This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft File: zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft (raw, json) Hash identifier: MiZYGgAB8xl5twc6k2vkMzRQvpheY7pLxM4mPab6XP8= Subject key identifier: 7E:CA:CA:09:8C:59:B5:5C:23:26:81:04:F0:7D:A1:58:55:49:0D:F6 Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60 Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60 Certificate serial: 019BF318E3775A29C73F562BB0BC0DA84D02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft Manifest number: 0C4C Signing time: Sun 25 Jan 2026 03:00:53 +0000 Manifest this update: Sun 25 Jan 2026 03:00:53 +0000 Manifest next update: Mon 26 Jan 2026 03:00:53 +0000 Files and hashes: 1: aE-igOYVXwkygfdsftmlck44E1U.roa (hash: Zm5SKhsISbz1FGue4q9TwJE5ZIQbj5Gs5h02565RFb0=) 2: tsSIuAhpfPkyoEWlotiPKzX6w8I.roa (hash: DsopP3SuV9qAYq1FNnHh/jlHBAIogzYm66PAey2rdvM=) 3: zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl (hash: ufodWrs4ODrpAUv7RWy3gMHh4hDevyIa80xX30zrsbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:e3:77:5a:29:c7:3f:56:2b:b0:bc:0d:a8:4d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60 Validity Not Before: Jan 25 03:00:53 2026 GMT Not After : Jan 26 03:00:53 2026 GMT Subject: CN=7ecaca098c59b55c23268104f07da15855490df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fa:14:68:d2:31:2c:6d:8a:bd:84:26:1d:42: 09:5d:3b:99:2c:2d:62:79:e9:b9:d5:2f:da:7e:9a: 37:b3:2b:dc:b7:16:b7:c3:90:7d:09:66:22:d8:fa: 91:f4:de:fa:cd:ae:91:d3:4a:60:ad:98:64:d8:d5: e1:0a:28:c0:75:ba:55:2e:33:3c:b7:a9:ce:c5:12: 1c:66:66:f7:e6:0b:0f:bc:9e:fb:20:54:96:6d:9d: 00:ba:ca:15:ea:10:22:f9:8c:06:76:04:d6:11:d1: 05:00:69:bf:80:da:2a:37:ed:23:80:9d:ed:09:f3: 37:78:04:70:9c:c7:97:17:30:81:f7:07:e6:7b:5b: ce:50:f4:8b:7e:1c:76:6b:ed:02:b9:e4:84:ef:22: 71:44:31:06:02:21:52:00:78:74:97:79:95:a7:06: 86:c1:0f:e8:50:8f:f1:1d:8b:f3:0f:f6:cf:77:16: 6f:82:85:99:ae:6c:ec:6b:78:e1:d3:ba:4c:49:10: 30:c1:80:ad:61:c8:eb:37:bb:a1:62:22:72:ba:d3: 12:1d:7f:0e:59:7c:54:51:96:b6:10:24:bb:84:15: 2e:38:8a:79:c9:49:6a:12:64:41:71:36:18:c8:21: 3c:96:81:63:86:8e:a0:a3:dd:35:c8:93:17:70:9e: 18:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CA:CA:09:8C:59:B5:5C:23:26:81:04:F0:7D:A1:58:55:49:0D:F6 X509v3 Authority Key Identifier: keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:77:68:c0:4b:bd:82:5f:ea:eb:eb:47:04:c4:0a:26:62:02: cc:cf:41:b6:37:df:40:f4:6f:ee:f8:ce:cf:eb:34:6b:16:72: e0:c9:e2:d8:30:8e:bc:e5:d6:5a:77:99:34:d2:47:62:43:42: 39:59:90:61:d2:11:80:3f:a9:4a:7a:73:4b:a4:48:e2:b6:cb: 5a:09:56:33:b4:89:11:ab:00:40:29:50:02:55:36:29:b0:48: 5e:fa:0a:16:4f:fa:ad:e7:96:33:b2:a4:ef:e5:00:9b:4e:47: 94:16:3d:02:8c:9f:cc:4d:bf:a7:8f:16:cd:86:a9:f7:2f:ed: 55:e4:cd:3b:94:e2:a0:37:99:4b:c7:ef:75:53:0b:f3:07:60: 1b:31:de:da:e0:2e:c3:41:c6:b7:67:55:41:67:12:12:b3:e5: 5b:1d:dc:7e:ea:66:28:b1:64:10:e7:78:b3:2e:f2:1b:ff:d2: 29:c8:0e:92:3c:aa:97:9a:28:e7:64:fa:b6:5b:96:f2:6e:4f: 33:77:2b:29:27:0c:a2:a9:10:ee:10:51:7c:09:5a:bf:55:de: f3:96:49:fc:72:dc:57:0f:d3:94:7b:6e:f0:9f:5e:9a:b3:4d: ff:69:63:a6:37:dd:9a:e4:86:b7:38:f5:ab:6a:6b:f1:ce:ca: 8b:30:cc:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGON3WinHP1YrsLwNqE0CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMWU3YzQ2YjgxZGRhYjI3NDQyNzBjNWJhZDk4NmFmODZk ZjRmNjAwHhcNMjYwMTI1MDMwMDUzWhcNMjYwMTI2MDMwMDUzWjAzMTEwLwYDVQQD Eyg3ZWNhY2EwOThjNTliNTVjMjMyNjgxMDRmMDdkYTE1ODU1NDkwZGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvoUaNIxLG2KvYQmHUIJXTuZLC1i eem51S/afpo3syvctxa3w5B9CWYi2PqR9N76za6R00pgrZhk2NXhCijAdbpVLjM8 t6nOxRIcZmb35gsPvJ77IFSWbZ0AusoV6hAi+YwGdgTWEdEFAGm/gNoqN+0jgJ3t CfM3eARwnMeXFzCB9wfme1vOUPSLfhx2a+0CueSE7yJxRDEGAiFSAHh0l3mVpwaG wQ/oUI/xHYvzD/bPdxZvgoWZrmzsa3jh07pMSRAwwYCtYcjrN7uhYiJyutMSHX8O WXxUUZa2ECS7hBUuOIp5yUlqEmRBcTYYyCE8loFjho6go901yJMXcJ4Y7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7KygmMWbVcIyaBBPB9oVhVSQ32MB8GA1UdIwQY MBaAFMwefEa4HdqydEJwxbrZhq+G309gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUt Mzk5YjdhM2IyMGNmLzEvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUtMzk5YjdhM2IyMGNm LzEvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHdowEu9 gl/q6+tHBMQKJmICzM9BtjffQPRv7vjOz+s0axZy4Mni2DCOvOXWWneZNNJHYkNC OVmQYdIRgD+pSnpzS6RI4rbLWglWM7SJEasAQClQAlU2KbBIXvoKFk/6reeWM7Kk 7+UAm05HlBY9AoyfzE2/p48WzYap9y/tVeTNO5TioDeZS8fvdVML8wdgGzHe2uAu w0HGt2dVQWcSErPlWx3cfupmKLFkEOd4sy7yG//SKcgOkjyql5oo52T6tluW8m5P M3crKScMoqkQ7hBRfAlav1Xe85ZJ/HLcVw/TlHtu8J9emrNN/2ljpjfdmuSGtzj1 q2pr8c7KizDMtw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:09:09 2026 by rpki-client