This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft File: zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft (raw, json) Hash identifier: tqNC5D1tfQME+IoFupMUbkhU5OU54FnrGXtmdfU3L3k= Subject key identifier: 8C:31:83:E5:C0:17:BD:C7:C4:25:47:79:97:E4:92:7E:77:F0:7C:1B Authority key identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC Certificate issuer: /CN=cef501d2d052185d4f6569218c28bf35859000fc Certificate serial: 019BF462F946A961B7C4C3AED8F67FA938BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft Manifest number: 99 Signing time: Sun 25 Jan 2026 09:01:25 +0000 Manifest this update: Sun 25 Jan 2026 09:01:25 +0000 Manifest next update: Mon 26 Jan 2026 09:01:25 +0000 Files and hashes: 1: VtiYaN97FHtpr9nyOV9FFG85g5o.roa (hash: YRi8yVEk1+9sLs2A+db3vBfa8pzorD5js8IjbX492Nk=) 2: gIvmrtP4qhP-p_HNvQknynsugUc.roa (hash: T7F6BSJaNt+yN8P1agGWT43ZlvcgWoTw7wuq3mofmEI=) 3: zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl (hash: gtTdq842KFsS6z3AFbieWKmVV/eMbXcRf5U7bqiPMwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:f9:46:a9:61:b7:c4:c3:ae:d8:f6:7f:a9:38:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cef501d2d052185d4f6569218c28bf35859000fc Validity Not Before: Jan 25 09:01:25 2026 GMT Not After : Jan 26 09:01:25 2026 GMT Subject: CN=8c3183e5c017bdc7c425477997e4927e77f07c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:3e:fc:9f:86:bf:42:b7:66:3d:5a:34:e5: 6f:7f:7c:21:3c:80:47:18:a8:bd:a7:49:d3:af:4e: d6:26:42:bd:e1:ff:a6:24:b4:57:db:5e:49:f4:cf: 2c:a5:b2:00:b5:7f:ac:98:b5:08:10:2b:ae:91:d9: af:a1:50:67:ee:2f:b6:89:02:2c:79:87:57:af:e5: f6:46:bb:24:c5:dc:2a:42:cd:74:01:99:1d:3e:26: cc:4e:73:ce:c6:8e:8a:10:64:05:75:57:73:82:b7: cc:8a:a3:95:b8:36:d1:40:84:88:16:a4:a8:51:1a: 8a:d3:22:18:7d:32:cf:21:92:be:a0:90:dd:13:3e: 09:98:10:7c:71:66:00:21:5f:03:6d:d7:c2:9c:1c: 10:94:d0:1b:e6:ab:42:ef:d3:de:19:f6:45:97:10: 77:ab:14:36:d5:24:45:87:66:26:5b:c4:a5:2f:3b: ac:55:15:76:fc:6a:07:58:52:a6:9d:17:c0:d4:a0: 2e:7c:63:11:c0:43:16:35:35:ad:3d:4d:fe:19:b3: 36:9c:fc:f8:5f:9c:78:ee:7e:b5:8a:de:f2:e1:3a: c9:7d:52:8e:d0:08:10:b0:80:af:4d:3d:44:fb:69: 27:67:92:06:a9:e1:09:a7:51:23:0f:87:51:5a:75: 18:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:31:83:E5:C0:17:BD:C7:C4:25:47:79:97:E4:92:7E:77:F0:7C:1B X509v3 Authority Key Identifier: keyid:CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:f8:b7:d6:0d:93:82:63:dd:e0:20:cd:7a:fd:c1:0e:d2:49: