This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft File: 0zWMPscfwZpqyYRrr03lmDY1cpM.mft (raw, json) Hash identifier: mMW3u0v31/M9mItKRf1dMkhxb8wHjaMbtGmY1bGO3Zw= Subject key identifier: 83:71:F8:F6:26:D8:19:96:C0:A6:B9:D5:B4:B8:29:2B:A0:8A:AB:FA Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93 Certificate issuer: /CN=d3358c3ec71fc19a6ac9846baf4de59836357293 Certificate serial: 019B981E265174CD5C049AF4E059FDD050BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft Manifest number: 1749 Signing time: Wed 07 Jan 2026 11:01:11 +0000 Manifest this update: Wed 07 Jan 2026 11:01:11 +0000 Manifest next update: Thu 08 Jan 2026 11:01:11 +0000 Files and hashes: 1: 0zWMPscfwZpqyYRrr03lmDY1cpM.crl (hash: x0OrTeeiSNcR6CX8slF1JozJQWFlsBueoOUTIRLpKPo=) 2: kd2XyIAA-MPLC2WR1qBq8uj_YCs.roa (hash: Pu4TD0igNqCoga7095gS2kWNo5RYGEJpD46HuH2Gwbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:98:1e:26:51:74:cd:5c:04:9a:f4:e0:59:fd:d0:50:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293 Validity Not Before: Jan 7 11:01:11 2026 GMT Not After : Jan 8 11:01:11 2026 GMT Subject: CN=8371f8f626d81996c0a6b9d5b4b8292ba08aabfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c4:3b:d5:7c:44:3e:5e:88:e1:39:7e:e1:ba: a1:ae:25:50:00:c8:ff:a2:a8:43:9e:2a:0f:31:b0: 87:b6:71:84:62:77:c7:24:8d:4c:62:96:b7:5e:05: 34:86:b3:74:d8:cb:54:87:e9:77:0c:a7:02:1c:c1: 89:69:6b:37:d4:9a:de:b4:ff:6b:8a:11:8b:50:6e: df:b3:2a:3c:96:d6:b9:63:df:7c:24:a7:df:1c:04: 38:03:cb:d8:92:9d:dd:e8:90:d5:ec:1e:4a:94:5d: df:e1:6f:85:ad:69:4c:cb:27:6a:1c:47:64:f0:b2: f2:9e:50:fd:a3:66:f2:0f:3b:1a:a9:ed:0c:f1:07: ae:8b:60:05:a0:fe:2a:6c:2e:9b:4f:40:c2:83:1e: 4f:08:7e:44:97:cd:d1:87:a1:a6:c5:b8:62:02:43: 16:d6:a9:e7:64:f2:80:b3:57:87:e0:0a:45:3c:4f: 40:c0:be:9a:c2:03:51:d7:1b:92:62:a5:45:3f:70: b0:0e:d2:1d:fd:8c:e3:c3:e8:7e:1b:1c:f7:fc:1b: 50:68:7d:10:69:02:6f:ee:29:d6:c8:33:f9:b1:8d: f5:9d:5c:7a:0e:d1:70:7c:43:00:4f:61:5d:84:00: 60:c5:55:51:9d:1a:03:c6:b1:c4:c2:73:80:e2:95: 42:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:71:F8:F6:26:D8:19:96:C0:A6:B9:D5:B4:B8:29:2B:A0:8A:AB:FA X509v3 Authority Key Identifier: keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:95:6a:27:cf:a6:fe:d9:b0:52:c5:5a:a0:84:38:ea:28:c7: