This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft File: ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft (raw, json) Hash identifier: gf+eU9anvIKZRb7WfVT7AqQfBhRAcaOpoZPOByUImys= Subject key identifier: 29:A4:EC:5C:DE:E9:5F:9D:2C:86:37:DE:90:F1:64:02:34:35:2F:5E Authority key identifier: 44:EC:ED:E7:E0:FF:BD:30:8A:CB:91:12:13:68:DF:8D:6C:B2:E9:61 Certificate issuer: /CN=44ecede7e0ffbd308acb91121368df8d6cb2e961 Certificate serial: 019B78CA30917A7B965AC45231CE2E5676DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft Manifest number: 17A5 Signing time: Thu 01 Jan 2026 09:01:15 +0000 Manifest this update: Thu 01 Jan 2026 09:01:15 +0000 Manifest next update: Fri 02 Jan 2026 09:01:15 +0000 Files and hashes: 1: ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl (hash: wDLDHS5mum2mObchlZprbqraZUqThUvH3o8hnoFI8UA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:ca:30:91:7a:7b:96:5a:c4:52:31:ce:2e:56:76:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44ecede7e0ffbd308acb91121368df8d6cb2e961 Validity Not Before: Jan 1 09:01:15 2026 GMT Not After : Jan 2 09:01:15 2026 GMT Subject: CN=29a4ec5cdee95f9d2c8637de90f1640234352f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:27:80:2e:18:8e:88:ba:dc:95:bb:62:d8:46: 12:d9:f0:a3:48:48:ed:ac:0f:7c:bf:88:12:95:29: 9a:3b:0e:a8:fb:0b:8c:89:bb:6e:aa:96:36:0a:0d: 77:ac:27:9b:23:76:1a:f2:4c:68:f5:e6:e1:29:25: 73:f3:b7:ac:fd:eb:af:5a:63:4b:44:f0:8d:4c:91: 83:c0:fb:70:10:b9:80:13:65:e8:f1:78:43:b5:15: 1c:f0:33:0b:a4:fb:ef:c1:1a:c4:a4:40:f3:16:1d: 73:b4:20:fb:fe:18:53:3b:d8:31:60:11:ce:9f:73: e5:dd:ff:88:00:a6:b4:a9:12:6e:53:dc:4a:4f:8c: ff:5c:ad:a9:62:b7:f7:c2:d1:a9:c6:f2:36:20:1d: 06:0f:04:09:91:88:63:52:36:c1:d3:fa:ba:53:e2: 91:3c:e3:7a:35:6f:62:b4:cb:3e:b9:7e:28:a9:76: be:d9:d4:46:ce:76:3e:f5:3c:d5:04:6e:0d:d7:43: be:39:40:93:05:6b:a9:33:0f:7c:b7:1c:78:5a:d1: 56:26:1e:50:31:ad:90:9a:2a:a7:3b:af:e8:fc:62: bb:d6:28:43:ae:77:1e:ea:e2:71:a1:43:b4:28:65: af:19:1e:20:54:3b:87:01:a9:3c:02:79:d3:35:14: da:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A4:EC:5C:DE:E9:5F:9D:2C:86:37:DE:90:F1:64:02:34:35:2F:5E X509v3 Authority Key Identifier: keyid:44:EC:ED:E7:E0:FF:BD:30:8A:CB:91:12:13:68:DF:8D:6C:B2:E9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ba:76:a6:72:4e:1a:88:2b:44:82:14:57:44:37:cc:62:db: 05:b3:bd:4e:6c:a3:88:7a:98:55:56:cb:47:92:2f:aa:05:98: 