This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json) Hash identifier: CndcpK5d/yyiTadUvAAeoAJfUK06rWVFaUK2PWV/+bY= Subject key identifier: D0:9B:E7:E4:3C:64:CD:E2:33:11:7B:F6:40:82:19:56:F8:A4:B0:9D Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af Certificate serial: 019BF5AC97FDE5CF11EEB4BAAD1E9A49AD9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 15:01:27 +0000 Manifest this update: Sun 25 Jan 2026 15:01:27 +0000 Manifest next update: Mon 26 Jan 2026 15:01:27 +0000 Files and hashes: 1: h8MAjW2nwR1TuDpY3gaR4GIp5Is.roa (hash: YMOvJ9hakU4xTrKD5f+aHfr6VChVy5zYjPbZPORV+p4=) 2: hq6cHZZmfTc8iDuXctwL9j8vYGA.roa (hash: gnwIM65nm0H3pqLfxC4cpwXQNNz6WAkiHxWYF953SRw=) 3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: Hb20Rxn7OHVm+xQHsb07nXM6qtrDSkn663imJXDyz9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:97:fd:e5:cf:11:ee:b4:ba:ad:1e:9a:49:ad:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af Validity Not Before: Jan 25 15:01:27 2026 GMT Not After : Jan 26 15:01:27 2026 GMT Subject: CN=d09be7e43c64cde233117bf640821956f8a4b09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:52:b8:3e:38:b7:63:7c:8f:b9:0a:f4:8a:64: 51:57:5c:41:a4:79:2a:37:90:ca:78:16:c1:c1:2c: 51:4c:2a:6e:62:38:b9:92:1b:4a:12:85:e6:18:39: bc:46:46:e1:8c:5a:43:56:41:78:f4:a1:66:2f:8b: cc:b0:5f:39:83:1c:eb:65:58:5d:18:66:38:99:b4: 16:f4:81:09:ab:f5:9c:55:09:8d:1d:7d:44:02:6d: 34:98:85:f8:10:59:a9:17:19:f7:7f:12:a7:46:82: ad:cc:e6:ff:38:df:cb:54:13:73:8c:2c:51:ec:e8: 19:7a:af:90:ed:58:5a:19:ba:67:48:bf:78:b0:7e: e0:b1:d4:d4:fc:46:1d:68:f4:36:ab:1e:3a:81:33: fd:85:7b:d4:3c:dd:1b:66:d5:36:f1:8d:d8:3c:63: ac:00:69:a3:96:65:d2:b4:63:f9:bd:69:6f:4d:06: c9:bb:13:81:45:a0:a8:7e:ed:86:1c:39:03:1a:3d: 48:88:b9:f0:21:14:23:c4:e6:53:ec:3a:22:c9:15: ba:2b:4f:e4:57:85:77:39:65:15:77:89:26:1f:8b: b0:31:50:50:0f:b0:ec:b8:bc:19:8a:7d:bf:66:4e: 96:32:d6:28:6f:26:60:55:20:75:a8:3e:f7:da:dd: 9a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9B:E7:E4:3C:64:CD:E2:33:11:7B:F6:40:82:19:56:F8:A4:B0:9D X509v3 Authority Key Identifier: keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:04:64:9e:98:59:91:6e:47:d2:8b:2e:c5:ef:ee:de:ac:78: 87:02:c8:b0:dd:fe:fa:c1:2b:b3:c7:29:f5:19:64:ae:25:b3: c4:9a:8b:bb:fb:85:cc:50:d6:b7:fe:08:7e:a0:43:24:e0:4c: 0c:a6:00:22:d4:71:d5:0c:b4:2f:a7:3c:01:8d:fd:07:2d:13: 68:c0:a5:3e:2c:eb:33:09:3e:9c:75:1c:65:a2:2f:cd:51:75: bf:7e:d9:6f:35:71:5c:c7:58:ea:56:3b:14:cf:5e:41:df:28: 02:59:76:6c:33:77:d4:f5:d8:66:ef:50:78:e2:7a:0d:55:81: b4:62:d3:e3:fd:01:27:db:47:6c:38:5d:9f:e7:a2:1a:33:30: 83:ef:37:41:8e:2d:78:57:48:6b:11:14:82:bb:56:df:06:a4: 74:2f:78:bf:ce:82:e1:82:30:b0:90:95:72:65:7c:ab:47:51: 14:eb:3d:c2:58:9e:5b:3b:92:d2:d3:6c:a1:d7:f6:15:9f:fa: 32:bb:20:79:4b:22:d7:65:11:87:5b:e6:57:43:12:f7:57:64: 4a:d7:ee:37:cc:68:c7:06:f4:b2:10:06:c0:18:e6:49:24:d1: b2:fd:11:96:63:e8:11:1a:84:f5:b5:75:08:bd:f5:d8:cc:7c: bd:b2:6b:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rJf95c8R7rS6rR6aSa2bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMzllNmJlNDBkODAxMjg4OTZjY2QxMzFmNjVhNTVhZDk4 YTQwYWYwHhcNMjYwMTI1MTUwMTI3WhcNMjYwMTI2MTUwMTI3WjAzMTEwLwYDVQQD EyhkMDliZTdlNDNjNjRjZGUyMzMxMTdiZjY0MDgyMTk1NmY4YTRiMDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9lK4Pji3Y3yPuQr0imRRV1xBpHkq N5DKeBbBwSxRTCpuYji5khtKEoXmGDm8RkbhjFpDVkF49KFmL4vMsF85gxzrZVhd GGY4mbQW9IEJq/WcVQmNHX1EAm00mIX4EFmpFxn3fxKnRoKtzOb/ON/LVBNzjCxR 7OgZeq+Q7VhaGbpnSL94sH7gsdTU/EYdaPQ2qx46gTP9hXvUPN0bZtU28Y3YPGOs AGmjlmXStGP5vWlvTQbJuxOBRaCofu2GHDkDGj1IiLnwIRQjxOZT7DoiyRW6K0/k V4V3OWUVd4kmH4uwMVBQD7DsuLwZin2/Zk6WMtYobyZgVSB1qD732t2aowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCb5+Q8ZM3iMxF79kCCGVb4pLCdMB8GA1UdIwQY MBaAFMw55r5A2AEoiWzNEx9lpVrZikCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iMmZmOTEtZDRjZS00MDViLWJlYmYt NjA5ZDhmNTY1ZmZjLzEvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iMmZmOTEtZDRjZS00MDViLWJlYmYtNjA5ZDhmNTY1ZmZj LzEvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIARknphZ kW5H0osuxe/u3qx4hwLIsN3++sErs8cp9RlkriWzxJqLu/uFzFDWt/4IfqBDJOBM DKYAItRx1Qy0L6c8AY39By0TaMClPizrMwk+nHUcZaIvzVF1v37ZbzVxXMdY6lY7 FM9eQd8oAll2bDN31PXYZu9QeOJ6DVWBtGLT4/0BJ9tHbDhdn+eiGjMwg+83QY4t eFdIaxEUgrtW3wakdC94v86C4YIwsJCVcmV8q0dRFOs9wlieWzuS0tNsodf2FZ/6 MrsgeUsi12URh1vmV0MS91dkStfuN8xoxwb0shAGwBjmSSTRsv0RlmPoERqE9bV1 CL312Mx8vbJrSg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:07 2026 by rpki-client