This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json) Hash identifier: S/AQM+TPkVZYS//1XnqCXXYZFDB/R+dCjQHVIID7548= Subject key identifier: 28:34:A7:E3:D5:8B:6A:54:EC:E6:1C:6A:83:9D:F6:54:9D:6E:01:2F Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26 Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026 Certificate serial: 019BF83FA4955D610D8C491B68EBA06E52DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft Manifest number: 1208 Signing time: Mon 26 Jan 2026 03:01:18 +0000 Manifest this update: Mon 26 Jan 2026 03:01:18 +0000 Manifest next update: Tue 27 Jan 2026 03:01:18 +0000 Files and hashes: 1: DmCEvnPa2cR0m4Wq8MgYYGsM2fc.roa (hash: FlCMboWRwBxntExiPGM7Dlg1+J7ywCWO67fbQBOqoGo=) 2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: aicOmfQyzGMv2BHX/EdWUC7HCxx05hvB2thUv3mBh+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:a4:95:5d:61:0d:8c:49:1b:68:eb:a0:6e:52:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026 Validity Not Before: Jan 26 03:01:18 2026 GMT Not After : Jan 27 03:01:18 2026 GMT Subject: CN=2834a7e3d58b6a54ece61c6a839df6549d6e012f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:05:cf:54:89:78:42:62:de:b9:75:be:58:5b: d4:88:f1:6e:95:5a:5d:db:d2:a2:13:b4:6e:8c:e8: be:af:72:8c:77:c8:d8:b6:5f:86:3b:13:9c:cc:fe: d8:83:0b:53:a8:ef:6b:5e:00:9c:e1:24:6e:06:d7: 51:d3:f1:ac:13:a0:6c:94:fc:8d:dc:39:b4:1a:61: 62:f3:79:27:66:e5:09:2a:9b:4f:27:06:2f:77:61: 03:0b:3f:a8:a8:6f:32:b3:a1:41:d2:ad:25:45:4c: be:10:2d:31:bd:93:05:da:a1:ff:e0:a0:94:34:6a: 0f:89:a1:b8:25:79:eb:7c:9e:ee:34:c4:00:d6:06: 38:6c:45:a9:8a:ae:f2:3c:bb:de:8f:93:f4:01:b2: 7d:08:b3:8b:25:14:49:36:82:eb:66:00:0d:f6:a0: 81:95:ef:b4:43:73:3d:7d:ec:14:a5:49:43:1e:29: 6d:e6:11:3e:ad:ba:ab:d3:6c:85:f3:16:95:65:b7: 33:8b:4f:e9:6a:69:b5:71:ca:5b:63:fc:a1:e3:93: 04:39:50:da:bc:a2:6d:92:a6:c0:9b:29:2e:59:0a: eb:fd:66:82:7c:66:1b:42:8a:65:be:7f:9c:bf:20: 15:31:a3:2a:63:52:0d:4d:74:14:23:cc:91:d2:f5: 3b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:34:A7:E3:D5:8B:6A:54:EC:E6:1C:6A:83:9D:F6:54:9D:6E:01:2F X509v3 Authority Key Identifier: keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:c2:65:3e:56:35:a8:e8:0a:2d:c4:f8:7f:55:53:bc:1e:12: a7:c5:f1:12:54:35:c6:37:c8:c0:96:a8:4c:1a:a0:c9:b8:f4: 42:c1:ea:81:43:c9:d3:d4:d7:0f:61:dc:7d:fe:f8:42:63:37: 47:56:1f:17:4b:ec:73:97:76:ce:ac:f8:b0:a3:60:9a:c2:ea: db:15:c3:1f:bf:91:ff:56:2c:b5:05:a7:04:e0:19:71:51:42: da:64:e0:98:aa:0c:cb:41:33:24:c2:7c:32:02:44:90:fa:8d: 06:fd:90:2c:eb:4e:f1:99:e5:66:9b:6f:82:52:57:28:d3:3a: 8a:0b:0e:63:5d:e7:9e:9f:01:f9:14:4b:e0:16:a9:c2:6e:c7: 21:31:83:5e:71:1d:f8:f7:6c:02:0b:29:42:0a:8e:8d:83:cd: dd:2b:3b:8e:25:b4:8d:8d:6b:b9:31:2b:c8:34:2f:e4:60:d6: 0f:1f:9f:5d:22:19:21:0f:75:11:cf:fb:73:2e:c6:46:e0:1e: b4:c3:a4:5b:d0:a4:02:69:5a:f3:17:04:38:da:57:cc:d4:64: 77:44:d5:de:4d:bc:55:5f:c5:cc:78:87:2c:e8:18:80:98:2b: 47:5b:c6:f0:5c:d9:3f:9a:de:8d:5d:c4:3d:56:32:47:b1:43: 21:d3:3b:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P6SVXWENjEkbaOugblLeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZjI0NzRkZTg0MTE2NzUyYjkwODBhN2EwZGIzMjI1MzVj NTYwMjYwHhcNMjYwMTI2MDMwMTE4WhcNMjYwMTI3MDMwMTE4WjAzMTEwLwYDVQQD EygyODM0YTdlM2Q1OGI2YTU0ZWNlNjFjNmE4MzlkZjY1NDlkNmUwMTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAXPVIl4QmLeuXW+WFvUiPFulVpd 29KiE7RujOi+r3KMd8jYtl+GOxOczP7YgwtTqO9rXgCc4SRuBtdR0/GsE6BslPyN 3Dm0GmFi83knZuUJKptPJwYvd2EDCz+oqG8ys6FB0q0lRUy+EC0xvZMF2qH/4KCU NGoPiaG4JXnrfJ7uNMQA1gY4bEWpiq7yPLvej5P0AbJ9CLOLJRRJNoLrZgAN9qCB le+0Q3M9fewUpUlDHilt5hE+rbqr02yF8xaVZbczi0/pamm1ccpbY/yh45MEOVDa vKJtkqbAmykuWQrr/WaCfGYbQoplvn+cvyAVMaMqY1INTXQUI8yR0vU7HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCg0p+PVi2pU7OYcaoOd9lSdbgEvMB8GA1UdIwQY MBaAFMzyR03oQRZ1K5CAp6DbMiU1xWAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lY2ViMDItODBiNC00Nzk0LWFjYmYt Y2M5MDYyMGU5OWNmLzEvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lY2ViMDItODBiNC00Nzk0LWFjYmYtY2M5MDYyMGU5OWNm LzEvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcJlPlY1 qOgKLcT4f1VTvB4Sp8XxElQ1xjfIwJaoTBqgybj0QsHqgUPJ09TXD2Hcff74QmM3 R1YfF0vsc5d2zqz4sKNgmsLq2xXDH7+R/1YstQWnBOAZcVFC2mTgmKoMy0EzJMJ8 MgJEkPqNBv2QLOtO8ZnlZptvglJXKNM6igsOY13nnp8B+RRL4Bapwm7HITGDXnEd +PdsAgspQgqOjYPN3Ss7jiW0jY1ruTEryDQv5GDWDx+fXSIZIQ91Ec/7cy7GRuAe tMOkW9CkAmla8xcEONpXzNRkd0TV3k28VV/FzHiHLOgYgJgrR1vG8FzZP5rejV3E PVYyR7FDIdM7eA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:56 2026 by rpki-client