This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json) Hash identifier: ZtW7VONmCv9qnepHfVrFi+fg1ngquvAgz2UE6zMlCGA= Subject key identifier: 02:1A:7E:17:A1:30:3F:7F:33:1C:B0:D4:C9:0B:43:B6:95:3B:ED:68 Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05 Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305 Certificate serial: 019BAFEF6D7574220127F3048E71321C6513 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft Manifest number: 0BD8 Signing time: Mon 12 Jan 2026 02:01:02 +0000 Manifest this update: Mon 12 Jan 2026 02:01:02 +0000 Manifest next update: Tue 13 Jan 2026 02:01:02 +0000 Files and hashes: 1: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: 0B4+wiUHjBN93afCkfRR5yV+I1CVxY3Q9hFs8LNQ/8k=) 2: bb1B8Fy2_C2bqbD9N4RRbHoFAbA.roa (hash: l0MLPIfI2aVoXdO47UK4RJDxoIk9MxZKupnuOkrWUdk=) 3: dcTwMDgwodHIo-S4yL4e4K41UJY.roa (hash: eMv2nsim1YJjG+0E2GpZFtw7b5BwXygPOnj8sq0+Gcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:ef:6d:75:74:22:01:27:f3:04:8e:71:32:1c:65:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66501165645aa80dcba315885cf374acb6d21305 Validity Not Before: Jan 12 02:01:02 2026 GMT Not After : Jan 13 02:01:02 2026 GMT Subject: CN=021a7e17a1303f7f331cb0d4c90b43b6953bed68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:d7:b3:bf:0a:87:ee:82:a3:0a:8d:94:57: 40:8a:bc:60:71:08:34:f5:51:68:34:04:45:cd:dd: 29:3f:4c:48:57:e4:f8:20:ec:df:d2:93:62:68:5c: b3:49:f9:ed:26:26:50:fc:63:a8:90:1e:34:07:ff: c4:7a:b2:af:71:06:5f:ff:3b:34:c5:94:2c:b0:09: 7e:84:59:8d:29:0f:5d:2b:48:74:78:bb:0c:5c:ea: 57:39:b1:12:be:a7:5c:76:13:d1:8e:e7:fe:a4:8b: db:63:0d:0c:44:eb:db:3e:ef:d5:88:08:51:bd:4b: e1:ef:b3:5e:05:e2:6f:5c:5b:93:9d:30:f4:6c:96: 22:91:7c:33:08:0d:14:7d:56:83:a6:ee:e8:cf:8a: b0:8d:fa:1e:7d:aa:0e:b7:a7:75:01:45:cc:e6:c1: 62:03:9d:cd:92:22:58:99:cc:bb:b8:a8:a0:a8:de: 1d:ca:3a:47:fe:2c:8f:dc:a4:2e:3f:0b:d0:5d:34: 74:45:e1:33:29:40:97:0e:37:96:a2:3b:45:30:70: 30:8d:ed:93:65:c2:35:02:52:6a:d8:45:05:d1:25: 3c:e1:db:82:5c:50:22:d6:b9:fb:92:a2:63:ac:14: fa:9c:10:64:0c:76:77:ae:20:fc:40:6a:2b:c4:c5: 1a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1A:7E:17:A1:30:3F:7F:33:1C:B0:D4:C9:0B:43:B6:95:3B:ED:68 X509v3 Authority Key Identifier: keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:d1:f9:c3:b8:ea:c3:85:36:05:fc:d0:df:2d:ef:13:b9:fc: a7:04:b3:47:75:36:a9:68:be:8f:68:de:56:61:a7:0b:61:77: 9c:52:91:98:2c:d7:03:72:d9:04:d1:c1:fc:a6:95:8e:34:e1: ab:6e:28:18:20:39:cd:db:39:f1:08:86:28:33:2a:f4:7e:e1: 49:a8:36:ae:f5:b0:8c:24:43:0d:18:8d:1e:c6:f9:7e:e0:68: 00:6a:3d:89:50:83:0e:e0:43:43:20:c4:b1:8f:cb:fd:07:64: 23:f2:ee:99:b8:88:f4:51:8a:df:2c:be:26:09:27:73:5d:f5: 97:ed:a6:bd:8f:e9:f4:df:35:db:df:aa:20:f5:c1:b6:a5:83: 99:44:43:ca:6f:23:c4:bf:f8:0d:f9:84:09:74:b2:5d:57:b7: fe:f0:a6:50:87:c6:c4:1a:51:aa:fb:86:44:49:a3:e1:e3:cf: 8c:6f:6f:9a:47:df:60:c9:ae:20:33:ea:33:09:86:80:dd:c5: 89:35:ab:3b:f5:c9:6f:89:eb:d8:f8:51:5e:fa:1c:b4:96:2a: 56:02:91:da:05:ea:97:e4:c2:00:52:c7:3f:c6:f5:5a:09:da: ac:b7:70:60:bf:82:07:25:f1:26:64:e2:87:47:71:ce:e9:46: 74:68:0d:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuv7211dCIBJ/MEjnEyHGUTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NTAxMTY1NjQ1YWE4MGRjYmEzMTU4ODVjZjM3NGFjYjZk MjEzMDUwHhcNMjYwMTEyMDIwMTAyWhcNMjYwMTEzMDIwMTAyWjAzMTEwLwYDVQQD EygwMjFhN2UxN2ExMzAzZjdmMzMxY2IwZDRjOTBiNDNiNjk1M2JlZDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm3Xs78Kh+6CowqNlFdAirxgcQg0 9VFoNARFzd0pP0xIV+T4IOzf0pNiaFyzSfntJiZQ/GOokB40B//EerKvcQZf/zs0 xZQssAl+hFmNKQ9dK0h0eLsMXOpXObESvqdcdhPRjuf+pIvbYw0MROvbPu/ViAhR vUvh77NeBeJvXFuTnTD0bJYikXwzCA0UfVaDpu7oz4qwjfoefaoOt6d1AUXM5sFi A53NkiJYmcy7uKigqN4dyjpH/iyP3KQuPwvQXTR0ReEzKUCXDjeWojtFMHAwje2T ZcI1AlJq2EUF0SU84duCXFAi1rn7kqJjrBT6nBBkDHZ3riD8QGorxMUaaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIafhehMD9/Mxyw1MkLQ7aVO+1oMB8GA1UdIwQY MBaAFGZQEWVkWqgNy6MViFzzdKy20hMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZDI2YTMtMzQ2ZS00ZDBkLWFjMWUt MWQwMjBlY2UwN2VhLzEvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yZDI2YTMtMzQ2ZS00ZDBkLWFjMWUtMWQwMjBlY2UwN2Vh LzEvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNH5w7jq w4U2BfzQ3y3vE7n8pwSzR3U2qWi+j2jeVmGnC2F3nFKRmCzXA3LZBNHB/KaVjjTh q24oGCA5zds58QiGKDMq9H7hSag2rvWwjCRDDRiNHsb5fuBoAGo9iVCDDuBDQyDE sY/L/QdkI/LumbiI9FGK3yy+Jgknc131l+2mvY/p9N8129+qIPXBtqWDmURDym8j xL/4DfmECXSyXVe3/vCmUIfGxBpRqvuGREmj4ePPjG9vmkffYMmuIDPqMwmGgN3F iTWrO/XJb4nr2PhRXvoctJYqVgKR2gXql+TCAFLHP8b1WgnarLdwYL+CByXxJmTi h0dxzulGdGgN8w== -----END CERTIFICATE-----Generated at Mon Jan 12 08:08:47 2026 by rpki-client