This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft File: ZlBwd85_MPwGht0JNKiZl98x6Ew.mft (raw, json) Hash identifier: BxjuHMWv6Bshrwo1kmxo9kbbKXQ+SEgKLfuWhmdVkzM= Subject key identifier: 22:60:9B:9A:EA:45:3B:C1:B5:2C:E6:89:2E:87:9C:4B:2D:4E:BA:0E Authority key identifier: 66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C Certificate issuer: /CN=66507077ce7f30fc0686dd0934a89997df31e84c Certificate serial: 019BAD93B0DBDE68ED96B2EFED84B781CF6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft Manifest number: 0345 Signing time: Sun 11 Jan 2026 15:01:35 +0000 Manifest this update: Sun 11 Jan 2026 15:01:35 +0000 Manifest next update: Mon 12 Jan 2026 15:01:35 +0000 Files and hashes: 1: ZlBwd85_MPwGht0JNKiZl98x6Ew.crl (hash: te+X+XjIcEiu51oxFzei5+sj3FfRAgEMLNHGmw7Ced0=) 2: oEr0iaXnd0sYycCq7BAkuxMnYgU.roa (hash: htrjhsBScBfwfdBlz2NkGUVVLsJ41MJX7K3Gfxtec48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 15:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:93:b0:db:de:68:ed:96:b2:ef:ed:84:b7:81:cf:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66507077ce7f30fc0686dd0934a89997df31e84c Validity Not Before: Jan 11 15:01:35 2026 GMT Not After : Jan 12 15:01:35 2026 GMT Subject: CN=22609b9aea453bc1b52ce6892e879c4b2d4eba0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0a:1a:b9:c4:01:a8:c8:52:48:44:d5:66:45: ae:b3:8f:8b:ce:a3:c5:0e:ee:3e:24:75:3c:dd:fc: be:db:7d:10:04:49:30:44:84:94:0b:98:76:04:dd: 63:89:27:01:ad:3b:dd:ca:df:d8:91:66:45:a3:e5: a7:70:25:a8:5e:32:60:89:06:fb:46:bd:56:ba:80: 9e:21:ac:9f:fd:38:ba:64:61:dc:16:38:2a:2e:2f: 5f:f7:e9:ce:94:e0:3c:1d:bb:ab:8d:c8:5e:61:63: 68:ec:73:21:e9:88:b0:2d:b2:9e:d8:4e:c1:dd:12: 5f:33:98:da:46:8c:ad:24:78:50:6d:bc:fa:b6:98: b5:48:9b:ed:27:ac:c1:a9:07:51:f3:a7:d1:a5:74: e5:e4:f7:c6:bb:9f:6d:ab:b7:31:35:fa:29:fb:33: 53:fb:c3:db:2d:d0:a4:e1:ae:3e:e8:23:ee:02:20: 2e:cd:e9:0f:b6:7d:fd:8d:70:68:1a:53:0b:35:28: 95:0c:41:f6:97:f1:af:39:5e:45:43:13:07:b8:ca: e3:bf:9b:d9:ca:88:16:c8:91:76:24:e6:fa:6f:2b: 93:c5:5e:99:24:21:79:17:11:52:34:0e:2d:26:1f: f7:20:0f:67:d2:e4:12:9f:f8:18:03:0a:3e:3e:cd: 3a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:60:9B:9A:EA:45:3B:C1:B5:2C:E6:89:2E:87:9C:4B:2D:4E:BA:0E X509v3 Authority Key Identifier: keyid:66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b2:e7:fb:17:b8:3c:df:5c:ad:e4:6b:e8:46:64:9a:63:35: 