This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft File: zpeYqNqZmd31OjyNOPNvF-zUVDI.mft (raw, json) Hash identifier: BoGqSnwBxU5nQlb8xxwSutu2HScev5ZkaUcyK5BjrlI= Subject key identifier: 7A:DF:11:ED:A5:DE:21:36:73:B6:D1:98:0D:C8:95:B3:AE:46:57:6D Authority key identifier: CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32 Certificate issuer: /CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432 Certificate serial: 019BF53F08EF75E8DC9BF6FC442BFD765C02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft Manifest number: 0E51 Signing time: Sun 25 Jan 2026 13:01:47 +0000 Manifest this update: Sun 25 Jan 2026 13:01:47 +0000 Manifest next update: Mon 26 Jan 2026 13:01:47 +0000 Files and hashes: 1: XFrg3fq27QCVqHQz_3WZ4-RTRVc.roa (hash: 8n6vVNKWwTijSBhZMmEVHz4L7ynm8ZDo8eSSws5BDgg=) 2: zpeYqNqZmd31OjyNOPNvF-zUVDI.crl (hash: Zy4f8Mm35kfHvLgwsPTI3jj8r4CDJuFoPYfvWbZxpIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3f:08:ef:75:e8:dc:9b:f6:fc:44:2b:fd:76:5c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432 Validity Not Before: Jan 25 13:01:47 2026 GMT Not After : Jan 26 13:01:47 2026 GMT Subject: CN=7adf11eda5de213673b6d1980dc895b3ae46576d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:24:61:32:e6:9c:d4:69:34:7e:6b:9e:dd:36: 28:0d:8a:58:ed:f1:9b:87:7d:2b:77:d3:c5:bd:c2: ed:13:37:78:06:0d:1b:37:e8:dd:65:71:db:85:10: 08:79:01:cf:00:7c:a0:cc:2e:6e:ca:4f:96:59:c9: 8a:2e:26:c3:b6:b1:3f:fa:64:4d:dc:40:96:b7:e7: 51:96:60:92:49:db:1d:fd:e9:75:3a:b9:a0:2a:91: bb:c3:63:b4:03:71:ef:bc:00:93:97:3a:71:5d:3b: dd:e2:78:95:ab:72:8d:6d:92:6c:3b:d5:81:e8:87: 48:c5:fc:75:67:f0:37:b0:f9:16:f3:ff:30:71:04: 8f:68:93:a5:1d:e2:49:a1:7a:28:ac:d8:73:82:e6: 48:01:18:fe:29:ea:bc:be:be:a4:72:1b:2a:73:8b: 09:e2:c6:51:0e:15:69:8d:21:b0:a9:0d:76:5e:1f: f6:77:f0:a0:a9:1a:8b:0d:0e:8a:29:e2:ca:22:51: 30:cb:4d:27:f2:7e:76:0d:71:73:53:da:f0:f7:10: e9:b9:7a:17:c9:56:40:91:8b:9c:1f:95:55:5c:b7: 2f:73:aa:45:d3:a9:1d:e3:11:82:0b:f5:4c:ec:94: d9:c2:49:f6:54:a2:34:47:b6:82:62:65:a7:bc:77: 25:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DF:11:ED:A5:DE:21:36:73:B6:D1:98:0D:C8:95:B3:AE:46:57:6D X509v3 Authority Key Identifier: keyid:CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:c7:8c:14:c6:b8:58:6d:3a:29:72:f0:d6:3e:05:e9:b7:4a: 00:1e:ae:52:a0:48:10:69:a6:c1:2d:a2:b8:2c:a2:d2:3b:d1: 