This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json) Hash identifier: QUD4efliNjEggb2KW89cXU13UZsl3CoVgC8taFt86ck= Subject key identifier: E2:08:CC:77:82:58:B2:8F:F4:30:6C:4D:41:66:A2:AB:01:73:FA:D8 Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2 Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2 Certificate serial: 019BF83F8684ED7A522AD9506316A61049DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft Manifest number: 14B1 Signing time: Mon 26 Jan 2026 03:01:11 +0000 Manifest this update: Mon 26 Jan 2026 03:01:11 +0000 Manifest next update: Tue 27 Jan 2026 03:01:11 +0000 Files and hashes: 1: CuEyheF-29dttpD6VLLaExCFGAA.roa (hash: R6vjhi7yIbFl0joD76O7Kh49JYPbEdB6dMSlf59XV7s=) 2: tSwu_rs-_T3OD9Pp5HQg9a8f-F0.roa (hash: OkFsnGmy75UDy40lQIElr+ClgPv+0wuI2ecBN6Kx84o=) 3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: ZJwc5t/gskPOh194253hnQU/OsjSEFn6TA0xkc3OiR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:86:84:ed:7a:52:2a:d9:50:63:16:a6:10:49:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2 Validity Not Before: Jan 26 03:01:11 2026 GMT Not After : Jan 27 03:01:11 2026 GMT Subject: CN=e208cc778258b28ff4306c4d4166a2ab0173fad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:89:c9:8c:33:bd:58:ce:cf:78:f0:f2:86:75: 5b:f8:6f:c2:4a:65:69:47:86:02:3e:ac:e3:78:1d: aa:e7:4d:24:ce:69:be:8a:0e:0a:d3:93:84:92:ea: 4d:ad:d3:4e:df:c6:a7:8b:cb:96:1b:c2:ca:ca:7d: 96:94:91:d4:40:62:02:ff:9b:b5:1b:63:22:ce:2d: 28:ee:a4:b3:b6:88:04:14:04:94:cd:94:28:b5:9e: 02:42:55:f3:33:2d:f6:f4:94:a5:d1:18:52:98:66: 7d:00:2d:a3:e8:0d:e8:d9:2d:13:1a:f8:1e:1d:79: db:13:7f:e5:2d:bb:82:6e:2e:1f:50:97:b7:f1:fc: 24:2c:b1:70:16:b0:cb:04:0a:4c:0a:e0:3a:5b:fa: 8b:62:31:7a:67:b2:64:17:54:13:ad:6e:0e:06:a0: f3:09:9a:c8:ac:05:06:8a:1d:76:1d:73:f5:47:df: 34:01:8f:19:80:c4:91:0e:a9:03:af:9e:9b:9b:a3: dc:6a:4d:8e:2c:6e:6d:e8:5f:73:b8:24:5d:a9:88: fc:ad:7e:3f:45:55:47:83:b0:bb:39:24:f4:4d:e5: 5f:0e:f0:40:b8:0a:6c:23:91:60:94:87:b7:a7:18: ef:c3:6a:d1:82:81:a6:e5:ba:33:10:cc:70:79:00: f2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:08:CC:77:82:58:B2:8F:F4:30:6C:4D:41:66:A2:AB:01:73:FA:D8 X509v3 Authority Key Identifier: keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:b4:6e:b6:2d:af:d1:69:ec:35:02:77:01:3a:95:2e:ea:b5: 77:e5:72:1e:0e:60:5c:ca:6c:02:80:65:64:59:51:27:c5:3c: 2b:1e:ce:ab:59:71:71:69:43:ca:77:ce:31:1e:ae:28:01:51: 0d:15:fa:2e:30:eb:46:41:fd:08:a8:0f:b4:63:f6:34:75:dc: 5e:d8:1e:4e:19:c5:d4:51:07:83:fc:5b:0d:19:75:66:ae:91: 4d:39:73:97:b8:f4:79:c8:d7:a8:3a:c5:27:93:62:f9:e2:29: e5:39:9e:84:b0:ef:46:6d:01:5a:a7:6d:a3:59:11:dc:5a:20: 42:b2:c8:94:f6:74:24:9c:71:da:79:f7:84:28:fe:25:f9:70: 65:7f:00:94:9c:f7:00:79:63:fd:59:05:7a:2e:94:a7:d7:d2: 9b:63:81:10:e1:64:2a:61:9d:6e:89:94:95:da:ca:a5:cf:1b: 82:5b:5d:e1:86:10:d0:e8:c9:70:39:e5:65:a2:0e:29:3e:cb: de:e9:c1:de:29:4b:1d:99:b7:67:01:a3:50:ed:80:4a:56:d3: 15:84:b0:01:d9:29:17:fe:cc:39:c7:78:90:66:4b:bc:15:1f: b2:32:1c:f5:34:de:97:4a:c6:d9:de:e4:bb:7c:91:7a:18:b9: dc:12:e5:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P4aE7XpSKtlQYxamEEnfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMTU5YzhhMWU2NGZjNjRmZjY2NmJkOTIxOWRjZTE3NDM3 M2NhZjIwHhcNMjYwMTI2MDMwMTExWhcNMjYwMTI3MDMwMTExWjAzMTEwLwYDVQQD EyhlMjA4Y2M3NzgyNThiMjhmZjQzMDZjNGQ0MTY2YTJhYjAxNzNmYWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4nJjDO9WM7PePDyhnVb+G/CSmVp R4YCPqzjeB2q500kzmm+ig4K05OEkupNrdNO38ani8uWG8LKyn2WlJHUQGIC/5u1 G2Mizi0o7qSztogEFASUzZQotZ4CQlXzMy329JSl0RhSmGZ9AC2j6A3o2S0TGvge HXnbE3/lLbuCbi4fUJe38fwkLLFwFrDLBApMCuA6W/qLYjF6Z7JkF1QTrW4OBqDz CZrIrAUGih12HXP1R980AY8ZgMSRDqkDr56bm6Pcak2OLG5t6F9zuCRdqYj8rX4/ RVVHg7C7OST0TeVfDvBAuApsI5FglIe3pxjvw2rRgoGm5bozEMxweQDyFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIIzHeCWLKP9DBsTUFmoqsBc/rYMB8GA1UdIwQY MBaAFMwVnIoeZPxk/2Zr2SGdzhdDc8ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYt NjQ4MjA0MWE4MjQ2LzEvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYtNjQ4MjA0MWE4MjQ2 LzEvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLRuti2v 0WnsNQJ3ATqVLuq1d+VyHg5gXMpsAoBlZFlRJ8U8Kx7Oq1lxcWlDynfOMR6uKAFR DRX6LjDrRkH9CKgPtGP2NHXcXtgeThnF1FEHg/xbDRl1Zq6RTTlzl7j0ecjXqDrF J5Ni+eIp5TmehLDvRm0BWqdto1kR3FogQrLIlPZ0JJxx2nn3hCj+JflwZX8AlJz3 AHlj/VkFei6Up9fSm2OBEOFkKmGdbomUldrKpc8bgltd4YYQ0OjJcDnlZaIOKT7L 3unB3ilLHZm3ZwGjUO2ASlbTFYSwAdkpF/7MOcd4kGZLvBUfsjIc9TTel0rG2d7k u3yRehi53BLlAA== -----END CERTIFICATE-----Generated at Mon Jan 26 09:46:03 2026 by rpki-client