This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft File: zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json) Hash identifier: yu9FsLqCLfmAD5aO1kCLMxKjzNQubZiD/L1XhHRTFHM= Subject key identifier: 5E:38:21:FF:F9:FA:08:BF:F6:5E:95:93:E6:C4:03:2B:28:43:16:7E Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38 Certificate issuer: /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138 Certificate serial: 019BF79A85F9EB8915715C6520C4EA251C59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft Manifest number: 12AA Signing time: Mon 26 Jan 2026 00:00:57 +0000 Manifest this update: Mon 26 Jan 2026 00:00:57 +0000 Manifest next update: Tue 27 Jan 2026 00:00:57 +0000 Files and hashes: 1: gX3BQ48KT1SBCIdQ1BTvFv5yWJs.roa (hash: DEwg47W0q/dNOjfYsnuPLnMnC+CGQgRpMPoSjjP+Lr4=) 2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: tDqHwVKiWGKS/rdxCESTGuk0oFZAG86EUlLBLTYDAcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:85:f9:eb:89:15:71:5c:65:20:c4:ea:25:1c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138 Validity Not Before: Jan 26 00:00:57 2026 GMT Not After : Jan 27 00:00:57 2026 GMT Subject: CN=5e3821fff9fa08bff65e9593e6c4032b2843167e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:37:94:1a:74:a9:81:1b:de:b7:22:2c:ff:8a: d4:be:29:4a:83:0c:2f:3a:ec:55:88:f2:96:eb:7f: b6:f8:5b:03:4d:66:3a:96:d5:54:ea:51:89:26:8a: 42:6b:df:ce:82:1c:e5:11:75:1d:a9:d8:b4:67:29: b5:cc:f9:98:85:31:c1:73:98:e4:26:0e:4c:21:66: 31:a9:53:4c:14:a1:e6:bc:56:9f:c6:8e:53:e2:90: 7c:92:e0:0b:25:fe:73:58:cc:ef:d4:f3:11:8b:48: 6b:26:8f:d6:b3:66:73:f4:5b:13:64:09:1d:fe:05: 36:64:88:e9:3d:b8:37:90:85:3f:07:ed:2e:96:e8: a1:ea:97:eb:12:55:dc:d1:29:db:c7:62:13:74:67: 03:36:d2:dd:fe:d4:4f:65:60:bc:83:3d:4c:87:ef: 54:5a:48:52:0c:06:78:08:d4:bb:29:e2:74:ec:cc: 58:f8:d8:8a:1a:cc:f5:e8:ee:15:6e:15:30:02:25: ef:36:92:91:e1:7e:de:f1:1c:64:04:69:94:75:1c: 3b:92:8f:b1:73:82:8a:62:5b:00:d9:b6:8c:c2:d0: 4d:77:73:93:ca:2c:b3:d1:c0:81:4d:0a:9f:22:32: 74:8f:1f:a0:84:d2:c8:ed:a4:48:86:16:52:89:75: 95:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:38:21:FF:F9:FA:08:BF:F6:5E:95:93:E6:C4:03:2B:28:43:16:7E X509v3 Authority Key Identifier: keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:19:b8:68:c0:75:df:a7:c9:a9:ae:eb:9e:b6:ae:cb:2b:37: bd:bd:9c:f0:a2:9d:92:13:71:8c:66:ea:5d:62:7f:16:f3:f5: 88:92:f3:87:9d:13:67:a2:66:c1:95:dd:1e:4e:46:71:15:49: 3e:57:76:d7:db:8a:e6:21:24:37:35:8f:2b:2f:13:62:59:d1: 3e:34:f9:c0:ba:53:6a:be:56:be:49:53:24:2f:af:47:66:5b: 62:91:4a:f8:9f:2f:da:e6:ff:41:a5:64:bf:1f:a4:aa:91:c9: f5:48:dc:14:87:33:13:41:66:60:94:8f:9e:2d:8e:59:60:ca: 5f:a4:aa:12:af:43:3d:9e:f7:7c:06:32:21:84:a1:bf:be:30: c6:60:fc:c2:8d:90:13:3e:81:1f:c2:32:b5:be:82:70:b9:5d: c7:da:4f:6a:af:ab:fd:b9:80:51:e8:13:dd:43:ab:3a:b2:81: 8f:fb:1e:c7:eb:0b:c2:6b:4c:43:3f:15:03:be:9a:20:a1:67: 54:56:88:11:d6:90:bf:b4:78:72:ec:46:e5:ad:a8:3d:0f:12: c7:a3:46:72:41:ba:21:5c:97:b7:96:0f:6e:38:c2:dc:2b:4e: fd:db:59:40:68:e6:59:bf:6c:fe:e9:3d:ac:41:ef:b3:1d:ac: 0c:a4:77:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3moX564kVcVxlIMTqJRxZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMDBlMTEyYzAzZjY5NWY5ZjI1ZDNiNzJiYjIzYTRjMzRl ZDIxMzgwHhcNMjYwMTI2MDAwMDU3WhcNMjYwMTI3MDAwMDU3WjAzMTEwLwYDVQQD Eyg1ZTM4MjFmZmY5ZmEwOGJmZjY1ZTk1OTNlNmM0MDMyYjI4NDMxNjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozeUGnSpgRvetyIs/4rUvilKgwwv OuxViPKW63+2+FsDTWY6ltVU6lGJJopCa9/OghzlEXUdqdi0Zym1zPmYhTHBc5jk Jg5MIWYxqVNMFKHmvFafxo5T4pB8kuALJf5zWMzv1PMRi0hrJo/Ws2Zz9FsTZAkd /gU2ZIjpPbg3kIU/B+0uluih6pfrElXc0Snbx2ITdGcDNtLd/tRPZWC8gz1Mh+9U WkhSDAZ4CNS7KeJ07MxY+NiKGsz16O4VbhUwAiXvNpKR4X7e8RxkBGmUdRw7ko+x c4KKYlsA2baMwtBNd3OTyiyz0cCBTQqfIjJ0jx+ghNLI7aRIhhZSiXWVMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF44If/5+gi/9l6Vk+bEAysoQxZ+MB8GA1UdIwQY MBaAFM4A4RLAP2lfnyXTtyuyOkw07SE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xMDBjMjUtZTAyNS00NWVmLTkwYTkt ZjM0NjNmYzcyY2I1LzEvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8xMDBjMjUtZTAyNS00NWVmLTkwYTktZjM0NjNmYzcyY2I1 LzEvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhm4aMB1 36fJqa7rnrauyys3vb2c8KKdkhNxjGbqXWJ/FvP1iJLzh50TZ6JmwZXdHk5GcRVJ Pld219uK5iEkNzWPKy8TYlnRPjT5wLpTar5WvklTJC+vR2ZbYpFK+J8v2ub/QaVk vx+kqpHJ9UjcFIczE0FmYJSPni2OWWDKX6SqEq9DPZ73fAYyIYShv74wxmD8wo2Q Ez6BH8Iytb6CcLldx9pPaq+r/bmAUegT3UOrOrKBj/sex+sLwmtMQz8VA76aIKFn VFaIEdaQv7R4cuxG5a2oPQ8Sx6NGckG6IVyXt5YPbjjC3CtO/dtZQGjmWb9s/uk9 rEHvsx2sDKR3nQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:22 2026 by rpki-client