This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft File: ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft (raw, json) Hash identifier: lBOb5SV8XSVO4/TeqPORV8Hv3xsyT4v7M+iuDF5VgCM= Subject key identifier: 42:9C:68:65:C2:81:F2:A6:8A:26:8B:AC:95:C6:FE:E8:CC:CA:FC:92 Authority key identifier: 66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61 Certificate issuer: /CN=660899133329faa5b5716b1c95fbaf93021fbc61 Certificate serial: 019BF8E460960C5E11A4CB31D2E5B46A88D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft Manifest number: 0ECE Signing time: Mon 26 Jan 2026 06:01:14 +0000 Manifest this update: Mon 26 Jan 2026 06:01:14 +0000 Manifest next update: Tue 27 Jan 2026 06:01:14 +0000 Files and hashes: 1: ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl (hash: 4s2qWfptcz9tPjaDvnGzBKI7gp3Bekblo0ouOTPeiMA=) 2: kO3ikc55etvofjUz54lkxBw2Zts.roa (hash: FQtm/UjIvg0izBKVwcfTdDDZlcQWbE25eid7tWcMESM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:60:96:0c:5e:11:a4:cb:31:d2:e5:b4:6a:88:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=660899133329faa5b5716b1c95fbaf93021fbc61 Validity Not Before: Jan 26 06:01:14 2026 GMT Not After : Jan 27 06:01:14 2026 GMT Subject: CN=429c6865c281f2a68a268bac95c6fee8cccafc92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:29:92:ab:a1:71:94:13:8d:e1:03:4d:6b:d8: 82:01:e3:ea:9d:b1:18:0c:85:b9:e0:96:44:22:8c: 8e:1e:6c:88:fb:81:ae:dd:c4:02:e5:2b:30:92:c5: 32:ac:53:4a:ec:2e:5b:d5:64:5e:f6:7e:5c:0f:8a: 86:b5:29:15:f5:39:eb:26:72:27:ff:6b:b7:16:29: a5:f9:9c:d8:8f:06:68:47:18:43:39:64:3e:dc:85: 31:b5:0c:69:79:ce:5f:bb:ce:f7:18:57:74:3f:8a: c2:bc:06:e5:53:9f:24:d9:e4:e1:d6:8c:b6:5b:97: 32:1d:c2:8f:c1:0c:68:24:3b:80:4b:b1:2c:ed:0d: d6:5f:e8:79:9c:c9:cb:b9:38:2a:9e:8c:8d:ad:89: 2c:04:63:ce:64:68:21:b2:dc:0d:71:df:3f:a0:a4: 7b:50:42:28:ac:62:84:49:3f:0d:d2:ef:80:19:6e: 77:72:31:f6:51:74:3e:b7:af:84:fe:84:44:fc:29: 8d:b0:32:fb:09:5a:20:90:d7:51:51:ff:81:b6:61: 54:4e:95:23:21:74:47:e5:1a:21:6e:69:30:1a:62: 85:ca:3e:37:db:9d:27:11:6e:bf:1e:ab:a4:cf:58: 66:bb:b9:06:3d:79:fe:cc:34:a5:dc:ce:14:7c:3d: 43:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9C:68:65:C2:81:F2:A6:8A:26:8B:AC:95:C6:FE:E8:CC:CA:FC:92 X509v3 Authority Key Identifier: keyid:66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:72:bc:19:1a:b8:17:53:61:7d:3a:06:01:8d:85:cb:64:2b: