This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft File: ZAGt7bycjxxs8jifx_dB7fTxnyw.mft (raw, json) Hash identifier: 0HVtYcmQOLTgGFUsXGZLCWCR5YuEdzKomff3XrRrZkA= Subject key identifier: 9C:0B:E7:A9:02:AF:D2:C4:80:BE:A2:D7:EC:11:0C:83:8B:46:53:8F Authority key identifier: 64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C Certificate issuer: /CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c Certificate serial: 019BB35E7595C6FDC9F343A0CA315FD57DCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft Manifest number: 0E22 Signing time: Mon 12 Jan 2026 18:01:10 +0000 Manifest this update: Mon 12 Jan 2026 18:01:10 +0000 Manifest next update: Tue 13 Jan 2026 18:01:10 +0000 Files and hashes: 1: KSszcmUpPo8JBR4sfrdc2vv2aRg.roa (hash: ew+549kVqxTodrfZ3xKjeuTH8QTf9/NbVOyVAUCiCUA=) 2: ZAGt7bycjxxs8jifx_dB7fTxnyw.crl (hash: GTKY7HAWbmpOPGeF+wlXkyi7lfxQfQOgx1+4DzmVlB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:5e:75:95:c6:fd:c9:f3:43:a0:ca:31:5f:d5:7d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c Validity Not Before: Jan 12 18:01:10 2026 GMT Not After : Jan 13 18:01:10 2026 GMT Subject: CN=9c0be7a902afd2c480bea2d7ec110c838b46538f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b4:ba:cf:da:58:6b:e6:49:54:15:a1:63:1d: 72:38:54:82:dc:07:6a:c1:bc:48:11:20:16:a2:e0: b3:ad:8f:1f:b8:44:a8:1f:c2:45:d5:b2:c2:bc:8e: e2:f9:67:ba:65:4e:a2:be:27:5d:86:b8:0d:43:36: 4c:63:c9:c2:5d:8f:14:43:c9:b8:f2:7d:52:3a:4c: 3d:ab:e6:24:65:d5:14:36:8d:39:46:db:86:70:8a: b4:4a:db:1c:6f:5f:5f:08:c9:0f:d3:5d:f0:d2:84: 9d:9d:6b:87:dc:5c:b6:63:3d:1a:3d:9b:8e:fb:f7: 90:48:9e:25:b0:39:83:1d:e4:59:ec:9a:0e:a5:d9: 70:41:54:1b:ff:0e:06:c0:4c:aa:c9:9e:d6:bc:93: 25:e5:41:74:69:f8:c0:f3:91:c1:ac:2c:78:54:8d: d6:bd:d3:36:1a:e8:93:12:a0:5d:d5:e0:6e:a0:25: 31:40:f9:51:57:90:c1:75:ca:17:8e:89:7c:18:1c: 74:c4:29:12:e1:b6:9e:37:08:12:4e:bd:e6:ce:10: ff:74:7c:8f:03:95:6d:77:70:46:42:3f:a3:aa:f3: f3:80:b4:2c:6f:0f:07:45:e2:65:27:d9:c8:c3:9a: 1a:c9:ae:ef:22:90:c7:ed:b8:11:2b:fd:12:c9:89: 45:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0B:E7:A9:02:AF:D2:C4:80:BE:A2:D7:EC:11:0C:83:8B:46:53:8F X509v3 Authority Key Identifier: keyid:64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:23:3e:d1:c1:d5:86:02:a0:80:c3:ea:a6:3f:24:12:f5:a9: 95:35:fc:9c:6a:df:b0:c4:dd:20:b1:a9:72:6e:57:dd:09:88: