This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft File: zy7ueKAITYMd4aJQAYPhZIlRbM8.mft (raw, json) Hash identifier: xO+uPte6OYQKAL0jsEXj4PgSSWIS07bAXj3B+QTaxXI= Subject key identifier: 08:6F:D4:FE:62:CA:53:80:DA:16:74:26:70:56:9F:85:C5:C9:7C:B3 Authority key identifier: CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF Certificate issuer: /CN=cf2eee78a0084d831de1a2500183e16489516ccf Certificate serial: 019BF763C250E8A9D620AC850269A31B2DBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft Manifest number: 10ED Signing time: Sun 25 Jan 2026 23:01:08 +0000 Manifest this update: Sun 25 Jan 2026 23:01:08 +0000 Manifest next update: Mon 26 Jan 2026 23:01:08 +0000 Files and hashes: 1: 2hflLbfqAWKpFyYGnXBTWiWqwxs.roa (hash: lI9Xhzw78sH7hBtTcjJSosgoG/UbF5gG44NR4ynAOeo=) 2: zy7ueKAITYMd4aJQAYPhZIlRbM8.crl (hash: 1QRXmL8cLSGWP7+rDctMfxrEzdHqqYiOdsD6ThlcH1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:c2:50:e8:a9:d6:20:ac:85:02:69:a3:1b:2d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf2eee78a0084d831de1a2500183e16489516ccf Validity Not Before: Jan 25 23:01:08 2026 GMT Not After : Jan 26 23:01:08 2026 GMT Subject: CN=086fd4fe62ca5380da16742670569f85c5c97cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:1b:65:0d:97:21:32:76:0e:42:87:04:39: d8:25:7c:f7:0a:ec:3c:7d:83:05:db:f2:d8:98:eb: 0a:34:16:c4:9f:24:b7:4a:33:a2:73:50:72:4a:1c: 63:75:d4:df:dd:69:5d:cd:74:ba:95:a9:81:be:e3: 18:d9:b6:2d:33:02:db:cc:67:75:5c:31:3a:15:0e: 71:cd:86:9b:07:99:58:98:48:ba:c1:fc:84:fc:e8: 2b:c4:92:da:ed:f2:0c:c1:b1:23:00:5c:91:ac:ee: b0:a2:37:2a:31:44:ed:23:0b:ee:83:9e:e6:f0:c0: 24:62:7d:79:4d:fb:42:70:87:87:51:02:07:52:7c: 27:fc:5d:3c:2b:57:11:d2:61:4d:85:55:fd:f4:f0: 6b:b3:33:2b:6f:62:76:3f:5b:e9:fe:c1:7c:ef:83: 51:fc:fb:00:47:fa:a6:3a:da:5d:b1:b4:a9:db:83: 05:e9:76:84:ae:d4:1b:7c:f0:8d:65:ed:09:9c:d6: e2:46:32:13:20:00:30:b0:a4:0c:82:06:f8:a0:75: 04:84:c0:08:06:86:1a:16:e7:7b:50:93:e5:bb:99: 7e:78:aa:dc:71:19:5b:ee:9f:50:b7:4c:7b:b9:ff: 39:30:98:0f:13:09:b3:f4:9e:e0:55:45:6d:4a:11: d6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6F:D4:FE:62:CA:53:80:DA:16:74:26:70:56:9F:85:C5:C9:7C:B3 X509v3 Authority Key Identifier: keyid:CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ca:8f:d0:b3:08:2c:52:90:9d:58:1c:43:2a:96:f9:97:89: cf:59:77:c0:4c:69:0b:b7:dc:64:4f:2e:ad:57:ac:b5:72:ec: