8d:2f:7e:53:ea:44:1e:ad: ba:66:4c:81:61:bd:d8:11:52:0c:f4:7c:db:94:9e: b6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A4:79:0B:D7:F0:A7:0E:8A:67:82:1F:14:7B:A2:99:65:31:2A:37 X509v3 Authority Key Identifier: keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:8f:9c:a3:d9:32:35:a1:18:89:af:a0:b7:0f:48:58:1b:cf: fc:83:da:3d:1d:41:aa:a2:df:11:e7:47:a5:97:49:dd:e2:76: 0d:f9:f0:be:f3:21:7c:04:d3:97:b9:ce:2f:a6:01:06:e6:12: 3d:b9:06:a6:44:37:c6:ac:f7:30:39:ca:4d:66:64:f8:06:27: 0f:0e:ba:99:4a:51:b6:f6:5c:87:06:f0:92:56:b8:fb:06:96: 9b:12:7f:5e:bd:96:ad:2a:be:1b:4c:f6:8a:e7:74:d0:dd:c0: 36:ff:83:69:47:71:1e:82:e1:6d:aa:97:b2:ce:05:59:52:c1: a0:f9:ba:3c:c0:06:6d:45:c9:37:06:f9:b7:c9:db:d5:84:64: 5b:6e:62:ad:25:89:4e:db:db:24:fd:74:5e:48:05:c3:cc:76: 17:61:4f:9e:e5:61:f3:6d:c7:4d:2e:d0:63:76:82:9a:62:58: 21:38:85:3d:5a:7e:a0:7f:e7:d2:bb:b0:33:8e:b6:55:97:fb: 64:a9:be:af:86:91:e2:a4:cb:56:ec:19:67:8a:ce:89:03:ef: f5:e1:47:ae:d5:49:42:fb:f5:c6:80:12:d8:84:f3:87:1c:4d: de:fb:e9:8c:82:75:7c:04:0f:43:d4:72:b6:d2:ad:46:30:bb: 6b:98:4a:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dYDFO2cIoMZOr3ZQLW9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWExZjJkYmY3YjdhODRhZTU3YjhkNjc0MjZiN2U0ZTQy MGZhYjUwHhcNMjYwMTI1MTQwMTE3WhcNMjYwMTI2MTQwMTE3WjAzMTEwLwYDVQQD EyhhMmE0NzkwYmQ3ZjBhNzBlOGE2NzgyMWYxNDdiYTI5OTY1MzEyYTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qV1PB6R/XVrqVqe/2KMnfK8JdWc Uzf0WmYfYoBI3H60l/PTxb1VYJq8gn9silCGhpyTwgyEW5NIlZpIEIxtdAPPL/V5 aaaa/s+LEGaSpHvOyApyb6y8uGi0AUnHOeBk6kxVmeFCVAfN5kXSlNoaJvjaiNLD XRb8pvNXWuj+3yB9LPDcm5T+CVONk6O78sTU6wXL7NH2LyIEqu+VqRS0LcSgCR3X wyyuJ7hJlUFBa5PPYMU5hGMHjnizbFXm9b9mLraRHMwL/1v2ynhZsHWbb5TSLbYn hp4tIbbJI1NpFJtRJV81gwVqjS9+U+pEHq26ZkyBYb3YEVIM9HzblJ62NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKkeQvX8KcOimeCHxR7opllMSo3MB8GA1UdIwQY MBaAFAmaHy2/e3qErle41nQmt+TkIPq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAt OWNkNjhmMjIxZTIxLzEvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAtOWNkNjhmMjIxZTIx LzEvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4+co9ky NaEYia+gtw9IWBvP/IPaPR1BqqLfEedHpZdJ3eJ2DfnwvvMhfATTl7nOL6YBBuYS PbkGpkQ3xqz3MDnKTWZk+AYnDw66mUpRtvZchwbwkla4+waWmxJ/Xr2WrSq+G0z2 iud00N3ANv+DaUdxHoLhbaqXss4FWVLBoPm6PMAGbUXJNwb5t8nb1YRkW25irSWJ TtvbJP10XkgFw8x2F2FPnuVh823HTS7QY3aCmmJYITiFPVp+oH/n0ruwM462VZf7 ZKm+r4aR4qTLVuwZZ4rOiQPv9eFHrtVJQvv1xoAS2ITzhxxN3vvpjIJ1fAQPQ9Ry ttKtRjC7a5hKig== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:29 2026 by rpki-client