This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json) Hash identifier: Jb42+fMbSvM94smlE+H0rw+JHkuINOmEgA/ljv1G6Jg= Subject key identifier: BC:9E:46:21:18:F6:AE:65:D2:AC:29:8E:AA:C6:68:13:18:08:29:4A Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b Certificate serial: 019BF7D1A2D75EEED36B96576749E04D3957 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft Manifest number: 0785 Signing time: Mon 26 Jan 2026 01:01:09 +0000 Manifest this update: Mon 26 Jan 2026 01:01:09 +0000 Manifest next update: Tue 27 Jan 2026 01:01:09 +0000 Files and hashes: 1: C_VRFP2HIVQ92IBRqKDUpWFoIEw.roa (hash: vn7JZEI6f0C3P1aOSgIzdjUGS6glebz8hQYfRM3UhMg=) 2: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: 7Jn6VMdJttVv0Dft2hcmTjdJsp21F3r5JHntzzHuLPM=) 3: wDaukqq7DBMLY3tz0NlY1IroUx0.roa (hash: 3J9MoAyfecCeK4hgjY1lICytZk6haCoZrI0pumvGF1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:a2:d7:5e:ee:d3:6b:96:57:67:49:e0:4d:39:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b Validity Not Before: Jan 26 01:01:09 2026 GMT Not After : Jan 27 01:01:09 2026 GMT Subject: CN=bc9e462118f6ae65d2ac298eaac668131808294a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5c:b9:3f:4d:96:5e:85:bb:4e:61:fb:34:88: 5e:f6:9d:84:f9:a9:e1:1d:7b:e2:21:41:07:e7:b0: 1d:83:97:49:b5:55:77:30:e5:d2:cd:12:f5:9a:48: 90:f3:72:84:9a:a3:80:44:91:fc:74:cc:80:51:35: c2:9e:80:26:ba:2d:61:cc:a3:fe:f0:e7:d4:70:21: 62:4d:b4:83:f9:0c:bc:48:f3:30:89:cc:c1:77:81: f9:8a:d7:68:e1:60:9b:b2:d3:a9:ac:40:12:13:0c: 6f:fe:b4:9f:8a:bb:54:8f:84:1b:e6:10:0e:fa:3e: 65:7d:d6:51:a7:e2:28:e5:2b:c0:21:fb:8f:12:ff: 0a:d2:cf:29:0e:c3:72:c9:63:7f:f7:db:ad:df:a9: b2:16:0f:bd:4a:70:c4:66:99:36:bf:4d:04:93:1a: 80:50:4a:23:a9:55:37:40:7d:12:29:68:e2:1c:b8: 01:0d:76:38:99:69:04:2b:ff:39:86:bd:61:ec:72: 83:d0:07:95:26:17:99:ee:96:86:81:34:66:7f:8d: 34:1f:b1:42:d6:68:12:f5:b0:81:63:07:a9:4c:37: 11:7b:b1:b5:e7:0c:5d:71:e0:62:8f:ca:75:c8:c2: 7e:99:77:30:5d:d7:e2:94:58:db:2f:a0:78:0b:7b: 8a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:9E:46:21:18:F6:AE:65:D2:AC:29:8E:AA:C6:68:13:18:08:29:4A X509v3 Authority Key Identifier: keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:18:44:48:c3:37:ae:2d:72:2e:e8:ee:01:52:46:69:a6:8c: ae:a4:82:cd:ce:3a:d7:ec:b1:89:b3:22:99:02:9b:13:2c:23: 0b:7f:c4:1f:e0:96:c4:1f:b1:02:bc:e6:19:e3:ba:94:80:2b: 2e:9e:e7:02:29:cc:38:58:84:00:48:db:65:86:b9:1b:e3:5a: 38:53:da:7c:0e:62:4a:21:7c:96:60:23:39:de:40:99:8e:ba: 3b:ce:57:36:fe:a2:66:72:01:05:c8:b2:aa:ed:64:02:15:d5: 7d:91:e1:e2:d5:c7:aa:41:da:5e:5e:05:8a:40:a5:80:bc:a9: 04:4c:89:74:43:70:43:48:8b:9f:e1:4d:3e:1e:d0:a1:3d:19: 9f:c3:1d:0c:f0:28:dc:e0:5b:34:4d:c3:7c:aa:15:a1:cf:39: c1:08:5f:5d:d9:20:cc:7c:0e:27:b8:b5:1c:ec:c9:62:82:3f: f6:33:6b:65:c5:47:36:f8:1a:be:b3:2b:4f:2d:bf:f7:88:39: 66:1c:d5:22:a3:17:d3:6f:50:8e:de:d6:69:22:55:56:b2:d6: 7c:f2:08:89:32:c5:ab:9e:64:3a:6c:c4:93:d9:87:82:f6:56: 87:6e:73:a5:82:a8:0b:43:2b:8c:6c:e5:01:50:fb:1f:dc:be: d1:0f:99:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30aLXXu7Ta5ZXZ0ngTTlXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NWUxN2MwOGFjZGM3N2U5NDRiMjgzOTUwOGYxZmQ3MTFl OGU5N2IwHhcNMjYwMTI2MDEwMTA5WhcNMjYwMTI3MDEwMTA5WjAzMTEwLwYDVQQD EyhiYzllNDYyMTE4ZjZhZTY1ZDJhYzI5OGVhYWM2NjgxMzE4MDgyOTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Vy5P02WXoW7TmH7NIhe9p2E+anh HXviIUEH57Adg5dJtVV3MOXSzRL1mkiQ83KEmqOARJH8dMyAUTXCnoAmui1hzKP+ 8OfUcCFiTbSD+Qy8SPMwiczBd4H5itdo4WCbstOprEASEwxv/rSfirtUj4Qb5hAO +j5lfdZRp+Io5SvAIfuPEv8K0s8pDsNyyWN/99ut36myFg+9SnDEZpk2v00EkxqA UEojqVU3QH0SKWjiHLgBDXY4mWkEK/85hr1h7HKD0AeVJheZ7paGgTRmf400H7FC 1mgS9bCBYwepTDcRe7G15wxdceBij8p1yMJ+mXcwXdfilFjbL6B4C3uK/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyeRiEY9q5l0qwpjqrGaBMYCClKMB8GA1UdIwQY MBaAFGZeF8CKzcd+lEsoOVCPH9cR6Ol7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTIt MDBjZWViNmE0MTRmLzEvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTItMDBjZWViNmE0MTRm LzEvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4RhESMM3 ri1yLujuAVJGaaaMrqSCzc461+yxibMimQKbEywjC3/EH+CWxB+xArzmGeO6lIAr Lp7nAinMOFiEAEjbZYa5G+NaOFPafA5iSiF8lmAjOd5AmY66O85XNv6iZnIBBciy qu1kAhXVfZHh4tXHqkHaXl4FikClgLypBEyJdENwQ0iLn+FNPh7QoT0Zn8MdDPAo 3OBbNE3DfKoVoc85wQhfXdkgzHwOJ7i1HOzJYoI/9jNrZcVHNvgavrMrTy2/94g5 ZhzVIqMX029Qjt7WaSJVVrLWfPIIiTLFq55kOmzEk9mHgvZWh25zpYKoC0MrjGzl AVD7H9y+0Q+ZEA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:47 2026 by rpki-client