This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft File: ZlBwd85_MPwGht0JNKiZl98x6Ew.mft (raw, json) Hash identifier: N0SewJqkwd07uhfLqM8Uihltgw1Q3/F/GNQxiZSqHmM= Subject key identifier: 43:BC:6F:6C:85:26:3B:96:33:58:CF:AC:25:90:A6:96:C4:B6:F8:13 Authority key identifier: 66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C Certificate issuer: /CN=66507077ce7f30fc0686dd0934a89997df31e84c Certificate serial: 019B966638BE328A1CD3A221613A9825FB71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft Manifest number: 0339 Signing time: Wed 07 Jan 2026 03:00:40 +0000 Manifest this update: Wed 07 Jan 2026 03:00:40 +0000 Manifest next update: Thu 08 Jan 2026 03:00:40 +0000 Files and hashes: 1: ZlBwd85_MPwGht0JNKiZl98x6Ew.crl (hash: xHw+OLYAriTrKadQ7c7LOin7sZKhXp59NLzLEjrhEMM=) 2: oEr0iaXnd0sYycCq7BAkuxMnYgU.roa (hash: htrjhsBScBfwfdBlz2NkGUVVLsJ41MJX7K3Gfxtec48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:96:66:38:be:32:8a:1c:d3:a2:21:61:3a:98:25:fb:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66507077ce7f30fc0686dd0934a89997df31e84c Validity Not Before: Jan 7 03:00:40 2026 GMT Not After : Jan 8 03:00:40 2026 GMT Subject: CN=43bc6f6c85263b963358cfac2590a696c4b6f813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:b7:c2:d4:25:e9:22:e3:4a:cd:05:88:9b: b8:4b:58:8e:38:9d:7a:fc:8d:fe:12:04:6b:66:77: e5:e6:20:61:d4:64:0c:4b:07:7c:00:1c:d0:55:5b: ec:77:74:69:58:63:6e:dd:4e:38:64:68:64:7f:0b: a3:f5:5d:33:29:ab:07:69:e1:d1:3f:f7:f0:77:b2: d3:3a:1b:80:23:1e:78:1e:69:29:7d:d0:18:ea:54: 63:dd:4a:ca:4a:f2:bc:87:9a:84:fa:2c:39:fe:11: c3:88:bc:fd:2f:01:fd:51:3b:f7:be:66:ff:1a:d5: 2c:9f:22:96:3b:e3:fd:f1:95:85:8d:0e:d9:c3:f0: f3:c0:76:52:9a:b1:99:11:1e:74:96:e5:7e:ac:e4: 54:c4:2c:6a:d0:d2:11:a6:61:ba:24:d8:0f:3f:a6: e3:1e:31:63:d3:36:5f:13:a2:1d:84:30:ec:f0:95: 55:7b:05:59:16:66:98:f8:60:01:2c:37:ad:1f:e0: 2b:3a:9f:61:f3:f6:8c:80:81:19:02:fc:88:91:96: 0e:47:79:5d:a9:f2:bd:73:bb:5b:0b:f3:8c:9b:d8: 87:51:fe:4b:af:2f:98:86:36:ab:05:24:5c:70:5f: 94:54:e3:11:8a:06:07:3b:6a:96:23:90:c7:b1:12: 8e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BC:6F:6C:85:26:3B:96:33:58:CF:AC:25:90:A6:96:C4:B6:F8:13 X509v3 Authority Key Identifier: keyid:66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:3c:70:cf:63:17:78:b5:e3:7f:71:35:59:81:fd:2b:ad:fd: c1:9b:f6:16:2a:d1:4f:46:99:5b:bc:02:00:7f:cb:5d:a7:41: