This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft File: ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json) Hash identifier: GGKQisu19VjNzhBCd8oI2rqfoDXte7owiDu4YfVK4Js= Subject key identifier: 3B:7B:79:79:75:10:3C:DC:14:55:6A:CF:F4:DB:AD:0B:CA:CA:80:56 Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7 Certificate issuer: /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7 Certificate serial: 019BF808928512F82976A860A839890DAAB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft Manifest number: 0BD3 Signing time: Mon 26 Jan 2026 02:01:09 +0000 Manifest this update: Mon 26 Jan 2026 02:01:09 +0000 Manifest next update: Tue 27 Jan 2026 02:01:09 +0000 Files and hashes: 1: LebVW7P05wxSQg1aNkxf4K6jaA4.roa (hash: oIBElQY2pkJQLbuxxdHqzf3ND0BBOWd73Tj7RbmTBBE=) 2: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: N43KvdPr73no58szMDhuVkSOEFxOZAJem9CFuspajXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:92:85:12:f8:29:76:a8:60:a8:39:89:0d:aa:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7 Validity Not Before: Jan 26 02:01:09 2026 GMT Not After : Jan 27 02:01:09 2026 GMT Subject: CN=3b7b797975103cdc14556acff4dbad0bcaca8056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:87:18:52:cf:26:7d:7d:a9:43:36:81:e5:6d: e0:11:22:9e:da:62:25:e7:72:96:c9:4c:96:ad:31: 43:a3:a7:48:60:26:71:83:3a:89:7a:ee:83:36:f9: e5:6c:af:c2:1a:67:2a:99:4b:02:f4:04:e4:11:40: 17:a5:a3:2e:34:eb:61:d5:71:61:bb:c1:02:33:76: 6c:2f:88:b8:46:c6:77:a5:73:1c:d5:07:1b:92:f6: b5:a7:97:12:bb:67:60:e1:94:9e:e5:c0:25:a4:41: 9c:f9:c4:df:8d:81:c9:f6:48:48:e2:ad:db:3c:01: b9:14:ef:e4:ae:33:94:7d:51:c0:eb:cc:a0:08:dd: 1c:91:19:4d:13:5d:d4:cc:16:8a:c0:66:93:98:86: 85:40:d4:1c:a1:2d:5e:78:94:31:92:56:9c:87:ac: 9c:47:d8:1f:43:b3:41:af:8f:8e:52:3d:fb:78:83: 59:8e:6f:82:08:1b:23:f6:ef:f0:70:5e:9d:b7:51: 0e:b1:55:22:3d:3b:fe:e0:e6:47:1e:98:f2:4f:f2: 68:3f:7d:22:b6:c5:eb:b4:68:62:75:51:25:0a:98: 19:dd:b2:98:ae:17:39:34:17:fe:e4:0f:2b:72:58: 64:79:f8:82:3c:c1:5c:d7:5e:25:2b:b2:0f:f5:d1: 0e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7B:79:79:75:10:3C:DC:14:55:6A:CF:F4:DB:AD:0B:CA:CA:80:56 X509v3 Authority Key Identifier: keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:fd:9a:36:69:1d:71:ad:ed:e6:c4:6e:f5:9d:49:95:7c:ff: 0e:3c:b7:d3:49:7e:ae:3f:aa:30:02:b7:b7:08:54:93:8d:2a: 18:c2:b9:d7:b4:18:76:f7:71:f8:63:97:d4:26:61:15:af:04: 3e:fc:13:e6:60:ba:37:7b:f2:29:ec:da:f7:f0:10:88:30:41: fd:6c:cd:cf:04:a6:78:d2:38:3e:1d:b6:ed:76:40:55:83:3f: cc:4c:da:5a:e8:b2:56:03:8d:06:ec:b4:2a:c0:82:d2:94:27: 85:31:24:29:a7:f4:7a:82:4c:16:d1:03:aa:af:82:1b:bd:8d: f5:f9:be:ae:d5:ec:86:a5:58:82:4b:0e:8b:89:64:e0:bc:7e: 2b:b7:f3:5f:26:bf:59:79:74:d6:18:c7:37:07:d1:16:43:1c: 23:cc:fc:af:66:ee:28:6a:79:e6:3a:e4:b3:78:cf:dd:4f:74: 05:a4:8e:db:f8:74:b5:b1:6c:5f:0a:19:a3:a0:91:5f:5b:a1: 53:5a:2c:61:41:f3:ae:ac:26:84:1b:6e:17:ed:df:5c:2f:c2: 20:0a:eb:00:4b:73:ae:dd:42:83:35:c2:7b:e6:f8:96:e9:b3: 62:ef:46:3e:b3:32:ae:fd:39:a3:3b:c2:b3:66:35:0c:5e:1c: 72:3c:44:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CJKFEvgpdqhgqDmJDaq4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YTgzMjI0NGQwZTIzZjVmMjhiM2E2ZGVmN2FmYzAxYjIy NTIxYzcwHhcNMjYwMTI2MDIwMTA5WhcNMjYwMTI3MDIwMTA5WjAzMTEwLwYDVQQD EygzYjdiNzk3OTc1MTAzY2RjMTQ1NTZhY2ZmNGRiYWQwYmNhY2E4MDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIcYUs8mfX2pQzaB5W3gESKe2mIl 53KWyUyWrTFDo6dIYCZxgzqJeu6DNvnlbK/CGmcqmUsC9ATkEUAXpaMuNOth1XFh u8ECM3ZsL4i4RsZ3pXMc1Qcbkva1p5cSu2dg4ZSe5cAlpEGc+cTfjYHJ9khI4q3b PAG5FO/krjOUfVHA68ygCN0ckRlNE13UzBaKwGaTmIaFQNQcoS1eeJQxklach6yc R9gfQ7NBr4+OUj37eINZjm+CCBsj9u/wcF6dt1EOsVUiPTv+4OZHHpjyT/JoP30i tsXrtGhidVElCpgZ3bKYrhc5NBf+5A8rclhkefiCPMFc114lK7IP9dEOQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDt7eXl1EDzcFFVqz/TbrQvKyoBWMB8GA1UdIwQY MBaAFGaoMiRNDiP18os6be96/AGyJSHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mMmVmMDYtMmRkMi00YTIxLTljZTkt ZGVmZmZhNWYwNmUxLzEvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mMmVmMDYtMmRkMi00YTIxLTljZTktZGVmZmZhNWYwNmUx LzEvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUf2aNmkd ca3t5sRu9Z1JlXz/Djy300l+rj+qMAK3twhUk40qGMK517QYdvdx+GOX1CZhFa8E PvwT5mC6N3vyKeza9/AQiDBB/WzNzwSmeNI4Ph227XZAVYM/zEzaWuiyVgONBuy0 KsCC0pQnhTEkKaf0eoJMFtEDqq+CG72N9fm+rtXshqVYgksOi4lk4Lx+K7fzXya/ WXl01hjHNwfRFkMcI8z8r2buKGp55jrks3jP3U90BaSO2/h0tbFsXwoZo6CRX1uh U1osYUHzrqwmhBtuF+3fXC/CIArrAEtzrt1CgzXCe+b4lumzYu9GPrMyrv05ozvC s2Y1DF4ccjxEUw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:08:56 2026 by rpki-client