de:7d:36:20:ce:38:d9:ae:44:0b:50:78:15:b7:8a:ed:c6:c0: 57:fe:97:5e:8f:ad:60:a7:5a:34:d8:61:93:50:a8:17:27:cf: f8:d6:dc:04:3d:ea:76:e0:e0:0a:6a:a6:74:70:a9:ce:b9:0b: e3:27:4d:23:3c:0f:ee:27:d8:e7:d8:d4:26:26:3a:4c:27:ca: 96:53:55:47:b1:77:75:52:d1:9e:6a:b3:d6:e5:58:88:1e:fb: 81:f3:04:ad:ef:7a:74:ec:40:d4:0e:e6:14:6f:91:79:9b:af: 44:22:8a:70:8f:74:66:b5:69:05:cd:d4:f2:b4:9b:4c:62:b8: 13:aa:75:3f:0b:85:e2:0f:de:1d:4d:68:99:90:e2:11:48:05: c4:c1:76:09:58:57:95:a2:63:35:45:6c:3e:ee:9e:44:31:06: 34:b0:3b:d0:6d:bb:c7:1b:8e:4f:5f:09:04:43:98:01:62:33: 86:cd:6a:b5:b7:c4:33:69:a8:fa:96:ad:dc:1b:3a:37:fa:b3: 6e:3b:6a:03:d0:76:fd:ed:8f:de:7c:f5:a2:68:5e:f6:05:4d: b2:27:2e:c1:c5:4a:02:36:ee:20:2a:de:0a:a4:2d:6d:47:d9: e5:17:99:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45GCWDF4RpMsx0uW0aojRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MDg5OTEzMzMyOWZhYTViNTcxNmIxYzk1ZmJhZjkzMDIx ZmJjNjEwHhcNMjYwMTI2MDYwMTE0WhcNMjYwMTI3MDYwMTE0WjAzMTEwLwYDVQQD Eyg0MjljNjg2NWMyODFmMmE2OGEyNjhiYWM5NWM2ZmVlOGNjY2FmYzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9SmSq6FxlBON4QNNa9iCAePqnbEY DIW54JZEIoyOHmyI+4Gu3cQC5SswksUyrFNK7C5b1WRe9n5cD4qGtSkV9TnrJnIn /2u3Fiml+ZzYjwZoRxhDOWQ+3IUxtQxpec5fu873GFd0P4rCvAblU58k2eTh1oy2 W5cyHcKPwQxoJDuAS7Es7Q3WX+h5nMnLuTgqnoyNrYksBGPOZGghstwNcd8/oKR7 UEIorGKEST8N0u+AGW53cjH2UXQ+t6+E/oRE/CmNsDL7CVogkNdRUf+BtmFUTpUj IXRH5RohbmkwGmKFyj43250nEW6/Hqukz1hmu7kGPXn+zDSl3M4UfD1DjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKcaGXCgfKmiiaLrJXG/ujMyvySMB8GA1UdIwQY MBaAFGYImRMzKfqltXFrHJX7r5MCH7xhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmdpWkV6TXAtcVcxY1dzY2xmdXZrd0lmdkdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9iZDc1YjEtMTc0Yi00MTdjLTg3NTAt ZWI4YTQ1M2JjNTZlLzEvWmdpWkV6TXAtcVcxY1dzY2xmdXZrd0lmdkdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9iZDc1YjEtMTc0Yi00MTdjLTg3NTAtZWI4YTQ1M2JjNTZl LzEvWmdpWkV6TXAtcVcxY1dzY2xmdXZrd0lmdkdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnK8GRq4 F1NhfToGAY2Fy2Qr3n02IM442a5EC1B4FbeK7cbAV/6XXo+tYKdaNNhhk1CoFyfP +NbcBD3qduDgCmqmdHCpzrkL4ydNIzwP7ifY59jUJiY6TCfKllNVR7F3dVLRnmqz 1uVYiB77gfMEre96dOxA1A7mFG+ReZuvRCKKcI90ZrVpBc3U8rSbTGK4E6p1PwuF 4g/eHU1omZDiEUgFxMF2CVhXlaJjNUVsPu6eRDEGNLA70G27xxuOT18JBEOYAWIz hs1qtbfEM2mo+pat3Bs6N/qzbjtqA9B2/e2P3nz1omhe9gVNsicuwcVKAjbuICre CqQtbUfZ5ReZPQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:48:06 2026 by rpki-client