This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json) Hash identifier: YzLiqBu3+uNAwNHRyxSWEoMyL8sStcn52C7kC+/N6WU= Subject key identifier: 1C:CE:42:D2:2B:BE:F6:26:D3:56:A9:6C:1C:87:16:AD:92:05:D0:5E Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22 Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22 Certificate serial: 019B78CA32DC25D792A16A9C6C4A5D4CB180 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft Manifest number: 16E7 Signing time: Thu 01 Jan 2026 09:01:15 +0000 Manifest this update: Thu 01 Jan 2026 09:01:15 +0000 Manifest next update: Fri 02 Jan 2026 09:01:15 +0000 Files and hashes: 1: 8kC1dXQut3Q7aEZLq-H6wHv58Nk.roa (hash: wdoh4a7LDX/nFwYQadnYTEwY/jj86xKk/h3rcKaZa3Q=) 2: T24HRLbgJbROlTALREch3AOYbaE.roa (hash: Wevs9VKSENwQtnqRkxhumLN/kRDIgG1A0UE3XstajKA=) 3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: LK/IInVMnwDExIZF3Ye1lu8+2ne5wgeobXgIVdEWKZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:ca:32:dc:25:d7:92:a1:6a:9c:6c:4a:5d:4c:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22 Validity Not Before: Jan 1 09:01:15 2026 GMT Not After : Jan 2 09:01:15 2026 GMT Subject: CN=1cce42d22bbef626d356a96c1c8716ad9205d05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a5:b0:20:c7:e1:0c:9d:6b:08:d6:bc:b5:c1: a2:ef:6b:d1:51:05:67:e7:3d:b9:90:cd:46:e4:96: 75:69:89:c4:89:cd:e9:56:80:04:02:39:87:ff:35: 4c:e0:a7:f0:a2:63:a7:d8:af:6b:d7:5d:af:65:48: 0e:77:35:b6:84:fe:53:91:18:06:5f:00:2f:68:88: dc:fd:c2:32:d2:46:4a:40:b8:29:16:c5:b8:fa:a1: c9:3b:98:6e:7d:b9:59:9b:b7:9d:59:4f:b4:46:4d: 07:f7:b7:13:f9:b9:c8:49:0b:dd:04:bb:54:19:e9: c6:34:c4:b5:77:1f:99:df:85:4c:75:eb:2a:8a:03: 4a:7a:68:6a:73:c6:9f:fa:a4:60:f8:ee:86:87:59: 7f:28:fc:fc:b3:0b:aa:7d:58:4c:64:20:b7:a1:40: dd:20:c1:62:65:0e:2e:3c:76:4c:23:6d:2f:df:34: a8:f7:57:06:a3:3c:96:1a:2b:8d:eb:bd:89:19:0e: ae:6f:48:e9:2f:0f:3f:4b:27:64:51:24:a1:0d:ea: 9e:de:66:9f:06:f2:8b:fc:82:00:69:60:e4:11:0d: e6:5d:53:84:c7:1e:c7:21:62:99:e4:33:40:46:a0: 64:df:ce:d8:77:78:f3:f8:80:06:4d:b9:6d:51:46: c0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CE:42:D2:2B:BE:F6:26:D3:56:A9:6C:1C:87:16:AD:92:05:D0:5E X509v3 Authority Key Identifier: keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:64:84:04:0b:91:86:39:26:de:34:2f:8d:c8:c0:9d:7a:f7: 0c:f8:e9:13:e8:4f:99:4a:0d:6d:f1:fc:67:74:c7:09:49:38: 