This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft File: zuTBXIcH3739qDvjppPDWUfxbVk.mft (raw, json) Hash identifier: +beO8saCueAszlHgpnQoNF0RA7Ynd/y3A393EBQCJHM= Subject key identifier: 50:99:5F:3B:07:8D:F6:9D:26:D0:D2:09:64:FA:29:3C:F2:AC:46:BB Authority key identifier: CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59 Certificate issuer: /CN=cee4c15c8707dfbdfda83be3a693c35947f16d59 Certificate serial: 019BF9F6F1811BE1DF112028B76A13B0B1BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft Manifest number: 13B2 Signing time: Mon 26 Jan 2026 11:01:08 +0000 Manifest this update: Mon 26 Jan 2026 11:01:08 +0000 Manifest next update: Tue 27 Jan 2026 11:01:08 +0000 Files and hashes: 1: 3XADLdEbS1FY6n6yUx5o7fgS4pU.roa (hash: sJxb+ZizUKA1xitVNheZoX8adqgMHbTrnaDCSefof/w=) 2: zuTBXIcH3739qDvjppPDWUfxbVk.crl (hash: r2kFawbT9tC2Xsg8cNOj2R9imWYzh8fCz1o7zGoBBf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:f1:81:1b:e1:df:11:20:28:b7:6a:13:b0:b1:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cee4c15c8707dfbdfda83be3a693c35947f16d59 Validity Not Before: Jan 26 11:01:08 2026 GMT Not After : Jan 27 11:01:08 2026 GMT Subject: CN=50995f3b078df69d26d0d20964fa293cf2ac46bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3b:d7:0e:1d:5e:fa:dd:ff:7b:d4:94:b2:b3: da:d0:ad:44:22:87:84:5c:48:5d:78:19:b5:31:31: e9:c4:92:e0:2f:c2:90:27:eb:5a:36:9e:cc:72:8d: 7f:d0:0d:e0:85:84:8f:ed:04:d0:68:34:e3:fb:85: da:c7:bb:01:8c:4f:c5:bb:1a:54:38:c7:3d:83:3f: cd:c9:ec:66:9a:b8:15:6c:c8:fd:e0:af:aa:b4:31: 13:ea:ea:f1:0c:b2:50:1b:36:99:1b:cf:53:63:f9: 65:cf:50:fb:7e:2b:61:ed:a3:21:cb:a5:83:ee:d9: 00:7f:bd:45:4d:7d:a4:19:da:13:33:af:a1:70:f8: 42:48:f6:94:6d:c8:d3:c4:56:61:9a:6f:01:53:40: 44:7d:37:a8:57:f4:e7:a6:04:26:63:83:12:3d:3d: c0:10:fe:0b:f3:3a:67:40:5c:66:71:56:32:2f:ef: 38:02:bb:74:66:a3:39:b6:28:c1:86:80:c2:07:c7: e8:33:2f:28:f7:89:6e:b8:ab:43:99:2a:65:65:15: 15:60:03:d0:67:3e:b6:4a:0a:8b:7d:81:1a:d5:dd: 8a:14:b5:24:2d:ce:3c:23:6f:ff:c6:c9:82:72:b8: 49:dd:57:32:9b:9b:38:f9:99:52:e9:1a:47:e8:5b: 28:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:99:5F:3B:07:8D:F6:9D:26:D0:D2:09:64:FA:29:3C:F2:AC:46:BB X509v3 Authority Key Identifier: keyid:CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:4d:fc:46:c5:cb:bb:1b:55:8f:ce:b1:34:0f:00:8c:c6:ec: 2f:93:25:65:22:00:e7:07:94:89:2d:38:4d:5b:cd:77:b9:02: