This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft File: zisQ2JtVN5E1AxJ-uHImr7idGy0.mft (raw, json) Hash identifier: zpth7h3cM42lz4oXburgP8Wbl65CgEqxLqSxs/Qi4P8= Subject key identifier: C4:29:CF:F9:8B:76:E6:E8:DB:E8:F3:0B:43:5C:93:26:15:84:23:87 Authority key identifier: CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D Certificate issuer: /CN=ce2b10d89b5537913503127eb87226afb89d1b2d Certificate serial: 019BF687D3E28DF932E59CCEEA2CA89A6F99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 19:00:55 +0000 Manifest this update: Sun 25 Jan 2026 19:00:55 +0000 Manifest next update: Mon 26 Jan 2026 19:00:55 +0000 Files and hashes: 1: vZ8MxOiXegtHuoU9azc_92OWfV4.roa (hash: iwh0Pl3Hne1gOnuU6enDkJTWZ+3nLBGQ17Ta8mwUfwg=) 2: zisQ2JtVN5E1AxJ-uHImr7idGy0.crl (hash: qOAg1KmAMyveDUIBK9yXaU4AD1cXfYiaMjt7BoxijtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:d3:e2:8d:f9:32:e5:9c:ce:ea:2c:a8:9a:6f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce2b10d89b5537913503127eb87226afb89d1b2d Validity Not Before: Jan 25 19:00:55 2026 GMT Not After : Jan 26 19:00:55 2026 GMT Subject: CN=c429cff98b76e6e8dbe8f30b435c932615842387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b8:0f:4b:b5:27:45:da:23:3c:a9:66:72:62: f2:6b:e7:2c:a6:12:5b:d2:43:8b:38:f4:c1:8d:6d: e8:61:7a:09:4e:98:3e:f5:02:6d:4f:02:ff:4a:1c: a7:e4:98:fb:85:28:a7:9c:c0:76:4d:09:12:8b:cb: 35:54:39:67:a1:88:a9:7b:da:92:5d:7f:42:78:8c: 52:82:7b:29:87:db:64:fe:a5:ea:5a:ef:be:89:be: 8d:6f:d8:9c:ac:7d:4b:2f:b1:bb:83:61:c3:62:12: 95:cc:66:80:7c:ef:54:0f:0d:dd:9f:77:b5:0c:5e: d4:1f:a4:99:b4:c0:67:6a:76:82:ba:de:63:06:d3: fe:c9:9c:3f:fb:b5:7c:2a:9b:53:85:c1:3f:ce:59: 81:61:ec:67:17:41:f0:8d:18:38:d7:b6:c6:1f:84: 9e:f5:d2:b5:c3:c0:23:99:e3:72:91:33:85:20:c5: 47:7f:cb:9a:76:ca:0c:e0:e9:f9:5c:2a:2b:a8:30: 08:e6:76:69:2a:e8:43:05:25:61:22:b6:a8:a5:0c: 69:ab:07:07:8f:c2:85:8e:96:ef:86:64:71:2c:15: fe:b1:5c:30:ee:d1:c1:96:a9:b9:1e:c3:e7:f1:6d: 8e:47:76:78:c0:8a:81:fb:dc:ea:b8:2e:fc:a3:c0: aa:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:29:CF:F9:8B:76:E6:E8:DB:E8:F3:0B:43:5C:93:26:15:84:23:87 X509v3 Authority Key Identifier: keyid:CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:3c:5f:38:13:bd:b9:3e:7b:71:91:86:25:6a:8c:a7:15:e1: 96:89:7a:10:97:f0:a3:e5:b3:47:43:fb:86:dd:c2:7b:5e:20: 