This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft File: Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft (raw, json) Hash identifier: /7tL0S4NlpEOZxd8oFQ2YGVshqIsRfa5aHmxaAaWTqk= Subject key identifier: B8:12:85:F9:5F:F4:52:A9:B3:02:9A:58:7B:29:93:48:3E:39:73:1E Authority key identifier: 47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3 Certificate issuer: /CN=473f498592457859f26fb5a610b7b51ef52413f3 Certificate serial: 019B9BFB582CC480322C5A6B5221B2993FF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft Manifest number: 092D Signing time: Thu 08 Jan 2026 05:01:39 +0000 Manifest this update: Thu 08 Jan 2026 05:01:39 +0000 Manifest next update: Fri 09 Jan 2026 05:01:39 +0000 Files and hashes: 1: Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl (hash: GvUMxen4YB7t6mqG2AMqqK3vxR3ylSKhlyul+Cocib0=) 2: hSwUOwAMED0n18PsqXIxOxQYAlQ.roa (hash: DbjICHwW8+pnzPKc7pAGSBb3/bjUMmNtreKRXOAvuXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9b:fb:58:2c:c4:80:32:2c:5a:6b:52:21:b2:99:3f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473f498592457859f26fb5a610b7b51ef52413f3 Validity Not Before: Jan 8 05:01:39 2026 GMT Not After : Jan 9 05:01:39 2026 GMT Subject: CN=b81285f95ff452a9b3029a587b2993483e39731e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4b:55:3b:cb:38:5c:a7:fe:fd:25:de:4f:b6: ef:17:e4:8a:ba:aa:a1:19:7a:39:00:9b:20:1c:ad: a3:0b:c0:94:90:65:26:29:34:09:4d:7a:e6:45:f8: a0:02:d5:14:d7:dd:82:26:56:95:6e:86:a6:a4:d3: 1b:9f:09:c8:a0:d3:ed:a2:91:e0:32:c9:e4:05:a2: 41:61:fe:c3:e7:e8:f0:7b:e7:2c:0e:b4:e4:40:12: 52:47:c6:61:c0:a5:c9:47:70:b3:01:c8:0a:da:f4: 9c:7c:c3:3c:5e:73:83:6d:22:d2:17:d1:00:4e:3a: 4e:07:c5:41:f6:2e:e3:4b:c0:f5:e2:b2:47:a0:f5: cc:38:a8:7e:20:1e:8e:16:ac:d5:e3:ee:d4:8c:ce: ff:3f:11:72:3f:9d:88:cd:6d:f7:39:e1:d9:bf:08: 5a:04:12:6e:84:ca:0e:ea:ec:fa:ee:e6:72:95:eb: e0:97:ff:bc:e9:66:a6:43:95:46:17:f6:cc:4b:e7: c1:ca:37:f2:08:d4:99:b8:ca:fc:3e:90:bd:65:a9: c9:c4:ac:f7:86:2e:1f:43:8b:cc:37:a3:ae:cb:b1: 5d:0f:f0:d9:1f:0a:ff:cc:6b:39:2f:c3:2d:e9:45: de:a1:05:cd:ca:1e:5c:01:a8:b2:2b:ad:56:d6:61: 4b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:12:85:F9:5F:F4:52:A9:B3:02:9A:58:7B:29:93:48:3E:39:73:1E X509v3 Authority Key Identifier: keyid:47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d2:0e:df:49:d9:83:e9:37:9c:9b:e1:bb:be:3a:2a:3e:00: 