This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json) Hash identifier: hXMngWnNSDTWd7/2/zObWinkICpn/HbRyze2+EpxQPo= Subject key identifier: D3:75:50:FB:BD:85:9B:41:C8:4B:5A:AF:D2:11:54:28:04:E6:47:49 Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0 Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0 Certificate serial: 019BF5AC93589288FCAD3E1A11DA88BAD53D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft Manifest number: 060A Signing time: Sun 25 Jan 2026 15:01:26 +0000 Manifest this update: Sun 25 Jan 2026 15:01:26 +0000 Manifest next update: Mon 26 Jan 2026 15:01:26 +0000 Files and hashes: 1: DQ01J-Cq4hUemzI_hsxFb8NofP8.asa (hash: fcPlXypjGU8YaSASqBijwf7gz4frCYBc1/uFvytFDWw=) 2: sQDcvzwfINZL1YKhOjuNrTumwws.roa (hash: 1SADRpnWZPKf4KWSJGPvG1rU1NGMXTSVZgSGEdq16/Q=) 3: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: CUyJY3qyE2ZK52Mh3ZVWNj4ZED6TswxmGS/+2/YBfkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:93:58:92:88:fc:ad:3e:1a:11:da:88:ba:d5:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0 Validity Not Before: Jan 25 15:01:26 2026 GMT Not After : Jan 26 15:01:26 2026 GMT Subject: CN=d37550fbbd859b41c84b5aafd211542804e64749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dc:85:81:9e:9b:a4:a2:83:4d:3a:de:b2:21: ab:15:84:f9:0a:73:54:bd:d3:3c:cf:3f:45:30:4d: 81:22:16:67:fa:c7:58:a6:db:1a:7b:10:8b:45:75: 61:38:44:8e:e8:e1:50:b2:c7:34:e6:f9:ae:43:53: ce:ee:ba:4e:50:a2:35:80:e0:66:0d:e1:18:8d:16: 74:76:f8:e8:b7:30:a5:8f:32:6f:89:bd:2c:bd:bd: 18:8a:1e:f7:3f:fa:87:ad:93:20:ed:cf:ae:d5:b1: aa:99:a5:1c:98:93:3e:59:f5:ef:0f:79:a0:58:1a: c5:3d:7a:f2:73:a5:02:66:12:7f:91:dd:66:89:29: 2d:6c:9a:30:dc:23:32:48:09:45:10:30:11:79:26: f0:db:14:88:13:06:7a:c3:71:2b:41:8e:37:bd:b9: c9:c4:61:5b:27:86:b9:be:3a:7f:78:e0:29:e8:c8: 2e:34:67:62:04:f1:e6:b5:ad:43:09:cf:d8:08:41: 24:ba:07:50:d7:7b:da:ed:79:a9:6b:b5:e8:e5:86: b6:ae:c2:ef:ae:80:82:c7:2b:b9:ad:38:0b:eb:b8: 64:88:02:41:b9:eb:66:cc:a6:c6:e7:3a:e6:d8:32: 96:39:e9:42:1d:1a:a8:b1:12:e2:cd:f8:bc:c2:86: 96:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:75:50:FB:BD:85:9B:41:C8:4B:5A:AF:D2:11:54:28:04:E6:47:49 X509v3 Authority Key Identifier: keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f6:4f:0c:95:5e:2c:df:a0:d9:dd:ef:f8:d4:30:03:16:69: d5:2f:c4:de:10:0c:db:a9:32:43:4f:72:1f:7a:1c:c7:18:b3: 26:a5:f3:0b:32:cb:23:ac:07:c6:1e:f8:b2:0b:8c:80:9f:36: f2:4e:b5:71:6f:e8:df:84:1f:dc:d1:db:2d:0a:2e:85:81:37: 60:76:af:7d:c4:db:ca:ee:16:d2:c7:1b:c2:85:5b:48:3c:28: 47:e1:5b:cd:e8:ef:8c:09:10:b5:ca:6d:d9:01:59:24:e9:6a: 9b:27:82:8d:af:b6:fe:3c:fb:71:a0:b4:df:e9:4c:e0:3c:63: f4:55:60:f7:6d:48:61:d0:09:78:4b:20:17:e3:a7:9e:f6:d1: b6:db:a3:4b:4c:76:23:7b:b4:7b:4f:29:3d:3e:a4:3a:25:02: f8:c2:0c:dd:25:c5:42:2c:ad:39:05:4d:e0:78:4c:68:09:9d: 8a:d4:3b:14:07:0d:7e:f8:19:d1:e7:cb:f0:29:b4:c7:4e:46: 69:36:ba:c5:46:e1:ef:da:ef:89:a6:12:11:17:bb:92:8b:46: 2b:57:17:6d:f1:d4:c8:e2:4e:00:a6:00:ab:4c:bd:93:fe:17: 0f:79:30:7d:33:32:2a:15:78:9b:4b:81:96:a4:94:05:d1:8b: d1:ce:c7:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rJNYkoj8rT4aEdqIutU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMTRmY2U5YjE5YTVlZWE1MzJlMTdkODNkYThjMWRjZDFk ZTE4YzAwHhcNMjYwMTI1MTUwMTI2WhcNMjYwMTI2MTUwMTI2WjAzMTEwLwYDVQQD EyhkMzc1NTBmYmJkODU5YjQxYzg0YjVhYWZkMjExNTQyODA0ZTY0NzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdyFgZ6bpKKDTTresiGrFYT5CnNU vdM8zz9FME2BIhZn+sdYptsaexCLRXVhOESO6OFQssc05vmuQ1PO7rpOUKI1gOBm DeEYjRZ0dvjotzCljzJvib0svb0Yih73P/qHrZMg7c+u1bGqmaUcmJM+WfXvD3mg WBrFPXryc6UCZhJ/kd1miSktbJow3CMySAlFEDAReSbw2xSIEwZ6w3ErQY43vbnJ xGFbJ4a5vjp/eOAp6MguNGdiBPHmta1DCc/YCEEkugdQ13va7Xmpa7Xo5Ya2rsLv roCCxyu5rTgL67hkiAJBuetmzKbG5zrm2DKWOelCHRqosRLizfi8woaWsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNN1UPu9hZtByEtar9IRVCgE5kdJMB8GA1UdIwQY MBaAFM8U/Omxml7qUy4X2D2owdzR3hjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMt NTljMTA4N2U0ODU2LzEvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMtNTljMTA4N2U0ODU2 LzEvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/ZPDJVe LN+g2d3v+NQwAxZp1S/E3hAM26kyQ09yH3ocxxizJqXzCzLLI6wHxh74sguMgJ82 8k61cW/o34Qf3NHbLQouhYE3YHavfcTbyu4W0scbwoVbSDwoR+FbzejvjAkQtcpt 2QFZJOlqmyeCja+2/jz7caC03+lM4Dxj9FVg921IYdAJeEsgF+OnnvbRttujS0x2 I3u0e08pPT6kOiUC+MIM3SXFQiytOQVN4HhMaAmditQ7FAcNfvgZ0efL8Cm0x05G aTa6xUbh79rviaYSERe7kotGK1cXbfHUyOJOAKYAq0y9k/4XD3kwfTMyKhV4m0uB lqSUBdGL0c7HWw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:43 2026 by rpki-client