d0:d5:90:e6:39:bf:f5:13:8e:03:7c:67:1a:6d:a1:c8:f5:33: 6a:7c:88:fc:5a:e3:e4:48:03:75:43:b0:4e:32:ee:94:da:a7: e8:cd:bd:9e:71:f5:e3:4e:44:1f:d3:a3:2f:94:26:b0:b3:10: 9a:2b:64:82:ed:15:7c:c4:58:0f:73:4e:ab:54:5c:a4:12:22: f9:5b:c5:bc:4a:24:b2:8a:7b:8f:b5:eb:a7:b6:48:79:86:31: d2:10:3f:12:a5:b7:a0:a9:10:3a:61:0b:0c:32:47:3c:ff:cc: 45:4d:81:19:6d:43:2f:b3:b1:98:9f:93:84:06:05:49:45:03: 76:fd:c3:a3:39:66:83:9c:3c:2b:a5:c8:5c:f2:0a:ef:1c:36: 66:41:b5:fe:03:08:83:7e:5e:63:a6:52:55:da:63:2e:dd:d5: 14:d4:dc:e9:98:5f:ac:34:83:13:e6:6b:43:e5:3f:1a:46:c4: bb:74:b3:7a:71:b9:a5:1f:cd:15:3d:1f:8e:76:45:75:13:11: c2:4c:ab:92:82:e6:f2:b0:2a:15:ad:20:96:36:b4:41:78:40: 2f:d5:d7:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzXnWVxv3J80OgyjFf1X3PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MDFhZGVkYmM5YzhmMWM2Y2YyMzg5ZmM3Zjc0MWVkZjRm MTlmMmMwHhcNMjYwMTEyMTgwMTEwWhcNMjYwMTEzMTgwMTEwWjAzMTEwLwYDVQQD Eyg5YzBiZTdhOTAyYWZkMmM0ODBiZWEyZDdlYzExMGM4MzhiNDY1MzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7S6z9pYa+ZJVBWhYx1yOFSC3Adq wbxIESAWouCzrY8fuESoH8JF1bLCvI7i+We6ZU6ividdhrgNQzZMY8nCXY8UQ8m4 8n1SOkw9q+YkZdUUNo05RtuGcIq0Stscb19fCMkP013w0oSdnWuH3Fy2Yz0aPZuO +/eQSJ4lsDmDHeRZ7JoOpdlwQVQb/w4GwEyqyZ7WvJMl5UF0afjA85HBrCx4VI3W vdM2GuiTEqBd1eBuoCUxQPlRV5DBdcoXjol8GBx0xCkS4baeNwgSTr3mzhD/dHyP A5Vtd3BGQj+jqvPzgLQsbw8HReJlJ9nIw5oaya7vIpDH7bgRK/0SyYlF9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwL56kCr9LEgL6i1+wRDIOLRlOPMB8GA1UdIwQY MBaAFGQBre28nI8cbPI4n8f3Qe308Z8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkFHdDdieWNqeHhzOGppZnhfZEI3ZlR4bnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85OGM4NjAtNTI5OC00ODQ2LWJlYWEt MzU2YzA5NmJjNmY5LzEvWkFHdDdieWNqeHhzOGppZnhfZEI3ZlR4bnl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS85OGM4NjAtNTI5OC00ODQ2LWJlYWEtMzU2YzA5NmJjNmY5 LzEvWkFHdDdieWNqeHhzOGppZnhfZEI3ZlR4bnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCM+0cHV hgKggMPqpj8kEvWplTX8nGrfsMTdILGpcm5X3QmI0NWQ5jm/9ROOA3xnGm2hyPUz anyI/Frj5EgDdUOwTjLulNqn6M29nnH1405EH9OjL5QmsLMQmitkgu0VfMRYD3NO q1RcpBIi+VvFvEoksop7j7Xrp7ZIeYYx0hA/EqW3oKkQOmELDDJHPP/MRU2BGW1D L7OxmJ+ThAYFSUUDdv3Dozlmg5w8K6XIXPIK7xw2ZkG1/gMIg35eY6ZSVdpjLt3V FNTc6ZhfrDSDE+ZrQ+U/GkbEu3SzenG5pR/NFT0fjnZFdRMRwkyrkoLm8rAqFa0g lja0QXhAL9XXjg== -----END CERTIFICATE-----Generated at Mon Jan 12 22:48:30 2026 by rpki-client