This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft File: RzsJuP3t5sq1JPyqOzHmFrouSJY.mft (raw, json) Hash identifier: GD8lDyW62k1UMCznvK0lJhfxmHWgobEGRp5MxGdCrIM= Subject key identifier: 6C:57:8D:89:B1:31:C5:AD:7F:AE:F6:B0:BF:A9:C4:DD:DA:25:1A:E9 Authority key identifier: 47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96 Certificate issuer: /CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896 Certificate serial: 019B785BC91028591F36045B71D7CB5973AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft Manifest number: 17A6 Signing time: Thu 01 Jan 2026 07:00:39 +0000 Manifest this update: Thu 01 Jan 2026 07:00:39 +0000 Manifest next update: Fri 02 Jan 2026 07:00:39 +0000 Files and hashes: 1: RzsJuP3t5sq1JPyqOzHmFrouSJY.crl (hash: wTN/Y4otCCLmBTUwkEIPaqHCQ1n2trEKRKUkvwcQVZ0=) 2: vPQVU__LjjI0KQlbryLD4Z9lbco.roa (hash: T5jCIurL/aGFPYJ7qI4EV92wzbQfymp5kGHdqCYG6bU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 07:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5b:c9:10:28:59:1f:36:04:5b:71:d7:cb:59:73:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896 Validity Not Before: Jan 1 07:00:39 2026 GMT Not After : Jan 2 07:00:39 2026 GMT Subject: CN=6c578d89b131c5ad7faef6b0bfa9c4ddda251ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:21:07:c3:f4:35:61:b6:3c:e8:e2:02:c4:bb: 12:4d:e9:6b:97:d9:00:7e:61:ce:7c:f7:22:1d:25: ae:1e:29:f9:78:af:26:25:73:a4:e4:2e:b0:fb:75: f7:f5:a5:39:b0:1f:ef:54:43:1f:e4:06:8e:9f:41: 81:d6:ce:01:62:66:0a:0d:7d:b5:6a:55:f7:cf:6a: 82:11:b5:69:c9:a3:4a:b9:9f:42:18:08:c7:6b:27: 9e:8c:8d:a7:39:ff:89:60:e7:74:1d:ae:15:f6:5c: 28:87:2b:42:33:0c:55:c6:7d:28:bb:7a:9c:d5:44: 31:b5:ba:19:1b:4b:73:ff:39:59:cf:e9:40:ff:2b: e6:a8:fb:57:32:88:0d:89:b0:f6:99:a7:15:f2:99: 8b:54:03:d0:63:14:31:41:fe:95:25:89:10:95:44: f8:3a:44:8c:e8:6f:78:11:a6:4c:16:0b:d7:f0:b4: 1a:02:ac:79:d6:da:f3:b1:17:70:91:66:47:b2:0f: 7b:0f:20:df:db:f8:95:78:9b:c2:8a:53:2f:24:b6: 16:6e:27:30:1b:8b:3f:3d:70:21:c0:54:04:04:92: e1:05:32:e1:f6:b1:b9:20:6f:d5:66:7b:04:00:1b: 56:bb:28:23:20:01:73:70:d0:07:6d:03:70:28:2c: 75:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:57:8D:89:B1:31:C5:AD:7F:AE:F6:B0:BF:A9:C4:DD:DA:25:1A:E9 X509v3 Authority Key Identifier: keyid:47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:bc:c8:74:33:ea:45:6c:99:29:18:f2:09:19:70:e2:4d:28: c3:73:1a:e7:00:a4:d2:e0:e1:89:c2:28:8d:4c:1e:09:29:7c: 