This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft File: zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft (raw, json) Hash identifier: PZ7YwST3UQiD2gq2i5S5xcTrqFq/wskjCISoANL0k/M= Subject key identifier: 92:D0:D1:FC:2E:1D:7F:F9:05:19:02:9E:2E:6C:2C:B3:46:8C:44:7E Authority key identifier: CE:1F:59:AE:34:54:81:32:89:2F:CC:89:B1:59:5F:9B:03:60:19:8D Certificate issuer: /CN=ce1f59ae34548132892fcc89b1595f9b0360198d Certificate serial: 019B8083674D3509916B208B20B174ABE713 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft Manifest number: 11A7 Signing time: Fri 02 Jan 2026 21:00:53 +0000 Manifest this update: Fri 02 Jan 2026 21:00:53 +0000 Manifest next update: Sat 03 Jan 2026 21:00:53 +0000 Files and hashes: 1: 0fMGliU2DY90o-COL7gfsd6xbVw.roa (hash: pyD2slLDpEMFdPN9pfMsq689iSsZ/8LJ4vMycIuRMpg=) 2: zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl (hash: r8igv/fbNLtRbTJAvJh1TYv8c6h0KFHgwq+yKQKI2uc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:83:67:4d:35:09:91:6b:20:8b:20:b1:74:ab:e7:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1f59ae34548132892fcc89b1595f9b0360198d Validity Not Before: Jan 2 21:00:53 2026 GMT Not After : Jan 3 21:00:53 2026 GMT Subject: CN=92d0d1fc2e1d7ff90519029e2e6c2cb3468c447e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:48:3b:28:b4:55:8d:7c:62:63:d2:b3:7f:03: 91:e0:a9:b0:3b:e1:57:9d:ce:d2:da:f5:54:b3:7c: a6:ad:9e:89:fb:ab:d5:86:a4:11:6e:1f:1a:b9:0d: 61:9f:3e:7e:c7:00:b5:da:13:8f:ea:a1:83:ec:5c: 26:cb:ee:dd:f2:34:53:6e:ed:9d:11:07:27:df:a6: 71:7d:20:d9:81:96:94:1a:68:5b:fc:28:90:7f:8c: 2f:79:73:e9:98:5a:cd:44:13:78:8b:46:9e:25:75: df:f9:57:23:d1:98:a4:0e:91:7d:89:0c:67:f3:1b: b9:8f:26:d2:82:06:ec:c6:40:80:fc:60:c7:9e:55: 0e:41:13:71:39:61:ab:44:fe:5a:78:83:23:7c:ef: 8c:89:e0:f3:b5:e2:40:32:b9:ee:77:cd:70:b5:72: 40:33:b5:79:a4:e6:fb:61:f6:c8:99:bf:fc:01:6c: 27:52:dc:5e:85:6f:57:4a:8c:07:86:11:12:88:e2: 66:4a:aa:f7:20:7d:6b:2f:84:ad:d7:52:11:d5:8a: bf:cf:dc:e9:57:57:ec:3e:f4:f7:69:d6:a6:8e:6a: e8:0a:d1:de:1c:81:9b:19:39:f9:84:71:3c:66:3c: f8:2e:dd:00:80:01:67:70:64:eb:28:ba:6a:84:05: 7c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D0:D1:FC:2E:1D:7F:F9:05:19:02:9E:2E:6C:2C:B3:46:8C:44:7E X509v3 Authority Key Identifier: keyid:CE:1F:59:AE:34:54:81:32:89:2F:CC:89:B1:59:5F:9B:03:60:19:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:18:e3:c5:90:ff:9a:91:29:51:b7:9a:6d:8d:97:b6:bd:3d: