This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft File: pZCvyl_rSsOMGnOFetdW9_M-Nos.mft (raw, json) Hash identifier: ZObfvqH5dzC1DuUj7QsWpVNPtCHByHq1ybh0MR0rYTk= Subject key identifier: 8D:95:A5:56:29:A7:69:12:63:79:B3:3C:8E:2F:29:B1:3C:CD:6E:BB Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B Certificate issuer: /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b Certificate serial: 019BF7D182A253AF1AE7095BE099791CEF52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft Manifest number: 0978 Signing time: Mon 26 Jan 2026 01:01:01 +0000 Manifest this update: Mon 26 Jan 2026 01:01:01 +0000 Manifest next update: Tue 27 Jan 2026 01:01:01 +0000 Files and hashes: 1: 3jTH1h5dUYotQ6HSif98N43DNuA.asa (hash: sd2VnqkRw5U6ZlFZBJnlXiTwm3x3Tfojh0Hk8MPRlmE=) 2: pZCvyl_rSsOMGnOFetdW9_M-Nos.crl (hash: 7MflAgdIPz2bhChcXj2aBJy/EZLlIvS1KKASkFYsvwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:82:a2:53:af:1a:e7:09:5b:e0:99:79:1c:ef:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b Validity Not Before: Jan 26 01:01:01 2026 GMT Not After : Jan 27 01:01:01 2026 GMT Subject: CN=8d95a55629a769126379b33c8e2f29b13ccd6ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:11:39:6a:ae:2f:91:1f:45:bc:99:82:b7:93: 8f:0a:6d:5a:e3:a8:ea:bf:7f:e0:b3:3a:b0:d4:bd: c8:96:97:11:3e:73:fb:1f:db:8e:ab:75:d7:f5:b3: 87:3f:6f:eb:b0:d2:34:37:69:9b:16:3b:30:17:87: 3c:13:c0:5d:a7:80:bb:af:db:ff:a7:18:83:93:17: b4:4f:fc:3a:d0:91:9d:bc:ef:f0:9f:bd:ca:bc:06: 95:92:8b:2a:70:74:19:f1:69:07:ca:e9:f3:1c:e1: e0:61:30:99:7d:3f:08:60:43:12:45:90:42:8d:85: c9:1e:27:96:fa:94:6a:2c:bf:f3:4f:9f:ed:bf:84: 5c:a4:13:f7:1a:2c:9d:7e:02:77:15:d5:cb:db:0e: c4:02:22:55:13:c6:eb:47:91:c2:29:42:29:92:23: 19:52:70:c4:0f:9e:95:68:d1:14:08:ec:f1:df:59: e6:8b:c9:42:25:64:8b:9f:26:ac:41:e1:7c:be:a4: 2b:f7:37:ab:86:76:ad:24:b2:5a:97:3a:cc:fa:17: 5a:d2:4b:73:67:be:4d:cb:78:78:b9:cb:09:a5:8d: 59:71:c7:04:2a:5f:b6:07:15:ba:f9:87:08:a7:d9: 50:95:ba:8a:36:44:63:5e:f5:df:06:23:b9:92:bc: e2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:95:A5:56:29:A7:69:12:63:79:B3:3C:8E:2F:29:B1:3C:CD:6E:BB X509v3 Authority Key Identifier: keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e5:cf:99:79:60:9c:c6:da:34:56:bb:77:cc:61:28:f0:4e: 24:b5:2c:eb:12:f0:67:56:88:af:b6:2c:ae:60:52:6b:cd:ce: c6:58:de:79:0c:b9:1c:f2:33:5d:18:0e:c8:d8:c2:91:66:46: 39:2a:f2:45:81:8e:57:56:b3:55:2e:04:93:49:ed:e1:62:a5: 23:25:cb:9d:d2:c3:56:73:94:6b:59:2f:b6:d3:d6:4c:37:22: e1:eb:7e:a8:f7:81:7d:52:30:8b:ef:10:2e:18:12:db:bf:86: 59:00:41:b6:77:97:fe:97:8a:75:e6:f4:1f:58:06:92:8b:bb: 48:29:83:d9:18:a7:0e:d7:0f:90:0f:cb:34:7d:22:28:d1:db: a9:02:8f:e2:a2:b3:9f:0e:fd:3e:69:c0:4b:76:08:c5:f2:81: eb:b6:1b:f6:f7:1e:6a:33:12:7f:93:95:14:9a:51:fc:5f:c9: 2c:32:6b:1a:c9:19:22:02:52:f3:7d:82:d3:2e:4c:45:1c:37: 90:fe:2b:c7:54:91:7c:0f:b2:98:80:a2:14:7d:27:87:23:d8: ce:90:f7:f5:43:9e:6c:cb:15:3f:86:43:c6:8b:dc:d6:99:cb: 00:0a:f2:a0:56:0f:6d:85:83:05:72:2c:60:db:d7:fc:d3:01: 02:0a:86:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30YKiU68a5wlb4Jl5HO9SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1OTBhZmNhNWZlYjRhYzM4YzFhNzM4NTdhZDc1NmY3ZjMz ZTM2OGIwHhcNMjYwMTI2MDEwMTAxWhcNMjYwMTI3MDEwMTAxWjAzMTEwLwYDVQQD Eyg4ZDk1YTU1NjI5YTc2OTEyNjM3OWIzM2M4ZTJmMjliMTNjY2Q2ZWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRE5aq4vkR9FvJmCt5OPCm1a46jq v3/gszqw1L3IlpcRPnP7H9uOq3XX9bOHP2/rsNI0N2mbFjswF4c8E8Bdp4C7r9v/ pxiDkxe0T/w60JGdvO/wn73KvAaVkosqcHQZ8WkHyunzHOHgYTCZfT8IYEMSRZBC jYXJHieW+pRqLL/zT5/tv4RcpBP3GiydfgJ3FdXL2w7EAiJVE8brR5HCKUIpkiMZ UnDED56VaNEUCOzx31nmi8lCJWSLnyasQeF8vqQr9zerhnatJLJalzrM+hda0ktz Z75Ny3h4ucsJpY1ZcccEKl+2BxW6+YcIp9lQlbqKNkRjXvXfBiO5krziHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2VpVYpp2kSY3mzPI4vKbE8zW67MB8GA1UdIwQY MBaAFKWQr8pf60rDjBpzhXrXVvfzPjaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82NzJiMjUtNjE5OC00ODNlLWEwNWYt OGYwNjNhNWY2YTg2LzEvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS82NzJiMjUtNjE5OC00ODNlLWEwNWYtOGYwNjNhNWY2YTg2 LzEvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALeXPmXlg nMbaNFa7d8xhKPBOJLUs6xLwZ1aIr7YsrmBSa83OxljeeQy5HPIzXRgOyNjCkWZG OSryRYGOV1azVS4Ek0nt4WKlIyXLndLDVnOUa1kvttPWTDci4et+qPeBfVIwi+8Q LhgS27+GWQBBtneX/peKdeb0H1gGkou7SCmD2RinDtcPkA/LNH0iKNHbqQKP4qKz nw79PmnAS3YIxfKB67Yb9vceajMSf5OVFJpR/F/JLDJrGskZIgJS832C0y5MRRw3 kP4rx1SRfA+ymICiFH0nhyPYzpD39UOebMsVP4ZDxovc1pnLAAryoFYPbYWDBXIs YNvX/NMBAgqGNQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:14 2026 by rpki-client