2c:96:6a:c1:da:bf:6b:b7:59:57:7b:2e:ae:c0:d4:18:67:df: 79:4d:1d:f6:c4:34:a0:6c:da:17:86:27:1b:26:13:61:94:f4: 26:f0:d0:a8:fc:44:d5:02:9c:1b:50:d4:dd:91:e5:71:49:5a: 12:8d:83:b6:8d:28:5a:1a:a2:ce:a7:ca:49:25:a8:dd:b0:ce: dc:ca:11:9e:00:63:d3:81:89:d1:1d:cd:7f:ee:a4:3a:a7:c2: c8:46:7f:5c:41:ae:e2:84:eb:dd:07:55:5d:fe:15:83:52:b1: 95:ed:0b:76:ed:e8:f7:aa:92:50:f3:d8:cf:40:c0:01:d6:d2: 45:21:50:0c:05:61:7e:23:64:ab:cf:19:35:8d:f1:a5:e1:6b: db:90:28:3c:61:89:a8:bf:dc:66:3e:c1:3d:c0:07:33:0e:fa: f5:71:60:0f:d9:ba:70:20:b4:e8:1a:3d:11:69:98:5f:68:4b: 62:a6:9e:5a:54:64:eb:a1:86:c5:f9:b0:f3:41:ef:e8:6a:fc: e3:ba:78:44:5f:8e:f7:e8:2c:4b:76:a1:e8:d4:b0:71:d3:03: 25:72:26:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4yjLcJdeSoWqcbEpdTLGAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMzdjYTNhYmNhNWUxNGFjMTFiYzdmM2MxNTYyYTY0ZDYz OTFkMjIwHhcNMjYwMTAxMDkwMTE1WhcNMjYwMTAyMDkwMTE1WjAzMTEwLwYDVQQD EygxY2NlNDJkMjJiYmVmNjI2ZDM1NmE5NmMxYzg3MTZhZDkyMDVkMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qWwIMfhDJ1rCNa8tcGi72vRUQVn 5z25kM1G5JZ1aYnEic3pVoAEAjmH/zVM4KfwomOn2K9r112vZUgOdzW2hP5TkRgG XwAvaIjc/cIy0kZKQLgpFsW4+qHJO5hufblZm7edWU+0Rk0H97cT+bnISQvdBLtU GenGNMS1dx+Z34VMdesqigNKemhqc8af+qRg+O6Gh1l/KPz8swuqfVhMZCC3oUDd IMFiZQ4uPHZMI20v3zSo91cGozyWGiuN672JGQ6ub0jpLw8/SydkUSShDeqe3maf BvKL/IIAaWDkEQ3mXVOExx7HIWKZ5DNARqBk387Yd3jz+IAGTbltUUbAkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzOQtIrvvYm01apbByHFq2SBdBeMB8GA1UdIwQY MBaAFM43yjq8peFKwRvH88FWKmTWOR0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvempmS09yeWw0VXJCRzhmendWWXFaTlk1SFNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9iZTY2YmYtNTYxYy00ZDU1LTgyNmQt MDM4MDM1ZDgwYzBiLzEvempmS09yeWw0VXJCRzhmendWWXFaTlk1SFNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9iZTY2YmYtNTYxYy00ZDU1LTgyNmQtMDM4MDM1ZDgwYzBi LzEvempmS09yeWw0VXJCRzhmendWWXFaTlk1SFNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWSEBAuR hjkm3jQvjcjAnXr3DPjpE+hPmUoNbfH8Z3THCUk4LJZqwdq/a7dZV3sursDUGGff eU0d9sQ0oGzaF4YnGyYTYZT0JvDQqPxE1QKcG1DU3ZHlcUlaEo2Dto0oWhqizqfK SSWo3bDO3MoRngBj04GJ0R3Nf+6kOqfCyEZ/XEGu4oTr3QdVXf4Vg1Kxle0Ldu3o 96qSUPPYz0DAAdbSRSFQDAVhfiNkq88ZNY3xpeFr25AoPGGJqL/cZj7BPcAHMw76 9XFgD9m6cCC06Bo9EWmYX2hLYqaeWlRk66GGxfmw80Hv6Gr847p4RF+O9+gsS3ah 6NSwcdMDJXImxA== -----END CERTIFICATE-----Generated at Thu Jan 1 14:27:53 2026 by rpki-client