This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft File: zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft (raw, json) Hash identifier: nugAKnb6TxQBWPZM+NPH3q0b/2TMhNgl16m4l9oR56M= Subject key identifier: F1:5B:B3:B7:61:2C:CC:13:4F:40:C5:46:CF:76:6B:39:82:86:49:14 Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e Certificate serial: 019BF8AD5765BB4FEBA1ADDDA0637C6C7E40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft Manifest number: 1168 Signing time: Mon 26 Jan 2026 05:01:08 +0000 Manifest this update: Mon 26 Jan 2026 05:01:08 +0000 Manifest next update: Tue 27 Jan 2026 05:01:08 +0000 Files and hashes: 1: a0kN2gfK01wMuqhoW-MZjPAbstc.roa (hash: mmiujuewrIIcuNRFw3juwDDGpDhJAvUuobcjAggyfUE=) 2: zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl (hash: 3u9pOI1tY79jmnoRV6G6r/iHPd1LgiEKA0uJXEUSroA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:57:65:bb:4f:eb:a1:ad:dd:a0:63:7c:6c:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e Validity Not Before: Jan 26 05:01:08 2026 GMT Not After : Jan 27 05:01:08 2026 GMT Subject: CN=f15bb3b7612ccc134f40c546cf766b3982864914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:73:00:e8:4a:dc:fb:14:76:7e:25:55:ad:98: c2:c0:82:73:4b:ab:79:17:cc:52:75:71:d2:b4:75: 61:a4:de:3f:89:ae:57:a2:b3:52:8f:75:1e:66:62: 36:e0:ff:bc:e7:96:bf:14:34:b3:6e:50:53:b3:a9: 97:3b:3b:2a:94:b2:44:44:01:58:a9:f6:16:2a:e5: b0:bc:8a:04:d5:8a:5a:07:70:40:eb:ed:70:65:55: 90:a3:6a:b4:71:0e:ab:06:fd:49:97:55:8f:ee:a5: 1d:b0:96:c5:be:7a:91:65:23:80:fe:64:98:b8:1a: 0b:ba:7b:b3:5d:1b:31:7f:a1:82:23:eb:03:b4:39: bd:fe:0c:25:90:17:87:84:f8:a5:bc:e4:8f:f2:02: d7:f0:e0:3d:a7:6d:2d:07:b8:3b:0b:b0:0e:41:d5: 72:e3:cd:6a:ec:a4:55:5a:6f:03:5c:17:a0:49:f1: 86:86:f7:c3:b4:e4:14:84:2e:ed:2f:84:d2:a1:5a: fd:9d:f7:f4:bc:b1:a6:53:11:51:c9:46:d2:19:d3: fe:0d:cb:2d:4e:96:91:0c:fb:56:5c:ef:a5:45:25: 30:b5:2f:60:88:71:04:76:9b:91:c9:d9:16:78:c7: 70:b9:75:09:d6:c2:2d:b6:4b:9f:f7:ce:ae:76:53: 38:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5B:B3:B7:61:2C:CC:13:4F:40:C5:46:CF:76:6B:39:82:86:49:14 X509v3 Authority Key Identifier: keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:19:7e:a6:ed:57:a4:c3:6b:9b:f6:15:7d:be:13:db:42:20: 73:ba:72:e4:0a:b5:c3:e2:60:fe:2a:2a:8a:33:13:c8:e6:25: c1:a1:fa:54:34:12:66:09:01:60:50:7c:7e:aa:9c:2e:86:93: 0d:91:71:df:62:d7:e8:db:9d:58:22:31:f9:72:7c:7a:df:c8: ef:f2:64:79:3c:05:37:90:31:89:f5:2e:ba:29:fb:2a:2d:be: de:63:c7:4d:1f:19:51:36:70:6b:94:8a:41:d8:24:cb:93:c2: 45:cd:fa:cb:7f:84:c9:b1:dd:88:f5:70:1e:d1:93:db:dd:b8: 8a:1a:e8:3a:8b:d6:78:78:93:ee:cf:7e:92:f7:95:b5:88:d2: f4:b5:2f:4a:1c:95:6e:96:3a:3d:db:ee:b9:c6:39:ee:48:9a: 49:5f:d2:46:18:b6:7d:0e:ca:04:03:34:50:4a:d9:cd:47:aa: 6b:95:b2:ea:9a:62:54:9c:33:96:16:f7:71:3b:af:ec:c3:8e: 68:bd:40:85:0e:bf:dc:83:7c:ea:25:ea:bc:f3:80:28:e7:4e: 77:e6:f9:4e:d7:1a:20:ce:69:55:de:bc:13:be:54:c0:43:fd: c7:35:8a:5d:b5:ed:7e:fb:84:15:cd:6e:c1:1a:68:50:a0:cb: 4b:e2:9e:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rVdlu0/roa3doGN8bH5AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMzA4N2NjNzAyYzhkOTM1M2ZlNzhmNzkzMjQ0MGI3ZTg0 MmZjNmUwHhcNMjYwMTI2MDUwMTA4WhcNMjYwMTI3MDUwMTA4WjAzMTEwLwYDVQQD EyhmMTViYjNiNzYxMmNjYzEzNGY0MGM1NDZjZjc2NmIzOTgyODY0OTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3MA6Erc+xR2fiVVrZjCwIJzS6t5 F8xSdXHStHVhpN4/ia5XorNSj3UeZmI24P+855a/FDSzblBTs6mXOzsqlLJERAFY qfYWKuWwvIoE1YpaB3BA6+1wZVWQo2q0cQ6rBv1Jl1WP7qUdsJbFvnqRZSOA/mSY uBoLunuzXRsxf6GCI+sDtDm9/gwlkBeHhPilvOSP8gLX8OA9p20tB7g7C7AOQdVy 481q7KRVWm8DXBegSfGGhvfDtOQUhC7tL4TSoVr9nff0vLGmUxFRyUbSGdP+Dcst TpaRDPtWXO+lRSUwtS9giHEEdpuRydkWeMdwuXUJ1sIttkuf986udlM4kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFbs7dhLMwTT0DFRs92azmChkkUMB8GA1UdIwQY MBaAFM0wh8xwLI2TU/5495MkQLfoQvxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wNThhYTUtNjQ5NC00NTk1LTgxOWIt ZjA4ZDcxYzRmM2RiLzEvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8wNThhYTUtNjQ5NC00NTk1LTgxOWItZjA4ZDcxYzRmM2Ri LzEvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBl+pu1X pMNrm/YVfb4T20Igc7py5Aq1w+Jg/ioqijMTyOYlwaH6VDQSZgkBYFB8fqqcLoaT DZFx32LX6NudWCIx+XJ8et/I7/JkeTwFN5AxifUuuin7Ki2+3mPHTR8ZUTZwa5SK Qdgky5PCRc36y3+EybHdiPVwHtGT2924ihroOovWeHiT7s9+kveVtYjS9LUvShyV bpY6PdvuucY57kiaSV/SRhi2fQ7KBAM0UErZzUeqa5Wy6ppiVJwzlhb3cTuv7MOO aL1AhQ6/3IN86iXqvPOAKOdOd+b5TtcaIM5pVd68E75UwEP9xzWKXbXtfvuEFc1u wRpoUKDLS+KeBA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:48:25 2026 by rpki-client