This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft File: zlWB0nSK_Pd5Znl397ZznuT5_A0.mft (raw, json) Hash identifier: lbV4q218V4m5wclD9ONpaVn4JVOscoVL5YPkoC8TOtM= Subject key identifier: AC:97:9D:8D:93:2A:2F:85:56:49:2D:AF:3E:4C:05:0E:2E:6C:D8:D2 Authority key identifier: CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D Certificate issuer: /CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d Certificate serial: 019B80F161C2DD0518A3F33B2167E6BF8027 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft Manifest number: 1118 Signing time: Fri 02 Jan 2026 23:01:01 +0000 Manifest this update: Fri 02 Jan 2026 23:01:01 +0000 Manifest next update: Sat 03 Jan 2026 23:01:01 +0000 Files and hashes: 1: vMfnrpAebos3eaIEsMS2VFk8-QI.roa (hash: 4/jYsNoEYkp6fGrbtUoi3W/2IDsabtf81IB97bt4re0=) 2: zlWB0nSK_Pd5Znl397ZznuT5_A0.crl (hash: U0Ry0ktPkn1LxhkCt+wpQDUj2gvJKnRivm/viF6rtRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:f1:61:c2:dd:05:18:a3:f3:3b:21:67:e6:bf:80:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d Validity Not Before: Jan 2 23:01:01 2026 GMT Not After : Jan 3 23:01:01 2026 GMT Subject: CN=ac979d8d932a2f8556492daf3e4c050e2e6cd8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:d4:8f:2c:17:73:9e:dd:98:6a:10:b1:70: a6:79:4f:2d:f9:95:62:42:3f:4f:a1:d4:9e:46:d2: 8e:bf:e4:9e:c0:08:c0:b5:4b:c5:00:5d:5e:12:85: 4a:9c:2b:72:80:30:34:49:c8:8a:28:62:33:31:17: 8f:65:6d:41:ea:b5:92:50:87:c9:57:d1:43:d5:96: b8:76:ed:79:99:79:94:96:5d:8d:61:6e:b6:66:78: 70:3a:f4:59:9f:03:a4:4d:93:11:7c:7e:73:0d:58: 7a:c6:e3:e9:de:d7:d2:a3:8b:1e:61:59:bc:e7:8c: 20:fc:39:f7:2c:f3:9f:bb:cb:e4:22:2f:7b:5a:e9: 27:e5:b1:a4:0d:c5:30:0f:6e:4e:f5:c0:6d:5e:d2: 24:d5:4b:84:96:96:08:4d:dd:cf:cf:71:7f:9b:73: 0d:fb:be:82:a0:5b:e1:f3:a9:4e:8a:87:2f:f5:22: b4:a7:84:3d:26:c5:00:ac:07:f7:bc:44:3d:3d:d8: 40:df:c4:1d:26:ce:d0:a5:99:b8:00:50:77:55:96: bf:d2:1a:09:50:31:f8:f6:10:80:d7:78:8f:c0:65: 69:9b:8f:76:7e:84:43:47:00:60:8c:7b:0e:80:48: eb:d9:61:39:0a:aa:7c:26:58:5e:cb:53:77:d2:73: b9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:97:9D:8D:93:2A:2F:85:56:49:2D:AF:3E:4C:05:0E:2E:6C:D8:D2 X509v3 Authority Key Identifier: keyid:CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:eb:1f:3d:55:29:8d:b8:53:38:c3:c1:a1:cc:10:1b:a9:b4: 77:f9:f3:83:34:8e:d0:8f:98:af:de:67:dc:60:50:20:70:b6: 