6c:aa:1c:bf:10:2c:b1:9a:e1:96:11:f8:5d:9d:fc:1d:58:c0: 92:f0:19:e1:2a:d3:b2:06:8d:01:f4:a8:cb:cc:a3:70:c8:f2: 52:73:e5:1e:61:89:ed:a5:24:0a:4e:c6:f8:69:b8:97:fe:fd: 5e:e8:51:9d:fe:ef:37:c2:2b:e2:63:61:d0:6b:b3:4c:42:17: 85:8d:34:6e:35:92:48:ef:9b:4b:c5:5b:aa:cf:0c:5a:cc:34: 9a:b5:87:02:7c:e3:e7:0b:38:75:60:7d:5e:77:0a:4c:d8:55: fd:a6:cd:8c:e6:7a:c1:36:7e:dd:f1:6d:09:2e:07:31:c9:2a: d8:2d:6c:c9:af:44:c8:02:f8:74:ee:aa:49:4b:a6:77:d2:b1: e4:04:b9:6b:ab:48:eb:17:0e:5d:bf:74:01:7f:cc:91:da:3b: 89:61:ff:1d:a8:34:b2:cf:e3:5c:f9:f4:f5:1c:4a:b3:39:4e: 03:7d:a7:fa:bb:06:2a:a1:e4:29:49:d9:da:d2:ce:4b:1d:e0: dc:3a:62:11:a7:39:eb:7d:ff:1e:74:d4:2a:1b:33:d9:a5:d4: 61:6f:de:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4W8kQKFkfNgRbcdfLWXOqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3M2IwOWI4ZmRlZGU2Y2FiNTI0ZmNhYTNiMzFlNjE2YmEy ZTQ4OTYwHhcNMjYwMTAxMDcwMDM5WhcNMjYwMTAyMDcwMDM5WjAzMTEwLwYDVQQD Eyg2YzU3OGQ4OWIxMzFjNWFkN2ZhZWY2YjBiZmE5YzRkZGRhMjUxYWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyEHw/Q1YbY86OICxLsSTelrl9kA fmHOfPciHSWuHin5eK8mJXOk5C6w+3X39aU5sB/vVEMf5AaOn0GB1s4BYmYKDX21 alX3z2qCEbVpyaNKuZ9CGAjHayeejI2nOf+JYOd0Ha4V9lwohytCMwxVxn0ou3qc 1UQxtboZG0tz/zlZz+lA/yvmqPtXMogNibD2macV8pmLVAPQYxQxQf6VJYkQlUT4 OkSM6G94EaZMFgvX8LQaAqx51trzsRdwkWZHsg97DyDf2/iVeJvCilMvJLYWbicw G4s/PXAhwFQEBJLhBTLh9rG5IG/VZnsEABtWuygjIAFzcNAHbQNwKCx1+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxXjYmxMcWtf672sL+pxN3aJRrpMB8GA1UdIwQY MBaAFEc7Cbj97ebKtST8qjsx5ha6LkiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnpzSnVQM3Q1c3ExSlB5cU96SG1Gcm91U0pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9jMDQ2NzQtZTlhYy00NTQ3LWJjZGEt MjU4ODU0ZTUwY2Y4LzEvUnpzSnVQM3Q1c3ExSlB5cU96SG1Gcm91U0pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9jMDQ2NzQtZTlhYy00NTQ3LWJjZGEtMjU4ODU0ZTUwY2Y4 LzEvUnpzSnVQM3Q1c3ExSlB5cU96SG1Gcm91U0pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibzIdDPq RWyZKRjyCRlw4k0ow3Ma5wCk0uDhicIojUweCSl8bKocvxAssZrhlhH4XZ38HVjA kvAZ4SrTsgaNAfSoy8yjcMjyUnPlHmGJ7aUkCk7G+Gm4l/79XuhRnf7vN8Ir4mNh 0GuzTEIXhY00bjWSSO+bS8Vbqs8MWsw0mrWHAnzj5ws4dWB9XncKTNhV/abNjOZ6 wTZ+3fFtCS4HMckq2C1sya9EyAL4dO6qSUumd9Kx5AS5a6tI6xcOXb90AX/Mkdo7 iWH/Hag0ss/jXPn09RxKszlOA32n+rsGKqHkKUnZ2tLOSx3g3DpiEac5633/HnTU Khsz2aXUYW/eqw== -----END CERTIFICATE-----Generated at Thu Jan 1 14:11:43 2026 by rpki-client