This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json) Hash identifier: r+1byrH/8cQ8EuEnTA5lqzFDi5qex6Yrmxaa9BmYqqc= Subject key identifier: 3E:37:8B:E1:F9:5C:14:C1:A2:CF:79:70:9F:D2:6F:B3:99:A6:76:17 Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56 Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756 Certificate serial: 019BF5E40906C5CB94D1B4802E4EDF38FC8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft Manifest number: 021E Signing time: Sun 25 Jan 2026 16:02:00 +0000 Manifest this update: Sun 25 Jan 2026 16:02:00 +0000 Manifest next update: Mon 26 Jan 2026 16:02:00 +0000 Files and hashes: 1: WKKdAS92LVILbjnTiiXNrRI_064.asa (hash: WU7xtDYPq+tmZfgD8wJKGXUqlisupARfwtckbBQ0ds0=) 2: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: 4jf81sCUt/VfBxAksjmgGlEMCK6tiyyH4TBwt4AnXVk=) 3: ymjEj-AVl-jhoYqun7KK_jww1EY.roa (hash: Lravz6mXezUcFlH14r837C4PlhGpAXXPBKh9Ost0iM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e4:09:06:c5:cb:94:d1:b4:80:2e:4e:df:38:fc:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756 Validity Not Before: Jan 25 16:02:00 2026 GMT Not After : Jan 26 16:02:00 2026 GMT Subject: CN=3e378be1f95c14c1a2cf79709fd26fb399a67617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:4b:eb:87:81:88:ae:72:ab:1e:ea:fb:66:6b: f7:55:d5:14:c4:be:04:8c:d4:23:2d:24:d2:25:92: ff:d9:35:9b:9f:c7:77:dc:5e:de:28:56:fc:11:df: fc:cb:78:88:32:51:10:a3:3d:cb:d5:fc:b9:2e:e7: 9f:2d:9f:04:9d:17:cb:5e:fb:2d:5a:b1:fe:ca:d3: b8:1f:7c:90:9b:a9:11:98:75:6b:09:48:14:c1:f9: e6:5f:fe:fc:68:ab:17:7e:2a:d2:b3:db:ab:fa:be: cd:49:92:54:e1:8f:94:ff:8b:94:c9:45:12:15:38: ad:8f:75:b6:fd:80:6a:69:5b:6d:43:2c:6b:a2:c8: 3e:f7:ce:12:9a:ae:06:82:7f:f5:a2:a9:91:1d:49: 9c:98:43:bc:58:09:47:e2:a7:d7:81:ad:70:c7:5a: bd:63:8b:59:ae:80:6d:3e:b0:7c:d4:37:35:ee:02: 60:e9:8b:9d:25:54:46:58:9b:79:b7:12:2e:7b:67: 74:55:8e:3a:41:51:7b:86:42:72:dc:b0:98:57:7c: 2e:00:63:52:df:37:8f:ad:d9:73:64:a9:52:89:ce: 47:f7:a5:6a:8f:af:65:ea:cf:50:25:5c:19:48:6d: 89:d5:74:de:da:e9:9f:19:e1:d2:d7:00:b8:16:46: 52:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:37:8B:E1:F9:5C:14:C1:A2:CF:79:70:9F:D2:6F:B3:99:A6:76:17 X509v3 Authority Key Identifier: keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b8:b5:94:20:f4:a2:f5:ff:55:6d:e6:25:44:aa:74:29:99: b1:ca:db:77:e9:e6:a2:48:49:d2:4a:e0:c2:51:cf:1c:cf:11: 97:43:bc:f6:02:73:32:d7:0d:b2:91:ce:4f:21:27:77:14:a3: cc:e8:d3:4a:21:ca:1e:e3:ed:d0:d2:b3:81:60:86:a0:42:6f: 24:32:f7:ae:02:f5:8d:66:84:ff:37:1d:d1:42:08:66:7b:ac: fb:f9:d5:81:2e:fd:cd:52:84:38:95:6d:bc:c6:79:5c:ea:29: 55:41:a1:8d:d5:91:10:2d:7f:57:64:82:ed:ca:c7:68:5c:7d: 3a:a1:b0:ab:e3:ef:fe:83:d9:3d:31:3c:77:0c:73:a8:b7:76: 13:e3:09:96:3e:fe:96:44:2f:9d:44:8e:f3:d2:86:b0:27:30: a5:64:59:0b:d1:6f:9e:b3:e0:76:e0:4c:8e:f7:1a:86:9f:7a: 1d:74:81:6b:d9:4d:7f:b1:6e:52:dd:e7:25:fa:f9:70:21:7e: 3b:95:14:2f:2d:e0:4d:ba:ff:d6:12:21:70:51:67:26:b3:89: 23:03:2a:ab:c5:92:a6:27:f1:9e:40:2c:47:77:ed:19:74:98: fe:65:25:e9:d3:2f:17:3d:d4:a0:6c:52:c8:21:89:34:39:1d: 3a:b0:b3:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv15AkGxcuU0bSALk7fOPyNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmM2FkY2UzNjY0YmYwZTdmNjg4ZmY0MTIyNTUxNzM0YzRk MTQ3NTYwHhcNMjYwMTI1MTYwMjAwWhcNMjYwMTI2MTYwMjAwWjAzMTEwLwYDVQQD EygzZTM3OGJlMWY5NWMxNGMxYTJjZjc5NzA5ZmQyNmZiMzk5YTY3NjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Evrh4GIrnKrHur7Zmv3VdUUxL4E jNQjLSTSJZL/2TWbn8d33F7eKFb8Ed/8y3iIMlEQoz3L1fy5LuefLZ8EnRfLXvst WrH+ytO4H3yQm6kRmHVrCUgUwfnmX/78aKsXfirSs9ur+r7NSZJU4Y+U/4uUyUUS FTitj3W2/YBqaVttQyxrosg+984Smq4Ggn/1oqmRHUmcmEO8WAlH4qfXga1wx1q9 Y4tZroBtPrB81Dc17gJg6YudJVRGWJt5txIue2d0VY46QVF7hkJy3LCYV3wuAGNS 3zePrdlzZKlSic5H96Vqj69l6s9QJVwZSG2J1XTe2umfGeHS1wC4FkZS7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD43i+H5XBTBos95cJ/Sb7OZpnYXMB8GA1UdIwQY MBaAFK863ONmS/Dn9oj/QSJVFzTE0UdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xYjE5ZDEtMWRkNy00YzQ1LWJlZjkt MzM1ODgyZGI5YTI1LzEvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xYjE5ZDEtMWRkNy00YzQ1LWJlZjktMzM1ODgyZGI5YTI1 LzEvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbi1lCD0 ovX/VW3mJUSqdCmZscrbd+nmokhJ0krgwlHPHM8Rl0O89gJzMtcNspHOTyEndxSj zOjTSiHKHuPt0NKzgWCGoEJvJDL3rgL1jWaE/zcd0UIIZnus+/nVgS79zVKEOJVt vMZ5XOopVUGhjdWREC1/V2SC7crHaFx9OqGwq+Pv/oPZPTE8dwxzqLd2E+MJlj7+ lkQvnUSO89KGsCcwpWRZC9FvnrPgduBMjvcahp96HXSBa9lNf7FuUt3nJfr5cCF+ O5UULy3gTbr/1hIhcFFnJrOJIwMqq8WSpifxnkAsR3ftGXSY/mUl6dMvFz3UoGxS yCGJNDkdOrCzpQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:46:35 2026 by rpki-client