This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json) Hash identifier: gwIYhulB6v72nDRd5xka7jb4+qZRtg5ovaeL7dq/LSQ= Subject key identifier: FB:0B:5B:2C:01:C9:95:64:6D:FD:B3:C5:2A:CE:E7:4D:0D:2D:36:05 Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a Certificate serial: 019BF3F56AE3FAB152B1C950174FADA247F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft Manifest number: 0ECF Signing time: Sun 25 Jan 2026 07:01:45 +0000 Manifest this update: Sun 25 Jan 2026 07:01:45 +0000 Manifest next update: Mon 26 Jan 2026 07:01:45 +0000 Files and hashes: 1: KAcxy9c3kuEaoLAu20siPp3ZrbE.roa (hash: ncQUshO4D4+UWIA/eL4LLcWTdV5i8md5oxXrgxBi3HM=) 2: Y5V8BmZBOFe2ZKISRO6sSTQ8CCw.roa (hash: 76JvlwhSTewzOSSgXR9rjTADjFwpt7Eh69G6wYZk9Ws=) 3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: Wg5sfE29I9/AUiFwV++kxWlER7fo2VavHi2NNZNtxj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:6a:e3:fa:b1:52:b1:c9:50:17:4f:ad:a2:47:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a Validity Not Before: Jan 25 07:01:45 2026 GMT Not After : Jan 26 07:01:45 2026 GMT Subject: CN=fb0b5b2c01c995646dfdb3c52acee74d0d2d3605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2a:61:8f:f4:3f:1b:9b:b1:33:aa:55:fc:10: 37:65:6a:e0:54:16:41:9c:d5:e2:09:d0:a5:88:b4: a8:68:fa:2b:49:83:82:55:5f:e7:92:8c:72:5a:84: 4c:c8:9f:57:d6:33:96:c9:16:55:d6:99:7e:ca:c7: f6:ae:c1:36:7a:aa:bf:86:29:7d:5a:fb:d5:7a:d2: ee:ef:a3:2e:60:1d:9f:ba:46:43:41:f2:13:63:28: cc:c8:01:c7:2a:4e:6e:ce:11:a5:b8:34:b1:55:5d: 64:fe:87:91:cc:4f:47:25:f3:b9:94:b7:bc:bb:7d: 63:1a:c4:78:44:10:22:6d:aa:7a:84:cc:33:bb:e2: 5e:d9:5b:f9:68:00:6e:54:c2:0c:f3:99:6e:89:8d: 64:6e:c2:40:1a:99:61:4e:6b:40:91:98:4d:be:d5: 75:40:f5:75:9d:bd:82:dd:2e:8b:99:33:24:de:4e: 44:97:9a:ce:b2:4c:05:3d:71:06:b2:dd:eb:ef:4b: 74:8e:0b:ef:01:11:e7:96:96:9d:24:e5:6f:09:18: ad:8a:9c:63:2e:75:a8:53:f1:68:c0:f4:ac:56:77: 8d:f7:91:a1:13:15:1c:dc:93:d8:4f:da:2d:24:59: a4:cb:c4:e1:b2:4a:8c:10:4f:f7:db:3c:41:a1:b6: d8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0B:5B:2C:01:C9:95:64:6D:FD:B3:C5:2A:CE:E7:4D:0D:2D:36:05 X509v3 Authority Key Identifier: keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:bf:b1:01:f5:6d:1c:10:10:57:65:b1:1b:21:64:0d:7d:1e: 43:e6:2a:0a:52:de:0c:e3:af:33:4d:2e:19:14:29:1c:dc:7d: 7a:74:87:b2:fb:c6:fc:65:c6:5c:3c:0b:30:4c:78:97:14:e4: 94:9c:6c:a6:76:9f:1c:ca:cd:bc:ee:e4:77:c7:89:f8:a6:66: e5:6e:2e:08:0b:23:17:98:79:cb:59:fe:61:19:f2:6a:75:36: 32:5d:21:01:e2:ac:7b:d4:95:ba:15:0d:55:3a:88:e3:5e:4b: 34:62:bf:ab:7e:a9:33:7d:8a:c4:14:67:4b:f4:8c:bc:88:36: d9:f0:43:66:cf:9b:ea:b5:e6:14:1a:08:d4:fb:b1:35:7d:eb: ee:39:ab:37:d6:14:e1:f2:a2:5c:8f:54:0f:b5:8a:35:6c:e6: e1:2c:35:74:e2:2c:fd:85:e6:aa:09:fb:02:60:a0:a7:2d:4e: e7:cd:c7:cf:e7:08:f6:b2:9a:c3:9a:23:02:a7:29:c8:66:06: d8:fb:cd:83:6d:c5:e1:d0:40:c7:f8:a0:83:eb:7d:9f:20:a5: 2b:5b:9a:15:2f:78:a9:39:0c:8b:b6:55:ba:a1:ad:1e:29:e2: f9:86:6e:ed:34:dc:67:a9:54:39:e2:3a:62:e0:09:f0:ac:fc: a8:8b:b8:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9Wrj+rFSsclQF0+tokfxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYjc1MzQxNTAwODA3YTk3NTBhOGNmNTViZjRlNDVmZjAz ZjMxMmEwHhcNMjYwMTI1MDcwMTQ1WhcNMjYwMTI2MDcwMTQ1WjAzMTEwLwYDVQQD EyhmYjBiNWIyYzAxYzk5NTY0NmRmZGIzYzUyYWNlZTc0ZDBkMmQzNjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yphj/Q/G5uxM6pV/BA3ZWrgVBZB nNXiCdCliLSoaPorSYOCVV/nkoxyWoRMyJ9X1jOWyRZV1pl+ysf2rsE2eqq/hil9 WvvVetLu76MuYB2fukZDQfITYyjMyAHHKk5uzhGluDSxVV1k/oeRzE9HJfO5lLe8 u31jGsR4RBAibap6hMwzu+Je2Vv5aABuVMIM85luiY1kbsJAGplhTmtAkZhNvtV1 QPV1nb2C3S6LmTMk3k5El5rOskwFPXEGst3r70t0jgvvARHnlpadJOVvCRitipxj LnWoU/FowPSsVneN95GhExUc3JPYT9otJFmky8ThskqMEE/32zxBobbYbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsLWywByZVkbf2zxSrO500NLTYFMB8GA1UdIwQY MBaAFMy3U0FQCAepdQqM9Vv05F/wPzEqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZmZiMmYtOWZiZi00ODhiLTkzMTUt YTk5YTIxMDE1OTM3LzEvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lZmZiMmYtOWZiZi00ODhiLTkzMTUtYTk5YTIxMDE1OTM3 LzEvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7+xAfVt HBAQV2WxGyFkDX0eQ+YqClLeDOOvM00uGRQpHNx9enSHsvvG/GXGXDwLMEx4lxTk lJxspnafHMrNvO7kd8eJ+KZm5W4uCAsjF5h5y1n+YRnyanU2Ml0hAeKse9SVuhUN VTqI415LNGK/q36pM32KxBRnS/SMvIg22fBDZs+b6rXmFBoI1PuxNX3r7jmrN9YU 4fKiXI9UD7WKNWzm4Sw1dOIs/YXmqgn7AmCgpy1O583Hz+cI9rKaw5ojAqcpyGYG 2PvNg23F4dBAx/igg+t9nyClK1uaFS94qTkMi7ZVuqGtHini+YZu7TTcZ6lUOeI6 YuAJ8Kz8qIu4pg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:45:04 2026 by rpki-client