This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft File: Z3COBc2oa73nTtuoXR2-tz_n91c.mft (raw, json) Hash identifier: d2SScTbkxjAGFboN/c4f1xtsWStYSRwlYK2YmSlYy1Y= Subject key identifier: BA:C5:73:33:D3:0E:8B:A4:A2:3E:18:CA:A7:A3:3E:E2:3B:0C:3C:02 Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57 Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757 Certificate serial: 019BF651BD09C9A0ED73DD9F7FC3ACD1B717 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 18:01:50 +0000 Manifest this update: Sun 25 Jan 2026 18:01:50 +0000 Manifest next update: Mon 26 Jan 2026 18:01:50 +0000 Files and hashes: 1: Z3COBc2oa73nTtuoXR2-tz_n91c.crl (hash: wdqgN7nCChaBtOXwcQNXTtuIKz1UaHW+FnLoREKt+18=) 2: lBanohcXuTk3tPGpdRVlhFgo50k.roa (hash: QRKqk4kvpnYuyI5Tk2E7RWYUVWf78BdUbT/Cbi1GnI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:bd:09:c9:a0:ed:73:dd:9f:7f:c3:ac:d1:b7:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757 Validity Not Before: Jan 25 18:01:50 2026 GMT Not After : Jan 26 18:01:50 2026 GMT Subject: CN=bac57333d30e8ba4a23e18caa7a33ee23b0c3c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:90:3f:59:53:65:7c:64:da:6f:f2:87:b7:88: 70:38:ea:f8:0a:a6:1c:50:1c:a6:93:7a:2f:cd:b4: 87:8d:51:d0:74:06:61:b6:b6:b1:f3:26:b8:11:b6: 86:e6:39:5d:17:c1:b7:4a:ed:ee:50:90:59:c0:1c: 79:28:a0:2f:e5:67:6b:54:58:af:11:e9:cb:5c:d6: df:3b:ec:eb:92:7d:44:82:f0:ac:aa:c5:da:6f:6c: 06:21:e7:8e:68:41:06:f0:34:4a:ed:6e:e8:5a:3d: ae:00:d0:95:65:72:b8:36:06:67:b6:0d:d2:7e:af: 12:01:55:aa:76:b8:e4:a1:44:d8:d9:82:76:0a:04: 0e:84:56:23:0f:aa:b3:f5:d5:8a:70:84:65:76:02: a5:b2:5d:45:9d:10:0f:f4:5a:5c:39:92:42:84:fb: 70:95:40:79:b8:21:ce:b9:3a:1c:a6:ba:f8:6e:4e: f0:20:d4:cb:7a:f2:6f:a8:87:00:3d:ce:a6:aa:1f: aa:2d:36:c6:b8:c9:86:cc:17:37:e4:e7:f4:58:5f: 5d:75:1c:d8:7d:53:6a:f0:fe:aa:b6:7e:4b:4b:0f: b3:ce:21:26:69:f7:74:33:cf:11:45:cd:0d:45:97: 16:73:a3:a2:ad:52:1a:7c:ab:a7:70:c7:16:2a:83: 04:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C5:73:33:D3:0E:8B:A4:A2:3E:18:CA:A7:A3:3E:E2:3B:0C:3C:02 X509v3 Authority Key Identifier: keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ae:1d:d6:48:db:f6:e5:a4:b6:ee:8d:29:ab:a4:c7:20:ce: ec:c4:ba:60:74:a1:ff:ce:93:ea:c4:29:a2:f8:ab:d0:4a:f6: 80:aa:f4:1e:01:14:33:d0:56:cb:9b:9e:ea:75:96:c2:ea:02: 4d:cb:9d:bb:08:af:2b:41:fe:a6:16:a7:c0:0c:3c:d7:d7:02: 7a:27:e2:0f:32:13:2b:cd:fc:0f:f7:d6:37:30:a0:ff:4e:b9: f7:a0:8b:a1:37:fe:ec:74:ec:de:3d:d6:33:e0:82:b9:24:65: 11:e0:5d:3f:b0:77:89:97:b2:68:1a:c3:51:03:8d:b8:06:0a: 2c:19:5a:5e:2a:6b:41:63:f1:3b:67:b3:a5:27:46:ae:a8:16: f9:af:9e:58:d8:80:1e:c4:72:dc:c4:57:ea:45:05:44:21:bc: 2b:54:5d:84:d5:8d:04:62:01:a6:c4:00:f7:77:8f:4f:8e:30: 15:c3:e9:a6:b1:5e:43:2a:55:75:97:88:7b:20:26:db:e9:79: 10:77:d0:d5:6d:5c:88:1a:1f:49:e0:fb:2f:1f:48:02:7e:28: e8:83:f7:a2:78:d3:91:6d:ce:e9:79:c3:f5:56:8a:14:42:86: f5:8f:77:19:29:82:13:38:3f:72:a7:a8:ce:24:31:0d:3b:22: 22:d1:8a:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Ub0JyaDtc92ff8Os0bcXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NzA4ZTA1Y2RhODZiYmRlNzRlZGJhODVkMWRiZWI3M2Zl N2Y3NTcwHhcNMjYwMTI1MTgwMTUwWhcNMjYwMTI2MTgwMTUwWjAzMTEwLwYDVQQD EyhiYWM1NzMzM2QzMGU4YmE0YTIzZTE4Y2FhN2EzM2VlMjNiMGMzYzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5A/WVNlfGTab/KHt4hwOOr4CqYc UBymk3ovzbSHjVHQdAZhtrax8ya4EbaG5jldF8G3Su3uUJBZwBx5KKAv5WdrVFiv EenLXNbfO+zrkn1EgvCsqsXab2wGIeeOaEEG8DRK7W7oWj2uANCVZXK4NgZntg3S fq8SAVWqdrjkoUTY2YJ2CgQOhFYjD6qz9dWKcIRldgKlsl1FnRAP9FpcOZJChPtw lUB5uCHOuTocprr4bk7wINTLevJvqIcAPc6mqh+qLTbGuMmGzBc35Of0WF9ddRzY fVNq8P6qtn5LSw+zziEmafd0M88RRc0NRZcWc6OirVIafKuncMcWKoMEpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrFczPTDoukoj4YyqejPuI7DDwCMB8GA1UdIwQY MBaAFGdwjgXNqGu9507bqF0dvrc/5/dXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80ZDI3OTYtN2Y4MC00M2E0LWI4MTQt MDAzOTVhMzhjMzdkLzEvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC80ZDI3OTYtN2Y4MC00M2E0LWI4MTQtMDAzOTVhMzhjMzdk LzEvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeK4d1kjb 9uWktu6NKaukxyDO7MS6YHSh/86T6sQpovir0Er2gKr0HgEUM9BWy5ue6nWWwuoC TcuduwivK0H+phanwAw819cCeifiDzITK838D/fWNzCg/06596CLoTf+7HTs3j3W M+CCuSRlEeBdP7B3iZeyaBrDUQONuAYKLBlaXiprQWPxO2ezpSdGrqgW+a+eWNiA HsRy3MRX6kUFRCG8K1RdhNWNBGIBpsQA93ePT44wFcPpprFeQypVdZeIeyAm2+l5 EHfQ1W1ciBofSeD7Lx9IAn4o6IP3onjTkW3O6XnD9VaKFEKG9Y93GSmCEzg/cqeo ziQxDTsiItGKPw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:51 2026 by rpki-client