99:5a:36:c9:f8:c5:29:aa:28:fb:90:81:20:65:cd:ba:4a:8e: cb:99:a1:9c:5c:20:38:19:5d:b5:a2:39:d9:2c:c3:47:ed:9d: 71:20:4e:d0:0c:97:5b:00:f5:8d:c5:09:c5:1b:ce:e8:bf:b7: d1:60:cd:49:98:ef:f1:32:15:12:cc:78:7d:b6:fe:9d:bb:2c: 86:e5:29:fa:aa:1d:a1:51:38:5f:33:9c:e1:b0:e8:06:bd:21: 44:e3:7f:f4:88:00:d3:9c:28:a2:28:6a:c5:b0:59:98:79:8c: b0:3b:57:8e:c8:de:d0:5c:3d:0f:9b:44:31:5f:a2:c6:66:df: 99:ed:97:d4:31:88:31:58:53:fb:62:71:6e:d0:39:1c:4e:b4: 53:64:80:42:de:6a:8e:f8:56:36:f2:ba:13:10:67:6e:e5:b6: e6:33:54:94:1d:7f:5b:1f:4b:4d:bf:e8:85:99:9c:3c:e7:b6: 5c:49:54:79:3b:79:73:c1:e1:51:45:1a:2e:25:3f:0a:a6:98: 71:89:24:53:ec:33:cd:79:ad:e6:a6:70:dd:98:8d:74:ce:8d: 48:60:d5:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pwjvdejcm/b8RCv9dlwCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOTc5OGE4ZGE5OTk5ZGRmNTNhM2M4ZDM4ZjM2ZjE3ZWNk NDU0MzIwHhcNMjYwMTI1MTMwMTQ3WhcNMjYwMTI2MTMwMTQ3WjAzMTEwLwYDVQQD Eyg3YWRmMTFlZGE1ZGUyMTM2NzNiNmQxOTgwZGM4OTViM2FlNDY1NzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyRhMuac1Gk0fmue3TYoDYpY7fGb h30rd9PFvcLtEzd4Bg0bN+jdZXHbhRAIeQHPAHygzC5uyk+WWcmKLibDtrE/+mRN 3ECWt+dRlmCSSdsd/el1OrmgKpG7w2O0A3HvvACTlzpxXTvd4niVq3KNbZJsO9WB 6IdIxfx1Z/A3sPkW8/8wcQSPaJOlHeJJoXoorNhzguZIARj+Keq8vr6kchsqc4sJ 4sZRDhVpjSGwqQ12Xh/2d/CgqRqLDQ6KKeLKIlEwy00n8n52DXFzU9rw9xDpuXoX yVZAkYucH5VVXLcvc6pF06kd4xGCC/VM7JTZwkn2VKI0R7aCYmWnvHclpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHrfEe2l3iE2c7bRmA3IlbOuRldtMB8GA1UdIwQY MBaAFM6XmKjamZnd9To8jTjzbxfs1FQyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenBlWXFOcVptZDMxT2p5Tk9QTnZGLXpVVkRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YmM4NjQtNzE4Yy00MjE3LWFiNWYt OThmY2IzYThiYzllLzEvenBlWXFOcVptZDMxT2p5Tk9QTnZGLXpVVkRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80YmM4NjQtNzE4Yy00MjE3LWFiNWYtOThmY2IzYThiYzll LzEvenBlWXFOcVptZDMxT2p5Tk9QTnZGLXpVVkRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoceMFMa4 WG06KXLw1j4F6bdKAB6uUqBIEGmmwS2iuCyi0jvRmVo2yfjFKaoo+5CBIGXNukqO y5mhnFwgOBldtaI52SzDR+2dcSBO0AyXWwD1jcUJxRvO6L+30WDNSZjv8TIVEsx4 fbb+nbsshuUp+qodoVE4XzOc4bDoBr0hRON/9IgA05wooihqxbBZmHmMsDtXjsje 0Fw9D5tEMV+ixmbfme2X1DGIMVhT+2JxbtA5HE60U2SAQt5qjvhWNvK6ExBnbuW2 5jNUlB1/Wx9LTb/ohZmcPOe2XElUeTt5c8HhUUUaLiU/CqaYcYkkU+wzzXmt5qZw 3ZiNdM6NSGDVgw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:37:38 2026 by rpki-client