d9:e5:93:53:38:79:4b:e5:c5:e8:e4:17:0f:4a:7c:b5:b4:16: f7:d7:a9:1c:8f:c6:de:f2:e8:3a:6a:e9:61:ab:c4:45:5f:8d: f3:81:29:55:1b:f5:74:df:bb:24:70:2f:42:ef:e4:07:6c:6a: 9e:91:97:21:99:87:1e:9e:7e:a4:1a:97:a2:79:52:cf:60:d6: 5a:3f:62:87:44:01:b0:b4:b4:df:da:16:92:fe:0b:84:35:43: 86:b2:c3:41:a2:2a:e1:b3:de:7d:3c:d7:4e:0d:4a:06:62:b7: 25:7c:19:8b:5a:ed:e0:0d:30:ad:f1:2d:1e:61:80:d7:a7:0b: 6d:64:f9:4b:e9:db:03:cf:da:f4:5c:0f:a0:ca:2f:4a:0b:b0: 46:ac:67:6c:e1:8f:fc:fc:64:e7:80:14:c0:39:ce:5f:45:4a: ce:2d:ba:8c:9c:3a:a9:c0:51:1b:2b:1c:72:e9:93:3c:02:d9: 70:fc:d9:ab:51:d8:68:56:2e:c7:67:a1:cc:54:7e:b9:b3:70: 9a:69:27:56:d4:bf:16:62:ab:c8:58:de:e6:c0:2d:da:6b:32: 52:09:d2:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59vGBG+HfESAot2oTsLG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZTRjMTVjODcwN2RmYmRmZGE4M2JlM2E2OTNjMzU5NDdm MTZkNTkwHhcNMjYwMTI2MTEwMTA4WhcNMjYwMTI3MTEwMTA4WjAzMTEwLwYDVQQD Eyg1MDk5NWYzYjA3OGRmNjlkMjZkMGQyMDk2NGZhMjkzY2YyYWM0NmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTvXDh1e+t3/e9SUsrPa0K1EIoeE XEhdeBm1MTHpxJLgL8KQJ+taNp7Mco1/0A3ghYSP7QTQaDTj+4Xax7sBjE/FuxpU OMc9gz/NyexmmrgVbMj94K+qtDET6urxDLJQGzaZG89TY/llz1D7fith7aMhy6WD 7tkAf71FTX2kGdoTM6+hcPhCSPaUbcjTxFZhmm8BU0BEfTeoV/TnpgQmY4MSPT3A EP4L8zpnQFxmcVYyL+84Art0ZqM5tijBhoDCB8foMy8o94luuKtDmSplZRUVYAPQ Zz62SgqLfYEa1d2KFLUkLc48I2//xsmCcrhJ3Vcym5s4+ZlS6RpH6FsoPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCZXzsHjfadJtDSCWT6KTzyrEa7MB8GA1UdIwQY MBaAFM7kwVyHB9+9/ag746aTw1lH8W1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenVUQlhJY0gzNzM5cUR2anBwUERXVWZ4YlZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yOGM5MGMtOWE2My00MGI0LTkyY2Yt MmQ3Yjg1NzBkZDAzLzEvenVUQlhJY0gzNzM5cUR2anBwUERXVWZ4YlZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8yOGM5MGMtOWE2My00MGI0LTkyY2YtMmQ3Yjg1NzBkZDAz LzEvenVUQlhJY0gzNzM5cUR2anBwUERXVWZ4YlZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM038RsXL uxtVj86xNA8AjMbsL5MlZSIA5weUiS04TVvNd7kC2eWTUzh5S+XF6OQXD0p8tbQW 99epHI/G3vLoOmrpYavERV+N84EpVRv1dN+7JHAvQu/kB2xqnpGXIZmHHp5+pBqX onlSz2DWWj9ih0QBsLS039oWkv4LhDVDhrLDQaIq4bPefTzXTg1KBmK3JXwZi1rt 4A0wrfEtHmGA16cLbWT5S+nbA8/a9FwPoMovSguwRqxnbOGP/Pxk54AUwDnOX0VK zi26jJw6qcBRGysccumTPALZcPzZq1HYaFYux2ehzFR+ubNwmmknVtS/FmKryFje 5sAt2msyUgnSbg== -----END CERTIFICATE-----Generated at Mon Jan 26 14:26:03 2026 by rpki-client