5b:91:9b:26:4c:aa:37:cf:5c:04:40:cf:e3:ab:e8:33:2f:97: 48:5b:d1:a6:d1:b5:46:93:a0:87:25:47:26:d2:30:7a:cd:e0: 45:1e:24:10:be:8b:e5:c1:7a:ea:34:26:2a:0b:c2:3a:11:3b: 30:da:ff:05:c0:b9:de:c9:f6:0d:d5:51:cc:b1:95:f1:2d:84: 54:39:30:f5:65:33:99:42:03:ed:68:42:b6:17:17:3e:5c:c3: 98:b4:63:20:5c:cf:99:54:57:1c:dc:6f:79:48:68:b0:e2:18: a9:83:81:a7:98:f6:4f:24:f9:af:e8:79:73:9b:75:34:1f:eb: 04:11:90:d3:3d:a6:ad:98:be:9c:5b:62:f4:a0:c4:5b:32:41: be:f0:3e:1e:7c:a5:48:7e:31:f1:56:9c:15:08:89:69:10:83: 22:40:14:26:8a:08:a7:63:cf:62:8b:9b:c6:0a:0a:56:d7:45: f0:3e:d8:06:9c:6e:f9:34:b9:26:99:11:0b:ef:27:b2:82:3d: 64:b2:2b:a2:ec:d8:d1:fd:32:a6:06:4a:ee:2c:b5:dd:14:9b: ea:57:07:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h9Pijfky5ZzO6iyomm+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMmIxMGQ4OWI1NTM3OTEzNTAzMTI3ZWI4NzIyNmFmYjg5 ZDFiMmQwHhcNMjYwMTI1MTkwMDU1WhcNMjYwMTI2MTkwMDU1WjAzMTEwLwYDVQQD EyhjNDI5Y2ZmOThiNzZlNmU4ZGJlOGYzMGI0MzVjOTMyNjE1ODQyMzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bgPS7UnRdojPKlmcmLya+csphJb 0kOLOPTBjW3oYXoJTpg+9QJtTwL/Shyn5Jj7hSinnMB2TQkSi8s1VDlnoYipe9qS XX9CeIxSgnsph9tk/qXqWu++ib6Nb9icrH1LL7G7g2HDYhKVzGaAfO9UDw3dn3e1 DF7UH6SZtMBnanaCut5jBtP+yZw/+7V8KptThcE/zlmBYexnF0HwjRg417bGH4Se 9dK1w8AjmeNykTOFIMVHf8uadsoM4On5XCorqDAI5nZpKuhDBSVhIraopQxpqwcH j8KFjpbvhmRxLBX+sVww7tHBlqm5HsPn8W2OR3Z4wIqB+9zquC78o8CqBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQpz/mLdubo2+jzC0NckyYVhCOHMB8GA1UdIwQY MBaAFM4rENibVTeRNQMSfrhyJq+4nRstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemlzUTJKdFZONUUxQXhKLXVISW1yN2lkR3kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kM2IyNjMtYjBmMS00YTZiLTkxMmUt MzczZGRhNDNmNzkyLzEvemlzUTJKdFZONUUxQXhKLXVISW1yN2lkR3kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9kM2IyNjMtYjBmMS00YTZiLTkxMmUtMzczZGRhNDNmNzky LzEvemlzUTJKdFZONUUxQXhKLXVISW1yN2lkR3kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzxfOBO9 uT57cZGGJWqMpxXhlol6EJfwo+WzR0P7ht3Ce14gW5GbJkyqN89cBEDP46voMy+X SFvRptG1RpOghyVHJtIwes3gRR4kEL6L5cF66jQmKgvCOhE7MNr/BcC53sn2DdVR zLGV8S2EVDkw9WUzmUID7WhCthcXPlzDmLRjIFzPmVRXHNxveUhosOIYqYOBp5j2 TyT5r+h5c5t1NB/rBBGQ0z2mrZi+nFti9KDEWzJBvvA+HnylSH4x8VacFQiJaRCD IkAUJooIp2PPYoubxgoKVtdF8D7YBpxu+TS5JpkRC+8nsoI9ZLIrouzY0f0ypgZK 7iy13RSb6lcH2g== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:48 2026 by rpki-client