This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft File: zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft (raw, json) Hash identifier: xjKV7voW6ToJ9iCeFOUd60fqO5oUIveEes9Ow5wWDQ4= Subject key identifier: FF:BC:0B:A6:CB:82:55:D2:48:B2:EC:FE:C5:B0:38:31:CE:53:19:DF Authority key identifier: CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B Certificate issuer: /CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b Certificate serial: 019BB403413EDD17D5D7596E80A9BDCB08F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft Manifest number: 0D62 Signing time: Mon 12 Jan 2026 21:01:10 +0000 Manifest this update: Mon 12 Jan 2026 21:01:10 +0000 Manifest next update: Tue 13 Jan 2026 21:01:10 +0000 Files and hashes: 1: Q8ZJJ74q6bMVlfcvJJudps61QXo.roa (hash: 3ZMgLTga1etNt6/GjM7UgVlhZAFMLoY4B0xB96tmQlk=) 2: zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl (hash: gXyPS3MIKKEXpAeCUpToeE55YzwuUayMbX8rcYhN8CI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b4:03:41:3e:dd:17:d5:d7:59:6e:80:a9:bd:cb:08:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b Validity Not Before: Jan 12 21:01:10 2026 GMT Not After : Jan 13 21:01:10 2026 GMT Subject: CN=ffbc0ba6cb8255d248b2ecfec5b03831ce5319df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:24:a4:5e:48:4e:7e:97:7e:df:2a:0b:47:74: 94:15:bf:14:d5:d1:fe:d7:dd:f6:8e:fa:11:8b:4b: 49:46:fa:1f:48:05:13:19:38:0f:ec:b8:32:2f:a4: 4a:71:3d:9c:06:e0:40:4b:55:c5:b7:22:57:84:3a: a0:d0:b1:16:dd:43:1d:1d:ed:67:bf:f8:dd:55:78: 07:98:1a:82:c2:69:75:65:ad:79:0c:11:81:ba:b1: 88:f7:75:c8:98:c8:cb:d9:d3:da:41:89:aa:af:6b: c8:4c:9c:12:ee:6d:a1:55:69:cd:ec:ec:d4:15:49: 90:d4:69:d3:db:a1:9a:0b:2a:0c:fd:52:03:10:db: 39:6d:a2:03:5d:1e:70:7d:c7:04:c0:a2:78:a2:ba: 26:18:35:ff:76:f3:76:49:09:8e:7b:8e:79:4f:b7: 77:50:f0:44:80:20:b3:7d:23:7b:5f:e1:df:09:60: c5:3b:5f:26:40:f2:c0:4e:a9:af:0c:ce:0f:ea:fb: 80:aa:79:32:99:c1:93:76:c3:a9:c8:16:68:c2:ef: 58:17:e5:d5:2c:f3:b5:af:b0:e5:fc:21:0f:b5:52: ed:33:71:58:a2:a7:a1:4f:da:39:b2:6d:5a:e8:6e: 5b:79:ef:1e:dc:05:af:28:f3:ee:6d:15:6c:6b:8c: 9d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BC:0B:A6:CB:82:55:D2:48:B2:EC:FE:C5:B0:38:31:CE:53:19:DF X509v3 Authority Key Identifier: keyid:CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:4c:ef:0b:ff:5a:2e:92:35:2a:62:39:91:0b:f3:df:91:11: 1b:94:81:4b:8e:74:ac:9d:ff:43:7f:eb:b7:2c:38:fd:65:d3: