This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft File: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json) Hash identifier: GvdT4tCTXh0UN/+7gOZ4j4KXBlzMp4AmK4kcVCyKJTg= Subject key identifier: 1A:21:03:14:0C:59:D3:A8:A3:D9:B1:63:20:1A:03:ED:EC:3B:F7:35 Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A Certificate issuer: /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a Certificate serial: 019BA4FE816FFC8A85C7875C70DE1DA94C32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft Manifest number: 0AA1 Signing time: Fri 09 Jan 2026 23:01:41 +0000 Manifest this update: Fri 09 Jan 2026 23:01:41 +0000 Manifest next update: Sat 10 Jan 2026 23:01:41 +0000 Files and hashes: 1: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: I+MddYM207Yk8OJPCp8tlXDj1eLOlUZzHrxQx28Fl5Q=) 2: wqM2HbHUAexqGRCIytvhP-Jzu4U.roa (hash: HC7KYLDVfK5o/bx0neagw4IbqR4rFwFVqDH+H7VDweY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a4:fe:81:6f:fc:8a:85:c7:87:5c:70:de:1d:a9:4c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a Validity Not Before: Jan 9 23:01:41 2026 GMT Not After : Jan 10 23:01:41 2026 GMT Subject: CN=1a2103140c59d3a8a3d9b163201a03edec3bf735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b6:9a:89:35:59:fe:bf:b0:db:ce:71:b6:73: 1d:d7:a4:31:66:46:e1:86:3c:3f:e1:cc:04:b4:1d: d5:4a:35:31:17:57:cc:03:c7:0d:e8:b2:59:bf:44: d3:db:e8:92:4d:69:c4:c3:8c:8b:cf:6b:3e:19:9e: a1:d4:5f:b0:3f:74:a9:a8:66:16:a5:d4:f6:4e:da: 99:74:0d:51:e1:25:24:4c:c9:62:2b:08:9a:65:dc: 96:d8:ae:b0:fd:29:62:dc:af:d3:b9:0a:0a:c9:35: c9:fe:57:15:a5:de:6c:43:ff:b2:aa:5c:14:2f:e1: 64:15:99:3a:68:ff:e7:9f:e0:fe:66:0c:78:a8:02: d0:15:d6:fd:d8:31:df:6b:c4:9d:76:02:27:6d:57: d9:ee:40:ba:b3:7c:89:52:f2:9d:b7:7d:28:e2:ff: 66:10:c3:ac:2d:c2:76:b6:9f:7c:57:bc:f1:b4:13: ad:70:7f:cd:bd:71:b1:8d:2c:cb:5d:b0:86:cb:6a: 12:49:5a:74:68:ee:45:43:28:d4:f5:bc:28:62:e9: 79:65:4a:23:53:98:34:a8:cf:28:2f:32:c3:f0:6c: 57:b7:a5:ba:7c:04:a3:4c:18:c0:97:0d:6b:51:27: 78:da:34:9a:9b:f3:a5:16:21:f3:d4:3f:6e:65:48: 36:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:21:03:14:0C:59:D3:A8:A3:D9:B1:63:20:1A:03:ED:EC:3B:F7:35 X509v3 Authority Key Identifier: keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e6:5f:d2:b8:15:d4:6a:be:2e:46:b3:86:23:4d:b6:af:d7: b0:c1:3b:f5:d5:ad:e3:75:f7:e5:b3:0b:65:79:6f:81:21:f1: 2a:01:a6:c7:8d:52:a6:66:4b:ca:be:9e:ef:ff:5f:65:6c:c4: ee:fd:f9:03:1f:29:1d:c3:f3:61:28:b8:8e:b9:50:50:02:92: 15:ee:60:86:a5:0d:44:ef:7a:19:ab:01:6a:10:41:5a:3c:38: f7:38:b6:1e:c2:d5:0f:d2:c2:52:3e:28:88:71:fe:76:63:31: 22:89:da:7e:87:e7:9c:60:11:4d:8c:af:8d:cc:d2:45:84:83: 7d:6f:63:08:fb:e6:ec:27:9b:39:00:4a:9c:ef:a5:08:26:e8: 69:d8:cc:2e:e1:8d:70:e7:75:57:6d:1a:5e:c7:d1:02:08:a1: 37:31:26:32:4d:27:4a:5f:c1:6c:f5:f9:d2:d2:da:d2:8e:a6: 66:69:cd:e2:44:55:53:73:dd:45:a2:50:87:a6:7a:f7:6c:7a: 68:32:d9:c1:35:1b:0b:12:ba:fd:b9:01:f5:01:91:91:43:64: 7e:b4:de:32:f0:0e:1e:ac:0e:e3:68:9c:82:5d:b1:c7:86:60: 89:34:57:76:bc:ef:ca:d5:91:7d:a5:e6:d1:68:7e:2e:90:5f: 36:23:34:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuk/oFv/IqFx4dccN4dqUwyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1OWRhNGE4NjM4ZGJkZDZmYTQzYzI3ZDNhYzZlYzhkOWFj Yzg3OGEwHhcNMjYwMTA5MjMwMTQxWhcNMjYwMTEwMjMwMTQxWjAzMTEwLwYDVQQD EygxYTIxMDMxNDBjNTlkM2E4YTNkOWIxNjMyMDFhMDNlZGVjM2JmNzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbaaiTVZ/r+w285xtnMd16QxZkbh hjw/4cwEtB3VSjUxF1fMA8cN6LJZv0TT2+iSTWnEw4yLz2s+GZ6h1F+wP3SpqGYW pdT2TtqZdA1R4SUkTMliKwiaZdyW2K6w/Sli3K/TuQoKyTXJ/lcVpd5sQ/+yqlwU L+FkFZk6aP/nn+D+Zgx4qALQFdb92DHfa8SddgInbVfZ7kC6s3yJUvKdt30o4v9m EMOsLcJ2tp98V7zxtBOtcH/NvXGxjSzLXbCGy2oSSVp0aO5FQyjU9bwoYul5ZUoj U5g0qM8oLzLD8GxXt6W6fASjTBjAlw1rUSd42jSam/OlFiHz1D9uZUg2rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBohAxQMWdOoo9mxYyAaA+3sO/c1MB8GA1UdIwQY MBaAFKWdpKhjjb3W+kPCfTrG7I2azIeKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzIt MGY2OGU1YmZmYzdkLzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzItMGY2OGU1YmZmYzdk LzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeZf0rgV 1Gq+LkazhiNNtq/XsME79dWt43X35bMLZXlvgSHxKgGmx41SpmZLyr6e7/9fZWzE 7v35Ax8pHcPzYSi4jrlQUAKSFe5ghqUNRO96GasBahBBWjw49zi2HsLVD9LCUj4o iHH+dmMxIonafofnnGARTYyvjczSRYSDfW9jCPvm7CebOQBKnO+lCCboadjMLuGN cOd1V20aXsfRAgihNzEmMk0nSl/BbPX50tLa0o6mZmnN4kRVU3PdRaJQh6Z692x6 aDLZwTUbCxK6/bkB9QGRkUNkfrTeMvAOHqwO42icgl2xx4ZgiTRXdrzvytWRfaXm 0Wh+LpBfNiM01g== -----END CERTIFICATE-----Generated at Sat Jan 10 04:24:47 2026 by rpki-client