This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft File: zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft (raw, json) Hash identifier: qBUQTz18RLS5z4mFMIh0/rsX1lMiJL4rjVvZyYkzQZo= Subject key identifier: A1:71:FA:6A:2A:6C:3A:B3:7B:74:47:6D:32:62:8F:0B:F7:B6:B6:C7 Authority key identifier: CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F Certificate issuer: /CN=cd57ec4c4025adab88b92074ad46056e9f93099f Certificate serial: 019B7EA8138AA853DC715EF426C724346A08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft Manifest number: 17AB Signing time: Fri 02 Jan 2026 12:21:42 +0000 Manifest this update: Fri 02 Jan 2026 12:21:42 +0000 Manifest next update: Sat 03 Jan 2026 12:21:42 +0000 Files and hashes: 1: 3GOUf5zM72xHW-KizqGmfejZI-I.roa (hash: 7Jjry34OgvJlCQgmEgxo8SwsDK8ifphC6Z5s0sCqAbk=) 2: zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl (hash: W/RAxiLpEesbqdM2rvhtmTI1kEMI20o6ar2WBbyYYsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a8:13:8a:a8:53:dc:71:5e:f4:26:c7:24:34:6a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd57ec4c4025adab88b92074ad46056e9f93099f Validity Not Before: Jan 2 12:21:42 2026 GMT Not After : Jan 3 12:21:42 2026 GMT Subject: CN=a171fa6a2a6c3ab37b74476d32628f0bf7b6b6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cb:0a:14:89:13:21:be:e2:c3:99:1d:6e:f3: 10:f6:59:14:3c:10:bc:12:51:d8:88:40:22:77:6e: 39:4c:d8:6c:1c:28:ca:f2:fc:19:ca:a6:c4:c3:8d: 33:57:08:71:18:1d:15:a0:b5:60:5a:65:2e:23:36: 76:c7:3e:84:8d:7c:2d:2f:e4:92:54:42:7c:5c:db: 47:ff:18:69:bf:65:56:67:e9:40:2a:62:0c:02:89: f2:4a:c7:e4:25:b8:be:61:40:31:87:e1:b0:3f:a3: 67:c7:60:cd:7d:26:25:3f:ff:ba:4a:28:83:0a:fc: ae:cd:84:c0:d8:35:bd:5b:a3:e6:f9:1f:1d:3d:14: 33:c5:b2:23:36:28:2a:79:f9:d1:d9:80:7f:12:a1: b6:61:2b:9b:2f:bf:9b:c2:37:e0:67:3f:0c:94:29: 99:e5:e3:bb:4a:63:aa:36:22:3e:65:0f:23:cb:17: 6c:69:cf:ce:99:5f:48:04:d5:b2:42:e6:44:c7:26: 6a:21:c9:a0:d6:71:aa:3e:dd:d0:e9:79:d9:57:aa: 4b:42:1a:a4:01:0f:cc:21:fa:a4:72:5c:2e:ac:cb: f8:a4:f5:5c:f3:8a:12:7d:bd:55:04:cd:e8:64:62: 0c:0e:b1:1c:d0:56:bd:1e:7b:c7:98:b9:55:3d:78: 87:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:71:FA:6A:2A:6C:3A:B3:7B:74:47:6D:32:62:8F:0B:F7:B6:B6:C7 X509v3 Authority Key Identifier: keyid:CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b5:df:e2:13:4c:47:93:b5:4e:d3:4a:79:35:bc:a5:4f:59: 