This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft File: r-Zisul_0r2pHzKyzOnnRculhgI.mft (raw, json) Hash identifier: erxzlcDw/mzQ5ejrRggJZsRn9Vk/blL2BXU5ucaWS5E= Subject key identifier: 98:94:F7:E4:AC:36:2E:EB:5B:DA:92:AA:3F:34:51:3C:CF:53:09:EA Authority key identifier: AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02 Certificate issuer: /CN=afe662b2e97fd2bda91f32b2cce9e745cba58602 Certificate serial: 019BF619FD65BE319A8D85BD43F9666A1E89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft Manifest number: 01CE Signing time: Sun 25 Jan 2026 17:00:56 +0000 Manifest this update: Sun 25 Jan 2026 17:00:56 +0000 Manifest next update: Mon 26 Jan 2026 17:00:56 +0000 Files and hashes: 1: r-Zisul_0r2pHzKyzOnnRculhgI.crl (hash: CQbo3n0z0agbIFsLT5TvghpFrWPqefVWj424NrM/8/A=) 2: sBjAqPrKhV1Z1WPs7LsZcM8hAlM.roa (hash: FofTnNrc0AeEr8Tl3KCw6xOYYJYEqXcD/ByXgE3T67E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:fd:65:be:31:9a:8d:85:bd:43:f9:66:6a:1e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe662b2e97fd2bda91f32b2cce9e745cba58602 Validity Not Before: Jan 25 17:00:56 2026 GMT Not After : Jan 26 17:00:56 2026 GMT Subject: CN=9894f7e4ac362eeb5bda92aa3f34513ccf5309ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3d:fb:04:15:63:37:39:01:57:28:54:76:3b: db:8c:fe:78:c7:fd:e3:5a:af:2f:45:e3:f1:0e:5e: 6d:61:dd:7a:e4:22:ff:ac:81:5b:29:11:14:b1:fd: 18:fd:bf:ea:34:f3:fb:58:ff:37:7d:27:d8:8d:fd: 56:78:f3:96:2a:e2:26:0c:02:26:03:dc:43:ac:71: 32:a6:82:da:a4:3c:a2:aa:b0:a6:6e:9e:45:9d:f7: 48:49:81:06:6e:77:2e:a2:87:a6:d8:f7:08:7a:2d: 44:9f:55:d0:f9:55:44:2d:ec:71:61:ef:64:69:c6: 68:a4:1c:19:9f:fa:63:25:6b:d6:b6:a6:60:59:b1: 37:a9:6d:a1:d1:b3:6e:d4:3b:c9:91:b2:ae:85:77: 1a:27:49:d8:e1:7e:0c:9e:ad:9c:22:04:86:64:a3: 5c:2a:22:a9:89:3b:17:75:d9:46:4b:88:0a:d6:d6: fb:fb:28:92:1d:ee:cc:e4:de:40:d7:5c:d2:e3:ab: 1d:ec:98:a6:a3:a3:b7:ba:79:7a:7f:a7:f0:51:62: 27:0a:91:a9:34:15:9d:4f:b0:b2:32:9b:85:01:69: d4:e1:55:01:be:77:d6:b5:ba:6e:bf:91:ef:a1:7d: ef:66:07:3d:1c:85:9a:8e:0f:94:9c:8a:63:48:e5: c8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:94:F7:E4:AC:36:2E:EB:5B:DA:92:AA:3F:34:51:3C:CF:53:09:EA X509v3 Authority Key Identifier: keyid:AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e8:41:44:65:0c:d3:17:ef:a5:72:46:f5:6e:fb:dc:34:1e: e7:8e:e9:4e:1b:bb:34:f0:45:67:65:e5:db:94:61:7c:a1:b7: