This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft File: 0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json) Hash identifier: MeLARPpldx7vrZQgB0ma/jCUZvniaZGAerUQpFvER6o= Subject key identifier: C2:A7:52:FC:7C:7C:F3:A9:F1:B9:D4:6D:B3:A7:7D:02:EC:4C:AF:A5 Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34 Certificate issuer: /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434 Certificate serial: 019BF7D1B532F0B0417571B251B5039CCE67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft Manifest number: 132C Signing time: Mon 26 Jan 2026 01:01:14 +0000 Manifest this update: Mon 26 Jan 2026 01:01:14 +0000 Manifest next update: Tue 27 Jan 2026 01:01:14 +0000 Files and hashes: 1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: 2/7tXaC5VSFKZ8qCQA90nzhhPBL/ra77csEftI8Rak0=) 2: TJgG5JgLQBCuHjTc6SCRX0Gwecs.roa (hash: sbP+Ctp1kLffFP2dFlRcWQm0kZSgtgHBUAs9I18M36w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:b5:32:f0:b0:41:75:71:b2:51:b5:03:9c:ce:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434 Validity Not Before: Jan 26 01:01:14 2026 GMT Not After : Jan 27 01:01:14 2026 GMT Subject: CN=c2a752fc7c7cf3a9f1b9d46db3a77d02ec4cafa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:93:54:4f:f6:47:7b:3e:12:5f:ad:25:b7:e4: aa:5f:7c:67:f9:d2:21:c4:8c:2e:2d:c2:49:23:e1: 94:e2:36:db:53:53:0a:94:6e:31:87:bb:4d:58:af: ff:94:18:bc:bc:c3:da:50:80:64:61:ca:c8:f9:2b: ad:f2:a9:c3:1f:55:b2:d2:29:25:3b:62:b7:78:85: 81:81:e1:c6:a9:dd:d4:ea:7d:e0:a2:7b:5b:55:af: 9f:32:cc:28:c8:f0:32:ec:ac:53:b6:22:0c:92:54: b9:6d:65:aa:87:18:1f:ca:c6:4a:34:75:5a:50:d9: 20:05:06:b5:fd:2b:ef:ff:51:94:b5:ff:1a:82:66: 51:9a:07:5c:7c:aa:b5:16:17:1d:42:16:a4:94:92: d1:fd:6d:dd:86:ff:a9:f3:8a:08:6f:37:78:b1:c4: 1c:86:71:a1:42:d8:74:f6:3f:bd:66:0c:9a:94:d4: d3:8d:a0:42:36:59:10:13:d1:31:a4:51:f5:7f:1c: 6b:a2:60:66:57:56:41:2e:ac:8c:99:fd:14:ef:e4: 37:75:0b:4d:5a:ab:33:d6:be:7b:03:4a:67:3f:97: cc:0d:9c:56:91:b3:51:7e:b3:75:ce:a8:97:a1:4b: 90:69:c4:16:98:87:f3:a7:00:5f:4e:b2:59:6e:ad: 8e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A7:52:FC:7C:7C:F3:A9:F1:B9:D4:6D:B3:A7:7D:02:EC:4C:AF:A5 X509v3 Authority Key Identifier: keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:d8:01:0d:35:27:e1:e2:bf:c8:97:42:44:c4:ae:fb:71:b8: da:29:d7:9e:2d:ad:0d:a6:da:1a:2d:48:c8:8f:52:ae:25:e9: a3:75:5c:55:bf:5e:f5:95:9e:bb:37:c3:bb:26:87:e4:7e:8c: 8a:8d:35:05:f1:52:3f:b0:c4:60:f4:c2:ae:96:3e:e5:15:04: 52:e0:16:57:16:23:3d:c5:4c:56:02:f5:fb:5a:9d:00:4d:12: b9:7d:e4:e1:4c:de:47:67:d8:75:44:35:b4:2f:3a:1f:1a:03: f0:57:b0:94:f3:b0:bf:92:33:c0:56:59:f4:83:bd:b5:5d:08: f1:18:48:1d:3f:0b:63:22:6b:42:a0:50:25:2c:a2:40:84:b4: 42:fa:57:a6:3e:f9:13:0b:6b:cf:fe:ed:42:9c:a6:1d:ea:cf: 24:ad:6c:63:ea:61:74:4c:62:f7:b8:f2:45:bc:66:e0:d7:8d: 3a:73:91:4d:ea:0f:4f:a2:76:a1:5f:5f:d3:6a:f3:57:27:fc: cf:a9:3c:b1:7e:5c:01:5d:7d:c7:93:43:c5:aa:f9:ba:ef:65: fb:84:cb:54:d6:cf:1f:46:8b:33:d9:20:ea:12:cb:d6:a9:37: f6:57:ea:e2:27:47:27:0d:99:96:ff:16:2a:f2:86:d4:6d:b0: a8:b1:69:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30bUy8LBBdXGyUbUDnM5nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOTMxN2QyNzIzOWRjN2IwZDU0MTMzYmUxYWE2NWM5ZGMw MWY0MzQwHhcNMjYwMTI2MDEwMTE0WhcNMjYwMTI3MDEwMTE0WjAzMTEwLwYDVQQD EyhjMmE3NTJmYzdjN2NmM2E5ZjFiOWQ0NmRiM2E3N2QwMmVjNGNhZmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspNUT/ZHez4SX60lt+SqX3xn+dIh xIwuLcJJI+GU4jbbU1MKlG4xh7tNWK//lBi8vMPaUIBkYcrI+Sut8qnDH1Wy0ikl O2K3eIWBgeHGqd3U6n3gontbVa+fMswoyPAy7KxTtiIMklS5bWWqhxgfysZKNHVa UNkgBQa1/Svv/1GUtf8agmZRmgdcfKq1FhcdQhaklJLR/W3dhv+p84oIbzd4scQc hnGhQth09j+9ZgyalNTTjaBCNlkQE9ExpFH1fxxromBmV1ZBLqyMmf0U7+Q3dQtN Wqsz1r57A0pnP5fMDZxWkbNRfrN1zqiXoUuQacQWmIfzpwBfTrJZbq2OvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKnUvx8fPOp8bnUbbOnfQLsTK+lMB8GA1UdIwQY MBaAFNGTF9JyOdx7DVQTO+GqZcncAfQ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYt ZTZkOTU4OGNlN2U3LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYtZTZkOTU4OGNlN2U3 LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9gBDTUn 4eK/yJdCRMSu+3G42inXni2tDabaGi1IyI9SriXpo3VcVb9e9ZWeuzfDuyaH5H6M io01BfFSP7DEYPTCrpY+5RUEUuAWVxYjPcVMVgL1+1qdAE0SuX3k4UzeR2fYdUQ1 tC86HxoD8FewlPOwv5IzwFZZ9IO9tV0I8RhIHT8LYyJrQqBQJSyiQIS0QvpXpj75 Ewtrz/7tQpymHerPJK1sY+phdExi97jyRbxm4NeNOnORTeoPT6J2oV9f02rzVyf8 z6k8sX5cAV19x5NDxar5uu9l+4TLVNbPH0aLM9kg6hLL1qk39lfq4idHJw2Zlv8W KvKG1G2wqLFpew== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:13 2026 by rpki-client