fc:f5:eb:b2:43:61:d4:bf:03:41:07:bb:8e:71:e4:31:85:14: f4:b9:93:d0:50:cb:d9:c2:0d:e4:ef:26:9b:4f:a0:37:98:7b: 28:35:e5:3d:3e:76:cb:0f:a4:8b:13:fd:2a:5b:56:56:0e:c3: be:4d:7f:e8:db:e1:33:d7:f3:15:bc:5a:d9:74:c8:25:79:94: 44:11:4c:c1:ab:9e:d7:4e:89:bb:19:12:bf:6f:b2:e3:fc:dd: 7d:9d:8b:21:77:f9:dd:3a:bc:ef:6f:e5:50:14:f9:49:c9:f7: 13:34:04:2d:35:5e:61:e8:9f:14:c3:4b:1a:73:bd:1e:7b:80: a3:b2:fe:eb:12:9e:b9:93:d7:2f:e7:b3:4c:95:07:59:82:b4: d5:92:3e:d3:be:e3:da:2a:b9:7d:f8:2f:60:d0:17:d0:f7:e6: 6b:e5:6f:56:c3:87:1a:86:53:54:86:35:4d:5d:ce:72:8e:22: e1:fe:f8:15:33:9f:3f:f4:35:01:b6:62:0a:1a:c2:ca:1b:2c: c7:a7:a0:93:41:41:f5:ec:53:c4:a5:aa:8d:e5:d8:8f:57:a1: f6:7b:73:0d:97:6b:2f:a7:ef:64:57:20:c5:8b:be:08:d5:71: 2c:a4:99:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuAg2dNNQmRayCLILF0q+cTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMWY1OWFlMzQ1NDgxMzI4OTJmY2M4OWIxNTk1ZjliMDM2 MDE5OGQwHhcNMjYwMTAyMjEwMDUzWhcNMjYwMTAzMjEwMDUzWjAzMTEwLwYDVQQD Eyg5MmQwZDFmYzJlMWQ3ZmY5MDUxOTAyOWUyZTZjMmNiMzQ2OGM0NDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkg7KLRVjXxiY9KzfwOR4KmwO+FX nc7S2vVUs3ymrZ6J+6vVhqQRbh8auQ1hnz5+xwC12hOP6qGD7Fwmy+7d8jRTbu2d EQcn36ZxfSDZgZaUGmhb/CiQf4wveXPpmFrNRBN4i0aeJXXf+Vcj0ZikDpF9iQxn 8xu5jybSggbsxkCA/GDHnlUOQRNxOWGrRP5aeIMjfO+MieDzteJAMrnud81wtXJA M7V5pOb7YfbImb/8AWwnUtxehW9XSowHhhESiOJmSqr3IH1rL4St11IR1Yq/z9zp V1fsPvT3adamjmroCtHeHIGbGTn5hHE8Zjz4Lt0AgAFncGTrKLpqhAV8jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLQ0fwuHX/5BRkCni5sLLNGjER+MB8GA1UdIwQY MBaAFM4fWa40VIEyiS/MibFZX5sDYBmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemg5WnJqUlVnVEtKTDh5SnNWbGZtd05nR1kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80ZmEyZDgtZDcxZC00OWIxLThlYjAt YTM1ODlkYTE2Yzg1LzEvemg5WnJqUlVnVEtKTDh5SnNWbGZtd05nR1kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni80ZmEyZDgtZDcxZC00OWIxLThlYjAtYTM1ODlkYTE2Yzg1 LzEvemg5WnJqUlVnVEtKTDh5SnNWbGZtd05nR1kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApxjjxZD/ mpEpUbeabY2Xtr09/PXrskNh1L8DQQe7jnHkMYUU9LmT0FDL2cIN5O8mm0+gN5h7 KDXlPT52yw+kixP9KltWVg7Dvk1/6NvhM9fzFbxa2XTIJXmURBFMwaue106JuxkS v2+y4/zdfZ2LIXf53Tq872/lUBT5Scn3EzQELTVeYeifFMNLGnO9HnuAo7L+6xKe uZPXL+ezTJUHWYK01ZI+077j2iq5ffgvYNAX0Pfma+VvVsOHGoZTVIY1TV3Oco4i 4f74FTOfP/Q1AbZiChrCyhssx6egk0FB9exTxKWqjeXYj1eh9ntzDZdrL6fvZFcg xYu+CNVxLKSZaw== -----END CERTIFICATE-----Generated at Sat Jan 3 03:56:02 2026 by rpki-client