56:0c:09:36:e2:9a:ba:e2:2e:c6:73:dc:bb:c1:27:5f:67:3e: eb:ae:d5:10:16:22:3e:dd:1f:31:a4:39:0b:93:14:92:1f:bd: 63:12:ec:1f:a6:ef:35:d5:20:f1:17:77:4a:58:26:82:86:99: 3e:2c:8c:25:db:d7:e1:db:57:b9:26:3a:45:1f:ed:b2:be:68: 9d:e1:b2:ac:0b:d3:8c:e4:40:07:a5:0d:fd:71:dd:eb:34:88: 6d:90:46:19:cc:bc:35:c1:3c:81:f9:37:0f:d8:81:64:d1:52: 7c:b9:d5:4d:c3:e1:25:35:51:d0:eb:6d:99:d1:6f:3a:f7:fb: da:b8:cc:b0:a2:ea:b0:16:81:4e:09:bf:ee:21:4a:07:c8:7a: ba:0d:59:d7:28:a6:14:de:9a:0d:8d:4d:19:b0:b2:12:36:0c: 99:1c:df:15:c5:39:35:59:6d:2b:e0:b2:79:4f:12:bc:b0:5d: 05:8e:53:90:63:16:9b:72:0d:77:e5:54:4f:03:91:54:24:94: 99:c1:ad:f1:32:2b:4b:45:c5:96:7d:f9:98:b0:72:55:3e:19: 4e:bc:06:04:1f:83:fa:14:b0:8a:e7:81:aa:8a:f1:ea:a0:60: 54:c7:24:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZub+1gsxIAyLFprUiGymT/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3M2Y0OTg1OTI0NTc4NTlmMjZmYjVhNjEwYjdiNTFlZjUy NDEzZjMwHhcNMjYwMTA4MDUwMTM5WhcNMjYwMTA5MDUwMTM5WjAzMTEwLwYDVQQD EyhiODEyODVmOTVmZjQ1MmE5YjMwMjlhNTg3YjI5OTM0ODNlMzk3MzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsktVO8s4XKf+/SXeT7bvF+SKuqqh GXo5AJsgHK2jC8CUkGUmKTQJTXrmRfigAtUU192CJlaVboampNMbnwnIoNPtopHg MsnkBaJBYf7D5+jwe+csDrTkQBJSR8ZhwKXJR3CzAcgK2vScfMM8XnODbSLSF9EA TjpOB8VB9i7jS8D14rJHoPXMOKh+IB6OFqzV4+7UjM7/PxFyP52IzW33OeHZvwha BBJuhMoO6uz67uZylevgl/+86WamQ5VGF/bMS+fByjfyCNSZuMr8PpC9ZanJxKz3 hi4fQ4vMN6Ouy7FdD/DZHwr/zGs5L8Mt6UXeoQXNyh5cAaiyK61W1mFLqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgShflf9FKpswKaWHspk0g+OXMeMB8GA1UdIwQY MBaAFEc/SYWSRXhZ8m+1phC3tR71JBPzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUno5SmhaSkZlRm55YjdXbUVMZTFIdlVrRV9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80MjgyMzctZWZkNy00NzI2LTkwY2Et ZjhmNDkyYWY0ODBlLzEvUno5SmhaSkZlRm55YjdXbUVMZTFIdlVrRV9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS80MjgyMzctZWZkNy00NzI2LTkwY2EtZjhmNDkyYWY0ODBl LzEvUno5SmhaSkZlRm55YjdXbUVMZTFIdlVrRV9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASNIO30nZ g+k3nJvhu746Kj4AVgwJNuKauuIuxnPcu8EnX2c+667VEBYiPt0fMaQ5C5MUkh+9 YxLsH6bvNdUg8Rd3SlgmgoaZPiyMJdvX4dtXuSY6RR/tsr5oneGyrAvTjORAB6UN /XHd6zSIbZBGGcy8NcE8gfk3D9iBZNFSfLnVTcPhJTVR0OttmdFvOvf72rjMsKLq sBaBTgm/7iFKB8h6ug1Z1yimFN6aDY1NGbCyEjYMmRzfFcU5NVltK+CyeU8SvLBd BY5TkGMWm3INd+VUTwORVCSUmcGt8TIrS0XFln35mLByVT4ZTrwGBB+D+hSwiueB qorx6qBgVMckLw== -----END CERTIFICATE-----Generated at Thu Jan 8 11:06:30 2026 by rpki-client