This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft File: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft (raw, json) Hash identifier: DHVkl2dHFdNy75ZVD62X9uZmYn6eeUAHOh+X8pdLSz8= Subject key identifier: 25:48:46:4F:D3:9F:C1:7A:B4:65:AD:1E:4C:C1:88:6E:C3:36:E3:0D Authority key identifier: 66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F Certificate issuer: /CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f Certificate serial: 019BB026FC4E0B7CBA55C86C94667F875518 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft Manifest number: 0BC0 Signing time: Mon 12 Jan 2026 03:01:43 +0000 Manifest this update: Mon 12 Jan 2026 03:01:43 +0000 Manifest next update: Tue 13 Jan 2026 03:01:43 +0000 Files and hashes: 1: 3FX3dROebXazZ9k_8-Lo5o1qkkI.roa (hash: iLVy4lChJ6R/aX19zh/vuVIS2qDiRo8xZfWhdwKLT/E=) 2: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl (hash: InQWE3jb4joaXnjx+Ndo9qx5PBURI43JdBTAaGK5em0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:26:fc:4e:0b:7c:ba:55:c8:6c:94:66:7f:87:55:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f Validity Not Before: Jan 12 03:01:43 2026 GMT Not After : Jan 13 03:01:43 2026 GMT Subject: CN=2548464fd39fc17ab465ad1e4cc1886ec336e30d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a5:12:8c:74:03:5d:20:bc:a5:e9:40:63:72: b2:64:96:d3:75:a0:07:8b:cf:82:85:17:d1:0e:6d: 67:fc:ef:0a:4e:49:38:c3:cb:7b:db:54:ce:ac:54: 37:5c:a2:d5:73:47:f6:99:8d:eb:c4:36:76:cc:69: 8e:64:17:aa:d4:ef:21:1f:60:cb:6e:6b:61:02:91: fb:bf:fa:01:ed:ae:3f:df:e8:cc:22:dd:6f:fb:12: 63:f7:59:92:1d:c6:e9:07:7c:51:7a:82:6a:d1:b7: 6d:28:65:11:8f:44:f6:fe:52:3f:a5:5f:3b:84:eb: 8a:c4:b7:87:8e:04:df:cc:1e:b1:61:ae:03:26:27: d3:e1:92:c1:ce:d5:ce:7d:04:ec:2a:3a:e2:20:db: 19:a9:7f:cd:f0:f3:b2:48:7c:21:ad:5d:8c:66:93: 4a:0c:60:1a:56:8a:30:2a:6d:28:33:fb:30:7e:5f: c5:90:cf:ef:d1:1c:d5:25:97:bf:bc:1c:39:85:f6: b4:6e:ea:e6:d6:cc:b3:ef:a7:66:a7:65:2d:9b:6d: ad:2f:1c:f6:60:f3:46:4e:c4:87:9a:52:36:db:43: 94:e4:74:b9:d7:8b:1e:36:0c:0b:b8:09:a7:76:fa: 8d:21:e7:e8:f2:21:66:5e:02:d1:74:bf:b8:04:46: d2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:48:46:4F:D3:9F:C1:7A:B4:65:AD:1E:4C:C1:88:6E:C3:36:E3:0D X509v3 Authority Key Identifier: keyid:66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:69:ea:71:d4:fd:be:93:97:ca:8f:9e:c7:05:28:93:29:39: a6:ae:b0:c4:6d:b8:83:7e:49:ee:e6:8f:1e:25:b4:ff:09:85: 04:50:47:aa:4c:5c:19:02:c1:57:c9:04:a7:58:0e:55:f3:d5: 46:15:c0:3f:5e:14:a8:bc:ae:35:9f:db:d5:e2:d5:6f:ec:03: be:40:ea:76:89:39:3a:10:9e:81:20:91:8a:26:36:af:5d:f1: 1f:3f:6a:3a:ed:51:f2:d7:76:26:53:ae:2b:25:24:57:da:9d: a1:4d:ab:4d:4b:d5:8b:e5:94:d3:dd:8e:41:1d:f0:31:8a:b4: a1:b8:e1:6b:b8:95:83:f5:a0:29:b0:50:29:6b:a7:5a:44:16: 49:20:d7:68:2d:05:7e:6c:16:dc:68:76:ce:99:bd:f2:f8:d4: fa:f8:ab:53:43:c4:7d:93:3d:16:89:6f:61:d8:5a:67:f5:13: 4b:03:96:ea:21:3c:fd:38:28:7b:b9:62:77:fd:64:8a:5c:da: 45:ba:b1:82:ff:48:15:5a:6b:7f:2c:66:be:5b:ae:e7:3e:e7: 16:dd:c5:e4:cc:5d:ef:d0:cd:8c:97:7e:b5:48:94:ff:0a:f7: 42:a9:22:2b:c9:dc:94:35:f6:12:17:8a:7f:58:4d:75:e2:69: f0:8e:57:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwJvxOC3y6VchslGZ/h1UYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDkxODgzY2I0YzUwMTIyZmRiMjc1NGI2MjUyZmRkNmZj OWQ1MWYwHhcNMjYwMTEyMDMwMTQzWhcNMjYwMTEzMDMwMTQzWjAzMTEwLwYDVQQD EygyNTQ4NDY0ZmQzOWZjMTdhYjQ2NWFkMWU0Y2MxODg2ZWMzMzZlMzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaUSjHQDXSC8pelAY3KyZJbTdaAH i8+ChRfRDm1n/O8KTkk4w8t721TOrFQ3XKLVc0f2mY3rxDZ2zGmOZBeq1O8hH2DL bmthApH7v/oB7a4/3+jMIt1v+xJj91mSHcbpB3xReoJq0bdtKGURj0T2/lI/pV87 hOuKxLeHjgTfzB6xYa4DJifT4ZLBztXOfQTsKjriINsZqX/N8POySHwhrV2MZpNK DGAaVoowKm0oM/swfl/FkM/v0RzVJZe/vBw5hfa0burm1syz76dmp2Utm22tLxz2 YPNGTsSHmlI220OU5HS514seNgwLuAmndvqNIefo8iFmXgLRdL+4BEbSyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVIRk/Tn8F6tGWtHkzBiG7DNuMNMB8GA1UdIwQY MBaAFGZJGIPLTFASL9snVLYlL91vydUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84YzU3ODctMDlmYS00OTg4LTgxYTEt NzVkNmJlNGU1YzM3LzEvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84YzU3ODctMDlmYS00OTg4LTgxYTEtNzVkNmJlNGU1YzM3 LzEvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmnqcdT9 vpOXyo+exwUokyk5pq6wxG24g35J7uaPHiW0/wmFBFBHqkxcGQLBV8kEp1gOVfPV RhXAP14UqLyuNZ/b1eLVb+wDvkDqdok5OhCegSCRiiY2r13xHz9qOu1R8td2JlOu KyUkV9qdoU2rTUvVi+WU092OQR3wMYq0objha7iVg/WgKbBQKWunWkQWSSDXaC0F fmwW3Gh2zpm98vjU+virU0PEfZM9FolvYdhaZ/UTSwOW6iE8/Tgoe7lid/1kilza Rbqxgv9IFVprfyxmvluu5z7nFt3F5Mxd79DNjJd+tUiU/wr3QqkiK8nclDX2EheK f1hNdeJp8I5XDw== -----END CERTIFICATE-----Generated at Mon Jan 12 12:54:35 2026 by rpki-client