This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft File: dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft (raw, json) Hash identifier: e1D0coCzsgx/PUgQ015sf1ZKlYhEr4u7GpHozv3+6oU= Subject key identifier: 81:79:35:91:E5:70:01:6A:88:20:DE:36:19:30:3A:56:7C:99:E7:2C Authority key identifier: 75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A Certificate issuer: /CN=75923ec546df371d09e68c6b06025ea31261234a Certificate serial: 019BAE6FF982FE1F13E6A3BEB49B3E29F51D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft Manifest number: 17C0 Signing time: Sun 11 Jan 2026 19:02:12 +0000 Manifest this update: Sun 11 Jan 2026 19:02:12 +0000 Manifest next update: Mon 12 Jan 2026 19:02:12 +0000 Files and hashes: 1: dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl (hash: 6cCd9OSjgx3Q6BjfS1nxvn+og8d+OUwAZHLPRkOSlZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:6f:f9:82:fe:1f:13:e6:a3:be:b4:9b:3e:29:f5:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75923ec546df371d09e68c6b06025ea31261234a Validity Not Before: Jan 11 19:02:12 2026 GMT Not After : Jan 12 19:02:12 2026 GMT Subject: CN=81793591e570016a8820de3619303a567c99e72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:13:7e:33:f1:1b:63:69:ec:39:a6:62:99:8f: b4:c0:cd:c1:97:ff:31:41:be:07:b2:f7:a6:d7:3b: ee:61:1b:a6:42:37:e3:b2:6e:42:61:25:4f:e8:2d: 9b:78:70:3c:e3:35:66:02:4f:58:d1:76:7b:ef:b0: d1:1f:46:2a:d2:67:28:05:90:d7:3d:38:fc:01:14: a8:01:2c:95:aa:77:05:64:da:b6:c2:0b:75:6a:78: 84:dd:40:11:37:23:3f:e9:13:1c:f0:6c:f4:0f:53: 24:5a:d8:95:51:4d:b5:3f:16:d0:0a:9f:56:3b:27: 1d:27:80:c2:01:2f:2e:e2:be:90:76:f3:40:20:c5: 46:2d:f4:70:ae:f1:ef:17:bd:48:4b:6b:3c:70:f3: c4:dd:de:b1:cc:8f:dc:12:7d:98:2a:f8:77:fc:1f: d1:2b:6a:9f:3e:2e:fc:53:56:c0:64:1c:34:4f:31: ad:5a:9b:ab:7b:71:76:70:47:92:62:d8:c0:b3:8b: 0b:f9:a8:45:cf:c0:62:1e:73:f7:be:7e:a7:6b:4f: d2:45:f1:30:fa:45:4f:45:66:a8:23:21:85:1d:0d: 7e:21:9a:52:90:73:1b:cf:b7:94:fc:d8:4b:f9:7b: 03:ab:96:2d:a0:ec:ab:bb:05:4f:69:4a:60:11:e0: 79:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:79:35:91:E5:70:01:6A:88:20:DE:36:19:30:3A:56:7C:99:E7:2C X509v3 Authority Key Identifier: keyid:75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:59:bc:1a:ba:9a:53:ee:0e:8b:55:97:bd:36:60:d7:dd:cd: a9:33:3b:28:3c:17:d2:f0:9a:7e:cc:03:1b:9c:25:97:13:6f: fe:bb:58:2e:b4:d3:b4:36:1b:77:d6:3d:dc:eb:89:b1:a0:0c: cb:38:ca:0a:55:77:50:ff:ff:2f:3b:ba:a2:ca:9c:59:a1:67: b5:9c:a0:4b:50:5e:fe:c6:cb:8c:2e:04:97:cf:27:3f:c8:bd: 80:05:b6:4e:0f:74:27:a7:f1:f7:41:fc:51:66:c2:a6:6d:19: a7:c6:29:6a:76:08:c1:4f:c2:de:96:4e:92:e8:fb:93:83:66: ce:4d:fc:50:1d:aa:a8:ac:ba:58:fc:83:de:87:aa:58:ef:a3: 3a:6d:f3:9e:1e:78:22:c4:ac:e4:1a:b2:0e:62:a8:0e:66:48: c4:d7:d8:cb:ce:26:4f:4b:91:6e:02:e9:61:08:e9:7a:4f:8b: f5:01:e3:73:74:a4:8c:81:fa:ec:fe:7a:96:f0:5a:93:0f:f7: 94:21:39:f9:22:20:55:bc:90:56:87:4c:da:5f:fd:f0:32:4d: be:b6:02:f3:c2:a2:af:a9:03:82:cd:06:13:ca:29:76:50:dd: d7:dd:e4:1a:e8:35:0f:a7:74:5d:ca:bb:72:d2:b4:9d:62:82: 9e:33:e2:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuub/mC/h8T5qO+tJs+KfUdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1OTIzZWM1NDZkZjM3MWQwOWU2OGM2YjA2MDI1ZWEzMTI2 MTIzNGEwHhcNMjYwMTExMTkwMjEyWhcNMjYwMTEyMTkwMjEyWjAzMTEwLwYDVQQD Eyg4MTc5MzU5MWU1NzAwMTZhODgyMGRlMzYxOTMwM2E1NjdjOTllNzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxN+M/EbY2nsOaZimY+0wM3Bl/8x Qb4Hsvem1zvuYRumQjfjsm5CYSVP6C2beHA84zVmAk9Y0XZ777DRH0Yq0mcoBZDX PTj8ARSoASyVqncFZNq2wgt1aniE3UARNyM/6RMc8Gz0D1MkWtiVUU21PxbQCp9W OycdJ4DCAS8u4r6QdvNAIMVGLfRwrvHvF71IS2s8cPPE3d6xzI/cEn2YKvh3/B/R K2qfPi78U1bAZBw0TzGtWpure3F2cEeSYtjAs4sL+ahFz8BiHnP3vn6na0/SRfEw +kVPRWaoIyGFHQ1+IZpSkHMbz7eU/NhL+XsDq5YtoOyruwVPaUpgEeB5twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIF5NZHlcAFqiCDeNhkwOlZ8mecsMB8GA1UdIwQY MBaAFHWSPsVG3zcdCeaMawYCXqMSYSNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFpJLXhVYmZOeDBKNW94ckJnSmVveEpoSTBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNmM2OGMtMDQ4Mi00YjYyLWIyYWYt NDg1NTM2NmVkZmVmLzEvZFpJLXhVYmZOeDBKNW94ckJnSmVveEpoSTBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yNmM2OGMtMDQ4Mi00YjYyLWIyYWYtNDg1NTM2NmVkZmVm LzEvZFpJLXhVYmZOeDBKNW94ckJnSmVveEpoSTBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFm8Grqa U+4Oi1WXvTZg193NqTM7KDwX0vCafswDG5wllxNv/rtYLrTTtDYbd9Y93OuJsaAM yzjKClV3UP//Lzu6osqcWaFntZygS1Be/sbLjC4El88nP8i9gAW2Tg90J6fx90H8 UWbCpm0Zp8YpanYIwU/C3pZOkuj7k4Nmzk38UB2qqKy6WPyD3oeqWO+jOm3znh54 IsSs5BqyDmKoDmZIxNfYy84mT0uRbgLpYQjpek+L9QHjc3SkjIH67P56lvBakw/3 lCE5+SIgVbyQVodM2l/98DJNvrYC88Kir6kDgs0GE8opdlDd193kGug1D6d0Xcq7 ctK0nWKCnjPiqQ== -----END CERTIFICATE-----Generated at Sun Jan 11 23:58:15 2026 by rpki-client