This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft File: zzep8CHigQ2Eshji9pmyb1NXXmE.mft (raw, json) Hash identifier: +q6ofbm31OBCZui15aB1uvx91ioyPYrLOyKyvzWe6Ns= Subject key identifier: F0:18:D2:99:D5:9F:36:49:62:AC:04:92:29:B0:FF:67:CF:0E:10:51 Authority key identifier: CF:37:A9:F0:21:E2:81:0D:84:B2:18:E2:F6:99:B2:6F:53:57:5E:61 Certificate issuer: /CN=cf37a9f021e2810d84b218e2f699b26f53575e61 Certificate serial: 019B7CA6B5DF9371BCC04E1D2BE387E1F399 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft Manifest number: 02A5 Signing time: Fri 02 Jan 2026 03:00:58 +0000 Manifest this update: Fri 02 Jan 2026 03:00:58 +0000 Manifest next update: Sat 03 Jan 2026 03:00:58 +0000 Files and hashes: 1: zzep8CHigQ2Eshji9pmyb1NXXmE.crl (hash: ir/lm8Nr31g1FrK9KJL3E2lMlpHgbUrjk4jPxfa0G7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.crl rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:a6:b5:df:93:71:bc:c0:4e:1d:2b:e3:87:e1:f3:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf37a9f021e2810d84b218e2f699b26f53575e61 Validity Not Before: Jan 2 03:00:58 2026 GMT Not After : Jan 3 03:00:58 2026 GMT Subject: CN=f018d299d59f364962ac049229b0ff67cf0e1051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c7:79:48:b7:f5:ba:8a:db:00:10:22:7e:e8: 19:97:0a:06:0c:81:b6:f8:47:fe:ca:ee:52:52:0f: a2:ff:12:1a:ec:6d:9f:f1:2d:1b:92:9b:17:00:b4: 88:a9:aa:6e:b9:f2:43:b3:18:22:08:60:96:73:0c: 7a:11:65:f5:20:bf:d8:5d:fd:f0:3f:12:20:cf:a9: 8a:38:73:6b:1b:ef:5f:74:7c:e6:3c:cc:f2:3d:67: 96:70:72:18:4c:41:7d:d7:d4:97:8a:1d:f0:f1:30: a6:de:0d:0c:47:16:33:b4:62:95:17:bc:b4:b2:e5: ac:59:21:92:00:4e:d6:96:07:57:5c:09:2b:f1:32: 32:39:a4:9e:05:fe:59:3f:95:77:dc:1a:03:a0:4b: aa:68:29:dc:74:32:66:26:b0:41:05:80:7a:a4:5d: 06:2f:fd:e7:c3:61:10:9c:fe:33:3a:48:76:15:e2: 84:f0:7d:35:53:24:8e:58:81:41:74:3d:c3:3d:ce: 86:83:0e:97:e0:b6:2a:d5:08:73:e0:0e:89:f3:26: 91:2e:fd:56:cd:98:01:99:fa:e2:0e:bd:5a:17:ca: 25:68:58:b4:8b:ca:4b:92:fe:37:d7:18:9c:b6:19: 0b:a0:9a:80:b4:06:3d:5d:89:12:7d:17:2d:48:98: 9c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:18:D2:99:D5:9F:36:49:62:AC:04:92:29:B0:FF:67:CF:0E:10:51 X509v3 Authority Key Identifier: keyid:CF:37:A9:F0:21:E2:81:0D:84:B2:18:E2:F6:99:B2:6F:53:57:5E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:0d:9e:30:e3:25:1c:ba:ab:51:29:f7:1a:1f:89:53:ea:6a: d0:38:2e:db:9f:0b:27:05:35:b0:8f:7b:cb:29:ac:b4:9a:0e: