This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json) Hash identifier: M5FPGzqOiF7xYVSxsrM3GQSfS60/eGho3pWy/S0aLA8= Subject key identifier: BD:F9:77:D0:48:42:59:06:3C:EB:81:3F:45:D9:15:F6:6A:BD:C7:88 Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05 Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305 Certificate serial: 019BF763D38A16A6F5C5645AFEEC2D543EE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft Manifest number: 0BFD Signing time: Sun 25 Jan 2026 23:01:13 +0000 Manifest this update: Sun 25 Jan 2026 23:01:13 +0000 Manifest next update: Mon 26 Jan 2026 23:01:13 +0000 Files and hashes: 1: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: 6BUzF3M4D5E/QsUu0iFsW0q80Y4uh833MlP3+B50VTw=) 2: bb1B8Fy2_C2bqbD9N4RRbHoFAbA.roa (hash: l0MLPIfI2aVoXdO47UK4RJDxoIk9MxZKupnuOkrWUdk=) 3: dcTwMDgwodHIo-S4yL4e4K41UJY.roa (hash: eMv2nsim1YJjG+0E2GpZFtw7b5BwXygPOnj8sq0+Gcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:d3:8a:16:a6:f5:c5:64:5a:fe:ec:2d:54:3e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66501165645aa80dcba315885cf374acb6d21305 Validity Not Before: Jan 25 23:01:13 2026 GMT Not After : Jan 26 23:01:13 2026 GMT Subject: CN=bdf977d0484259063ceb813f45d915f66abdc788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:23:90:83:ab:ec:ba:b6:1a:73:34:5e:98:22: d5:bc:a0:44:fe:a1:24:5a:43:68:c5:3b:b4:c1:88: 4d:5b:40:97:12:6d:02:17:d7:01:93:c9:36:eb:b2: a0:ad:69:16:55:4d:61:49:1f:72:64:c3:99:84:50: d6:36:74:49:20:1a:28:4c:c6:26:b9:0f:c8:59:fb: 06:f3:cb:dd:9d:50:b6:97:8d:5d:6e:f7:f1:4f:45: 94:ea:f8:27:06:e2:cd:6d:b2:5c:97:05:22:4b:90: 67:31:4f:00:d1:e5:b0:fc:9e:76:57:12:4e:1a:e8: fd:d1:e4:23:55:ab:da:49:ce:ab:83:93:62:9f:8f: a0:a9:23:0c:3e:54:3d:b9:09:76:7e:c8:b5:39:97: 9d:d9:27:fc:86:66:92:17:d8:31:0f:9b:f1:04:5c: 71:9e:21:80:82:3c:63:27:c2:06:f5:34:8d:24:cc: 76:35:b8:76:ab:ab:33:69:e1:ac:4f:99:53:8e:72: e1:48:33:06:9f:e6:8f:97:a1:9e:82:05:05:20:a9: 5c:5e:82:1c:c2:2e:ad:9d:0a:48:59:37:d1:37:50: 8b:fb:48:68:2d:0e:a1:9c:20:2b:3e:12:2d:01:21: 37:13:5b:56:da:08:42:98:f1:da:dc:52:3e:e0:7f: 5a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F9:77:D0:48:42:59:06:3C:EB:81:3F:45:D9:15:F6:6A:BD:C7:88 X509v3 Authority Key Identifier: keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d1:20:23:3f:90:d6:af:65:0d:a6:72:25:96:ac:43:98:53: 03:dd:2f:80:48:73:7c:e5:2a:75:6f:1b:67:09:8d:0a:c4:50: 9d:4c:c2:1b:a7:9c:55:3c:31:50:b4:c3:7e:98:f1:b4:65:62: 09:6f:4f:f9:21:01:ec:9a:5e:06:04:49:7f:ea:be:81:88:71: c7:bf:08:a2:1d:7e:c4:b3:32:31:5c:98:5e:d6:45:96:97:bf: f1:24:f1:2c:44:ea:25:61:34:57:79:48:d0:76:d4:c4:85:70: a6:a1:9b:8c:8b:8c:ed:f7:7b:ed:10:2b:7c:0a:db:67:a1:66: c9:a6:8a:85:e4:33:4d:fc:58:27:4f:d1:f0:82:a5:b0:12:9d: 68:61:9f:d0:74:84:fe:9c:48:f6:28:d2:e8:23:b6:77:5f:26: 59:3e:4c:90:02:51:3b:04:53:90:dc:a9:2a:ce:9d:e1:2e:5b: a4:fc:09:fe:d5:b4:b0:9e:1a:92:ff:b4:54:5a:42:36:d1:0a: 7a:8c:68:45:7e:cb:d2:11:f9:ff:1d:90:9a:16:18:7f:02:48: 9b:ca:bf:3e:5b:63:fd:be:58:84:6c:79:96:c7:6f:19:5c:23: 57:de:2f:c4:c0:a5:63:d0:32:3b:bf:ab:3c:7b:00:0b:2a:c5: 98:7e:37:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y9OKFqb1xWRa/uwtVD7oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NTAxMTY1NjQ1YWE4MGRjYmEzMTU4ODVjZjM3NGFjYjZk MjEzMDUwHhcNMjYwMTI1MjMwMTEzWhcNMjYwMTI2MjMwMTEzWjAzMTEwLwYDVQQD EyhiZGY5NzdkMDQ4NDI1OTA2M2NlYjgxM2Y0NWQ5MTVmNjZhYmRjNzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCOQg6vsurYaczRemCLVvKBE/qEk WkNoxTu0wYhNW0CXEm0CF9cBk8k267KgrWkWVU1hSR9yZMOZhFDWNnRJIBooTMYm uQ/IWfsG88vdnVC2l41dbvfxT0WU6vgnBuLNbbJclwUiS5BnMU8A0eWw/J52VxJO Guj90eQjVavaSc6rg5Nin4+gqSMMPlQ9uQl2fsi1OZed2Sf8hmaSF9gxD5vxBFxx niGAgjxjJ8IG9TSNJMx2Nbh2q6szaeGsT5lTjnLhSDMGn+aPl6GeggUFIKlcXoIc wi6tnQpIWTfRN1CL+0hoLQ6hnCArPhItASE3E1tW2ghCmPHa3FI+4H9aaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL35d9BIQlkGPOuBP0XZFfZqvceIMB8GA1UdIwQY MBaAFGZQEWVkWqgNy6MViFzzdKy20hMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZDI2YTMtMzQ2ZS00ZDBkLWFjMWUt MWQwMjBlY2UwN2VhLzEvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yZDI2YTMtMzQ2ZS00ZDBkLWFjMWUtMWQwMjBlY2UwN2Vh LzEvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtEgIz+Q 1q9lDaZyJZasQ5hTA90vgEhzfOUqdW8bZwmNCsRQnUzCG6ecVTwxULTDfpjxtGVi CW9P+SEB7JpeBgRJf+q+gYhxx78Ioh1+xLMyMVyYXtZFlpe/8STxLETqJWE0V3lI 0HbUxIVwpqGbjIuM7fd77RArfArbZ6FmyaaKheQzTfxYJ0/R8IKlsBKdaGGf0HSE /pxI9ijS6CO2d18mWT5MkAJROwRTkNypKs6d4S5bpPwJ/tW0sJ4akv+0VFpCNtEK eoxoRX7L0hH5/x2QmhYYfwJIm8q/Pltj/b5YhGx5lsdvGVwjV94vxMClY9AyO7+r PHsACyrFmH430w== -----END CERTIFICATE-----Generated at Mon Jan 26 08:01:35 2026 by rpki-client