da:d3:f4:91:ab:9c:c3:20:b1:67:d5:42:3d:89:b5:fa:71:0f: 42:28:74:ae:76:3f:34:91:b8:9c:0d:9a:63:06:de:96:a9:be: 69:43:0f:7f:77:78:5e:cd:84:01:9e:e3:7a:0d:1f:ad:8c:70: 5a:d9:c4:1a:12:8e:5d:2a:2e:f2:fa:3b:2d:b5:97:c6:89:a6: f5:64:68:54:64:93:19:20:d4:ed:5f:11:bd:f1:fb:46:02:e3: 25:89:d7:2a:7e:6f:cc:68:41:9b:d0:28:de:d0:a5:21:47:f3: 20:a8:93:2d:32:f7:a3:ce:f8:24:c4:9a:55:5a:da:fe:2e:11: 5a:73:51:4e:9f:a8:4f:8f:19:45:f3:70:48:75:f2:1d:00:39: 2b:6e:ff:43:8c:ac:d8:9f:a8:c7:cf:1c:45:71:da:b4:49:c8: 98:05:ee:df:c6:39:9e:34:b2:eb:1d:f7:99:07:37:02:67:98: 0d:ab:28:fc:54:f3:9f:f6:61:74:f7:01:60:e4:9b:c6:68:cf: 1b:74:65:aa:cc:06:a4:9b:a0:18:e7:f2:83:52:e3:96:ed:97: 21:82:4f:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y8JQ6KnWIKyFAmmjGy27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMmVlZTc4YTAwODRkODMxZGUxYTI1MDAxODNlMTY0ODk1 MTZjY2YwHhcNMjYwMTI1MjMwMTA4WhcNMjYwMTI2MjMwMTA4WjAzMTEwLwYDVQQD EygwODZmZDRmZTYyY2E1MzgwZGExNjc0MjY3MDU2OWY4NWM1Yzk3Y2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGsbZQ2XITJ2DkKHBDnYJXz3Cuw8 fYMF2/LYmOsKNBbEnyS3SjOic1ByShxjddTf3WldzXS6lamBvuMY2bYtMwLbzGd1 XDE6FQ5xzYabB5lYmEi6wfyE/OgrxJLa7fIMwbEjAFyRrO6wojcqMUTtIwvug57m 8MAkYn15TftCcIeHUQIHUnwn/F08K1cR0mFNhVX99PBrszMrb2J2P1vp/sF874NR /PsAR/qmOtpdsbSp24MF6XaErtQbfPCNZe0JnNbiRjITIAAwsKQMggb4oHUEhMAI BoYaFud7UJPlu5l+eKrccRlb7p9Qt0x7uf85MJgPEwmz9J7gVUVtShHWSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhv1P5iylOA2hZ0JnBWn4XFyXyzMB8GA1UdIwQY MBaAFM8u7nigCE2DHeGiUAGD4WSJUWzPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenk3dWVLQUlUWU1kNGFKUUFZUGhaSWxSYk04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kN2U2NjAtNjkxMi00MzgwLWFiNGYt NzE4YjljNDBmZDI1LzEvenk3dWVLQUlUWU1kNGFKUUFZUGhaSWxSYk04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kN2U2NjAtNjkxMi00MzgwLWFiNGYtNzE4YjljNDBmZDI1 LzEvenk3dWVLQUlUWU1kNGFKUUFZUGhaSWxSYk04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcqP0LMI LFKQnVgcQyqW+ZeJz1l3wExpC7fcZE8urVestXLs2tP0kaucwyCxZ9VCPYm1+nEP Qih0rnY/NJG4nA2aYwbelqm+aUMPf3d4Xs2EAZ7jeg0frYxwWtnEGhKOXSou8vo7 LbWXxomm9WRoVGSTGSDU7V8RvfH7RgLjJYnXKn5vzGhBm9Ao3tClIUfzIKiTLTL3 o874JMSaVVra/i4RWnNRTp+oT48ZRfNwSHXyHQA5K27/Q4ys2J+ox88cRXHatEnI mAXu38Y5njSy6x33mQc3AmeYDaso/FTzn/ZhdPcBYOSbxmjPG3RlqswGpJugGOfy g1Ljlu2XIYJPTw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:10:02 2026 by rpki-client