b4:eb:3d:c9:df:c4:e7:5e:b9:0f:17:13:93:50:ea:0f:6c:66: 63:aa:45:ee:a6:e0:1c:9d:87:07:1e:51:66:e4:ac:04:8e:2a: 75:78:f0:e8:0a:eb:99:b1:1f:3d:d8:e6:c6:e5:81:99:e9:a5: 7d:8b:ae:26:9e:7c:9f:f4:26:6d:aa:8a:af:e4:b5:04:18:f0: 2d:dc:8f:68:94:33:8c:c9:0d:e7:7a:ff:1e:be:0b:94:38:a2: b5:86:2c:7b:a4:03:a9:46:eb:58:0b:32:9f:a0:cf:7f:ef:33: 47:83:a9:8a:6d:1d:0a:de:90:c8:1c:ca:d6:d7:3d:f8:d9:a3: 97:d0:49:e4:b3:5f:59:32:fc:6f:8c:8b:35:a9:a0:16:68:de: 2b:16:88:ba:dc:23:fd:77:3a:32:08:45:e7:ca:c3:41:da:fc: a0:a1:61:98:a4:21:94:5d:74:36:20:e3:01:c6:ac:ee:fc:e1: b7:28:2b:53:ac:35:6a:c3:ed:a9:14:cf:51:dc:06:96:d8:12: a7:4c:a7:d1:c9:9e:4d:57:a3:e6:ce:ef:6d:89:cd:63:12:6d: 92:88:e8:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu0A0E+3RfV11lugKm9ywjzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkN2VlNGIwMzI3OTk2MzA0Y2YxOGExMjhlMjY1NTc4MGM5 ZDZiOWIwHhcNMjYwMTEyMjEwMTEwWhcNMjYwMTEzMjEwMTEwWjAzMTEwLwYDVQQD EyhmZmJjMGJhNmNiODI1NWQyNDhiMmVjZmVjNWIwMzgzMWNlNTMxOWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iSkXkhOfpd+3yoLR3SUFb8U1dH+ 1932jvoRi0tJRvofSAUTGTgP7LgyL6RKcT2cBuBAS1XFtyJXhDqg0LEW3UMdHe1n v/jdVXgHmBqCwml1Za15DBGBurGI93XImMjL2dPaQYmqr2vITJwS7m2hVWnN7OzU FUmQ1GnT26GaCyoM/VIDENs5baIDXR5wfccEwKJ4oromGDX/dvN2SQmOe455T7d3 UPBEgCCzfSN7X+HfCWDFO18mQPLATqmvDM4P6vuAqnkymcGTdsOpyBZowu9YF+XV LPO1r7Dl/CEPtVLtM3FYoqehT9o5sm1a6G5bee8e3AWvKPPubRVsa4yd1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+8C6bLglXSSLLs/sWwODHOUxnfMB8GA1UdIwQY MBaAFM1+5LAyeZYwTPGKEo4mVXgMnWubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelg3a3NESjVsakJNOFlvU2ppWlZlQXlkYTVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lY2FlYjMtZjQyZi00YmFjLWE0OWUt MjQyZmZkYWEyNjcwLzEvelg3a3NESjVsakJNOFlvU2ppWlZlQXlkYTVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9lY2FlYjMtZjQyZi00YmFjLWE0OWUtMjQyZmZkYWEyNjcw LzEvelg3a3NESjVsakJNOFlvU2ppWlZlQXlkYTVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkzvC/9a LpI1KmI5kQvz35ERG5SBS450rJ3/Q3/rtyw4/WXTtOs9yd/E5165DxcTk1DqD2xm Y6pF7qbgHJ2HBx5RZuSsBI4qdXjw6ArrmbEfPdjmxuWBmemlfYuuJp58n/QmbaqK r+S1BBjwLdyPaJQzjMkN53r/Hr4LlDiitYYse6QDqUbrWAsyn6DPf+8zR4Opim0d Ct6QyBzK1tc9+Nmjl9BJ5LNfWTL8b4yLNamgFmjeKxaIutwj/Xc6MghF58rDQdr8 oKFhmKQhlF10NiDjAcas7vzhtygrU6w1asPtqRTPUdwGltgSp0yn0cmeTVej5s7v bYnNYxJtkojoZg== -----END CERTIFICATE-----Generated at Mon Jan 12 23:51:30 2026 by rpki-client