This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft File: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft (raw, json) Hash identifier: P8ogiIBKieqk5/Xne1+P6CzMNNZyyp+Qm0oo0qnuff4= Subject key identifier: F2:6B:ED:4E:BC:30:3D:BC:2E:19:3D:F4:ED:EB:BE:A6:3C:AD:9E:84 Authority key identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19 Certificate issuer: /CN=65cf99962f989f7b733da7aa70eaf9e41052ae19 Certificate serial: 019BF8762E418EEE167786AEDBB79B10D622 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 04:00:53 +0000 Manifest this update: Mon 26 Jan 2026 04:00:53 +0000 Manifest next update: Tue 27 Jan 2026 04:00:53 +0000 Files and hashes: 1: D4Ig0boR8l83Ddi1KhhZUDj3BIM.roa (hash: h7w8EdAomdlx4AIn+vosPrC32sePfUw5l3+p/ucsXto=) 2: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl (hash: qJuhmrbKXydBXgA+np/I8glCIrfO03W2+eILPiAcU4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:2e:41:8e:ee:16:77:86:ae:db:b7:9b:10:d6:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19 Validity Not Before: Jan 26 04:00:53 2026 GMT Not After : Jan 27 04:00:53 2026 GMT Subject: CN=f26bed4ebc303dbc2e193df4edebbea63cad9e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:95:f6:31:ce:9a:20:5d:59:cb:1b:2e:31:9c: e3:97:48:23:2a:ca:52:9a:75:be:48:cc:62:16:f3: 45:3c:00:4d:b8:18:84:f8:81:57:dd:35:83:31:4c: 00:41:b0:80:4c:65:90:2f:24:2d:f1:5f:19:0b:ac: 06:9e:02:45:4c:db:99:52:cc:a0:ef:cf:72:a1:d8: a7:90:71:d6:3b:92:b4:e4:44:14:7f:ed:57:91:e2: 62:22:e1:b9:c5:dc:fe:c9:23:cd:26:8d:83:4e:3a: d7:53:16:22:f4:a0:73:c1:bf:a7:2d:48:32:a7:59: 43:b4:f9:48:9e:36:74:70:34:46:d3:bf:f2:9d:d4: 45:6f:6d:e7:9d:31:8d:5f:69:1e:94:1f:8d:f6:66: 15:b2:f1:80:2a:22:6b:d5:09:aa:b8:2b:83:dd:3e: 55:0a:d2:72:a1:14:89:0a:8b:ed:1f:51:26:0c:e1: cb:69:44:0e:55:3e:74:57:c4:6b:b5:84:a1:a0:7f: 5f:dc:14:4d:8f:57:66:76:de:14:bb:61:6a:de:67: be:85:e8:84:8c:f0:72:ba:4a:8d:79:cc:77:5f:8f: 02:a7:87:ff:07:c5:f6:54:68:14:36:d8:c4:7d:db: 62:fe:12:f0:e0:22:dd:44:fb:99:62:ac:8a:89:64: b6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6B:ED:4E:BC:30:3D:BC:2E:19:3D:F4:ED:EB:BE:A6:3C:AD:9E:84 X509v3 Authority Key Identifier: keyid:65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:26:7c:00:42:87:19:08:54:8f:ab:8c:c0:5b:0c:08:16:55: ee:a1:4d:1b:a7:58:1b:fd:14:e8:f1:da:ed:51:d3:5d:b3:5d: 28:7d:5c:15:9e:77:39:b4:aa:71:9d:d1:bf:d5:ab:50:12:82: cb:ce:ba:2f:8f:95:05:53:c1:15:a3:d2:2f:de:bf:6d:29:af: 86:ea:e9:42:73:75:97:31:78:df:55:03:97:7b:a4:f4:58:23: f4:9d:22:3f:30:05:10:91:aa:c8:ab:ce:b4:b0:7d:a1:2e:41: a8:e0:70:c4:4b:05:d5:58:6f:8a:d9:7c:82:5b:72:bf:24:d5: 55:a3:83:02:d7:92:51:49:40:f5:30:8b:65:9e:85:da:34:04: 40:da:cf:eb:a0:5f:91:33:5b:91:89:10:25:17:6a:68:66:e1: 3f:b3:1c:d2:b5:14:89:8c:5d:78:7b:0d:2f:6e:c1:a4:2b:72: 50:c0:91:fd:2a:95:eb:2a:ce:12:1d:c4:f4:11:5b:b2:35:cb: 7b:4d:23:1c:98:0f:45:d3:3c:8a:20:d3:11:e5:6a:fc:3c:64: 0b:91:ac:e0:65:12:3d:a5:77:27:fe:df:60:18:0e:64:26:39: 09:9d:12:df:67:76:18:63:0d:dc:0d:f4:46:35:9a:b8:36:b2: e6:c0:20:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4di5Bju4Wd4au27ebENYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1Y2Y5OTk2MmY5ODlmN2I3MzNkYTdhYTcwZWFmOWU0MTA1 MmFlMTkwHhcNMjYwMTI2MDQwMDUzWhcNMjYwMTI3MDQwMDUzWjAzMTEwLwYDVQQD EyhmMjZiZWQ0ZWJjMzAzZGJjMmUxOTNkZjRlZGViYmVhNjNjYWQ5ZTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45X2Mc6aIF1ZyxsuMZzjl0gjKspS mnW+SMxiFvNFPABNuBiE+IFX3TWDMUwAQbCATGWQLyQt8V8ZC6wGngJFTNuZUsyg 789yodinkHHWO5K05EQUf+1XkeJiIuG5xdz+ySPNJo2DTjrXUxYi9KBzwb+nLUgy p1lDtPlInjZ0cDRG07/yndRFb23nnTGNX2kelB+N9mYVsvGAKiJr1QmquCuD3T5V CtJyoRSJCovtH1EmDOHLaUQOVT50V8RrtYShoH9f3BRNj1dmdt4Uu2Fq3me+heiE jPByukqNecx3X48Cp4f/B8X2VGgUNtjEfdti/hLw4CLdRPuZYqyKiWS2xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJr7U68MD28Lhk99O3rvqY8rZ6EMB8GA1UdIwQY MBaAFGXPmZYvmJ97cz2nqnDq+eQQUq4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmMtWmxpLVluM3R6UGFlcWNPcjU1QkJTcmhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hNTJiMDQtZWZiMC00MTViLTliMWEt NDA5ZWExMjA4OTI2LzEvWmMtWmxpLVluM3R6UGFlcWNPcjU1QkJTcmhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9hNTJiMDQtZWZiMC00MTViLTliMWEtNDA5ZWExMjA4OTI2 LzEvWmMtWmxpLVluM3R6UGFlcWNPcjU1QkJTcmhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiZ8AEKH GQhUj6uMwFsMCBZV7qFNG6dYG/0U6PHa7VHTXbNdKH1cFZ53ObSqcZ3Rv9WrUBKC y866L4+VBVPBFaPSL96/bSmvhurpQnN1lzF431UDl3uk9Fgj9J0iPzAFEJGqyKvO tLB9oS5BqOBwxEsF1Vhvitl8gltyvyTVVaODAteSUUlA9TCLZZ6F2jQEQNrP66Bf kTNbkYkQJRdqaGbhP7Mc0rUUiYxdeHsNL27BpCtyUMCR/SqV6yrOEh3E9BFbsjXL e00jHJgPRdM8iiDTEeVq/DxkC5Gs4GUSPaV3J/7fYBgOZCY5CZ0S32d2GGMN3A30 RjWauDay5sAgXg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:47:20 2026 by rpki-client