This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft File: z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json) Hash identifier: dB3JIh0lI0w7YhgyyJaakT/IfyJTGNJ5HRiLcROGOb4= Subject key identifier: 3B:50:37:5D:0F:1C:B8:DF:B3:09:EF:5C:8B:8E:85:04:18:8C:82:B6 Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6 Certificate issuer: /CN=cfa968319d72a98a759400338b70fdc678912de6 Certificate serial: 019BF5754E09C505CDA2984C874CC47F6AD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 14:01:04 +0000 Manifest this update: Sun 25 Jan 2026 14:01:04 +0000 Manifest next update: Mon 26 Jan 2026 14:01:04 +0000 Files and hashes: 1: 6Ep4JB6joSkE2HYaEIb1LFsZbgY.roa (hash: SqDePBtTD8XjhS8RPU2gNtHpu8bEH14qQE6MxK5aj78=) 2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: w3y+HE7+lnRXW/N3LrQ8UPlBmSXr7rsnAkI6oduzYxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:4e:09:c5:05:cd:a2:98:4c:87:4c:c4:7f:6a:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6 Validity Not Before: Jan 25 14:01:04 2026 GMT Not After : Jan 26 14:01:04 2026 GMT Subject: CN=3b50375d0f1cb8dfb309ef5c8b8e8504188c82b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:05:9d:75:92:ba:d3:5f:d6:64:6f:ce:03:52: 64:8a:48:dd:62:4e:38:40:3a:67:d3:dc:dc:f4:7d: 67:e7:14:f8:8e:b0:38:72:cb:1c:7e:0d:14:b5:4d: c7:d7:76:ab:33:40:ee:13:4f:0b:d9:8e:08:ad:7a: b9:a5:46:69:08:9e:c0:cc:c4:99:73:af:5c:7c:00: af:fd:99:e3:ea:6d:6e:04:4b:eb:cc:7e:07:53:46: f3:68:81:19:fe:db:25:3e:f4:a5:81:f3:2d:c0:f3: ea:23:78:10:04:e9:ac:d7:9e:30:8b:b5:0b:85:c2: bc:79:05:a7:ff:b0:39:87:90:f0:ba:5f:e9:85:e1: 17:45:82:f6:58:dd:e5:e3:9e:ff:1c:dc:7a:b9:a0: f0:66:a1:e9:81:31:cc:af:db:9d:89:1a:05:dd:74: fc:99:5a:36:6e:09:7b:69:31:ee:a5:8e:af:6e:8e: a0:98:d1:f7:2e:e2:e1:c5:1d:16:82:10:d5:c5:db: 73:ad:7e:dd:7b:55:37:76:db:f5:e0:2a:46:4c:38: 3c:c5:81:04:d1:99:d6:01:a6:b8:d8:79:e1:66:fa: 00:d1:d1:9a:3f:61:b6:d8:d9:94:42:76:6c:a0:17: 87:81:31:d8:c1:5c:60:4b:8e:8e:74:79:f8:7b:33: 40:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:50:37:5D:0F:1C:B8:DF:B3:09:EF:5C:8B:8E:85:04:18:8C:82:B6 X509v3 Authority Key Identifier: keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:21:c3:78:4f:1b:ad:2a:86:7a:dc:0a:46:7c:fa:dc:61:d6: 8a:3b:50:f5:de:ef:b5:9a:7d:83:c7:e4:c1:d0:af:0e:f8:12: 3e:12:5f:af:30:54:b4:49:84:2f:cb:1e:d9:62:05:eb:bc:79: f1:a3:1a:4c:7a:4b:b2:f0:d3:6f:07:28:57:09:3a:df:d8:9e: 42:b1:8b:5b:2f:0a:12:10:90:64:c9:ce:0d:11:54:cf:1d:f5: ab:52:51:1c:23:cf:e7:93:9e:90:29:01:40:c9:45:b2:50:9a: 64:db:cd:d1:39:62:01:a3:ed:98:82:f8:ef:f8:04:fa:6a:86: f6:43:92:04:6b:ab:02:05:f4:98:4a:6c:57:51:e9:95:6b:0f: 85:2d:d9:0f:83:bb:2e:f7:09:52:a9:4b:97:72:14:99:2a:6f: ff:34:7c:53:11:d8:03:95:19:cd:20:e1:ac:fb:e9:ce:b2:2d: ab:92:c1:c1:63:36:f5:0d:7a:3b:44:26:77:07:df:96:93:02: 51:bf:52:2d:e5:d4:02:5b:8c:d2:a5:3b:12:4e:a1:e5:07:d0: 5f:f6:47:03:ee:4b:51:4a:e4:e0:06:7a:f0:23:f6:4c:21:2f: a6:52:8c:5c:67:95:b0:5d:ad:8a:55:90:f9:65:ac:60:f7:f4: 6a:67:c6:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dU4JxQXNophMh0zEf2rVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYTk2ODMxOWQ3MmE5OGE3NTk0MDAzMzhiNzBmZGM2Nzg5 MTJkZTYwHhcNMjYwMTI1MTQwMTA0WhcNMjYwMTI2MTQwMTA0WjAzMTEwLwYDVQQD EygzYjUwMzc1ZDBmMWNiOGRmYjMwOWVmNWM4YjhlODUwNDE4OGM4MmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QWddZK601/WZG/OA1JkikjdYk44 QDpn09zc9H1n5xT4jrA4csscfg0UtU3H13arM0DuE08L2Y4IrXq5pUZpCJ7AzMSZ c69cfACv/Znj6m1uBEvrzH4HU0bzaIEZ/tslPvSlgfMtwPPqI3gQBOms154wi7UL hcK8eQWn/7A5h5Dwul/pheEXRYL2WN3l457/HNx6uaDwZqHpgTHMr9udiRoF3XT8 mVo2bgl7aTHupY6vbo6gmNH3LuLhxR0WghDVxdtzrX7de1U3dtv14CpGTDg8xYEE 0ZnWAaa42HnhZvoA0dGaP2G22NmUQnZsoBeHgTHYwVxgS46OdHn4ezNA4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtQN10PHLjfswnvXIuOhQQYjIK2MB8GA1UdIwQY MBaAFM+paDGdcqmKdZQAM4tw/cZ4kS3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kYzYxNmYtZGU5Yi00NzhlLTg1Mzkt OGNlNTEwMThlMmU2LzEvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9kYzYxNmYtZGU5Yi00NzhlLTg1MzktOGNlNTEwMThlMmU2 LzEvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyHDeE8b rSqGetwKRnz63GHWijtQ9d7vtZp9g8fkwdCvDvgSPhJfrzBUtEmEL8se2WIF67x5 8aMaTHpLsvDTbwcoVwk639ieQrGLWy8KEhCQZMnODRFUzx31q1JRHCPP55OekCkB QMlFslCaZNvN0TliAaPtmIL47/gE+mqG9kOSBGurAgX0mEpsV1HplWsPhS3ZD4O7 LvcJUqlLl3IUmSpv/zR8UxHYA5UZzSDhrPvpzrItq5LBwWM29Q16O0QmdwfflpMC Ub9SLeXUAluM0qU7Ek6h5QfQX/ZHA+5LUUrk4AZ68CP2TCEvplKMXGeVsF2tilWQ +WWsYPf0amfGtg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:13:06 2026 by rpki-client