f0:4c:f5:f8:7f:2f:be:3a:a8:dc:c8:51:4a:e2:4a:fc:da:03: 6a:a0:2d:cd:b5:3e:eb:e2:57:10:ee:c9:a7:30:6b:d2:47:a0: 1c:f7:36:9e:ec:31:b8:38:25:db:98:82:4a:9d:9e:b0:a9:3a: 94:6d:44:a8:02:e3:4c:58:b3:f6:f4:8e:31:4a:75:06:bf:e7: e9:ba:bc:83:e4:01:b1:49:fa:56:51:4a:04:09:e8:24:da:6b: 3a:e9:68:e4:bd:f2:ce:8a:08:12:79:c6:e2:f6:68:83:fe:2f: 20:ca:7d:61:ac:a4:5c:5c:2f:3f:3c:85:2b:03:b6:99:6c:47: 14:f4:f4:7a:24:41:a4:67:d0:6a:c4:af:13:e5:64:08:83:7c: 15:b2:86:1e:62:44:0e:4b:bc:f5:7e:cb:0b:c8:d1:28:3e:8e: 43:34:86:a0:a8:9b:26:50:6e:88:d6:51:55:d7:44:11:d5:9d: 41:80:ca:23:20:db:1c:0f:35:0a:76:9d:21:ac:bb:ca:32:a3: 2d:81:8c:9c:d9:a4:cb:67:bc:c6:30:12:91:93:d3:47:c4:f3: 74:18:06:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8prXfk3G8wE4dK+OH4fOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMzdhOWYwMjFlMjgxMGQ4NGIyMThlMmY2OTliMjZmNTM1 NzVlNjEwHhcNMjYwMTAyMDMwMDU4WhcNMjYwMTAzMDMwMDU4WjAzMTEwLwYDVQQD EyhmMDE4ZDI5OWQ1OWYzNjQ5NjJhYzA0OTIyOWIwZmY2N2NmMGUxMDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8d5SLf1uorbABAifugZlwoGDIG2 +Ef+yu5SUg+i/xIa7G2f8S0bkpsXALSIqapuufJDsxgiCGCWcwx6EWX1IL/YXf3w PxIgz6mKOHNrG+9fdHzmPMzyPWeWcHIYTEF919SXih3w8TCm3g0MRxYztGKVF7y0 suWsWSGSAE7WlgdXXAkr8TIyOaSeBf5ZP5V33BoDoEuqaCncdDJmJrBBBYB6pF0G L/3nw2EQnP4zOkh2FeKE8H01UySOWIFBdD3DPc6Ggw6X4LYq1Qhz4A6J8yaRLv1W zZgBmfriDr1aF8olaFi0i8pLkv431xicthkLoJqAtAY9XYkSfRctSJicqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAY0pnVnzZJYqwEkimw/2fPDhBRMB8GA1UdIwQY MBaAFM83qfAh4oENhLIY4vaZsm9TV15hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenplcDhDSGlnUTJFc2hqaTlwbXliMU5YWG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8zZTUwNTAtZDU5Yi00N2YwLTgwYWQt OGUzOTVlZjI0NmY2LzEvenplcDhDSGlnUTJFc2hqaTlwbXliMU5YWG1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8zZTUwNTAtZDU5Yi00N2YwLTgwYWQtOGUzOTVlZjI0NmY2 LzEvenplcDhDSGlnUTJFc2hqaTlwbXliMU5YWG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALw2eMOMl HLqrUSn3Gh+JU+pq0Dgu258LJwU1sI97yymstJoO8Ez1+H8vvjqo3MhRSuJK/NoD aqAtzbU+6+JXEO7JpzBr0kegHPc2nuwxuDgl25iCSp2esKk6lG1EqALjTFiz9vSO MUp1Br/n6bq8g+QBsUn6VlFKBAnoJNprOulo5L3yzooIEnnG4vZog/4vIMp9Yayk XFwvPzyFKwO2mWxHFPT0eiRBpGfQasSvE+VkCIN8FbKGHmJEDku89X7LC8jRKD6O QzSGoKibJlBuiNZRVddEEdWdQYDKIyDbHA81CnadIay7yjKjLYGMnNmky2e8xjAS kZPTR8TzdBgGrg== -----END CERTIFICATE-----Generated at Fri Jan 2 08:19:30 2026 by rpki-client