This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft File: zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft (raw, json) Hash identifier: Bzj+E+3b2R/VakFyQ5fy7Lz9PsMdYL6NLLv6c6U+T4Q= Subject key identifier: 9E:F1:80:8F:EE:17:C7:EF:23:27:C6:AF:DE:69:5F:42:32:34:5E:9E Authority key identifier: CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6 Certificate issuer: /CN=cd02d077485a15e8a254a49edd994d4fc2a908a6 Certificate serial: 019B79383FA41A7E848F5429DC374FC9551F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft Manifest number: 17A5 Signing time: Thu 01 Jan 2026 11:01:27 +0000 Manifest this update: Thu 01 Jan 2026 11:01:27 +0000 Manifest next update: Fri 02 Jan 2026 11:01:27 +0000 Files and hashes: 1: OcgJ9gd4XPf2cH1vwOSDk8wsWCY.roa (hash: mqfa0ZehsylIV/d7nzWZG94iCnmV9oQHVVnGpSyC+og=) 2: pdwDWOzc3QzXOsiEO7HIgZ0hQdQ.roa (hash: m/RIMhJds2RFVXbpbtSSU1vxyz5pEJiQgY8y39qh5vk=) 3: zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl (hash: z09LPTzxPhCiFbhSdrADwZGcIaFB/NSiXLyqUxNe1H0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:38:3f:a4:1a:7e:84:8f:54:29:dc:37:4f:c9:55:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd02d077485a15e8a254a49edd994d4fc2a908a6 Validity Not Before: Jan 1 11:01:27 2026 GMT Not After : Jan 2 11:01:27 2026 GMT Subject: CN=9ef1808fee17c7ef2327c6afde695f4232345e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:de:00:c7:cf:d3:c3:f6:7f:42:2e:b5:01:80: 5a:21:33:02:82:a0:35:5d:8e:45:b0:b1:e0:c0:63: 62:ef:45:68:98:57:ad:7e:c5:d8:f1:62:3f:b4:df: ec:3b:d8:fd:dc:8b:49:fe:34:b6:a3:3e:26:7c:81: 4e:63:37:b7:03:64:86:47:59:73:ed:9c:c0:cc:99: 07:b7:3c:a8:d7:a7:48:fa:38:72:bc:eb:b2:ec:0b: da:e8:ae:a9:a0:78:b9:e0:c3:6c:c2:c7:ef:e2:d0: b6:b8:76:91:06:6d:24:e1:f8:fd:17:e0:34:ea:a5: 97:5c:ed:72:a9:63:22:29:9c:3a:de:d4:cf:75:6c: 4b:0f:27:b0:47:9b:78:80:50:40:33:b8:17:b8:79: c8:fd:dc:86:eb:22:76:69:51:65:3f:79:06:35:45: c3:a4:6c:0c:a9:4a:45:3b:1f:dd:6c:92:6a:ee:d7: 90:c7:56:7c:53:64:b1:fe:7e:59:d4:e5:86:05:1a: 03:ff:2c:81:38:7b:5c:fb:50:65:17:3f:77:24:2b: f8:49:f1:1e:e6:cb:5b:2b:af:07:f2:e2:4f:46:3f: 3a:a7:52:54:3e:f4:1b:fd:9d:fe:f4:6f:2c:8b:4f: f3:09:1e:10:69:ec:19:17:40:35:0d:48:3a:3f:b6: c3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F1:80:8F:EE:17:C7:EF:23:27:C6:AF:DE:69:5F:42:32:34:5E:9E X509v3 Authority Key Identifier: keyid:CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:8a:53:48:c5:9c:4b:70:ed:9e:67:c3:e3:e3:f5:04:be:bc: 