f9:0b:fc:c1:f6:79:f6:0d:fa:a2:ae:73:aa:7c:3c:d7:7b:c0: a5:4d:d0:ce:53:86:1e:0e:ab:24:44:bd:d0:97:2d:ae:43:fa: a3:4b:a5:84:e7:b5:b8:fc:79:99:3e:60:7e:52:56:08:6d:8c: 8d:15:43:87:eb:51:79:18:e9:03:8a:46:24:23:68:44:18:b5: 75:a4:33:ce:60:bd:08:0a:8b:c7:de:79:a5:5d:e9:49:73:0e: 9f:d6:f2:bc:6e:f3:d2:e7:79:bc:f6:9a:37:01:23:d0:18:f6: 5d:a6:65:04:58:4f:a6:7e:5e:1c:c0:47:3c:ed:9f:e5:82:a2: 2a:bc:05:2b:21:c1:64:b1:64:b1:26:b7:b5:43:65:6d:46:68: 77:e3:f8:b6:a4:19:b4:2c:b1:aa:30:0c:67:4c:e3:af:f5:f1: 6f:25:a8:7b:60:d2:4f:de:fa:e8:55:8b:22:d8:d2:a7:81:02: 25:cf:c0:a2:c9:a9:1d:55:b3:8e:97:4e:2f:f4:cd:14:7b:0d: f3:73:0c:84:d3:8d:63:ba:f7:db:f8:bc:c4:f0:b7:26:f5:12: d4:27:d3:4a:33:75:72:58:3e:45:d3:fe:a0:f2:d8:d1:7d:e6: 7c:55:a5:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuYHiZRdM1cBJr04Fn90FC6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMzU4YzNlYzcxZmMxOWE2YWM5ODQ2YmFmNGRlNTk4MzYz NTcyOTMwHhcNMjYwMTA3MTEwMTExWhcNMjYwMTA4MTEwMTExWjAzMTEwLwYDVQQD Eyg4MzcxZjhmNjI2ZDgxOTk2YzBhNmI5ZDViNGI4MjkyYmEwOGFhYmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMQ71XxEPl6I4Tl+4bqhriVQAMj/ oqhDnioPMbCHtnGEYnfHJI1MYpa3XgU0hrN02MtUh+l3DKcCHMGJaWs31JretP9r ihGLUG7fsyo8lta5Y998JKffHAQ4A8vYkp3d6JDV7B5KlF3f4W+FrWlMyydqHEdk 8LLynlD9o2byDzsaqe0M8Qeui2AFoP4qbC6bT0DCgx5PCH5El83Rh6GmxbhiAkMW 1qnnZPKAs1eH4ApFPE9AwL6awgNR1xuSYqVFP3CwDtId/Yzjw+h+Gxz3/BtQaH0Q aQJv7inWyDP5sY31nVx6DtFwfEMAT2FdhABgxVVRnRoDxrHEwnOA4pVCgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINx+PYm2BmWwKa51bS4KSugiqv6MB8GA1UdIwQY MBaAFNM1jD7HH8GaasmEa69N5Zg2NXKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kMDFkNTgtNTQxOC00MjE3LTg5YWUt MjNhODRlZWRkOTU2LzEvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kMDFkNTgtNTQxOC00MjE3LTg5YWUtMjNhODRlZWRkOTU2 LzEvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJVqJ8+m /tmwUsVaoIQ46ijH+Qv8wfZ59g36oq5zqnw813vApU3QzlOGHg6rJES90JctrkP6 o0ulhOe1uPx5mT5gflJWCG2MjRVDh+tReRjpA4pGJCNoRBi1daQzzmC9CAqLx955 pV3pSXMOn9byvG7z0ud5vPaaNwEj0Bj2XaZlBFhPpn5eHMBHPO2f5YKiKrwFKyHB ZLFksSa3tUNlbUZod+P4tqQZtCyxqjAMZ0zjr/XxbyWoe2DST9766FWLItjSp4EC Jc/AosmpHVWzjpdOL/TNFHsN83MMhNONY7r32/i8xPC3JvUS1CfTSjN1clg+RdP+ oPLY0X3mfFWllA== -----END CERTIFICATE-----Generated at Wed Jan 7 15:32:42 2026 by rpki-client