30:cd:66:cf:3d:56:54:e8:db:39:76:99:a3:26:81:96:61:a7: 93:3a:21:66:b3:44:86:d3:a8:15:98:b6:d8:c4:64:ba:9e:7f: 4d:65:ce:1b:33:4d:78:cf:a7:42:7c:20:b0:76:87:8e:9f:00: a9:11:14:7c:dd:41:4b:c0:e8:5a:26:f8:0b:46:31:a4:d6:5a: 91:c6:df:37:6b:cc:aa:7b:d8:33:d8:de:b3:26:0b:ba:1b:0e: 88:0f:d6:9f:e3:60:01:28:bc:d8:4a:73:cc:41:3c:41:7f:85: 6b:81:c4:67:29:52:a8:52:1e:79:5a:d3:94:0d:20:d9:b5:41: a3:f0:86:1e:f6:f4:bf:99:64:3f:b9:8a:a6:d5:e2:37:51:28: c4:0c:27:9c:ac:92:73:27:b1:0a:de:a9:0e:9a:43:cd:4e:76: fd:cb:31:ec:ff:07:83:ec:0f:d1:cf:76:37:f4:9f:a7:63:d3: da:32:b6:0f:82:13:42:17:c2:a6:cf:d3:c7:e1:27:65:bb:0b: 8f:7a:ee:71:b9:63:4e:db:d9:d7:bc:cf:9a:8d:00:6e:84:7a: ef:f3:b3:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuA8WHC3QUYo/M7IWfmv4AnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNTU4MWQyNzQ4YWZjZjc3OTY2Nzk3N2Y3YjY3MzllZTRm OWZjMGQwHhcNMjYwMTAyMjMwMTAxWhcNMjYwMTAzMjMwMTAxWjAzMTEwLwYDVQQD EyhhYzk3OWQ4ZDkzMmEyZjg1NTY0OTJkYWYzZTRjMDUwZTJlNmNkOGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF/UjywXc57dmGoQsXCmeU8t+ZVi Qj9PodSeRtKOv+SewAjAtUvFAF1eEoVKnCtygDA0SciKKGIzMRePZW1B6rWSUIfJ V9FD1Za4du15mXmUll2NYW62ZnhwOvRZnwOkTZMRfH5zDVh6xuPp3tfSo4seYVm8 54wg/Dn3LPOfu8vkIi97Wukn5bGkDcUwD25O9cBtXtIk1UuElpYITd3Pz3F/m3MN +76CoFvh86lOiocv9SK0p4Q9JsUArAf3vEQ9PdhA38QdJs7QpZm4AFB3VZa/0hoJ UDH49hCA13iPwGVpm492foRDRwBgjHsOgEjr2WE5Cqp8Jlhey1N30nO5GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyXnY2TKi+FVkktrz5MBQ4ubNjSMB8GA1UdIwQY MBaAFM5VgdJ0ivz3eWZ5d/e2c57k+fwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemxXQjBuU0tfUGQ1Wm5sMzk3WnpudVQ1X0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NDE0ZjEtZDQ2OC00ZDk3LWIyOTkt ZDc2OGE3N2Q1N2Y0LzEvemxXQjBuU0tfUGQ1Wm5sMzk3WnpudVQ1X0EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NDE0ZjEtZDQ2OC00ZDk3LWIyOTktZDc2OGE3N2Q1N2Y0 LzEvemxXQjBuU0tfUGQ1Wm5sMzk3WnpudVQ1X0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAResfPVUp jbhTOMPBocwQG6m0d/nzgzSO0I+Yr95n3GBQIHC2MM1mzz1WVOjbOXaZoyaBlmGn kzohZrNEhtOoFZi22MRkup5/TWXOGzNNeM+nQnwgsHaHjp8AqREUfN1BS8DoWib4 C0YxpNZakcbfN2vMqnvYM9jesyYLuhsOiA/Wn+NgASi82EpzzEE8QX+Fa4HEZylS qFIeeVrTlA0g2bVBo/CGHvb0v5lkP7mKptXiN1EoxAwnnKyScyexCt6pDppDzU52 /csx7P8Hg+wP0c92N/Sfp2PT2jK2D4ITQhfCps/Tx+EnZbsLj3rucbljTtvZ17zP mo0AboR67/Ozzw== -----END CERTIFICATE-----Generated at Sat Jan 3 04:21:18 2026 by rpki-client