This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft File: zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft (raw, json) Hash identifier: rHv5YIbGgtK5a2jzFajqIuVaUJ4LFnEPIx1szI9JGVw= Subject key identifier: 26:ED:92:4E:07:19:CC:DC:C1:71:F4:B1:0A:34:3E:4F:66:75:D0:22 Authority key identifier: CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84 Certificate issuer: /CN=cc8df88054060df685bba9739123e8342d479e84 Certificate serial: 019BF68854C85DB3300A168EB8B4F5A6919C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft Manifest number: 1782 Signing time: Sun 25 Jan 2026 19:01:28 +0000 Manifest this update: Sun 25 Jan 2026 19:01:28 +0000 Manifest next update: Mon 26 Jan 2026 19:01:28 +0000 Files and hashes: 1: nWemIk_PUFibWyxsMCHuSPNqyxE.roa (hash: LfDaK0qO1xTJjSEUv9R58HxO4b8gyazqBrXpwSZbnWE=) 2: zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl (hash: 2idyrB3IS91GX/MipcUFN1UFR99rhKUKYAZiUnt/CCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:54:c8:5d:b3:30:0a:16:8e:b8:b4:f5:a6:91:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc8df88054060df685bba9739123e8342d479e84 Validity Not Before: Jan 25 19:01:28 2026 GMT Not After : Jan 26 19:01:28 2026 GMT Subject: CN=26ed924e0719ccdcc171f4b10a343e4f6675d022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ce:ce:9c:b2:47:9a:06:27:6b:d0:4a:a0:f0: 45:53:bf:95:ab:96:3d:0b:2c:97:61:b5:8f:6e:6b: c3:73:76:99:87:8d:dd:9f:56:5a:0b:90:b4:57:8f: a7:1d:1c:58:1c:cb:ea:f4:0b:d2:61:32:b4:1e:b3: 2a:16:83:1a:fc:f2:bd:e5:08:e3:e4:96:b8:f4:51: f6:0e:69:c1:c3:f0:f1:3e:5e:c4:d8:c5:a8:8f:ae: d1:5a:3b:60:9a:f9:97:00:20:fb:a3:07:02:6b:c1: af:3c:4d:c7:b6:33:ed:46:21:74:fa:42:01:fd:6b: 01:75:f9:86:02:77:ff:a7:a1:43:3a:e8:67:2b:0a: a4:11:18:97:a6:1f:69:d9:0d:7b:e9:01:d9:1b:e9: 47:31:5d:18:a3:63:12:b2:e8:05:30:df:b3:c4:e0: 8f:f6:8b:54:19:6d:a4:83:ec:77:d3:18:bd:17:80: 65:38:9d:7a:7e:13:af:40:f2:9c:5b:05:20:ec:d3: c4:65:3e:d9:6c:cb:3c:8c:05:a5:e5:bf:14:71:7c: 4e:d0:4f:c2:cd:76:1e:14:f9:74:64:ba:dc:ca:5f: 4a:48:a7:1e:bb:b1:19:68:80:30:3b:96:a7:87:90: fe:48:e7:07:ba:14:6c:4c:73:2c:e2:fc:ce:e2:22: fb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:ED:92:4E:07:19:CC:DC:C1:71:F4:B1:0A:34:3E:4F:66:75:D0:22 X509v3 Authority Key Identifier: keyid:CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:eb:6e:a3:dc:51:3f:0f:f7:af:1f:15:7e:86:3f:77:6d:5d: 