This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft File: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft (raw, json) Hash identifier: L0pdLBZ32wZpn8xWzZB2RMFeQjbZ91kugRHiz65A0uY= Subject key identifier: 50:9D:B7:7B:24:CA:86:9E:45:87:09:A5:D3:98:9F:77:16:0B:26:75 Authority key identifier: 67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD Certificate issuer: /CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd Certificate serial: 019BAEDDD127A9396E5685FBC223A322F10E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft Manifest number: 1483 Signing time: Sun 11 Jan 2026 21:02:11 +0000 Manifest this update: Sun 11 Jan 2026 21:02:11 +0000 Manifest next update: Mon 12 Jan 2026 21:02:11 +0000 Files and hashes: 1: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl (hash: kGs7P98AOnT2AeCnS7m+uCAuQj8uDURfAGhI6uub1jM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 21:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:dd:d1:27:a9:39:6e:56:85:fb:c2:23:a3:22:f1:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd Validity Not Before: Jan 11 21:02:11 2026 GMT Not After : Jan 12 21:02:11 2026 GMT Subject: CN=509db77b24ca869e458709a5d3989f77160b2675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2a:03:0a:63:90:77:40:15:f6:ef:c9:e8:a4: 1d:2d:4a:98:9b:27:98:7d:16:9c:5e:88:dc:2e:40: b5:64:e6:3a:4d:bf:08:26:fa:f1:2f:59:0c:2f:7f: ea:72:96:d5:02:76:56:a1:13:62:ff:43:1a:29:ee: 35:17:1a:ac:55:d6:fb:67:36:e6:b7:a0:93:31:21: cd:27:78:bc:e2:a7:b0:25:82:27:dd:4e:8a:16:c1: 31:c2:29:0a:ef:93:50:78:b3:e0:b4:6d:5c:0f:8c: e3:75:84:89:30:fd:b9:f7:1c:8e:9d:8c:4c:df:d0: 87:4d:77:98:73:90:59:8e:19:09:1e:d9:be:de:0f: cf:ca:63:81:e5:f1:d7:80:ca:a0:c9:00:0a:e2:c7: 8e:ee:7a:68:8f:f0:ce:21:45:ef:17:fd:98:e7:38: e6:41:06:9c:94:89:59:b6:48:d3:82:af:6d:40:c3: b8:a4:ad:48:03:cc:19:64:18:4d:ec:fe:91:7e:f6: 62:75:4a:bd:40:eb:f6:56:af:93:96:98:7d:a6:c1: d1:24:ad:0a:c8:2d:e0:4d:ca:2c:4e:3c:64:e6:fe: 22:f3:5c:13:30:d3:57:bb:7d:56:a3:ec:de:f9:7c: 8e:e7:41:55:48:e9:be:ca:ee:6d:6d:1b:04:a8:0d: 12:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9D:B7:7B:24:CA:86:9E:45:87:09:A5:D3:98:9F:77:16:0B:26:75 X509v3 Authority Key Identifier: keyid:67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:93:dd:15:2a:4f:b5:05:2d:ab:e1:cc:2d:80:88:ed:a1:c9: 26:9d:66:c5:16:af:16:49:2f:96:24:6c:88:ab:b8:a3:70:00: b0:e5:ac:ed:3d:fd:6d:a3:53:cb:28:ea:b0:eb:51:83:4a:cc: 14:ee:fc:37:fd:46:35:1d:9b:b2:a2:5b:13:da:86:e3:f6:13: 84:bd:70:2a:48:98:08:af:cf:a6:8d:fb:8f:a0:56:30:31:f9: 50:27:3c:e6:a4:8a:ce:b9:1c:91:b3:a3:2c:13:c2:e6:9c:f4: 99:ec:77:4f:c8:55:6f:d2:2a:25:cc:2c:27:ea:32:54:b1:07: 1d:33:c0:37:12:7a:ed:be:90:2d:8a:1e:a1:ae:5f:15:6b:e9: 55:4b:fe:d1:73:68:72:9f:99:3f:9c:b9:c1:7a:e0:d0:21:fc: 4d:8a:70:97:85:4a:cf:bd:48:e2:32:4f:6b:db:b1:db:fd:cd: 6c:b5:5d:41:9a:3a:74:14:b6:ec:ab:aa:98:05:68:ef:c7:a3: 86:cc:a9:93:fe:31:43:ec:b2:f1:67:8a:8b:a9:3d:f6:21:65: b3:90:b0:90:31:69:6d:7b:dc:81:a6:5a:84:ec:cc:73:3a:4a: 1f:91:c7:a5:88:7e:63:2b:1b:c8:2e:ff:cd:c3:e0:ad:29:1a: 95:bf:75:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuu3dEnqTluVoX7wiOjIvEOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MTA0OTA5Njc1MjhjYTBiNmEwYTljYjczNjQzYzlhZDJj YzFiYmQwHhcNMjYwMTExMjEwMjExWhcNMjYwMTEyMjEwMjExWjAzMTEwLwYDVQQD Eyg1MDlkYjc3YjI0Y2E4NjllNDU4NzA5YTVkMzk4OWY3NzE2MGIyNjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyoDCmOQd0AV9u/J6KQdLUqYmyeY fRacXojcLkC1ZOY6Tb8IJvrxL1kML3/qcpbVAnZWoRNi/0MaKe41FxqsVdb7Zzbm t6CTMSHNJ3i84qewJYIn3U6KFsExwikK75NQeLPgtG1cD4zjdYSJMP259xyOnYxM 39CHTXeYc5BZjhkJHtm+3g/PymOB5fHXgMqgyQAK4seO7npoj/DOIUXvF/2Y5zjm QQaclIlZtkjTgq9tQMO4pK1IA8wZZBhN7P6RfvZidUq9QOv2Vq+Tlph9psHRJK0K yC3gTcosTjxk5v4i81wTMNNXu31Wo+ze+XyO50FVSOm+yu5tbRsEqA0S9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCdt3skyoaeRYcJpdOYn3cWCyZ1MB8GA1UdIwQY MBaAFGcQSQlnUoygtqCpy3NkPJrSzBu9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnhCSkNXZFNqS0Myb0tuTGMyUThtdExNRzcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NWQyNDUtODgyOC00MWUwLThlYTgt ZjBhZTAyM2FiNTkyLzEvWnhCSkNXZFNqS0Myb0tuTGMyUThtdExNRzcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NWQyNDUtODgyOC00MWUwLThlYTgtZjBhZTAyM2FiNTky LzEvWnhCSkNXZFNqS0Myb0tuTGMyUThtdExNRzcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJPdFSpP tQUtq+HMLYCI7aHJJp1mxRavFkkvliRsiKu4o3AAsOWs7T39baNTyyjqsOtRg0rM FO78N/1GNR2bsqJbE9qG4/YThL1wKkiYCK/Ppo37j6BWMDH5UCc85qSKzrkckbOj LBPC5pz0mex3T8hVb9IqJcwsJ+oyVLEHHTPANxJ67b6QLYoeoa5fFWvpVUv+0XNo cp+ZP5y5wXrg0CH8TYpwl4VKz71I4jJPa9ux2/3NbLVdQZo6dBS27KuqmAVo78ej hsypk/4xQ+yy8WeKi6k99iFls5CwkDFpbXvcgaZahOzMczpKH5HHpYh+YysbyC7/ zcPgrSkalb91dQ== -----END CERTIFICATE-----Generated at Mon Jan 12 07:37:40 2026 by rpki-client