c3:49:c2:4a:9c:16:00:2c:03:62:dd:9b:0e:7e:b7:46:c2:d2: bc:0b:77:25:f1:70:e7:09:b5:13:a6:7d:b0:a6:37:eb:e1:6c: 0b:34:36:64:9d:b6:d4:7a:d1:ee:9c:fa:73:0d:1d:3e:00:da: 17:17:34:05:ee:93:ea:a3:7e:04:81:d2:12:8c:82:4b:bb:a7: 1d:f6:6e:a5:f8:39:23:65:49:d9:9f:9d:22:1a:50:d7:cc:b4: da:a8:82:cc:d5:3b:7f:9a:9f:31:8d:21:66:d1:fa:d7:60:2f: d7:df:30:b3:23:5c:7f:d0:1b:8a:0e:a3:cd:34:e2:e8:2b:af: fd:57:68:d4:bc:3a:ce:f5:d9:d8:31:40:52:d6:a5:fb:e3:81: b4:6f:42:8b:7d:e1:8b:8d:88:1e:48:ee:eb:81:6b:b3:2f:0b: 33:6a:e8:88:d1:68:04:2b:ac:7b:34:9e:08:51:e3:2b:81:66: f7:7f:3d:43:7e:eb:73:a1:d0:0e:8b:fb:42:c2:e2:23:b5:3b: 82:cc:9a:5a:6f:bf:41:dd:81:8e:a8:b8:e8:9a:bb:39:f4:47: 99:67:df:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuWZji+Mooc06IhYTqYJftxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NTA3MDc3Y2U3ZjMwZmMwNjg2ZGQwOTM0YTg5OTk3ZGYz MWU4NGMwHhcNMjYwMTA3MDMwMDQwWhcNMjYwMTA4MDMwMDQwWjAzMTEwLwYDVQQD Eyg0M2JjNmY2Yzg1MjYzYjk2MzM1OGNmYWMyNTkwYTY5NmM0YjZmODEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAa3wtQl6SLjSs0FiJu4S1iOOJ16 /I3+EgRrZnfl5iBh1GQMSwd8ABzQVVvsd3RpWGNu3U44ZGhkfwuj9V0zKasHaeHR P/fwd7LTOhuAIx54HmkpfdAY6lRj3UrKSvK8h5qE+iw5/hHDiLz9LwH9UTv3vmb/ GtUsnyKWO+P98ZWFjQ7Zw/DzwHZSmrGZER50luV+rORUxCxq0NIRpmG6JNgPP6bj HjFj0zZfE6IdhDDs8JVVewVZFmaY+GABLDetH+ArOp9h8/aMgIEZAvyIkZYOR3ld qfK9c7tbC/OMm9iHUf5Lry+YhjarBSRccF+UVOMRigYHO2qWI5DHsRKOnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEO8b2yFJjuWM1jPrCWQppbEtvgTMB8GA1UdIwQY MBaAFGZQcHfOfzD8BobdCTSomZffMehMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmxCd2Q4NV9NUHdHaHQwSk5LaVpsOTh4NkV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hMzYzNjUtODU1Mi00YTk3LThiZmEt Y2NhZjQ0ZDQxNjQ4LzEvWmxCd2Q4NV9NUHdHaHQwSk5LaVpsOTh4NkV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hMzYzNjUtODU1Mi00YTk3LThiZmEtY2NhZjQ0ZDQxNjQ4 LzEvWmxCd2Q4NV9NUHdHaHQwSk5LaVpsOTh4NkV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDxwz2MX eLXjf3E1WYH9K639wZv2FirRT0aZW7wCAH/LXadBw0nCSpwWACwDYt2bDn63RsLS vAt3JfFw5wm1E6Z9sKY36+FsCzQ2ZJ221HrR7pz6cw0dPgDaFxc0Be6T6qN+BIHS EoyCS7unHfZupfg5I2VJ2Z+dIhpQ18y02qiCzNU7f5qfMY0hZtH612Av198wsyNc f9Abig6jzTTi6Cuv/Vdo1Lw6zvXZ2DFAUtal++OBtG9Ci33hi42IHkju64Frsy8L M2roiNFoBCusezSeCFHjK4Fm9389Q37rc6HQDov7QsLiI7U7gsyaWm+/Qd2Bjqi4 6Jq7OfRHmWffBA== -----END CERTIFICATE-----Generated at Wed Jan 7 05:17:38 2026 by rpki-client