4b:ee:f1:c2:98:5c:de:dd:61:3f:22:d7:d6:58:1b:28:aa:81: 5c:1a:c0:a7:db:77:10:9a:d4:19:f6:54:23:dc:7b:ce:9b:53: 1c:70:92:ca:42:ea:d9:47:67:40:8c:af:1d:8f:ed:64:47:a1: ce:f0:fd:5f:e0:f6:43:1b:b8:8a:2d:e5:d6:93:31:19:a3:d6: 2a:97:f2:b1:32:93:6f:62:ec:78:43:12:ed:32:6f:a3:99:ad: a9:64:48:3b:25:75:44:14:4c:c5:bf:28:77:3d:3e:cf:93:93: 2b:31:2a:06:85:41:e7:0e:9a:bd:0b:e8:5d:ee:fa:2b:9d:e8: 77:61:82:cf:38:66:64:c4:d1:c9:af:47:02:0c:cf:30:3d:3d: c7:f7:66:36:3f:a6:3f:b2:d2:de:08:70:7f:4b:d4:a4:06:36: d0:31:d4:e4:8b:0e:e3:88:a1:0c:5b:d0:4a:77:c7:cb:d1:a9: d6:d3:ba:41:f5:1d:3e:1f:d6:73:b8:19:26:74:33:08:0d:70: 30:b8:e6:02:8e:28:f6:a1:09:67:2f:d5:5f:9b:de:5a:b8:cc: be:ae:1d:9e:32:c9:d8:48:79:61:26:64:78:24:43:7d:a6:c5: cb:4c:23:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iFTIXbMwChaOuLT1ppGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjOGRmODgwNTQwNjBkZjY4NWJiYTk3MzkxMjNlODM0MmQ0 NzllODQwHhcNMjYwMTI1MTkwMTI4WhcNMjYwMTI2MTkwMTI4WjAzMTEwLwYDVQQD EygyNmVkOTI0ZTA3MTljY2RjYzE3MWY0YjEwYTM0M2U0ZjY2NzVkMDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv87OnLJHmgYna9BKoPBFU7+Vq5Y9 CyyXYbWPbmvDc3aZh43dn1ZaC5C0V4+nHRxYHMvq9AvSYTK0HrMqFoMa/PK95Qjj 5Ja49FH2DmnBw/DxPl7E2MWoj67RWjtgmvmXACD7owcCa8GvPE3HtjPtRiF0+kIB /WsBdfmGAnf/p6FDOuhnKwqkERiXph9p2Q176QHZG+lHMV0Yo2MSsugFMN+zxOCP 9otUGW2kg+x30xi9F4BlOJ16fhOvQPKcWwUg7NPEZT7ZbMs8jAWl5b8UcXxO0E/C zXYeFPl0ZLrcyl9KSKceu7EZaIAwO5anh5D+SOcHuhRsTHMs4vzO4iL7UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbtkk4HGczcwXH0sQo0Pk9mddAiMB8GA1UdIwQY MBaAFMyN+IBUBg32hbupc5Ej6DQtR56EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekkzNGdGUUdEZmFGdTZsemtTUG9OQzFIbm9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kYjhkMzgtMDc3Zi00ZDc3LTkzODMt ZGM3ODFjYzJhMjU4LzEvekkzNGdGUUdEZmFGdTZsemtTUG9OQzFIbm9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9kYjhkMzgtMDc3Zi00ZDc3LTkzODMtZGM3ODFjYzJhMjU4 LzEvekkzNGdGUUdEZmFGdTZsemtTUG9OQzFIbm9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxutuo9xR Pw/3rx8VfoY/d21dS+7xwphc3t1hPyLX1lgbKKqBXBrAp9t3EJrUGfZUI9x7zptT HHCSykLq2UdnQIyvHY/tZEehzvD9X+D2Qxu4ii3l1pMxGaPWKpfysTKTb2LseEMS 7TJvo5mtqWRIOyV1RBRMxb8odz0+z5OTKzEqBoVB5w6avQvoXe76K53od2GCzzhm ZMTRya9HAgzPMD09x/dmNj+mP7LS3ghwf0vUpAY20DHU5IsO44ihDFvQSnfHy9Gp 1tO6QfUdPh/Wc7gZJnQzCA1wMLjmAo4o9qEJZy/VX5veWrjMvq4dnjLJ2Eh5YSZk eCRDfabFy0wjOQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:16 2026 by rpki-client