This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft File: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft (raw, json) Hash identifier: oQ/DIKGBWDxhza7+yaSrwJ7rN6SvXMuHEp+FwOATmtM= Subject key identifier: 90:1A:7B:FA:13:B0:1F:D2:72:22:98:08:0A:FB:46:AF:79:AD:38:F6 Authority key identifier: CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B Certificate issuer: /CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b Certificate serial: 019BF3BDDDD70D1835C8B3E53FA3A9EA4B30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft Manifest number: 0F79 Signing time: Sun 25 Jan 2026 06:01:05 +0000 Manifest this update: Sun 25 Jan 2026 06:01:05 +0000 Manifest next update: Mon 26 Jan 2026 06:01:05 +0000 Files and hashes: 1: xrO5D70sBfqzb1KvKjiSlTkOZTM.asa (hash: Y/Q2yHL7nhqRTsgsaLHI7AHhGC8nNqJved6iT4rcOy0=) 2: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl (hash: TidDeRepfFdFSpoJTowRYzWH20ZNjS1hVTfxUcrGBYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:dd:d7:0d:18:35:c8:b3:e5:3f:a3:a9:ea:4b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b Validity Not Before: Jan 25 06:01:05 2026 GMT Not After : Jan 26 06:01:05 2026 GMT Subject: CN=901a7bfa13b01fd2722298080afb46af79ad38f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:87:bb:4f:94:b2:87:d9:6e:59:5a:cf:76:8e: f1:0c:61:e5:8e:2d:fe:e3:0e:6a:e6:b4:80:bd:40: 7e:55:46:ef:aa:34:52:b6:10:64:73:d1:76:da:dd: b6:8a:d7:a2:6c:ca:5f:46:96:02:46:6f:58:41:9c: 2f:02:27:69:58:0d:83:44:4f:8c:18:41:0c:45:4a: b5:48:e7:b0:73:c9:85:d9:37:de:22:f8:22:b0:0e: e6:85:76:4d:cf:0e:6c:c1:0f:80:e2:74:be:88:6b: e0:aa:ee:3a:a7:ba:23:73:66:95:d4:3a:ee:b5:a9: 7c:3a:92:3e:fe:90:73:84:bd:72:17:ef:68:41:2a: bb:38:eb:c6:2e:1d:2b:02:4e:eb:86:4d:c1:c5:3d: 02:b3:73:e2:b7:44:bc:06:df:74:8d:18:4c:b5:1c: 76:bb:5b:6b:c8:63:a5:a7:5f:0a:c3:52:31:90:53: 2c:cf:ff:bf:f2:49:25:e1:e5:3c:25:35:52:8c:43: 9a:a0:6e:20:a2:92:4a:c0:ce:72:8d:f4:f9:c4:9c: 47:1f:49:ba:d4:6d:d6:40:41:a8:d0:c0:b3:12:5b: 74:18:56:bb:13:a0:d1:28:90:dd:b7:80:f0:45:5b: 9b:54:7e:7e:58:c9:36:c7:95:a6:b8:48:2b:d3:95: 6a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1A:7B:FA:13:B0:1F:D2:72:22:98:08:0A:FB:46:AF:79:AD:38:F6 X509v3 Authority Key Identifier: keyid:CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ff:76:06:99:7c:ac:5a:75:fd:ae:d0:81:45:d8:d1:c4:35: 27:32:ff:0b:84:f5:e3:85:76:69:f6:37:6a:d7:1c:5f:f3:01: f3:50:2a:c2:32:cf:94:eb:9b:c9:5b:17:55:b0:94:c9:96:32: 36:83:f4:54:a5:ef:87:fd:8e:05:7e:c7:3d:79:86:1e:7d:0d: a1:9a:44:71:83:22:6a:04:58:2a:e1:81:83:7d:2b:b9:20:d3: 04:6c:45:8f:be:34:57:9c:08:e9:29:ac:15:e0:ba:49:b3:8a: c9:8e:69:4e:37:4f:66:c2:1a:d0:6b:aa:0a:33:a2:52:9f:bc: 57:ad:68:53:63:87:99:ac:1b:cb:b6:1d:f5:30:c6:b7:4f:53: 5c:56:62:fd:33:25:0f:29:6c:42:31:81:68:ef:40:a6:5a:e0: 1b:e6:dd:71:16:57:ff:b3:03:ab:1e:36:58:a4:54:3b:ec:67: eb:6c:ac:a1:df:53:71:ae:3e:35:84:3f:84:87:08:26:1d:d8: e8:ea:a8:3c:12:03:e8:b1:5d:f2:20:c1:26:8c:72:bc:a9:85: e9:fc:6d:49:0e:c3:7e:43:ce:6a:98:4e:4d:48:ed:19:14:a9: 71:9d:48:98:69:92:d1:8c:92:bc:6f:63:09:0c:e6:8d:e9:83: d3:1e:9b:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvd3XDRg1yLPlP6Op6kswMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYWMzNzJmN2E5YjgxNzFkY2JmYzExNjBjYWEyMmM4ZmRj NjhiN2IwHhcNMjYwMTI1MDYwMTA1WhcNMjYwMTI2MDYwMTA1WjAzMTEwLwYDVQQD Eyg5MDFhN2JmYTEzYjAxZmQyNzIyMjk4MDgwYWZiNDZhZjc5YWQzOGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ye7T5Syh9luWVrPdo7xDGHlji3+ 4w5q5rSAvUB+VUbvqjRSthBkc9F22t22iteibMpfRpYCRm9YQZwvAidpWA2DRE+M GEEMRUq1SOewc8mF2TfeIvgisA7mhXZNzw5swQ+A4nS+iGvgqu46p7ojc2aV1Dru tal8OpI+/pBzhL1yF+9oQSq7OOvGLh0rAk7rhk3BxT0Cs3Pit0S8Bt90jRhMtRx2 u1tryGOlp18Kw1IxkFMsz/+/8kkl4eU8JTVSjEOaoG4gopJKwM5yjfT5xJxHH0m6 1G3WQEGo0MCzElt0GFa7E6DRKJDdt4DwRVubVH5+WMk2x5WmuEgr05Vq1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAae/oTsB/SciKYCAr7Rq95rTj2MB8GA1UdIwQY MBaAFMysNy96m4Fx3L/BFgyqIsj9xot7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekt3M0wzcWJnWEhjdjhFV0RLb2l5UDNHaTNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi85ZmQzODQtYThjMC00MjdmLTk2MmQt YzQ1MDJkYTg2OWJiLzEvekt3M0wzcWJnWEhjdjhFV0RLb2l5UDNHaTNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi85ZmQzODQtYThjMC00MjdmLTk2MmQtYzQ1MDJkYTg2OWJi LzEvekt3M0wzcWJnWEhjdjhFV0RLb2l5UDNHaTNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHf92Bpl8 rFp1/a7QgUXY0cQ1JzL/C4T144V2afY3atccX/MB81AqwjLPlOubyVsXVbCUyZYy NoP0VKXvh/2OBX7HPXmGHn0NoZpEcYMiagRYKuGBg30ruSDTBGxFj740V5wI6Sms FeC6SbOKyY5pTjdPZsIa0GuqCjOiUp+8V61oU2OHmawby7Yd9TDGt09TXFZi/TMl DylsQjGBaO9AplrgG+bdcRZX/7MDqx42WKRUO+xn62ysod9Tca4+NYQ/hIcIJh3Y 6OqoPBID6LFd8iDBJoxyvKmF6fxtSQ7DfkPOaphOTUjtGRSpcZ1ImGmS0YySvG9j CQzmjemD0x6bKA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:12 2026 by rpki-client