This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json) Hash identifier: OMWv9Z2kZsJy3onglrQPHcMd58Bv5p2oNHre+ISUcrs= Subject key identifier: 5A:C3:C9:32:EA:9B:4F:95:40:3D:DB:42:2C:7B:41:AA:96:7D:E2:75 Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea Certificate serial: 019BF507743242353BDAFF3F8B5AB9B832CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft Manifest number: 0C9F Signing time: Sun 25 Jan 2026 12:01:04 +0000 Manifest this update: Sun 25 Jan 2026 12:01:04 +0000 Manifest next update: Mon 26 Jan 2026 12:01:04 +0000 Files and hashes: 1: 3wE9z3o-LZC9L1Wi744_KuJH-nA.roa (hash: vmvu4StBrIILT2zOsTXLqhGSv13Lo4k+H588mDsH8cM=) 2: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: AznyjAAH2+eeHVjomqEift6UR8FdXeJolxeqs5WWMuk=) 3: amULFHSQIT1lD63zvSrNJGtGM-I.roa (hash: UX9F+FQcAi88JV/0o8okdIg01PgokJoY/+NJIGfsY+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:74:32:42:35:3b:da:ff:3f:8b:5a:b9:b8:32:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea Validity Not Before: Jan 25 12:01:04 2026 GMT Not After : Jan 26 12:01:04 2026 GMT Subject: CN=5ac3c932ea9b4f95403ddb422c7b41aa967de275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2f:b1:15:7d:c4:73:0f:d1:53:96:51:60:88: 45:ee:dd:99:a9:e9:7a:ed:d8:5f:59:74:d4:68:0e: e2:b8:c0:65:41:33:16:a1:0a:06:a7:88:7b:5e:73: ce:2a:7b:d1:6c:68:37:79:b3:82:bc:b1:ca:0a:9a: 96:19:3f:fe:8c:eb:f8:c7:76:87:d6:70:8e:9d:29: 01:72:fd:ff:5e:cf:8f:6a:a1:43:ae:a2:33:4e:81: 86:93:ac:47:0d:36:ce:c7:a0:0a:98:a3:c5:ad:ea: 1f:18:b1:f2:9c:a2:7d:02:ca:40:fc:8f:8e:35:8c: 8f:e4:33:45:a4:35:6b:62:4e:77:5b:ce:a1:6e:5e: 30:69:6d:3c:47:00:b3:85:8a:2e:87:27:eb:e7:8e: 73:e2:af:27:3b:af:42:51:8a:aa:9f:d1:4b:a9:33: 3f:eb:81:7e:e8:46:9d:1a:b4:60:5e:0e:98:ff:a5: b0:77:32:a4:26:8f:23:93:f7:e9:b7:6f:b9:62:23: 5b:81:54:fd:44:dc:a3:b2:77:3a:37:c6:12:46:44: ff:6e:0b:c0:ce:03:da:e8:53:7d:16:9c:8f:2c:ae: 75:2e:38:53:be:d6:c1:a4:07:67:1d:f2:ad:f0:3d: ef:29:fc:7c:ec:ed:87:98:5e:c3:c4:f0:53:52:e3: fd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C3:C9:32:EA:9B:4F:95:40:3D:DB:42:2C:7B:41:AA:96:7D:E2:75 X509v3 Authority Key Identifier: keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e4:4b:42:f5:11:b8:b6:19:c5:c1:a3:b2:77:08:2f:04:5a: 5e:d2:f0:cf:c8:4e:79:9f:87:30:8b:ea:b9:47:5e:32:29:f2: 52:51:4b:2a:77:98:80:e8:41:da:08:0a:d2:28:1a:9a:49:c9: 1c:82:06:c0:62:d3:64:a9:13:d2:c3:cc:12:45:67:6b:fe:09: 4f:6a:01:bb:22:7a:f2:1d:f3:70:1e:42:eb:d5:4e:3f:8a:43: b5:4d:3d:7a:c0:47:63:75:58:ad:f1:45:28:f2:60:ff:58:27: f9:f3:e7:a4:8a:27:1f:32:75:55:47:d5:ca:c9:f8:7d:90:01: 70:df:47:ae:c0:f7:fb:50:c2:7e:cf:2c:1e:39:c5:75:14:2c: 68:23:1b:46:d9:50:06:2e:d6:1a:91:71:05:ac:04:e8:db:7c: b2:81:90:c6:dc:73:8b:2d:4e:91:db:4f:88:f0:0e:8c:00:3c: b3:f9:b1:c2:b7:ff:c6:b8:88:dc:a2:3a:20:f5:58:c6:c8:ea: e1:5f:d9:6b:bf:88:34:ce:97:4b:62:b5:92:6a:94:1a:1d:f9: ca:2e:a7:0c:a8:7d:19:a7:64:ca:91:44:3d:db:29:38:f7:12: 9d:58:e7:a8:80:24:1b:c8:c4:a7:ed:cd:80:a0:ca:ca:e4:a3: e8:ae:dc:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B3QyQjU72v8/i1q5uDLPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmZiMzA5YzI4OWFjZmZjMWJlMzRhNmYwYjY2NzVjMDAx NzEzZWEwHhcNMjYwMTI1MTIwMTA0WhcNMjYwMTI2MTIwMTA0WjAzMTEwLwYDVQQD Eyg1YWMzYzkzMmVhOWI0Zjk1NDAzZGRiNDIyYzdiNDFhYTk2N2RlMjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C+xFX3Ecw/RU5ZRYIhF7t2Zqel6 7dhfWXTUaA7iuMBlQTMWoQoGp4h7XnPOKnvRbGg3ebOCvLHKCpqWGT/+jOv4x3aH 1nCOnSkBcv3/Xs+PaqFDrqIzToGGk6xHDTbOx6AKmKPFreofGLHynKJ9AspA/I+O NYyP5DNFpDVrYk53W86hbl4waW08RwCzhYouhyfr545z4q8nO69CUYqqn9FLqTM/ 64F+6EadGrRgXg6Y/6WwdzKkJo8jk/fpt2+5YiNbgVT9RNyjsnc6N8YSRkT/bgvA zgPa6FN9FpyPLK51LjhTvtbBpAdnHfKt8D3vKfx87O2HmF7DxPBTUuP9OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrDyTLqm0+VQD3bQix7QaqWfeJ1MB8GA1UdIwQY MBaAFGT/swnCiaz/wb40pvC2Z1wAFxPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUt Y2E0NDQ3MDQ0MTZmLzEvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUtY2E0NDQ3MDQ0MTZm LzEvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQORLQvUR uLYZxcGjsncILwRaXtLwz8hOeZ+HMIvquUdeMinyUlFLKneYgOhB2ggK0igamknJ HIIGwGLTZKkT0sPMEkVna/4JT2oBuyJ68h3zcB5C69VOP4pDtU09esBHY3VYrfFF KPJg/1gn+fPnpIonHzJ1VUfVysn4fZABcN9HrsD3+1DCfs8sHjnFdRQsaCMbRtlQ Bi7WGpFxBawE6Nt8soGQxtxziy1OkdtPiPAOjAA8s/mxwrf/xriI3KI6IPVYxsjq 4V/Za7+INM6XS2K1kmqUGh35yi6nDKh9GadkypFEPdspOPcSnVjnqIAkG8jEp+3N gKDKyuSj6K7cKg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:58:37 2026 by rpki-client