This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft File: zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft (raw, json) Hash identifier: OMdAwcDTBwiASzfPXQxW/kXx+6DIeBQ1A7F8OzHaFCU= Subject key identifier: B2:8C:6B:2C:67:1A:86:F3:F6:BA:51:63:50:D9:8A:96:70:31:0E:44 Authority key identifier: CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5 Certificate issuer: /CN=cef38f48568833a5f7157eef59787833a01f53f5 Certificate serial: 019BF6513E79E86B4C16B8E918FA682D8364 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft Manifest number: 09FC Signing time: Sun 25 Jan 2026 18:01:17 +0000 Manifest this update: Sun 25 Jan 2026 18:01:17 +0000 Manifest next update: Mon 26 Jan 2026 18:01:17 +0000 Files and hashes: 1: 0uz5MbW1iQjUOVrXafnfS0Kr9aI.roa (hash: 2tTjB+QcoGOzx+5PBvD5G637D13fBCfUdr4GPNFvVKU=) 2: zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl (hash: 6JJ9QB5FnYpAZLziytLaeD/yPgjLxhVi5kecyF/wWDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:3e:79:e8:6b:4c:16:b8:e9:18:fa:68:2d:83:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cef38f48568833a5f7157eef59787833a01f53f5 Validity Not Before: Jan 25 18:01:17 2026 GMT Not After : Jan 26 18:01:17 2026 GMT Subject: CN=b28c6b2c671a86f3f6ba516350d98a9670310e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d7:50:fb:89:8f:7f:4f:74:28:5c:c5:37:cf: a2:91:b4:1c:05:c7:39:d0:5b:e0:05:3c:5f:23:63: f3:fe:53:48:ae:a2:31:65:04:a7:d5:31:69:fc:29: 0c:3f:cf:fc:ac:a8:e3:56:18:95:92:7c:50:fd:ca: 07:55:4e:cc:12:b4:2b:4a:a8:41:20:ad:96:2f:54: 05:d7:97:9e:b3:43:0f:3c:c7:72:6b:26:9b:8f:d1: eb:5e:38:21:5b:3f:c6:33:29:d1:9e:3f:a4:76:1b: 89:93:b3:6f:58:b8:df:6b:14:d2:02:65:7b:5f:6f: 5e:d7:83:83:93:40:de:0e:c5:b9:b3:25:82:3c:16: c7:d3:72:af:a5:e5:92:16:cb:16:9c:85:f4:43:ca: 9c:7a:1d:65:1a:cb:f6:c8:6e:c1:2e:a1:ad:37:ed: fd:ec:90:4a:db:40:85:18:06:a8:63:69:21:95:8d: 71:1c:24:89:5e:13:85:42:23:a6:21:cf:f4:01:89: ba:58:65:0c:7d:e7:f5:a5:25:59:8f:62:8c:fc:58: cf:9a:60:d0:20:8c:3f:9e:4a:3b:b4:06:3f:72:5f: 02:14:e3:5c:2e:86:bb:94:77:f6:7e:3f:8d:1e:93: 11:b6:cf:09:e3:c2:46:db:81:6a:58:92:b6:ad:fd: c5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8C:6B:2C:67:1A:86:F3:F6:BA:51:63:50:D9:8A:96:70:31:0E:44 X509v3 Authority Key Identifier: keyid:CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f6:62:39:3e:ce:77:a4:74:5c:41:50:43:1e:0b:cf:fa:62: 85:11:ef:c7:80:df:10:3d:2a:d0:81:62:64:99:bf:34:00:45: f8:c0:f6:51:e6:00:f2:a6:d8:89:a2:4d:cb:ea:2e:77:af:58: 9f:bd:db:21:6e:4f:29:c6:ac:fd:bd:c2:e7:68:cd:aa:b8:41: 8c:ed:b4:b7:f7:cf:1a:ed:34:66:c0:11:42:fd:8a:eb:c7:c1: 56:3b:2f:b5:30:85:a4:55:61:74:45:44:77:2d:4b:70:96:09: 28:4d:eb:3a:b6:28:76:e9:16:41:cf:11:16:73:90:16:72:c7: dc:c0:cc:80:c8:53:fe:02:3e:e9:32:7e:0b:2e:bd:35:a1:99: 05:37:34:b9:97:29:f8:57:07:e4:4b:10:4c:01:76:94:79:2a: 3a:8e:bb:4d:a4:08:7c:50:48:29:5c:c1:f8:9d:25:b0:dd:13: c9:2b:fe:b1:81:de:93:48:45:01:b4:7b:25:da:3d:bc:5d:6a: ed:f9:76:69:0e:5a:6f:06:30:5f:b4:c2:28:0a:25:29:ce:cc: b5:eb:0a:58:c6:2c:14:db:83:4a:3e:85:8d:24:3e:d0:15:c3: dc:66:a8:9d:43:87:40:af:2d:30:a7:c6:1e:91:49:e0:1d:ad: ca:5e:65:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UT556GtMFrjpGPpoLYNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZjM4ZjQ4NTY4ODMzYTVmNzE1N2VlZjU5Nzg3ODMzYTAx ZjUzZjUwHhcNMjYwMTI1MTgwMTE3WhcNMjYwMTI2MTgwMTE3WjAzMTEwLwYDVQQD EyhiMjhjNmIyYzY3MWE4NmYzZjZiYTUxNjM1MGQ5OGE5NjcwMzEwZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtddQ+4mPf090KFzFN8+ikbQcBcc5 0FvgBTxfI2Pz/lNIrqIxZQSn1TFp/CkMP8/8rKjjVhiVknxQ/coHVU7MErQrSqhB IK2WL1QF15ees0MPPMdyayabj9HrXjghWz/GMynRnj+kdhuJk7NvWLjfaxTSAmV7 X29e14ODk0DeDsW5syWCPBbH03KvpeWSFssWnIX0Q8qceh1lGsv2yG7BLqGtN+39 7JBK20CFGAaoY2khlY1xHCSJXhOFQiOmIc/0AYm6WGUMfef1pSVZj2KM/FjPmmDQ IIw/nko7tAY/cl8CFONcLoa7lHf2fj+NHpMRts8J48JG24FqWJK2rf3FCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKMayxnGobz9rpRY1DZipZwMQ5EMB8GA1UdIwQY MBaAFM7zj0hWiDOl9xV+71l4eDOgH1P1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lMTBhYmUtNDE0OC00NTFiLTk0ZjUt Zjk1YzYwOTdhNTBkLzEvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9lMTBhYmUtNDE0OC00NTFiLTk0ZjUtZjk1YzYwOTdhNTBk LzEvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/ZiOT7O d6R0XEFQQx4Lz/pihRHvx4DfED0q0IFiZJm/NABF+MD2UeYA8qbYiaJNy+oud69Y n73bIW5PKcas/b3C52jNqrhBjO20t/fPGu00ZsARQv2K68fBVjsvtTCFpFVhdEVE dy1LcJYJKE3rOrYodukWQc8RFnOQFnLH3MDMgMhT/gI+6TJ+Cy69NaGZBTc0uZcp +FcH5EsQTAF2lHkqOo67TaQIfFBIKVzB+J0lsN0TySv+sYHek0hFAbR7Jdo9vF1q 7fl2aQ5abwYwX7TCKAolKc7MtesKWMYsFNuDSj6FjSQ+0BXD3GaonUOHQK8tMKfG HpFJ4B2tyl5lWg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:49:17 2026 by rpki-client