This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json) Hash identifier: HWhx6vbDNxQSPyA8L7cAGNn+E9Pc5Jx/Edm/bQ2VqYw= Subject key identifier: FC:23:B4:3E:F1:E4:D7:ED:5D:36:D1:64:67:39:C9:C3:9F:8F:9D:EC Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75 Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775 Certificate serial: 019BF6519E1B7AF5BA004027DEFFE007253A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft Manifest number: 07A1 Signing time: Sun 25 Jan 2026 18:01:42 +0000 Manifest this update: Sun 25 Jan 2026 18:01:42 +0000 Manifest next update: Mon 26 Jan 2026 18:01:42 +0000 Files and hashes: 1: K1WYHWxT9hUhyCzFRd3qp6J1SRo.roa (hash: ofCgYNoPNZP6vNBlI2XsxCW6wFsFBZey/s584doB1q4=) 2: nNBG6JVVM3hu0P20Vu06-SMt-9I.roa (hash: M+TeIwkxE9H/4NhfymMWaPcB1L3//0ChdU6G+C5A8KM=) 3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: C8dDkfGjpYHRvXvcvNyYQ30vkUgbm/zuH3UcxZ0gQGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:9e:1b:7a:f5:ba:00:40:27:de:ff:e0:07:25:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775 Validity Not Before: Jan 25 18:01:42 2026 GMT Not After : Jan 26 18:01:42 2026 GMT Subject: CN=fc23b43ef1e4d7ed5d36d1646739c9c39f8f9dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:64:4d:2b:e7:cc:36:d1:9e:05:89:9c:7c:3a: a9:91:24:43:38:6f:78:8f:58:3a:c5:16:e4:68:ba: 1c:fa:4c:b2:96:62:d5:8b:db:c4:4a:13:61:95:cc: 01:06:b1:d4:c3:eb:da:7d:e4:47:63:5f:c7:24:4b: 80:ea:cb:25:a3:87:8b:73:ee:ae:f7:3a:0b:30:c9: 23:d3:22:f6:64:59:ff:ee:19:9e:3a:8b:d6:75:06: b2:c6:cb:dd:b4:bc:05:f7:be:e7:49:2a:21:41:24: 1b:97:4e:44:4f:fa:21:09:8d:d3:4d:b1:f9:53:0f: b6:8a:94:b2:b6:31:96:a6:e0:02:80:0c:a8:4e:d7: c9:19:a7:b6:92:66:f2:ca:47:d8:4a:0e:8e:af:4e: 9f:ec:54:e4:27:ba:61:ca:86:d5:8f:b9:30:66:3a: f1:45:e8:4f:50:c2:4c:3f:14:6a:f4:60:06:db:1f: bd:1d:75:5d:34:26:02:be:cc:bf:65:ef:85:ff:ce: 6a:f8:49:62:34:61:30:f6:cf:e5:93:db:ce:98:1e: bc:8e:44:0e:4d:9b:dc:c5:16:e0:41:34:58:cd:3d: 43:81:e8:d8:4a:15:7a:2d:e6:0b:f8:af:16:3f:0b: d6:42:a3:31:66:fa:b1:41:a8:80:a3:2a:bd:28:82: 47:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:23:B4:3E:F1:E4:D7:ED:5D:36:D1:64:67:39:C9:C3:9F:8F:9D:EC X509v3 Authority Key Identifier: keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:50:28:e9:2d:98:34:82:94:fe:ab:2c:66:68:c0:0e:5a:ff: c7:fd:5c:1f:d1:f0:bf:48:42:e5:c0:20:0b:a5:ed:b8:d1:64: ab:33:71:a0:8d:78:59:96:71:31:a4:6d:ef:1d:0b:33:02:21: dd:0c:8b:e0:5e:3e:a2:e9:73:b7:55:67:c3:10:9a:91:ba:a2: 93:d3:f8:1b:01:92:d6:55:1b:40:ab:1a:3c:b7:a4:5f:d9:d2: 28:a3:44:f6:78:78:05:cb:b3:a4:1c:e7:80:f4:b6:95:b4:85: 14:e9:be:9f:93:1e:28:db:e3:d3:de:33:8d:4b:66:da:51:b4: 05:3e:da:6d:6b:17:bb:95:ec:00:45:62:6f:3c:3c:bc:2b:58: d0:ed:8d:9c:2e:08:29:a5:77:e3:8c:25:88:d0:49:73:61:83: 7d:d6:03:27:44:45:cd:14:46:90:67:7b:d7:fa:4e:75:89:8c: 55:a4:c4:33:17:88:01:1e:1e:68:d4:54:62:2b:7a:2a:46:d7: ed:1b:90:3a:f4:0a:95:c5:72:d9:4f:38:4d:ac:e7:4c:24:09: 44:fa:d1:65:a9:dd:4e:23:d9:80:16:a7:9b:f5:a7:75:38:aa: 4b:3d:ef:6b:ba:a3:a8:ec:0f:dd:41:94:e4:31:a8:ce:2e:0c: fd:8a:8b:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UZ4bevW6AEAn3v/gByU6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlY2QzOTFjNjYwYzNlNTdjNTNiODdjMGI1MmVjMGQyZjJm NDI3NzUwHhcNMjYwMTI1MTgwMTQyWhcNMjYwMTI2MTgwMTQyWjAzMTEwLwYDVQQD EyhmYzIzYjQzZWYxZTRkN2VkNWQzNmQxNjQ2NzM5YzljMzlmOGY5ZGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42RNK+fMNtGeBYmcfDqpkSRDOG94 j1g6xRbkaLoc+kyylmLVi9vEShNhlcwBBrHUw+vafeRHY1/HJEuA6sslo4eLc+6u 9zoLMMkj0yL2ZFn/7hmeOovWdQayxsvdtLwF977nSSohQSQbl05ET/ohCY3TTbH5 Uw+2ipSytjGWpuACgAyoTtfJGae2kmbyykfYSg6Or06f7FTkJ7phyobVj7kwZjrx RehPUMJMPxRq9GAG2x+9HXVdNCYCvsy/Ze+F/85q+EliNGEw9s/lk9vOmB68jkQO TZvcxRbgQTRYzT1DgejYShV6LeYL+K8WPwvWQqMxZvqxQaiAoyq9KIJH1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwjtD7x5NftXTbRZGc5ycOfj53sMB8GA1UdIwQY MBaAFM7NORxmDD5XxTuHwLUuwNLy9Cd1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wYTJlMDEtOWFhNi00OGM5LWI3OWEt YTRkMzU5ZDkxMjUxLzEvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8wYTJlMDEtOWFhNi00OGM5LWI3OWEtYTRkMzU5ZDkxMjUx LzEvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVAo6S2Y NIKU/qssZmjADlr/x/1cH9Hwv0hC5cAgC6XtuNFkqzNxoI14WZZxMaRt7x0LMwIh 3QyL4F4+oulzt1VnwxCakbqik9P4GwGS1lUbQKsaPLekX9nSKKNE9nh4BcuzpBzn gPS2lbSFFOm+n5MeKNvj094zjUtm2lG0BT7abWsXu5XsAEVibzw8vCtY0O2NnC4I KaV344wliNBJc2GDfdYDJ0RFzRRGkGd71/pOdYmMVaTEMxeIAR4eaNRUYit6KkbX 7RuQOvQKlcVy2U84TaznTCQJRPrRZandTiPZgBanm/WndTiqSz3va7qjqOwP3UGU 5DGozi4M/YqLaA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:22 2026 by rpki-client