This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft File: zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json) Hash identifier: UnFyiDjQYzXxMDcrJw90mZwTnaqkQz3CPDRnLhMoZCo= Subject key identifier: 9D:04:39:4F:2D:79:FF:C4:59:2A:F2:19:47:15:91:E3:09:AE:CE:BA Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20 Certificate issuer: /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20 Certificate serial: 019BF53E534B37B28BFBAC6A7871DD761900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft Manifest number: 1528 Signing time: Sun 25 Jan 2026 13:01:00 +0000 Manifest this update: Sun 25 Jan 2026 13:01:00 +0000 Manifest next update: Mon 26 Jan 2026 13:01:00 +0000 Files and hashes: 1: pz_LxxSTUEK41xRGO49WFkaPamo.roa (hash: Po2+r5cJxr4nJHVT6kaSPbOqY0n14cmEkFelVzBg4ko=) 2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: ErEhFYZXk5pvSxnw0/2tGOpNRFUVpNH7mFPWVgT718A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:53:4b:37:b2:8b:fb:ac:6a:78:71:dd:76:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20 Validity Not Before: Jan 25 13:01:00 2026 GMT Not After : Jan 26 13:01:00 2026 GMT Subject: CN=9d04394f2d79ffc4592af219471591e309aeceba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3b:e5:04:78:49:4c:5e:2a:8c:bd:89:95:6e: e8:3e:72:a6:e0:3c:5e:b1:4c:1f:f7:31:c8:3d:36: 19:c3:f5:61:11:57:91:63:3a:3f:5e:e8:2f:d0:d5: 8d:c1:3a:af:64:a2:8b:c2:7c:fc:2c:e4:92:c2:14: 35:7f:de:be:af:a4:76:ad:fb:4a:b2:b6:f0:df:de: e3:04:be:18:b2:2d:dd:81:e6:6b:26:59:f1:19:16: 2c:85:69:e1:17:8f:a5:f7:df:8b:43:28:9b:1a:0f: 3c:29:a0:03:1f:33:e9:4e:42:22:0c:60:a5:fd:fe: 47:e4:f5:9b:1f:74:2e:df:0b:2c:bb:e1:07:bd:2c: 22:94:52:a2:cd:d8:f1:81:4f:e5:5b:ec:2f:86:4c: e4:a8:3c:9e:e6:9c:6a:64:3d:05:39:55:77:fe:93: fe:1b:da:3d:38:df:88:ec:57:8f:cb:2d:4c:fb:fb: a6:f5:24:9d:f6:ea:7f:ea:3e:51:25:30:b3:77:ec: 10:a5:e1:da:38:00:55:14:08:e9:6b:2a:74:d1:4f: 47:38:ac:1e:37:de:34:98:03:1c:91:30:c6:f0:d8: 1d:78:d4:de:e7:1a:81:27:a1:dc:98:77:ba:ae:4a: f2:99:3d:1e:dd:37:33:49:c5:cc:28:e8:06:2c:7f: 89:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:04:39:4F:2D:79:FF:C4:59:2A:F2:19:47:15:91:E3:09:AE:CE:BA X509v3 Authority Key Identifier: keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:10:ae:a9:f2:fe:2d:cb:52:f7:2e:77:7f:44:1a:08:00:30: e4:1a:b3:97:bc:31:cb:90:11:9e:a8:12:43:b7:df:f9:ff:a8: 0f:c6:87:09:18:1c:af:0d:9f:77:1e:85:39:25:d4:72:48:6e: 67:13:10:51:60:f7:34:6e:91:42:e0:85:08:2f:5b:47:ef:74: d5:02:38:a1:3e:3f:56:55:f4:76:01:d9:90:2f:d1:61:a4:4e: a8:71:32:c6:bc:72:a4:64:eb:90:91:4b:82:d2:cb:3e:bd:1f: b9:db:f6:14:d8:9d:ad:4f:b8:9f:f9:8b:eb:93:ef:b8:1c:f9: 6d:10:a2:6c:1f:95:4c:91:82:a3:34:b0:81:c3:dd:19:5a:8a: 78:91:55:35:ad:06:05:65:98:35:dd:39:db:8e:51:b7:fc:15: e9:d8:c9:40:dc:1d:1b:1d:af:df:5e:f1:ad:fa:53:7b:80:c9: 25:30:78:68:f6:61:5a:96:5d:93:53:b4:2c:b3:83:90:ab:54: 74:bc:ee:80:20:0f:e7:32:7b:1b:3d:1b:3e:79:1e:d1:20:6b: 7e:8f:ce:56:6a:c8:c7:69:16:e8:78:21:ce:b5:ff:2e:22:81: 20:73:55:85:bf:c4:7d:2b:3f:b2:2a:49:e9:34:82:58:7d:94: 06:31:36:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PlNLN7KL+6xqeHHddhkAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMzhhNTEzYjVjMzc3ZjkxZmU0Yzc4NDc0YmMyNmExYjYx YjRhMjAwHhcNMjYwMTI1MTMwMTAwWhcNMjYwMTI2MTMwMTAwWjAzMTEwLwYDVQQD Eyg5ZDA0Mzk0ZjJkNzlmZmM0NTkyYWYyMTk0NzE1OTFlMzA5YWVjZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjvlBHhJTF4qjL2JlW7oPnKm4Dxe sUwf9zHIPTYZw/VhEVeRYzo/Xugv0NWNwTqvZKKLwnz8LOSSwhQ1f96+r6R2rftK srbw397jBL4Ysi3dgeZrJlnxGRYshWnhF4+l99+LQyibGg88KaADHzPpTkIiDGCl /f5H5PWbH3Qu3wssu+EHvSwilFKizdjxgU/lW+wvhkzkqDye5pxqZD0FOVV3/pP+ G9o9ON+I7FePyy1M+/um9SSd9up/6j5RJTCzd+wQpeHaOABVFAjpayp00U9HOKwe N940mAMckTDG8NgdeNTe5xqBJ6HcmHe6rkrymT0e3TczScXMKOgGLH+JbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0EOU8tef/EWSryGUcVkeMJrs66MB8GA1UdIwQY MBaAFM84pRO1w3f5H+THhHS8JqG2G0ogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84Y2VlODEtZDQ2Ni00MTM3LWE5MWIt ZmVjMDgzZjYzZTBlLzEvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS84Y2VlODEtZDQ2Ni00MTM3LWE5MWItZmVjMDgzZjYzZTBl LzEvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0hCuqfL+ LctS9y53f0QaCAAw5Bqzl7wxy5ARnqgSQ7ff+f+oD8aHCRgcrw2fdx6FOSXUckhu ZxMQUWD3NG6RQuCFCC9bR+901QI4oT4/VlX0dgHZkC/RYaROqHEyxrxypGTrkJFL gtLLPr0fudv2FNidrU+4n/mL65PvuBz5bRCibB+VTJGCozSwgcPdGVqKeJFVNa0G BWWYNd05245Rt/wV6djJQNwdGx2v317xrfpTe4DJJTB4aPZhWpZdk1O0LLODkKtU dLzugCAP5zJ7Gz0bPnke0SBrfo/OVmrIx2kW6HghzrX/LiKBIHNVhb/EfSs/sipJ 6TSCWH2UBjE20g== -----END CERTIFICATE-----Generated at Sun Jan 25 16:23:27 2026 by rpki-client