This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft File: ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft (raw, json) Hash identifier: r5yzQE3Ng62+Nxn0Grrw3gnr+EPuitrkG3Z2kueZw7Y= Subject key identifier: 31:6B:BE:8F:33:A2:50:BE:59:1D:30:44:CC:89:86:5C:F7:B7:C9:23 Authority key identifier: 64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4 Certificate issuer: /CN=647664ba5773614a3c44f90c12ae725548a75cd4 Certificate serial: 019BF3F4EA7376F612F832A22EFFCFD556EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft Manifest number: AB Signing time: Sun 25 Jan 2026 07:01:12 +0000 Manifest this update: Sun 25 Jan 2026 07:01:12 +0000 Manifest next update: Mon 26 Jan 2026 07:01:12 +0000 Files and hashes: 1: X8CdiaOL7r7wRRKcQ_i-HAtSpEE.asa (hash: m6XO9M8YuBRJpjyMisvjiR1NdmA64mOYhDzGvgACZo8=) 2: ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl (hash: woNh3NR/YGYXGtlJEMYZGLUrAxo8NGCwwmKw3KoNBV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f4:ea:73:76:f6:12:f8:32:a2:2e:ff:cf:d5:56:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647664ba5773614a3c44f90c12ae725548a75cd4 Validity Not Before: Jan 25 07:01:12 2026 GMT Not After : Jan 26 07:01:12 2026 GMT Subject: CN=316bbe8f33a250be591d3044cc89865cf7b7c923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:28:46:76:76:e8:b7:d9:bc:a9:44:85:90:64: 88:8d:51:fd:bf:51:27:0a:c0:4e:e2:ef:81:c7:d3: 4f:8c:46:30:33:8b:b7:b0:5c:3f:db:8e:f0:64:b2: 47:3a:74:e6:6f:10:31:be:44:f8:eb:b2:10:5e:8f: bd:23:66:68:e5:34:8d:e8:59:6c:8a:23:cc:83:a3: 71:ca:9a:d8:9f:7e:79:48:34:a6:60:c6:e7:0b:7b: 8e:ee:84:83:17:b4:64:60:53:27:40:73:65:5a:4e: 92:d8:71:c3:71:8c:3f:29:0d:61:a5:38:ee:5b:cb: 42:69:35:1a:64:2f:1f:a8:08:0c:b1:10:02:bc:e2: 0d:41:b6:56:13:ea:ba:14:4c:45:e1:f0:14:57:11: 01:5c:ad:06:86:dd:57:6b:e8:7d:eb:f8:87:cc:b2: 2b:09:d3:88:f3:f1:db:40:72:fe:b8:1d:ef:2d:0c: db:6a:78:cd:ad:ce:3e:d6:01:a2:b6:25:a8:7a:10: 33:82:43:88:58:7d:9c:cd:7e:87:3b:4f:cf:7f:be: 54:4c:09:19:fa:c3:81:7e:b0:9f:0f:2f:3f:29:1d: 26:0c:e7:7c:d3:d1:a8:4a:54:af:1c:1e:9d:ab:39: d1:b6:75:c3:26:8f:34:8a:f5:4a:47:e7:b1:94:ab: e7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6B:BE:8F:33:A2:50:BE:59:1D:30:44:CC:89:86:5C:F7:B7:C9:23 X509v3 Authority Key Identifier: keyid:64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:79:7b:f8:d3:dd:67:f3:10:69:ff:7b:bd:f8:f4:b5:33:59: e6:ec:54:4c:6d:7a:d3:d2:46:46:5e:d3:ae:9c:4c:95:eb:cd: da:60:81:b0:02:ec:e3:0d:ff:41:6c:12:d0:d7:c3:be:bb:b8: 3e:7e:e0:75:61:8d:85:2d:b0:17:2a:c5:58:92:51:2c:41:df: 22:f7:ea:c8:94:ac:6f:f8:3c:4d:3d:3e:8b:22:71:f4:f1:cc: 57:4f:63:11:36:dd:9a:6d:c5:ad:87:c9:ff:46:96:38:3b:9a: 00:cb:5f:bf:3a:7a:68:a1:40:bd:08:04:42:17:3b:d0:85:7c: 82:dc:ae:bd:d1:e8:ea:18:84:55:61:8b:5b:69:8c:5d:d8:71: b8:fb:69:91:b5:dd:c4:62:1b:0a:2c:52:b5:c7:8c:81:96:ce: 38:89:53:77:f5:9a:ca:a8:f1:3d:38:08:60:52:91:38:33:79: 57:9c:ea:ad:1e:63:f0:97:8f:60:5c:c2:cd:ae:f2:da:7a:80: db:f8:3e:7a:48:97:3d:ae:9c:cb:54:8c:50:bd:9a:da:47:5d: 09:7b:03:36:19:c0:b8:97:65:38:9a:65:8d:b3:11:8f:93:e3: 02:42:eb:f1:79:19:83:20:b4:69:0e:a0:3e:c7:77:58:24:b6: f3:4d:ef:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9OpzdvYS+DKiLv/P1VbsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NzY2NGJhNTc3MzYxNGEzYzQ0ZjkwYzEyYWU3MjU1NDhh NzVjZDQwHhcNMjYwMTI1MDcwMTEyWhcNMjYwMTI2MDcwMTEyWjAzMTEwLwYDVQQD EygzMTZiYmU4ZjMzYTI1MGJlNTkxZDMwNDRjYzg5ODY1Y2Y3YjdjOTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiShGdnbot9m8qUSFkGSIjVH9v1En CsBO4u+Bx9NPjEYwM4u3sFw/247wZLJHOnTmbxAxvkT467IQXo+9I2Zo5TSN6Fls iiPMg6NxyprYn355SDSmYMbnC3uO7oSDF7RkYFMnQHNlWk6S2HHDcYw/KQ1hpTju W8tCaTUaZC8fqAgMsRACvOINQbZWE+q6FExF4fAUVxEBXK0Ght1Xa+h96/iHzLIr CdOI8/HbQHL+uB3vLQzbanjNrc4+1gGitiWoehAzgkOIWH2czX6HO0/Pf75UTAkZ +sOBfrCfDy8/KR0mDOd809GoSlSvHB6dqznRtnXDJo80ivVKR+exlKvnOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFrvo8zolC+WR0wRMyJhlz3t8kjMB8GA1UdIwQY MBaAFGR2ZLpXc2FKPET5DBKuclVIp1zUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzkt ZTI5MWE1MmE5ZDE1LzEvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzktZTI5MWE1MmE5ZDE1 LzEvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3l7+NPd Z/MQaf97vfj0tTNZ5uxUTG1609JGRl7TrpxMlevN2mCBsALs4w3/QWwS0NfDvru4 Pn7gdWGNhS2wFyrFWJJRLEHfIvfqyJSsb/g8TT0+iyJx9PHMV09jETbdmm3FrYfJ /0aWODuaAMtfvzp6aKFAvQgEQhc70IV8gtyuvdHo6hiEVWGLW2mMXdhxuPtpkbXd xGIbCixStceMgZbOOIlTd/WayqjxPTgIYFKRODN5V5zqrR5j8JePYFzCza7y2nqA 2/g+ekiXPa6cy1SMUL2a2kddCXsDNhnAuJdlOJpljbMRj5PjAkLr8XkZgyC0aQ6g Psd3WCS2803vPA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:44:40 2026 by rpki-client