fb:a6:0f:a8:cd:fa:80:57:22:50:cc:19:eb:f6:84:96:be:ff: 8c:54:f1:7b:f8:bc:db:58:f2:11:6b:88:b0:1b:d0:f9:57:06: 99:77:76:a3:5f:33:0d:2f:6b:a8:92:81:82:bb:6e:b8:22:b3: 8f:76:b1:f1:65:35:e3:08:3a:19:1a:a0:ff:1d:36:17:5a:84: 08:a9:d6:30:9f:25:29:14:db:82:26:22:1b:bd:6a:da:a6:cc: 06:e5:c3:4a:52:4e:b1:f5:30:f8:26:c9:d3:0d:aa:cc:89:29: c0:46:cf:17:d9:04:92:79:34:56:a4:10:4f:5c:f8:84:8b:ea: 2e:6c:b9:b0:9f:dc:6f:f4:c6:31:6e:09:d6:5a:c4:95:f8:51: 1c:ff:42:c3:c5:9f:f7:76:99:5f:73:df:4e:47:09:7a:73:0b: 57:b5:7c:db:74:b3:eb:27:09:8f:fe:71:af:e0:7a:c1:89:c4: e2:a7:60:75:c3:a6:72:e1:d7:e4:63:dd:35:37:8f:40:0a:7c: d5:7c:8f:cd:23:7a:5d:1b:a0:c5:7a:e0:2f:57:52:d4:31:70: e7:68:93:a6:00:56:ee:8a:4e:03:ed:5d:22:fb:b0:85:ca:58: 73:11:c3:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YvlGqWG3xMOu2PZ/qTi7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZjUwMWQyZDA1MjE4NWQ0ZjY1NjkyMThjMjhiZjM1ODU5 MDAwZmMwHhcNMjYwMTI1MDkwMTI1WhcNMjYwMTI2MDkwMTI1WjAzMTEwLwYDVQQD Eyg4YzMxODNlNWMwMTdiZGM3YzQyNTQ3Nzk5N2U0OTI3ZTc3ZjA3YzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQc+/J+Gv0K3Zj1aNOVvf3whPIBH GKi9p0nTr07WJkK94f+mJLRX215J9M8spbIAtX+smLUIECuukdmvoVBn7i+2iQIs eYdXr+X2RrskxdwqQs10AZkdPibMTnPOxo6KEGQFdVdzgrfMiqOVuDbRQISIFqSo URqK0yIYfTLPIZK+oJDdEz4JmBB8cWYAIV8DbdfCnBwQlNAb5qtC79PeGfZFlxB3 qxQ21SRFh2YmW8SlLzusVRV2/GoHWFKmnRfA1KAufGMRwEMWNTWtPU3+GbM2nPz4 X5x47n61it7y4TrJfVKO0AgQsICvTT1E+2knZ5IGqeEJp1EjD4dRWnUYMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwxg+XAF73HxCVHeZfkkn538HwbMB8GA1UdIwQY MBaAFM71AdLQUhhdT2VpIYwovzWFkAD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenZVQjB0QlNHRjFQWldraGpDaV9OWVdRQVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85OTk2NDctMWU3Zi00OTliLTlkNDgt Zjk1MDMyN2Y4OGQzLzEvenZVQjB0QlNHRjFQWldraGpDaV9OWVdRQVB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85OTk2NDctMWU3Zi00OTliLTlkNDgtZjk1MDMyN2Y4OGQz LzEvenZVQjB0QlNHRjFQWldraGpDaV9OWVdRQVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPi31g2T gmPd4CDNev3BDtJJ+6YPqM36gFciUMwZ6/aElr7/jFTxe/i821jyEWuIsBvQ+VcG mXd2o18zDS9rqJKBgrtuuCKzj3ax8WU14wg6GRqg/x02F1qECKnWMJ8lKRTbgiYi G71q2qbMBuXDSlJOsfUw+CbJ0w2qzIkpwEbPF9kEknk0VqQQT1z4hIvqLmy5sJ/c b/TGMW4J1lrElfhRHP9Cw8Wf93aZX3PfTkcJenMLV7V823Sz6ycJj/5xr+B6wYnE 4qdgdcOmcuHX5GPdNTePQAp81XyPzSN6XRugxXrgL1dS1DFw52iTpgBW7opOA+1d IvuwhcpYcxHD9Q== -----END CERTIFICATE-----Generated at Sun Jan 25 15:50:12 2026 by rpki-client