This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft File: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft (raw, json) Hash identifier: I5xdUCWWqDJ6lUk3+XhdZtGE/m9cPh3W71wmrG4nLPM= Subject key identifier: 56:87:78:96:C8:F1:71:AD:19:F3:9A:A0:45:41:AE:E8:1F:A1:9F:BA Authority key identifier: 66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04 Certificate issuer: /CN=6694f5b0fab5fed2df9535e2a9c029f187d55404 Certificate serial: 019BF79AE0AA4C379749D62A0B103473A705 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft Manifest number: 0909 Signing time: Mon 26 Jan 2026 00:01:20 +0000 Manifest this update: Mon 26 Jan 2026 00:01:20 +0000 Manifest next update: Tue 27 Jan 2026 00:01:20 +0000 Files and hashes: 1: PKBAlxhxjbQl3V5bDnuBzljib9Q.roa (hash: eWzoIIDioxxQX7PyiTO6rBCtAXhu7H8TtLvFoqesiBg=) 2: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl (hash: vudTw4VYBaLAL3NAL1cHZIea2xlzcbkI4RbR2iTAd+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:e0:aa:4c:37:97:49:d6:2a:0b:10:34:73:a7:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6694f5b0fab5fed2df9535e2a9c029f187d55404 Validity Not Before: Jan 26 00:01:20 2026 GMT Not After : Jan 27 00:01:20 2026 GMT Subject: CN=56877896c8f171ad19f39aa04541aee81fa19fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:d6:f1:cd:77:f7:be:18:ae:ca:d4:25:ba: 0d:1b:8f:1c:6d:79:93:89:43:6f:ad:b4:3b:50:07: 8f:ca:d1:c3:d6:87:1a:40:c0:a4:50:75:ef:31:76: f9:ce:7b:12:75:9c:00:9e:10:2f:8b:09:de:0d:4d: 15:31:73:14:f4:88:3b:c7:b5:03:6a:75:a0:23:c0: 84:f3:da:fc:14:1d:60:26:66:2a:d0:15:f8:25:85: 45:f2:ed:4f:cf:3e:66:57:3f:a3:2d:48:8a:b9:f5: b2:2f:99:98:95:fa:93:b4:25:aa:ea:65:a5:83:ae: 79:d3:06:b6:7c:86:5c:62:29:24:ba:5d:c8:fd:55: 80:5e:e6:3e:2d:d0:13:8d:d8:19:b5:fb:2c:fc:44: 5e:9f:52:50:b7:f0:e9:dd:bf:a7:f0:59:b1:c1:8e: 89:8d:44:b6:c8:ef:a3:49:c3:c2:22:65:14:e3:6a: 62:bb:3d:33:ba:06:e4:50:43:b7:00:45:97:b7:d1: 63:b9:1f:17:55:22:6c:1a:12:ee:db:87:de:16:c5: 52:24:ab:99:63:c7:c3:0d:5c:3f:59:16:21:39:48: d8:92:01:34:d4:cf:89:0b:48:0e:ec:f9:b1:0e:23: 9a:51:50:72:ae:04:1a:3e:1e:2b:7a:ac:8c:81:d5: 8b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:87:78:96:C8:F1:71:AD:19:F3:9A:A0:45:41:AE:E8:1F:A1:9F:BA X509v3 Authority Key Identifier: keyid:66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:28:c7:ed:1c:c2:11:af:dc:3b:27:00:77:ba:74:41:5e:0a: 