This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json) Hash identifier: SpZU5exyOS15y96LS1wvhr6eNW25kZHpA1O0i4GqnRI= Subject key identifier: 9B:14:E8:C3:7F:06:6C:08:EA:7C:3C:49:EB:43:69:1C:26:4F:E2:A1 Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af Certificate serial: 019B7C0198AF165067C20CFDFC49F299867D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft Manifest number: 17AA Signing time: Fri 02 Jan 2026 00:00:37 +0000 Manifest this update: Fri 02 Jan 2026 00:00:37 +0000 Manifest next update: Sat 03 Jan 2026 00:00:37 +0000 Files and hashes: 1: h8MAjW2nwR1TuDpY3gaR4GIp5Is.roa (hash: YMOvJ9hakU4xTrKD5f+aHfr6VChVy5zYjPbZPORV+p4=) 2: hq6cHZZmfTc8iDuXctwL9j8vYGA.roa (hash: gnwIM65nm0H3pqLfxC4cpwXQNNz6WAkiHxWYF953SRw=) 3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: Hia4B0BMKyqno+ete/w3AjVzDUDeRm2dkCL+7bymEHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:01:98:af:16:50:67:c2:0c:fd:fc:49:f2:99:86:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af Validity Not Before: Jan 2 00:00:37 2026 GMT Not After : Jan 3 00:00:37 2026 GMT Subject: CN=9b14e8c37f066c08ea7c3c49eb43691c264fe2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:18:ce:2d:f2:8a:a4:d8:f4:c5:f5:ea:fe:0a: d0:ea:d2:0b:53:c3:d4:66:92:32:16:b0:16:dc:cd: 3d:de:e7:d5:68:7f:c6:82:a7:79:9f:1d:6a:1f:06: 89:ea:fa:bf:5b:ba:53:b3:68:4d:55:b3:9e:77:3a: 51:24:4a:73:52:f2:c4:96:2c:0e:7e:fb:e8:4c:dd: 91:20:be:b9:c3:c7:52:4b:47:b3:62:2c:bf:c9:eb: cc:c6:a7:50:a6:cf:92:53:47:e1:2d:85:ef:6e:52: 4a:11:a2:33:69:7c:8d:36:32:8e:3e:2d:26:6d:19: 1c:2d:5e:7a:9b:4e:20:18:ca:c8:85:7f:bd:a8:6c: 94:b0:bb:30:24:af:47:e0:9a:6c:56:1b:f3:e4:36: 36:19:bd:a0:6f:bf:37:c9:b7:1e:2b:fc:0b:51:21: df:d9:f4:ef:0b:16:35:78:38:b5:b8:57:68:89:2d: 85:44:d3:42:f4:8f:7d:b0:33:7b:9b:82:d7:be:29: da:8e:c6:b4:aa:d6:a9:0d:31:49:f7:6b:e9:d4:b6: cd:96:43:96:00:cc:b3:88:24:58:b2:e0:95:40:7a: c6:7f:f1:72:cf:3c:7d:fd:f2:12:cd:4d:dc:35:d8: a4:41:e0:be:20:0b:67:eb:c1:bb:e9:d9:62:fb:b1: ce:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:14:E8:C3:7F:06:6C:08:EA:7C:3C:49:EB:43:69:1C:26:4F:E2:A1 X509v3 Authority Key Identifier: keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:ae:3e:b3:7c:db:97:2e:dd:15:13:5f:ab:39:27:88:c4:f1: c5:cd:e2:ba:79:c2:b3:8a:ab:44:d0:5b:d0:a6:9a:21:1f:b2: 62:71:aa:3e:c3:f7:12:1f:4d:83:38:f4:13:ce:e1:8a:f5:d3: f2:a8:bc:0a:89:69:67:ca:6b:8d:23:b9:5d:bf:b3:2c:35:86: 35:9e:b4:c8:f3:44:f3:4b:6c:09:46:28:6a:44:32:2a:e9:05: 97:e5:3b:ab:0c:ee:7c:bc:f4:b6:2e:0f:8f:9d:ad:4a:84:97: e2:4b:de:11:df:97:ed:83:af:ed:b5:f5:cf:ce:ba:49:69:d0: 57:8f:88:31:c5:9e:61:36:fa:89:cf:31:38:a6:64:be:7b:78: 54:9e:9a:35:23:e8:98:13:1f:06:a7:a2:5d:15:30:20:43:e9: 0d:d7:7c:c0:9a:06:3a:00:38:2f:e6:5a:70:31:c3:5f:41:7b: 32:fc:27:39:02:2e:ef:24:c6:c5:89:17:0e:14:dc:45:17:f3: a7:c9:3b:95:3a:16:f5:df:f2:6d:32:25:62:5d:d9:5f:97:da: 6c:74:a4:6a:f0:7b:ed:fa:87:a6:2d:6d:f4:1e:be:c6:61:8a: 7c:14:4a:9c:67:fb:02:0a:ee:09:6a:5e:14:9c:cd:12:29:13: ac:34:4d:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8AZivFlBnwgz9/EnymYZ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMzllNmJlNDBkODAxMjg4OTZjY2QxMzFmNjVhNTVhZDk4 YTQwYWYwHhcNMjYwMTAyMDAwMDM3WhcNMjYwMTAzMDAwMDM3WjAzMTEwLwYDVQQD Eyg5YjE0ZThjMzdmMDY2YzA4ZWE3YzNjNDllYjQzNjkxYzI2NGZlMmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBjOLfKKpNj0xfXq/grQ6tILU8PU ZpIyFrAW3M093ufVaH/Ggqd5nx1qHwaJ6vq/W7pTs2hNVbOedzpRJEpzUvLEliwO fvvoTN2RIL65w8dSS0ezYiy/yevMxqdQps+SU0fhLYXvblJKEaIzaXyNNjKOPi0m bRkcLV56m04gGMrIhX+9qGyUsLswJK9H4JpsVhvz5DY2Gb2gb783ybceK/wLUSHf 2fTvCxY1eDi1uFdoiS2FRNNC9I99sDN7m4LXvinajsa0qtapDTFJ92vp1LbNlkOW AMyziCRYsuCVQHrGf/Fyzzx9/fISzU3cNdikQeC+IAtn68G76dli+7HOjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsU6MN/BmwI6nw8SetDaRwmT+KhMB8GA1UdIwQY MBaAFMw55r5A2AEoiWzNEx9lpVrZikCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iMmZmOTEtZDRjZS00MDViLWJlYmYt NjA5ZDhmNTY1ZmZjLzEvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iMmZmOTEtZDRjZS00MDViLWJlYmYtNjA5ZDhmNTY1ZmZj LzEvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAga4+s3zb ly7dFRNfqzkniMTxxc3iunnCs4qrRNBb0KaaIR+yYnGqPsP3Eh9Ngzj0E87hivXT 8qi8ColpZ8prjSO5Xb+zLDWGNZ60yPNE80tsCUYoakQyKukFl+U7qwzufLz0ti4P j52tSoSX4kveEd+X7YOv7bX1z866SWnQV4+IMcWeYTb6ic8xOKZkvnt4VJ6aNSPo mBMfBqeiXRUwIEPpDdd8wJoGOgA4L+ZacDHDX0F7MvwnOQIu7yTGxYkXDhTcRRfz p8k7lToW9d/ybTIlYl3ZX5fabHSkavB77fqHpi1t9B6+xmGKfBRKnGf7AgruCWpe FJzNEikTrDRNaA== -----END CERTIFICATE-----Generated at Fri Jan 2 09:51:47 2026 by rpki-client