f7:40:db:0f:21:7f:ce:bc:91:74:a2:ae:8b:90:ec:bb:c7:44: b1:47:50:13:7c:ad:5d:18:6b:a3:73:7c:a1:b5:b9:01:7c:11: e0:f3:b7:e0:6e:19:c5:5d:18:64:46:89:11:a5:4e:bc:99:4f: 11:b1:f8:08:79:a7:8d:d4:f9:72:5c:ff:dc:12:8b:bd:1e:3d: 47:63:5c:0c:b7:3e:87:3c:51:c2:73:3b:d3:7a:5c:f3:53:4a: 9a:0e:be:4c:da:ba:d1:13:43:ab:4a:3f:83:93:bc:6c:24:e3: ef:dd:6d:f8:e2:68:45:6d:c7:e1:10:51:be:b5:f5:d8:b9:a7: ae:d9:67:63:dc:3b:c3:9a:ab:78:d2:f7:a5:9d:82:a1:43:46: 7c:96:61:55:e1:c6:1b:1f:ad:35:07:14:9d:49:89:9f:39:f9: db:a4:71:e8:b4:cd:75:c1:50:c5:d8:b1:08:57:22:fe:26:39: af:12:a9:ab:d3:55:30:41:af:5a:e4:a5:3f:90:c8:7b:85:7f: 18:de:a0:0e:e2:41:02:80:00:7a:c4:2b:e7:ca:d2:30:11:0f: fd:2d:32:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gf1lvjGajYW9Q/lmah6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZTY2MmIyZTk3ZmQyYmRhOTFmMzJiMmNjZTllNzQ1Y2Jh NTg2MDIwHhcNMjYwMTI1MTcwMDU2WhcNMjYwMTI2MTcwMDU2WjAzMTEwLwYDVQQD Eyg5ODk0ZjdlNGFjMzYyZWViNWJkYTkyYWEzZjM0NTEzY2NmNTMwOWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1z37BBVjNzkBVyhUdjvbjP54x/3j Wq8vRePxDl5tYd165CL/rIFbKREUsf0Y/b/qNPP7WP83fSfYjf1WePOWKuImDAIm A9xDrHEypoLapDyiqrCmbp5FnfdISYEGbncuooem2PcIei1En1XQ+VVELexxYe9k acZopBwZn/pjJWvWtqZgWbE3qW2h0bNu1DvJkbKuhXcaJ0nY4X4Mnq2cIgSGZKNc KiKpiTsXddlGS4gK1tb7+yiSHe7M5N5A11zS46sd7Jimo6O3unl6f6fwUWInCpGp NBWdT7CyMpuFAWnU4VUBvnfWtbpuv5HvoX3vZgc9HIWajg+UnIpjSOXIBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJiU9+SsNi7rW9qSqj80UTzPUwnqMB8GA1UdIwQY MBaAFK/mYrLpf9K9qR8ysszp50XLpYYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci1aaXN1bF8wcjJwSHpLeXpPbm5SY3VsaGdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jOTA4Y2EtODJjMy00NmMzLThiMjkt MzRkMGMwZTRjMTEzLzEvci1aaXN1bF8wcjJwSHpLeXpPbm5SY3VsaGdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9jOTA4Y2EtODJjMy00NmMzLThiMjktMzRkMGMwZTRjMTEz LzEvci1aaXN1bF8wcjJwSHpLeXpPbm5SY3VsaGdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHehBRGUM 0xfvpXJG9W773DQe547pThu7NPBFZ2Xl25RhfKG390DbDyF/zryRdKKui5Dsu8dE sUdQE3ytXRhro3N8obW5AXwR4PO34G4ZxV0YZEaJEaVOvJlPEbH4CHmnjdT5clz/ 3BKLvR49R2NcDLc+hzxRwnM703pc81NKmg6+TNq60RNDq0o/g5O8bCTj791t+OJo RW3H4RBRvrX12LmnrtlnY9w7w5qreNL3pZ2CoUNGfJZhVeHGGx+tNQcUnUmJnzn5 26Rx6LTNdcFQxdixCFci/iY5rxKpq9NVMEGvWuSlP5DIe4V/GN6gDuJBAoAAesQr 58rSMBEP/S0ysQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:04:09 2026 by rpki-client