37:63:92:74:b2:28:24:92:52:30:23:2e:d9:f2:33:e1:ff:5d: 51:8d:bd:61:10:6d:e4:27:f0:07:87:39:3b:b9:6e:7f:ad:e4: 7b:22:d1:49:e5:c0:75:5b:b5:0a:6c:67:bb:a2:84:c9:23:d5: 42:e3:c7:1a:6a:25:47:f5:0b:69:dd:e9:e1:9d:d0:f7:45:42: b2:a1:7c:50:c2:5b:cb:06:85:80:6c:75:4e:c0:55:80:d9:5c: ea:94:d5:12:af:09:8f:c5:38:2c:11:68:1f:14:29:9b:70:f2: f2:e9:dd:bb:1a:85:63:f8:22:2e:9f:d2:79:07:9a:70:27:98: 1e:7b:4d:5c:24:10:af:cf:2b:40:7d:6c:24:a8:5b:12:d4:d8: c9:fc:c4:f2:b9:e8:90:00:38:aa:e7:99:5c:40:f0:31:9f:98: 75:17:a8:e6:91:8e:07:97:d6:80:45:bd:50:fc:86:ff:27:0b: 1f:c9:1a:d2:0b:02:7b:14:94:ca:78:35:f5:f4:3c:17:28:5e: f9:8f:3b:de:f7:5c:66:36:ec:66:1d:d6:7f:59:15:08:fe:7c: 87:3b:2d:5c:bd:29:db:02:e2:81:26:9b:eb:ec:9b:d5:fe:fb: f7:11:17:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3muCqTDeXSdYqCxA0c6cFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OTRmNWIwZmFiNWZlZDJkZjk1MzVlMmE5YzAyOWYxODdk NTU0MDQwHhcNMjYwMTI2MDAwMTIwWhcNMjYwMTI3MDAwMTIwWjAzMTEwLwYDVQQD Eyg1Njg3Nzg5NmM4ZjE3MWFkMTlmMzlhYTA0NTQxYWVlODFmYTE5ZmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6jW8c13974YrsrUJboNG48cbXmT iUNvrbQ7UAePytHD1ocaQMCkUHXvMXb5znsSdZwAnhAviwneDU0VMXMU9Ig7x7UD anWgI8CE89r8FB1gJmYq0BX4JYVF8u1Pzz5mVz+jLUiKufWyL5mYlfqTtCWq6mWl g6550wa2fIZcYikkul3I/VWAXuY+LdATjdgZtfss/ERen1JQt/Dp3b+n8FmxwY6J jUS2yO+jScPCImUU42piuz0zugbkUEO3AEWXt9FjuR8XVSJsGhLu24feFsVSJKuZ Y8fDDVw/WRYhOUjYkgE01M+JC0gO7PmxDiOaUVByrgQaPh4reqyMgdWLVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaHeJbI8XGtGfOaoEVBrugfoZ+6MB8GA1UdIwQY MBaAFGaU9bD6tf7S35U14qnAKfGH1VQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnBUMXNQcTFfdExmbFRYaXFjQXA4WWZWVkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81YmYzMGQtNjllYi00MWE0LWE5MGQt MjFiOWYxMmQyMmYzLzEvWnBUMXNQcTFfdExmbFRYaXFjQXA4WWZWVkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi81YmYzMGQtNjllYi00MWE0LWE5MGQtMjFiOWYxMmQyMmYz LzEvWnBUMXNQcTFfdExmbFRYaXFjQXA4WWZWVkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALijH7RzC Ea/cOycAd7p0QV4KN2OSdLIoJJJSMCMu2fIz4f9dUY29YRBt5CfwB4c5O7luf63k eyLRSeXAdVu1Cmxnu6KEySPVQuPHGmolR/ULad3p4Z3Q90VCsqF8UMJbywaFgGx1 TsBVgNlc6pTVEq8Jj8U4LBFoHxQpm3Dy8unduxqFY/giLp/SeQeacCeYHntNXCQQ r88rQH1sJKhbEtTYyfzE8rnokAA4queZXEDwMZ+YdReo5pGOB5fWgEW9UPyG/ycL H8ka0gsCexSUyng19fQ8Fyhe+Y873vdcZjbsZh3Wf1kVCP58hzstXL0p2wLigSab 6+yb1f779xEXvw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:35 2026 by rpki-client