95:e6:ad:91:1c:97:9a:e1:1d:b5:44:02:42:f8:fc:dd:d3:fa: 19:3b:9b:91:ee:2e:ae:24:7b:a3:95:4c:09:65:f3:ca:49:2e: 58:91:ff:10:62:c4:21:b5:a1:78:04:1d:a3:c3:b2:82:88:23: 83:1d:08:d6:35:64:87:65:98:a3:43:25:30:47:ec:05:95:d1: 0c:b6:44:03:ab:6f:e3:0f:a8:99:7f:7e:de:14:89:b8:d9:f1: 18:d0:fd:6f:5a:1a:b5:29:c4:e1:a2:76:e3:b1:46:eb:b1:3e: c2:94:8a:5d:26:9b:6d:9a:93:0d:1f:ff:35:7b:e5:6c:93:70: 44:f3:bf:f1:0f:6f:8c:f4:ea:7b:93:e0:71:9f:39:be:64:cf: 0c:b5:58:40:6e:07:81:1f:7b:cd:93:6b:7f:45:a5:3a:79:89: 98:60:c0:02:86:7b:90:f5:58:40:bd:98:70:81:7d:8d:ba:33: 9e:1b:ce:bb:ed:67:e4:3d:d9:68:39:f1:eb:d0:76:c1:5f:b8: f7:f5:60:bd:c6:84:9f:be:dd:f2:aa:6b:d5:08:3f:d8:af:79: ad:ba:5c:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4yjCRenuWWsRSMc4uVnbeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZWNlZGU3ZTBmZmJkMzA4YWNiOTExMjEzNjhkZjhkNmNi MmU5NjEwHhcNMjYwMTAxMDkwMTE1WhcNMjYwMTAyMDkwMTE1WjAzMTEwLwYDVQQD EygyOWE0ZWM1Y2RlZTk1ZjlkMmM4NjM3ZGU5MGYxNjQwMjM0MzUyZjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSeALhiOiLrclbti2EYS2fCjSEjt rA98v4gSlSmaOw6o+wuMibtuqpY2Cg13rCebI3Ya8kxo9ebhKSVz87es/euvWmNL RPCNTJGDwPtwELmAE2Xo8XhDtRUc8DMLpPvvwRrEpEDzFh1ztCD7/hhTO9gxYBHO n3Pl3f+IAKa0qRJuU9xKT4z/XK2pYrf3wtGpxvI2IB0GDwQJkYhjUjbB0/q6U+KR PON6NW9itMs+uX4oqXa+2dRGznY+9TzVBG4N10O+OUCTBWupMw98txx4WtFWJh5Q Ma2QmiqnO6/o/GK71ihDrnce6uJxoUO0KGWvGR4gVDuHAak8AnnTNRTazQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmk7Fze6V+dLIY33pDxZAI0NS9eMB8GA1UdIwQY MBaAFETs7efg/70wisuREhNo341ssulhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk96dDUtRF92VENLeTVFU0UyamZqV3l5NldFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80MzkyNzUtMzBiZi00ZjYxLWI0ZDUt ODA5MzBiMjg0YTY5LzEvUk96dDUtRF92VENLeTVFU0UyamZqV3l5NldFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy80MzkyNzUtMzBiZi00ZjYxLWI0ZDUtODA5MzBiMjg0YTY5 LzEvUk96dDUtRF92VENLeTVFU0UyamZqV3l5NldFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObp2pnJO GogrRIIUV0Q3zGLbBbO9TmyjiHqYVVbLR5IvqgWYleatkRyXmuEdtUQCQvj83dP6 GTubke4uriR7o5VMCWXzykkuWJH/EGLEIbWheAQdo8Oygogjgx0I1jVkh2WYo0Ml MEfsBZXRDLZEA6tv4w+omX9+3hSJuNnxGND9b1oatSnE4aJ247FG67E+wpSKXSab bZqTDR//NXvlbJNwRPO/8Q9vjPTqe5PgcZ85vmTPDLVYQG4HgR97zZNrf0WlOnmJ mGDAAoZ7kPVYQL2YcIF9jboznhvOu+1n5D3ZaDnx69B2wV+49/VgvcaEn77d8qpr 1Qg/2K95rbpchg== -----END CERTIFICATE-----Generated at Thu Jan 1 18:00:16 2026 by rpki-client