9b:50:cf:29:c6:d1:cd:22:dd:0a:a4:94:57:6c:79:46:c9:91: 3d:8c:6d:12:64:00:f1:3e:0e:6b:64:19:e4:7c:31:dc:ef:df: 98:d0:8d:cb:65:43:90:aa:3a:e7:d2:2e:f1:e8:5c:05:b8:80: 5f:13:c3:ed:0c:b6:e8:f3:16:77:9f:4c:99:40:a0:bd:7d:e6: 36:0d:9d:1a:68:a1:27:1c:17:af:de:b7:b1:37:db:1b:29:fa: 41:d6:a5:92:ad:ec:24:d4:39:23:61:6b:0e:0d:3f:49:27:f1: e4:2c:4a:f6:64:93:01:7c:ad:4c:3b:5f:cc:bd:d8:8b:72:de: 76:35:eb:09:2e:34:c1:21:63:56:f2:e6:a9:79:5b:66:02:3b: 3d:52:50:59:10:0f:6a:ed:27:a1:38:c3:a3:66:63:f1:09:9e: 14:21:8a:41:0b:44:5b:60:82:e3:1f:d0:d9:08:55:f3:dd:7f: dc:c9:7c:87:56:19:35:2e:36:0b:fe:97:8b:fa:b1:9c:1b:6e: 2a:22:bc:f4:a0:6d:7e:92:d6:11:00:37:56:05:78:f5:04:7e: 5a:3c:3e:b5:96:dc:8b:b1:2f:aa:b9:60:4e:e7:27:36:3b:ac: 8c:62:5c:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt+qBOKqFPccV70JsckNGoIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNTdlYzRjNDAyNWFkYWI4OGI5MjA3NGFkNDYwNTZlOWY5 MzA5OWYwHhcNMjYwMTAyMTIyMTQyWhcNMjYwMTAzMTIyMTQyWjAzMTEwLwYDVQQD EyhhMTcxZmE2YTJhNmMzYWIzN2I3NDQ3NmQzMjYyOGYwYmY3YjZiNmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18sKFIkTIb7iw5kdbvMQ9lkUPBC8 ElHYiEAid245TNhsHCjK8vwZyqbEw40zVwhxGB0VoLVgWmUuIzZ2xz6EjXwtL+SS VEJ8XNtH/xhpv2VWZ+lAKmIMAonySsfkJbi+YUAxh+GwP6Nnx2DNfSYlP/+6SiiD CvyuzYTA2DW9W6Pm+R8dPRQzxbIjNigqefnR2YB/EqG2YSubL7+bwjfgZz8MlCmZ 5eO7SmOqNiI+ZQ8jyxdsac/OmV9IBNWyQuZExyZqIcmg1nGqPt3Q6XnZV6pLQhqk AQ/MIfqkclwurMv4pPVc84oSfb1VBM3oZGIMDrEc0Fa9HnvHmLlVPXiHrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFx+moqbDqze3RHbTJijwv3trbHMB8GA1UdIwQY MBaAFM1X7ExAJa2riLkgdK1GBW6fkwmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelZmc1RFQWxyYXVJdVNCMHJVWUZicC1UQ1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMmYzNTQtOThjZC00MzI1LTlmYmUt NzYyNDMyZmRkNGRkLzEvelZmc1RFQWxyYXVJdVNCMHJVWUZicC1UQ1o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wMmYzNTQtOThjZC00MzI1LTlmYmUtNzYyNDMyZmRkNGRk LzEvelZmc1RFQWxyYXVJdVNCMHJVWUZicC1UQ1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrXf4hNM R5O1TtNKeTW8pU9Zm1DPKcbRzSLdCqSUV2x5RsmRPYxtEmQA8T4Oa2QZ5Hwx3O/f mNCNy2VDkKo659Iu8ehcBbiAXxPD7Qy26PMWd59MmUCgvX3mNg2dGmihJxwXr963 sTfbGyn6Qdalkq3sJNQ5I2FrDg0/SSfx5CxK9mSTAXytTDtfzL3Yi3LedjXrCS40 wSFjVvLmqXlbZgI7PVJQWRAPau0noTjDo2Zj8QmeFCGKQQtEW2CC4x/Q2QhV891/ 3Ml8h1YZNS42C/6Xi/qxnBtuKiK89KBtfpLWEQA3VgV49QR+Wjw+tZbci7Evqrlg TucnNjusjGJczA== -----END CERTIFICATE-----Generated at Fri Jan 2 18:25:52 2026 by rpki-client