01:d2:eb:d3:a5:b4:be:25:53:e8:8a:d6:df:55:0e:99:ce:65: 7f:aa:33:a0:db:bb:02:d4:81:b6:e5:66:1b:2a:14:f8:e4:df: a6:86:0b:e1:83:76:9b:af:6d:51:42:d0:a7:7d:2d:a4:be:e5: b4:5c:7a:eb:3e:fe:3c:96:bd:83:e0:3d:2a:14:14:26:cc:c6: 23:6d:4c:56:6a:a3:76:d1:41:ee:77:24:09:6e:50:72:cb:15: 80:72:21:3a:3d:b5:d7:04:46:d7:67:b2:02:47:01:5a:b9:ed: fe:7e:4a:06:59:a6:dc:bd:a1:c6:9a:0f:e7:b8:f5:97:b3:d8: 5a:94:6c:f9:26:c3:84:4a:c9:3d:1e:84:b2:90:fb:e2:85:bf: 33:ef:ac:6d:19:dd:09:c0:a9:fd:b9:4d:b0:4f:f0:ec:8b:58: a8:6f:a2:f7:93:73:6a:88:24:66:32:0f:a5:f9:bf:ab:87:68: 58:2f:b6:f4:99:f4:e8:68:83:13:65:6e:d8:75:de:55:e6:59: c8:a5:7d:b5:44:82:a4:7c:76:a7:08:24:a1:71:ab:ea:cb:08: 20:11:fe:4e:90:23:d6:8f:e5:48:2c:fd:e5:9a:74:05:5c:30: 7e:42:62:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5OD+kGn6Ej1Qp3DdPyVUfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMDJkMDc3NDg1YTE1ZThhMjU0YTQ5ZWRkOTk0ZDRmYzJh OTA4YTYwHhcNMjYwMTAxMTEwMTI3WhcNMjYwMTAyMTEwMTI3WjAzMTEwLwYDVQQD Eyg5ZWYxODA4ZmVlMTdjN2VmMjMyN2M2YWZkZTY5NWY0MjMyMzQ1ZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod4Ax8/Tw/Z/Qi61AYBaITMCgqA1 XY5FsLHgwGNi70VomFetfsXY8WI/tN/sO9j93ItJ/jS2oz4mfIFOYze3A2SGR1lz 7ZzAzJkHtzyo16dI+jhyvOuy7Ava6K6poHi54MNswsfv4tC2uHaRBm0k4fj9F+A0 6qWXXO1yqWMiKZw63tTPdWxLDyewR5t4gFBAM7gXuHnI/dyG6yJ2aVFlP3kGNUXD pGwMqUpFOx/dbJJq7teQx1Z8U2Sx/n5Z1OWGBRoD/yyBOHtc+1BlFz93JCv4SfEe 5stbK68H8uJPRj86p1JUPvQb/Z3+9G8si0/zCR4QaewZF0A1DUg6P7bD2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7xgI/uF8fvIyfGr95pX0IyNF6eMB8GA1UdIwQY MBaAFM0C0HdIWhXoolSknt2ZTU/CqQimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelFMUWQwaGFGZWlpVktTZTNabE5UOEtwQ0tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82NzE0ZjEtYzNkNi00ODc1LWEzNmEt MzdlODBkYWI5MzAyLzEvelFMUWQwaGFGZWlpVktTZTNabE5UOEtwQ0tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS82NzE0ZjEtYzNkNi00ODc1LWEzNmEtMzdlODBkYWI5MzAy LzEvelFMUWQwaGFGZWlpVktTZTNabE5UOEtwQ0tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYpTSMWc S3DtnmfD4+P1BL68AdLr06W0viVT6IrW31UOmc5lf6ozoNu7AtSBtuVmGyoU+OTf poYL4YN2m69tUULQp30tpL7ltFx66z7+PJa9g+A9KhQUJszGI21MVmqjdtFB7nck CW5QcssVgHIhOj211wRG12eyAkcBWrnt/n5KBlmm3L2hxpoP57j1l7PYWpRs+SbD hErJPR6EspD74oW/M++sbRndCcCp/blNsE/w7ItYqG+i95NzaogkZjIPpfm/q4do WC+29Jn06GiDE2Vu2HXeVeZZyKV9tUSCpHx2pwgkoXGr6ssIIBH+TpAj1o/lSCz9 5Zp0BVwwfkJivA== -----END CERTIFICATE-----Generated at Thu Jan 1 15:57:41 2026 by rpki-client