This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json) Hash identifier: LO6hlXRp/ehEE/Bt+KglyrKPWeuTL2uYnthloWUJ0/k= Subject key identifier: 91:CE:F8:05:80:1A:E0:29:C8:74:9A:AC:CA:B4:F5:81:F6:CF:E0:C2 Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89 Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489 Certificate serial: 019BF3F50FDE29634932B49FC1723C917E7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft Manifest number: 03DE Signing time: Sun 25 Jan 2026 07:01:22 +0000 Manifest this update: Sun 25 Jan 2026 07:01:22 +0000 Manifest next update: Mon 26 Jan 2026 07:01:22 +0000 Files and hashes: 1: EUnFTRWldaAfP3ttaxhxXqfYqdo.roa (hash: gYqt+Z3YRVRIHbrQgyPMmbW69V1RFqwRxQgWMMMLwI4=) 2: LkF8ib4KSmMJn8KFr7Mo8Jsbl_I.roa (hash: H+EbsIZLpp43we2PwY+fe71qWJFbXMa5gMz7K0E3sIY=) 3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: 3eV76i3gY/SIyNrmeX8WAEfLMnMAzVqSwgqOIXtRQWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:0f:de:29:63:49:32:b4:9f:c1:72:3c:91:7e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64c0bc594af811753dfc116af459b1b874471489 Validity Not Before: Jan 25 07:01:22 2026 GMT Not After : Jan 26 07:01:22 2026 GMT Subject: CN=91cef805801ae029c8749aaccab4f581f6cfe0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:93:07:01:7c:3c:49:84:21:73:92:38:bb:34: f0:e4:5b:d3:90:4f:ed:88:38:5d:d5:82:ee:e5:08: c0:9e:4f:df:b8:4e:72:ac:2f:5e:a6:74:66:af:34: a7:bf:0d:06:46:87:3d:23:9b:bb:39:fc:14:a6:32: 0c:9a:0e:41:23:3b:51:4a:92:d2:c2:14:3c:38:74: fa:78:8e:9d:f1:58:2d:45:7f:f9:68:f7:f6:ce:97: fd:c8:1a:90:52:d9:67:75:e6:c6:19:4b:4d:9e:f0: 29:67:d8:2b:68:e1:7f:d1:dc:62:d0:c1:2c:2a:8e: 08:3c:0e:55:0a:70:ff:a7:0d:1b:75:b6:74:08:3d: 27:25:dc:b1:1d:13:cf:1b:00:d3:87:0c:55:9d:d5: 2a:44:4a:af:9f:32:4e:71:54:2a:c9:63:b2:9d:df: 34:53:5e:20:41:25:f0:54:b2:f2:63:82:d2:1f:39: 4f:d4:d4:34:45:ad:9a:ce:3b:ee:e5:22:f8:3b:62: f5:ae:1b:8a:64:00:da:bf:78:7f:a4:3c:44:8e:73: 93:b4:0d:a6:b2:9a:79:8b:d2:64:c3:5c:90:44:4d: ba:fa:42:b0:7f:46:c6:43:ba:05:95:d0:87:7e:06: 95:bc:e3:ec:df:4c:c0:09:08:0e:3a:81:77:53:3c: 01:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CE:F8:05:80:1A:E0:29:C8:74:9A:AC:CA:B4:F5:81:F6:CF:E0:C2 X509v3 Authority Key Identifier: keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:6e:db:b7:9f:06:d0:af:0a:69:5a:5f:6f:e2:63:1b:7a:ca: 01:00:8a:bd:ee:82:c8:a0:f2:89:1e:32:26:2a:71:2b:a1:29: 1d:2d:9b:8a:1f:8e:86:b5:e2:d4:4e:21:31:01:d1:46:7b:6a: 95:45:38:31:ff:c4:48:2f:f8:a5:62:6c:1b:0f:0b:c6:08:6c: c9:f4:1b:93:bd:27:28:05:1f:be:4e:54:ae:08:55:12:7a:9a: 5c:10:ef:12:be:f4:00:a9:a1:c6:ed:0b:33:0c:76:50:26:07: 02:bb:da:08:ae:bf:55:83:9a:31:a0:5f:89:5c:a4:69:02:19: 9a:4b:e7:34:c4:56:88:01:00:f2:a1:f5:a7:b4:bf:ec:40:d1: 5c:0d:13:6d:4c:30:d2:8c:c5:3b:30:8d:21:1c:f4:1c:01:7f: ef:4d:70:95:56:b6:93:11:32:2e:c8:11:4f:39:f5:b7:68:01: 95:28:9a:dd:05:45:bf:cd:51:9d:d1:6a:21:50:f9:8b:ca:c6: 1b:6a:3b:b3:1e:b6:48:b2:43:47:e8:4e:f7:4c:28:e5:9a:87: ae:0a:93:ac:47:35:8b:2b:ef:f7:1e:be:46:44:1f:2e:0b:43: 6e:bf:02:5d:6e:77:19:09:7d:4d:20:59:83:b7:89:30:f9:39: f5:48:7e:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9Q/eKWNJMrSfwXI8kX57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YzBiYzU5NGFmODExNzUzZGZjMTE2YWY0NTliMWI4NzQ0 NzE0ODkwHhcNMjYwMTI1MDcwMTIyWhcNMjYwMTI2MDcwMTIyWjAzMTEwLwYDVQQD Eyg5MWNlZjgwNTgwMWFlMDI5Yzg3NDlhYWNjYWI0ZjU4MWY2Y2ZlMGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5MHAXw8SYQhc5I4uzTw5FvTkE/t iDhd1YLu5QjAnk/fuE5yrC9epnRmrzSnvw0GRoc9I5u7OfwUpjIMmg5BIztRSpLS whQ8OHT6eI6d8VgtRX/5aPf2zpf9yBqQUtlndebGGUtNnvApZ9graOF/0dxi0MEs Ko4IPA5VCnD/pw0bdbZ0CD0nJdyxHRPPGwDThwxVndUqREqvnzJOcVQqyWOynd80 U14gQSXwVLLyY4LSHzlP1NQ0Ra2azjvu5SL4O2L1rhuKZADav3h/pDxEjnOTtA2m spp5i9Jkw1yQRE26+kKwf0bGQ7oFldCHfgaVvOPs30zACQgOOoF3UzwBfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHO+AWAGuApyHSarMq09YH2z+DCMB8GA1UdIwQY MBaAFGTAvFlK+BF1PfwRavRZsbh0RxSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNDhiZmQtNzk3ZC00N2E5LThhNjIt NDQzMTNiNDNlNTk0LzEvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNDhiZmQtNzk3ZC00N2E5LThhNjItNDQzMTNiNDNlNTk0 LzEvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAm7bt58G 0K8KaVpfb+JjG3rKAQCKve6CyKDyiR4yJipxK6EpHS2bih+OhrXi1E4hMQHRRntq lUU4Mf/ESC/4pWJsGw8LxghsyfQbk70nKAUfvk5UrghVEnqaXBDvEr70AKmhxu0L Mwx2UCYHArvaCK6/VYOaMaBfiVykaQIZmkvnNMRWiAEA8qH1p7S/7EDRXA0TbUww 0ozFOzCNIRz0HAF/701wlVa2kxEyLsgRTzn1t2gBlSia3QVFv81RndFqIVD5i8rG G2o7sx62SLJDR+hO90wo5ZqHrgqTrEc1iyvv9x6+RkQfLgtDbr8CXW53GQl9TSBZ g7eJMPk59Uh+Eg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:22:32 2026 by rpki-client