This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json) Hash identifier: 95RQOXQkN4damsuusKSJ+kkF+kMj197nA8JwfrDYWvU= Subject key identifier: DE:D2:62:65:89:19:BD:82:63:C0:8D:F1:DA:D0:BA:3D:22:57:11:77 Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27 Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827 Certificate serial: 019BF6F5DF219A645F3F80B30D3656997CD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft Manifest number: 03FC Signing time: Sun 25 Jan 2026 21:01:07 +0000 Manifest this update: Sun 25 Jan 2026 21:01:07 +0000 Manifest next update: Mon 26 Jan 2026 21:01:07 +0000 Files and hashes: 1: PZvM7OV3HBSDzuz3mBSkNgZPzmc.roa (hash: kJSRxmzdiI7BIFbxUX/bJ1SrkVhLp4C99F6EL5K5kVE=) 2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: 6IquZq87a0fE+nZvPZsFeLYjv9XXciabf3/VM5P7cwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:df:21:9a:64:5f:3f:80:b3:0d:36:56:99:7c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827 Validity Not Before: Jan 25 21:01:07 2026 GMT Not After : Jan 26 21:01:07 2026 GMT Subject: CN=ded262658919bd8263c08df1dad0ba3d22571177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:24:53:6f:bc:a4:bb:7e:26:e2:ea:94:cf:4f: 6e:eb:22:e7:47:bf:98:d2:f5:75:a4:be:cd:2b:c5: ac:e4:10:10:36:eb:53:cf:3d:de:96:3d:13:3e:bf: 3d:12:64:95:88:c7:ae:7d:31:2f:bf:7f:91:e6:e5: 00:8e:9c:a5:2a:da:a0:06:33:c9:77:85:2c:dd:a2: 3e:cf:a0:8b:d9:7e:5b:0a:8a:7d:9c:b9:8e:8b:b9: 1f:67:e3:23:d2:2e:b2:43:6b:00:1c:76:78:c4:da: eb:7e:56:7a:eb:fa:27:97:4d:0a:09:7f:19:4b:69: 8b:56:99:4d:60:ba:16:67:d0:57:e1:85:85:00:76: 43:e4:3c:25:ff:e2:1a:16:36:d8:e4:aa:c1:35:15: e3:5b:71:43:67:8e:8f:0a:c1:ec:3f:49:84:e0:c6: 3c:d5:b4:1c:03:6c:2f:f7:20:ee:a7:f4:27:9b:cf: dd:7e:95:60:26:de:bd:7f:f7:db:04:52:26:46:e4: fe:7c:dd:7a:6f:de:e7:42:2e:be:bf:30:8d:b6:46: 75:74:ff:ea:c5:03:e7:52:e5:7e:81:60:ca:db:20: 9a:e5:f5:3a:e0:4c:b6:e2:3c:24:68:aa:9d:9c:89: aa:27:52:96:ec:7a:07:2d:01:a0:af:f1:92:cd:61: 09:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D2:62:65:89:19:BD:82:63:C0:8D:F1:DA:D0:BA:3D:22:57:11:77 X509v3 Authority Key Identifier: keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:7c:be:75:1d:37:42:5a:be:9d:b0:19:aa:35:91:b7:7e:50: ac:dc:5f:96:ea:ed:4c:99:bf:4b:53:cd:46:e9:fa:eb:95:ce: 2a:5e:f1:c2:29:4d:39:a1:f8:dd:83:05:d7:c3:e6:c9:ad:64: a0:0e:29:80:78:37:2b:b8:aa:94:c1:48:b0:68:9b:62:18:9b: 92:0b:91:04:8c:57:c0:1d:5e:10:e1:33:7e:3a:37:58:e7:88: 18:d6:4e:76:ec:4b:9d:b9:18:38:7d:2c:67:60:29:20:e4:bc: a7:c4:d9:51:61:65:42:83:b3:60:a4:4b:d3:a5:12:ef:98:69: 4b:53:1f:0a:09:a7:f0:57:80:6c:6b:b7:9b:af:4f:b6:08:e4: ea:82:57:87:61:20:43:2f:2f:25:c5:e2:13:f0:2d:90:fd:40: ff:45:31:38:83:4b:cb:d4:33:f3:59:3b:ef:cf:70:32:e7:f8: 3a:e6:0d:6c:fb:cf:6e:ca:97:93:cc:07:10:a5:df:80:1c:51: 51:ec:aa:59:8b:be:76:18:59:53:87:6a:53:36:2a:d7:f3:c1: 0f:79:f7:c4:6c:fd:5c:54:c4:60:72:25:16:b7:18:0c:86:c2: 4f:de:25:41:77:a3:73:12:5e:bd:c8:87:c3:3f:84:f2:b9:bb: 90:c2:9b:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29d8hmmRfP4CzDTZWmXzUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMTI4MDExOWY0NDBlYjk5YzFlNjRkNzM1ZjJkYjFlZmNm OTM4MjcwHhcNMjYwMTI1MjEwMTA3WhcNMjYwMTI2MjEwMTA3WjAzMTEwLwYDVQQD EyhkZWQyNjI2NTg5MTliZDgyNjNjMDhkZjFkYWQwYmEzZDIyNTcxMTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iRTb7yku34m4uqUz09u6yLnR7+Y 0vV1pL7NK8Ws5BAQNutTzz3elj0TPr89EmSViMeufTEvv3+R5uUAjpylKtqgBjPJ d4Us3aI+z6CL2X5bCop9nLmOi7kfZ+Mj0i6yQ2sAHHZ4xNrrflZ66/onl00KCX8Z S2mLVplNYLoWZ9BX4YWFAHZD5Dwl/+IaFjbY5KrBNRXjW3FDZ46PCsHsP0mE4MY8 1bQcA2wv9yDup/Qnm8/dfpVgJt69f/fbBFImRuT+fN16b97nQi6+vzCNtkZ1dP/q xQPnUuV+gWDK2yCa5fU64Ey24jwkaKqdnImqJ1KW7HoHLQGgr/GSzWEJowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7SYmWJGb2CY8CN8drQuj0iVxF3MB8GA1UdIwQY MBaAFM8SgBGfRA65nB5k1zXy2x78+TgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDIt ZDIzNmQ5NmNjMmFmLzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDItZDIzNmQ5NmNjMmFm LzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWny+dR03 Qlq+nbAZqjWRt35QrNxflurtTJm/S1PNRun665XOKl7xwilNOaH43YMF18Pmya1k oA4pgHg3K7iqlMFIsGibYhibkguRBIxXwB1eEOEzfjo3WOeIGNZOduxLnbkYOH0s Z2ApIOS8p8TZUWFlQoOzYKRL06US75hpS1MfCgmn8FeAbGu3m69Ptgjk6oJXh2Eg Qy8vJcXiE/AtkP1A/0UxOINLy9Qz81k7789wMuf4OuYNbPvPbsqXk8wHEKXfgBxR UeyqWYu+dhhZU4dqUzYq1/PBD3n3xGz9XFTEYHIlFrcYDIbCT94lQXejcxJevciH wz+E8rm7kMKbSw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:11:46 2026 by rpki-client