This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json) Hash identifier: hHCE+4s1WpTniDNt4zj2rEK3gJ7MErkuj6xfcpIYL+M= Subject key identifier: 4D:B1:7A:EB:53:D0:11:E1:A4:99:5D:1A:01:7E:84:37:94:B9:96:A2 Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc Certificate serial: 019B76DBF0C7BAF20FBCC8C3F928C30FE374 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft Manifest number: 17A9 Signing time: Thu 01 Jan 2026 00:01:24 +0000 Manifest this update: Thu 01 Jan 2026 00:01:24 +0000 Manifest next update: Fri 02 Jan 2026 00:01:24 +0000 Files and hashes: 1: L92Oz155yhI01cgTqDPydWK98ns.roa (hash: e3pz5+PnlP9tg7wzv2dM4Vb+by/3YBKQxYyFlmqUG3k=) 2: rFLbnP63niNMPmNTHqvODCWAmf4.roa (hash: QWuHWUDfpexkyRSRrY8RzHPTAmEW2/XktJBH/kF+mCg=) 3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: ePZwgECPY8uTtn+7pdPaEix5cLCFy9w/pA2AYU2DIZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:db:f0:c7:ba:f2:0f:bc:c8:c3:f9:28:c3:0f:e3:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc Validity Not Before: Jan 1 00:01:24 2026 GMT Not After : Jan 2 00:01:24 2026 GMT Subject: CN=4db17aeb53d011e1a4995d1a017e843794b996a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:68:61:08:01:fd:e8:2b:06:48:1a:19:06:6e: 98:16:04:e4:b0:0a:bf:e1:29:e9:e6:29:f5:0d:62: ef:c2:80:04:73:33:6c:fe:fd:e9:d9:a7:55:34:b8: d9:3f:03:2c:be:e9:19:5c:54:19:d2:ca:d8:50:a7: 7c:a7:65:75:b1:77:7e:11:b5:4b:98:0d:02:fc:95: fd:ea:03:23:9f:ee:4a:bd:36:a4:ff:95:64:08:32: 60:58:08:70:63:88:cd:99:92:f4:16:df:84:62:95: 78:12:13:31:5d:93:ad:fe:25:94:29:f4:87:69:b7: 79:a7:6a:ee:c7:68:9c:d3:ef:a7:db:68:99:5d:64: 28:d2:0f:37:e3:52:64:03:24:a7:52:23:66:fa:87: 6a:09:21:b1:1e:42:45:e7:ba:b1:3e:1f:f0:b8:27: 43:c1:7c:69:d1:7c:4e:1b:96:25:59:4b:a0:7b:2a: 1f:d6:b5:59:a1:ed:16:73:41:be:50:f0:44:7d:28: f7:2f:6b:16:7e:6d:81:7d:17:21:37:b4:bc:a9:b7: 13:d8:ad:d9:5b:f7:4b:3b:c1:8b:ae:78:8f:14:89: fe:ff:18:89:78:46:3e:30:6b:4b:ce:69:16:0d:16: 1c:f3:b1:37:66:c3:ea:73:1b:60:96:2b:01:39:23: 2d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B1:7A:EB:53:D0:11:E1:A4:99:5D:1A:01:7E:84:37:94:B9:96:A2 X509v3 Authority Key Identifier: keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:00:eb:dc:73:63:a1:62:c2:7a:ec:94:02:3a:6b:db:47:9e: 8f:0d:db:ec:a8:ac:3e:0b:7e:52:4e:e0:3b:40:f5:e4:8e:bf: b8:c2:db:b9:bf:09:cd:e5:03:0d:d9:3f:af:fa:b1:61:6a:37: 34:08:c3:98:8b:a9:7b:9c:79:b0:40:3b:f2:f8:b6:ed:2e:89: 66:46:66:6b:28:ab:e8:20:d9:17:3c:38:6a:4c:af:5d:8e:fa: 9a:4a:e0:02:e1:ce:01:5f:60:24:51:df:57:48:b1:5d:77:b4: 88:7e:f4:17:ee:49:c4:9b:a8:67:24:93:3f:18:8e:80:9f:fc: 74:70:17:c0:48:2c:3a:f4:d3:71:15:45:99:e6:ac:e9:5f:55: 6b:6a:a1:dd:2f:73:8d:3d:de:7e:36:64:4b:60:d8:06:b4:75: 6a:b0:a0:f1:ed:10:f3:7f:c2:cd:26:91:8e:27:a3:f3:8d:6a: d1:cc:25:11:a8:05:03:3f:f9:ef:6e:b6:22:ac:be:1c:69:31: d1:8e:8b:df:e4:7a:a0:a2:91:76:ce:50:e7:b2:29:68:e9:35: 8a:fe:e3:f9:d4:08:a2:b3:aa:92:0a:87:39:82:92:52:27:4b: e9:33:3a:db:fb:7a:72:e2:6b:95:d2:32:8d:f7:fe:67:4b:4f: 38:77:8f:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt22/DHuvIPvMjD+SjDD+N0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNzJlNjMzZGY1NjM1YTlmOThkMmY2OGE2ZDJhZGNiNDQx NTVjZGMwHhcNMjYwMTAxMDAwMTI0WhcNMjYwMTAyMDAwMTI0WjAzMTEwLwYDVQQD Eyg0ZGIxN2FlYjUzZDAxMWUxYTQ5OTVkMWEwMTdlODQzNzk0Yjk5NmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGhhCAH96CsGSBoZBm6YFgTksAq/ 4Snp5in1DWLvwoAEczNs/v3p2adVNLjZPwMsvukZXFQZ0srYUKd8p2V1sXd+EbVL mA0C/JX96gMjn+5KvTak/5VkCDJgWAhwY4jNmZL0Ft+EYpV4EhMxXZOt/iWUKfSH abd5p2rux2ic0++n22iZXWQo0g8341JkAySnUiNm+odqCSGxHkJF57qxPh/wuCdD wXxp0XxOG5YlWUugeyof1rVZoe0Wc0G+UPBEfSj3L2sWfm2BfRchN7S8qbcT2K3Z W/dLO8GLrniPFIn+/xiJeEY+MGtLzmkWDRYc87E3ZsPqcxtglisBOSMtgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2xeutT0BHhpJldGgF+hDeUuZaiMB8GA1UdIwQY MBaAFMxy5jPfVjWp+Y0vaKbSrctEFVzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQt ZDAxMmNhOWVjMTk3LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQtZDAxMmNhOWVjMTk3 LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALADr3HNj oWLCeuyUAjpr20eejw3b7KisPgt+Uk7gO0D15I6/uMLbub8JzeUDDdk/r/qxYWo3 NAjDmIupe5x5sEA78vi27S6JZkZmayir6CDZFzw4akyvXY76mkrgAuHOAV9gJFHf V0ixXXe0iH70F+5JxJuoZySTPxiOgJ/8dHAXwEgsOvTTcRVFmeas6V9Va2qh3S9z jT3efjZkS2DYBrR1arCg8e0Q83/CzSaRjiej841q0cwlEagFAz/57262Iqy+HGkx 0Y6L3+R6oKKRds5Q57IpaOk1iv7j+dQIorOqkgqHOYKSUidL6TM62/t6cuJrldIy jff+Z0tPOHeP8w== -----END CERTIFICATE-----Generated at Thu Jan 1 03:53:19 2026 by rpki-client