This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json) Hash identifier: g+3NBU+9s5DshzRCYcRHF6FDmvzorbxEWrz3G57dtRA= Subject key identifier: FD:DF:98:A0:C6:5B:88:45:30:8E:9B:45:44:FD:41:86:39:CD:3B:F2 Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92 Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92 Certificate serial: 019BF688508A68533A9B2B6B5C76F97DD467 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft Manifest number: 034B Signing time: Sun 25 Jan 2026 19:01:26 +0000 Manifest this update: Sun 25 Jan 2026 19:01:26 +0000 Manifest next update: Mon 26 Jan 2026 19:01:26 +0000 Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: 8IdHcCqLzUiH3e0dAXU2p7vMHfWUaJAfEryEUnGwt4I=) 2: 7jgvwOfbTS9EcboNY_mci-_zFzQ.roa (hash: SGXWMpwVSmLMAKNP+kPKK/+5RwAE6AIl6oVDLelweNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:50:8a:68:53:3a:9b:2b:6b:5c:76:f9:7d:d4:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92 Validity Not Before: Jan 25 19:01:26 2026 GMT Not After : Jan 26 19:01:26 2026 GMT Subject: CN=fddf98a0c65b8845308e9b4544fd418639cd3bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:00:cd:a7:96:80:20:06:f9:c4:d2:56:2e:3b: 88:ff:d7:7a:94:c7:b3:fe:c1:ab:bb:f1:85:0e:f8: 59:c9:4d:9c:fb:19:68:0e:fd:c6:b9:d8:c3:29:96: 7d:e4:e3:5c:0f:34:53:67:5f:bc:c2:02:2b:f5:f3: 1d:e9:46:e9:ff:27:ac:c8:49:32:c7:5e:af:3b:f2: d4:15:79:69:2d:42:9f:29:59:a1:22:66:b8:ee:15: c9:cc:fd:57:ba:10:69:55:37:d7:21:ff:eb:3a:f3: 9b:ce:6d:d1:41:ca:9a:2d:c8:a5:33:02:88:12:7b: ff:f5:c7:b4:67:b3:1c:51:01:24:8f:4f:23:2c:8d: 74:0c:40:55:20:7a:6f:c9:4a:97:f8:f2:57:d1:e6: 75:54:8c:19:a7:77:75:7f:82:32:55:2e:f9:c6:16: 75:ab:1c:9c:5b:b2:b0:37:0a:ff:c4:0c:f3:db:3f: 70:96:97:9e:53:f2:d3:b8:38:16:67:6d:d4:34:52: 88:25:37:85:72:3b:91:27:af:78:38:b8:1b:3d:1c: 4f:18:6f:96:bd:9a:11:cc:b5:c9:2b:35:73:2f:72: be:be:4c:24:b3:b9:eb:c5:bf:2b:f3:ba:9c:44:4a: 04:75:e8:2a:c4:0f:55:b0:00:3b:07:b6:3e:87:bd: 0b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DF:98:A0:C6:5B:88:45:30:8E:9B:45:44:FD:41:86:39:CD:3B:F2 X509v3 Authority Key Identifier: keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:9d:24:ae:d7:31:c7:a6:08:02:3f:b7:5b:db:14:57:12:98: f7:fa:67:ab:f1:1c:d3:2a:bc:eb:ce:92:6b:bf:87:ea:8b:3d: 4f:02:fe:b1:d8:b8:ac:a0:8d:d1:fd:e1:12:cb:c1:93:b0:6b: 9f:df:91:75:bd:b0:f1:74:fb:47:88:8b:7c:51:d5:39:72:73: d5:2a:88:f4:bd:89:67:1b:d9:36:1c:66:5f:13:99:ba:4c:f2: 3b:e0:9b:53:fb:41:1e:ac:44:ff:38:d7:63:b7:b9:84:d7:7f: 31:ca:9b:59:24:fa:81:b8:4e:39:21:c6:12:fc:3e:fb:3c:af: 82:02:7b:bf:01:9e:66:20:9c:75:7c:4d:e0:ee:9b:16:26:cc: f6:0c:66:af:2e:57:7b:1b:30:d9:74:0f:d2:07:62:ae:69:68: 71:38:d2:06:e4:78:ac:5a:c4:d0:a4:5e:bb:b2:fd:da:eb:90: b1:3f:a9:02:08:17:71:0d:a1:c1:b5:29:5b:81:2b:c7:cb:92: 2b:06:61:97:a7:2d:0b:1c:db:f5:0f:db:ff:b0:5a:0b:45:7b: a3:a2:64:06:85:50:6a:bc:e7:ff:88:cb:46:ed:ac:04:c4:75: 83:da:02:6f:b7:aa:fd:47:20:bb:5c:28:f9:88:13:59:76:eb: 70:1b:4b:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iFCKaFM6mytrXHb5fdRnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOTg4MzQxZDM2MDc4NjVmNTBmNWJiMDJhOWEzZjVjMmRl NThhOTIwHhcNMjYwMTI1MTkwMTI2WhcNMjYwMTI2MTkwMTI2WjAzMTEwLwYDVQQD EyhmZGRmOThhMGM2NWI4ODQ1MzA4ZTliNDU0NGZkNDE4NjM5Y2QzYmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ADNp5aAIAb5xNJWLjuI/9d6lMez /sGru/GFDvhZyU2c+xloDv3GudjDKZZ95ONcDzRTZ1+8wgIr9fMd6Ubp/yesyEky x16vO/LUFXlpLUKfKVmhIma47hXJzP1XuhBpVTfXIf/rOvObzm3RQcqaLcilMwKI Env/9ce0Z7McUQEkj08jLI10DEBVIHpvyUqX+PJX0eZ1VIwZp3d1f4IyVS75xhZ1 qxycW7KwNwr/xAzz2z9wlpeeU/LTuDgWZ23UNFKIJTeFcjuRJ694OLgbPRxPGG+W vZoRzLXJKzVzL3K+vkwks7nrxb8r87qcREoEdegqxA9VsAA7B7Y+h70LBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3fmKDGW4hFMI6bRUT9QYY5zTvyMB8GA1UdIwQY MBaAFNGYg0HTYHhl9Q9bsCqaP1wt5YqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMt OTMyMGExYzczYjFkLzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMtOTMyMGExYzczYjFk LzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYp0krtcx x6YIAj+3W9sUVxKY9/pnq/Ec0yq8686Sa7+H6os9TwL+sdi4rKCN0f3hEsvBk7Br n9+Rdb2w8XT7R4iLfFHVOXJz1SqI9L2JZxvZNhxmXxOZukzyO+CbU/tBHqxE/zjX Y7e5hNd/McqbWST6gbhOOSHGEvw++zyvggJ7vwGeZiCcdXxN4O6bFibM9gxmry5X exsw2XQP0gdirmlocTjSBuR4rFrE0KReu7L92uuQsT+pAggXcQ2hwbUpW4Erx8uS KwZhl6ctCxzb9Q/b/7BaC0V7o6JkBoVQarzn/4jLRu2sBMR1g9oCb7eq/Ucgu1wo +YgTWXbrcBtLXA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:21:08 2026 by rpki-client