23:40:7a:79:f6:01:54:85:be:a5:a9:5f:85:4e:37:ca:e7:dc: 4d:18:d6:df:a6:72:01:4a:71:f8:8b:89:49:92:cc:2f:18:8d: 60:c9:4a:86:75:ac:9e:1d:0d:c5:49:11:77:20:43:74:6d:0f: 73:85:bb:15:87:7d:77:1a:12:4f:ee:f6:c7:e0:1d:32:94:88: db:2c:6f:a0:db:75:8e:9a:53:81:d8:a3:1c:d6:1f:2f:b0:d0: 88:a6:7d:9f:4d:a5:2a:df:78:27:9b:3c:70:62:27:03:eb:19: 78:f6:bc:fa:2b:9f:67:16:8a:11:86:7e:bd:65:f4:2b:3e:b6: f2:8e:95:a7:a2:ec:06:b4:25:3c:a2:38:a2:f6:c0:a9:2b:05: c2:25:f4:01:59:c1:2e:59:01:d1:fa:51:96:c8:62:5a:59:44: 91:4f:b1:35:57:21:51:b5:a6:3e:38:19:8f:d2:17:e4:aa:68: ac:ea:64:29:9c:22:53:04:b2:e8:fc:fb:21:8b:e7:77:fc:29: 9c:a5:62:3e:68:9d:91:03:77:c0:3d:f8:64:88:e9:36:e8:5b: be:b1:51:e5:df:b4:80:95:fe:a7:7d:6d:1f:1d:41:bf:a7:7b: 18:a4:10:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutk7Db3mjtlrLv7YS3gc9sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NTA3MDc3Y2U3ZjMwZmMwNjg2ZGQwOTM0YTg5OTk3ZGYz MWU4NGMwHhcNMjYwMTExMTUwMTM1WhcNMjYwMTEyMTUwMTM1WjAzMTEwLwYDVQQD EygyMjYwOWI5YWVhNDUzYmMxYjUyY2U2ODkyZTg3OWM0YjJkNGViYTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2woaucQBqMhSSETVZkWus4+LzqPF Du4+JHU83fy+230QBEkwRISUC5h2BN1jiScBrTvdyt/YkWZFo+WncCWoXjJgiQb7 Rr1WuoCeIayf/Ti6ZGHcFjgqLi9f9+nOlOA8HburjcheYWNo7HMh6YiwLbKe2E7B 3RJfM5jaRoytJHhQbbz6tpi1SJvtJ6zBqQdR86fRpXTl5PfGu59tq7cxNfop+zNT +8PbLdCk4a4+6CPuAiAuzekPtn39jXBoGlMLNSiVDEH2l/GvOV5FQxMHuMrjv5vZ yogWyJF2JOb6byuTxV6ZJCF5FxFSNA4tJh/3IA9n0uQSn/gYAwo+Ps06OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJgm5rqRTvBtSzmiS6HnEstTroOMB8GA1UdIwQY MBaAFGZQcHfOfzD8BobdCTSomZffMehMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmxCd2Q4NV9NUHdHaHQwSk5LaVpsOTh4NkV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hMzYzNjUtODU1Mi00YTk3LThiZmEt Y2NhZjQ0ZDQxNjQ4LzEvWmxCd2Q4NV9NUHdHaHQwSk5LaVpsOTh4NkV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hMzYzNjUtODU1Mi00YTk3LThiZmEtY2NhZjQ0ZDQxNjQ4 LzEvWmxCd2Q4NV9NUHdHaHQwSk5LaVpsOTh4NkV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7Ln+xe4 PN9creRr6EZkmmM1I0B6efYBVIW+palfhU43yufcTRjW36ZyAUpx+IuJSZLMLxiN YMlKhnWsnh0NxUkRdyBDdG0Pc4W7FYd9dxoST+72x+AdMpSI2yxvoNt1jppTgdij HNYfL7DQiKZ9n02lKt94J5s8cGInA+sZePa8+iufZxaKEYZ+vWX0Kz628o6Vp6Ls BrQlPKI4ovbAqSsFwiX0AVnBLlkB0fpRlshiWllEkU+xNVchUbWmPjgZj9IX5Kpo rOpkKZwiUwSy6Pz7IYvnd/wpnKViPmidkQN3wD34ZIjpNuhbvrFR5d+0gJX+p31t Hx1Bv6d7GKQQsg== -----END CERTIFICATE-----Generated at Mon Jan 12 02:04:00 2026 by rpki-client