This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft File: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft (raw, json) Hash identifier: xAS2LMDYQHrDtLzLqi+4G2bJraamn9E4eJrad8AUttI= Subject key identifier: FC:5C:9C:4B:FA:8F:E7:72:19:2F:B6:76:84:8C:68:08:91:62:C6:00 Authority key identifier: CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4 Certificate issuer: /CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4 Certificate serial: 019BF988BA213D456E44A2C7FD8C4CA477B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft Manifest number: 109C Signing time: Mon 26 Jan 2026 09:00:45 +0000 Manifest this update: Mon 26 Jan 2026 09:00:45 +0000 Manifest next update: Tue 27 Jan 2026 09:00:45 +0000 Files and hashes: 1: 5mo5xCIsbIhrhc8a0MMdjoHlY1A.roa (hash: pyWlQmd0OGBAWyVjo0BfVWnydEoUEqSFJZF/M2RGZlA=) 2: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl (hash: Sqx6UeQQ/ySROGV4qHrALzWmCjOa0ayzVVsB2njwku0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:88:ba:21:3d:45:6e:44:a2:c7:fd:8c:4c:a4:77:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4 Validity Not Before: Jan 26 09:00:45 2026 GMT Not After : Jan 27 09:00:45 2026 GMT Subject: CN=fc5c9c4bfa8fe772192fb676848c68089162c600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4e:33:32:16:d0:7e:b3:1d:9d:77:48:24:b0: 91:70:fd:6a:06:54:62:75:7a:4d:61:14:20:ef:67: 27:39:6d:91:f7:0a:fa:04:ca:7a:25:4b:e8:94:ed: 22:3c:c6:84:1d:c9:4b:93:c7:06:a3:17:0d:74:d6: ab:87:49:48:8c:98:96:6c:53:9e:de:3e:c4:45:a2: 73:19:b4:cb:3f:3e:92:69:2a:7a:90:b9:08:82:54: 3f:23:e9:35:66:c6:23:71:a3:79:1a:31:5b:ef:be: 82:ef:28:06:6d:02:00:8b:19:08:e6:f4:41:c9:23: ac:cf:4e:c7:55:cf:f8:58:18:21:91:d3:cb:a8:7f: 02:89:3d:60:0d:72:4f:8a:2b:b7:48:64:e5:b9:4a: b8:00:30:ea:c2:85:48:81:e3:d0:11:47:32:af:d5: 36:64:64:ad:34:aa:cd:25:6b:97:db:64:3c:6b:9b: 8a:58:ae:75:62:b7:27:47:8f:e5:4f:ee:e1:d5:6c: 6a:c2:3f:f4:db:63:48:49:63:8c:1a:e3:91:95:3e: 5a:7d:62:e9:f1:1e:2f:35:1c:ab:9f:3e:d2:87:ef: 07:0d:7e:f2:e0:21:39:e1:12:9f:e9:4f:a4:74:4d: 5d:2b:68:96:c5:8a:65:30:2d:23:79:61:79:11:2a: ee:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5C:9C:4B:FA:8F:E7:72:19:2F:B6:76:84:8C:68:08:91:62:C6:00 X509v3 Authority Key Identifier: keyid:CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:f0:8f:9e:43:9d:86:77:e5:42:55:4c:c3:c4:d7:bb:6a:2f: 39:c2:21:72:80:38:7d:6f:09:b5:1b:be:b2:88:30:7a:57:15: 04:7f:2e:40:3b:b5:0a:0c:28:c5:68:1f:11:59:13:b3:c2:78: 82:b9:fb:8e:8a:0e:a6:9e:3a:09:1c:7f:12:db:b5:bb:70:26: 71:5c:f2:d3:05:3c:c6:9d:27:40:4a:c3:ac:fc:ab:2a:23:12: a5:b9:f6:ff:d4:8c:ff:6f:5e:7b:0a:d5:bf:5a:fe:d3:e9:22: 44:e6:75:d7:78:a1:fc:e3:31:b4:2d:cf:cf:eb:e1:90:9e:c5: 94:af:d0:30:f6:79:cb:ec:08:8b:f7:d5:ba:9c:f2:4c:2b:07: a8:39:02:b4:91:46:23:d5:e6:cc:0a:f4:a2:3a:2e:25:e7:09: 2e:1d:f2:ff:20:04:75:9d:ca:f6:2a:e5:8e:94:97:34:7a:73: 2c:e5:ef:61:4b:d5:e3:34:30:dc:71:14:0d:fe:fa:9b:62:c8: 71:ac:f5:12:1d:3f:2c:2e:23:40:31:d0:63:23:74:0d:b1:9d: a5:83:86:cd:ce:31:a9:47:e1:27:26:e3:d7:61:93:74:be:af: f5:9e:f0:9e:f1:f8:10:13:10:e7:40:08:61:9c:c4:d4:45:c2: e6:d5:d1:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iLohPUVuRKLH/YxMpHe4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNDZlYTYyOWFmYjBjMmQ1NDIwMGI1YTY1NzI3YmUxOGNi YjQ1YTQwHhcNMjYwMTI2MDkwMDQ1WhcNMjYwMTI3MDkwMDQ1WjAzMTEwLwYDVQQD EyhmYzVjOWM0YmZhOGZlNzcyMTkyZmI2NzY4NDhjNjgwODkxNjJjNjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U4zMhbQfrMdnXdIJLCRcP1qBlRi dXpNYRQg72cnOW2R9wr6BMp6JUvolO0iPMaEHclLk8cGoxcNdNarh0lIjJiWbFOe 3j7ERaJzGbTLPz6SaSp6kLkIglQ/I+k1ZsYjcaN5GjFb776C7ygGbQIAixkI5vRB ySOsz07HVc/4WBghkdPLqH8CiT1gDXJPiiu3SGTluUq4ADDqwoVIgePQEUcyr9U2 ZGStNKrNJWuX22Q8a5uKWK51YrcnR4/lT+7h1Wxqwj/022NISWOMGuORlT5afWLp 8R4vNRyrnz7Sh+8HDX7y4CE54RKf6U+kdE1dK2iWxYplMC0jeWF5ESruywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxcnEv6j+dyGS+2doSMaAiRYsYAMB8GA1UdIwQY MBaAFM5G6mKa+wwtVCALWmVye+GMu0WkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yYmUwMDktMWVmMS00ZDU3LThmMDEt N2UxODRiMDcwYmJkLzEvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yYmUwMDktMWVmMS00ZDU3LThmMDEtN2UxODRiMDcwYmJk LzEvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvCPnkOd hnflQlVMw8TXu2ovOcIhcoA4fW8JtRu+sogwelcVBH8uQDu1CgwoxWgfEVkTs8J4 grn7jooOpp46CRx/Etu1u3AmcVzy0wU8xp0nQErDrPyrKiMSpbn2/9SM/29eewrV v1r+0+kiROZ113ih/OMxtC3Pz+vhkJ7FlK/QMPZ5y+wIi/fVupzyTCsHqDkCtJFG I9XmzAr0ojouJecJLh3y/yAEdZ3K9irljpSXNHpzLOXvYUvV4zQw3HEUDf76m2LI caz1Eh0/LC4jQDHQYyN0DbGdpYOGzc4xqUfhJybj12GTdL6v9Z7wnvH4EBMQ50AI YZzE1EXC5tXRIQ== -----END CERTIFICATE-----Generated at Mon Jan 26 13:49:06 2026 by rpki-client