This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft File: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft (raw, json) Hash identifier: fkU3k4KsY+3YZF3Wz5PPPRQ9s+ebia/eAnYEZfgUfxk= Subject key identifier: BE:A8:C4:B7:4B:8E:C9:48:EF:F3:CB:07:E0:C4:06:73:9E:1D:C0:2C Authority key identifier: 67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00 Certificate issuer: /CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600 Certificate serial: 019BF72D55D1BA8EAD611A021ADDBCEC1145 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft Manifest number: 0F98 Signing time: Sun 25 Jan 2026 22:01:41 +0000 Manifest this update: Sun 25 Jan 2026 22:01:41 +0000 Manifest next update: Mon 26 Jan 2026 22:01:41 +0000 Files and hashes: 1: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl (hash: SLE7ieqLn2WaT3YbclicmNy3kky+M0u1dvhP9PWiMT0=) 2: zY7N7I-0j2wyToIYtsy8gjVgKFc.roa (hash: eG6Aql8AjY8k7IpGUPh2hREkMKRNs6mKuXLIFh3G5Wk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:55:d1:ba:8e:ad:61:1a:02:1a:dd:bc:ec:11:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600 Validity Not Before: Jan 25 22:01:41 2026 GMT Not After : Jan 26 22:01:41 2026 GMT Subject: CN=bea8c4b74b8ec948eff3cb07e0c406739e1dc02c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:10:88:c4:48:38:f3:bc:03:2d:83:45:d4:26: 10:13:bd:fd:ad:66:f3:c1:fb:16:0b:4d:ce:5c:24: 0d:bc:d7:7a:01:d6:04:72:5d:d0:a0:2e:0e:73:b8: 1d:6f:6b:1c:d2:4f:16:1f:76:b3:8a:79:4b:c8:f7: e7:84:2d:d3:d1:70:4d:98:b0:93:b6:d4:18:59:57: e4:8c:49:c7:48:2d:5b:d1:ba:69:7c:75:8a:bb:70: 6f:ec:cc:cc:46:e0:94:db:7e:86:56:b5:1d:f3:7c: 9f:30:52:44:e8:5c:13:07:c8:7c:e1:35:4d:49:88: 41:dc:89:76:be:5a:cd:ab:50:c0:77:df:0a:ad:21: 4c:8e:96:ae:e2:06:ad:dd:57:1b:ac:39:34:92:d6: a2:98:ac:d2:3f:f6:8d:e7:9c:a3:cd:a5:67:84:66: 1b:f4:ec:bb:35:86:4f:52:be:0b:9c:64:c7:aa:25: 9e:d9:32:99:93:15:df:08:d9:9d:70:23:d2:8a:c4: 47:42:58:97:99:95:1c:cd:0a:c2:53:17:c8:8c:a3: e3:1c:09:1e:1d:d1:fa:02:f7:42:ed:7f:12:a8:6a: 62:d0:50:28:60:ff:5f:cf:57:8d:fe:3a:42:3e:15: 63:dd:f7:28:22:6c:98:38:0e:54:26:18:56:a8:fe: 2d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A8:C4:B7:4B:8E:C9:48:EF:F3:CB:07:E0:C4:06:73:9E:1D:C0:2C X509v3 Authority Key Identifier: keyid:67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:56:4e:d7:de:36:e5:a2:ec:53:6f:b0:e5:2c:c8:93:5f:e3: 41:5b:0d:e3:8f:a9:31:f4:d7:eb:c3:07:18:51:1a:1f:fb:a6: 22:f9:17:82:69:30:e7:75:0f:7a:59:d4:f2:57:ec:88:ae:0a: d2:2d:55:62:ce:4b:81:19:49:15:e0:37:42:92:9c:c4:5b:e8: 7d:df:e2:2d:d0:51:e1:84:14:8a:6b:a7:c0:4e:23:fd:4a:ff: 37:36:b9:16:f5:70:b0:ab:7f:77:b2:ca:7d:6b:ed:d4:02:b0: a9:96:a2:27:1c:e3:89:bc:a6:54:26:01:e2:13:da:52:fc:d3: 5b:d4:04:13:54:39:1b:6e:0d:f3:c6:40:4a:e6:40:c2:0b:a1: 58:15:77:2c:24:a1:42:63:49:ee:40:d1:be:ac:6d:e3:b8:80: 71:0b:34:99:13:d2:c5:c9:d4:b9:fa:94:05:27:22:b5:58:54: 53:63:ec:b3:e9:b8:8e:71:64:24:61:be:d0:7b:ff:b2:ed:a8: ed:3a:bc:92:e3:fd:7f:92:1b:e9:3b:69:0c:1a:dc:f9:9d:b7: ac:68:4c:c5:e9:38:93:fe:97:b4:dc:92:ba:4c:5c:81:d7:ae: 26:86:7a:71:52:65:93:20:f7:69:0d:3e:8d:96:2d:94:d5:fd: b7:c7:b0:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LVXRuo6tYRoCGt287BFFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZmIwMzI4Y2JmMGIyNTRhZjdjOTlkM2I2OWZjNjM0Y2Zk OGY2MDAwHhcNMjYwMTI1MjIwMTQxWhcNMjYwMTI2MjIwMTQxWjAzMTEwLwYDVQQD EyhiZWE4YzRiNzRiOGVjOTQ4ZWZmM2NiMDdlMGM0MDY3MzllMWRjMDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBCIxEg487wDLYNF1CYQE739rWbz wfsWC03OXCQNvNd6AdYEcl3QoC4Oc7gdb2sc0k8WH3azinlLyPfnhC3T0XBNmLCT ttQYWVfkjEnHSC1b0bppfHWKu3Bv7MzMRuCU236GVrUd83yfMFJE6FwTB8h84TVN SYhB3Il2vlrNq1DAd98KrSFMjpau4gat3VcbrDk0ktaimKzSP/aN55yjzaVnhGYb 9Oy7NYZPUr4LnGTHqiWe2TKZkxXfCNmdcCPSisRHQliXmZUczQrCUxfIjKPjHAke HdH6AvdC7X8SqGpi0FAoYP9fz1eN/jpCPhVj3fcoImyYOA5UJhhWqP4tawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6oxLdLjslI7/PLB+DEBnOeHcAsMB8GA1UdIwQY MBaAFGf7AyjL8LJUr3yZ07afxjTP2PYAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82ZmNiODQtMDE3Yy00YWFmLWJkZTct YWE5MWM5MmQ1YzQ4LzEvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82ZmNiODQtMDE3Yy00YWFmLWJkZTctYWE5MWM5MmQ1YzQ4 LzEvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVZO1942 5aLsU2+w5SzIk1/jQVsN44+pMfTX68MHGFEaH/umIvkXgmkw53UPelnU8lfsiK4K 0i1VYs5LgRlJFeA3QpKcxFvofd/iLdBR4YQUimunwE4j/Ur/Nza5FvVwsKt/d7LK fWvt1AKwqZaiJxzjibymVCYB4hPaUvzTW9QEE1Q5G24N88ZASuZAwguhWBV3LCSh QmNJ7kDRvqxt47iAcQs0mRPSxcnUufqUBScitVhUU2Pss+m4jnFkJGG+0Hv/su2o 7Tq8kuP9f5Ib6TtpDBrc+Z23rGhMxek4k/6XtNySukxcgdeuJoZ6cVJlkyD3aQ0+ jZYtlNX9t8ewnw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:22 2026 by rpki-client