This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft File: zv4YrJccgqd399sZ_6szSjJTdwM.mft (raw, json) Hash identifier: Pz12TNBgVc2WI5b7aJj5u25I1P1toWkOJpBV0BbOzIo= Subject key identifier: 94:56:B9:B2:E2:2A:54:9C:60:27:1D:DC:32:AD:47:AA:7D:C4:D7:56 Authority key identifier: CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03 Certificate issuer: /CN=cefe18ac971c82a777f7db19ffab334a32537703 Certificate serial: 019BAFB94B14FB02E630413BE4A9231DF2E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft Manifest number: 1276 Signing time: Mon 12 Jan 2026 01:01:54 +0000 Manifest this update: Mon 12 Jan 2026 01:01:54 +0000 Manifest next update: Tue 13 Jan 2026 01:01:54 +0000 Files and hashes: 1: zv4YrJccgqd399sZ_6szSjJTdwM.crl (hash: fXwaEGwLDD+wpUYdAoE70QZCwCLlyQSivPOAXPWEW9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 01:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:b9:4b:14:fb:02:e6:30:41:3b:e4:a9:23:1d:f2:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cefe18ac971c82a777f7db19ffab334a32537703 Validity Not Before: Jan 12 01:01:54 2026 GMT Not After : Jan 13 01:01:54 2026 GMT Subject: CN=9456b9b2e22a549c60271ddc32ad47aa7dc4d756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:97:48:b2:b7:70:b4:83:de:f6:00:7d:b2:67: 1e:38:53:e9:90:98:b2:b6:a0:cb:f4:ef:d3:20:5b: fa:96:f1:10:1a:02:24:0c:2f:94:90:8f:ae:75:7b: 77:a4:00:44:0c:0b:f9:ea:cf:82:37:e9:5e:fa:4e: 02:44:8a:1d:e0:ea:2a:20:7e:ee:98:6b:14:34:93: fd:01:cb:0a:b2:cf:5b:d7:92:01:71:e5:e2:1a:4c: e2:cc:e5:ed:36:a1:0b:38:74:35:82:a3:67:f0:7a: f5:98:58:69:1f:e3:91:5c:7d:c5:14:93:0b:0c:a1: dc:c7:e2:94:5c:f7:03:7e:61:7f:aa:85:f6:f9:58: 21:0c:25:1f:3b:4b:89:a2:ab:33:4c:ef:ca:13:75: 84:b5:fb:17:fe:69:d9:c7:e7:88:51:64:f2:d5:05: ec:21:e7:5a:29:e2:7b:55:a7:30:d8:65:3b:be:09: 30:af:24:72:b3:be:48:12:36:a4:f5:aa:31:85:29: b8:a4:85:8f:ee:1d:58:e7:df:87:a1:3e:b6:70:3e: 56:0d:36:08:f6:65:5d:33:d1:08:bc:9d:c9:a6:ae: 4e:d7:40:74:99:e6:a5:a2:7d:77:c0:cf:dc:13:59: 1f:10:d3:63:5a:01:25:1d:31:61:49:04:35:4e:91: 63:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:56:B9:B2:E2:2A:54:9C:60:27:1D:DC:32:AD:47:AA:7D:C4:D7:56 X509v3 Authority Key Identifier: keyid:CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:28:44:0d:fa:5f:33:b3:69:6a:67:f6:a0:03:eb:93:63:ab: 0d:a2:ea:88:7e:64:20:b6:16:57:39:28:56:45:1c:91:69:67: 54:90:fa:2f:03:c2:c7:f4:12:17:4a:34:1f:8d:b1:a6:9b:50: 9e:6a:a7:c8:b0:42:8a:4c:08:4e:e9:ff:30:93:a2:21:64:62: 20:c1:f1:41:94:b9:56:3d:08:d3:dc:48:53:c3:78:0a:34:f7: 4a:e2:91:56:66:25:e7:aa:57:de:d7:48:9d:6d:8c:24:0e:b7: 7e:d8:e8:83:24:12:c2:e2:e5:11:91:8d:93:92:6d:27:b6:13: 8e:b8:1d:c9:ae:34:ef:87:7e:01:a0:9f:75:36:3c:4f:64:df: 86:fe:ee:2d:fa:1e:35:61:06:63:36:92:58:61:74:04:d0:78: 6b:a0:0d:1a:65:aa:4b:81:a8:5b:ec:db:9c:e1:89:d8:cf:37: 7d:98:ca:d9:3e:58:49:94:8f:0c:16:1f:e5:ca:08:94:d4:34: 45:29:72:65:f2:9e:52:c9:20:31:ee:1a:bb:3a:86:76:32:72: 29:d8:4d:a9:97:9b:31:3b:94:cf:d5:56:11:bb:0d:c2:84:ce: 9b:04:83:b9:db:96:69:9d:29:e2:20:f0:0b:08:8d:ff:05:97: fe:b2:f4:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvuUsU+wLmMEE75KkjHfLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZmUxOGFjOTcxYzgyYTc3N2Y3ZGIxOWZmYWIzMzRhMzI1 Mzc3MDMwHhcNMjYwMTEyMDEwMTU0WhcNMjYwMTEzMDEwMTU0WjAzMTEwLwYDVQQD Eyg5NDU2YjliMmUyMmE1NDljNjAyNzFkZGMzMmFkNDdhYTdkYzRkNzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZdIsrdwtIPe9gB9smceOFPpkJiy tqDL9O/TIFv6lvEQGgIkDC+UkI+udXt3pABEDAv56s+CN+le+k4CRIod4OoqIH7u mGsUNJP9AcsKss9b15IBceXiGkzizOXtNqELOHQ1gqNn8Hr1mFhpH+ORXH3FFJML DKHcx+KUXPcDfmF/qoX2+VghDCUfO0uJoqszTO/KE3WEtfsX/mnZx+eIUWTy1QXs IedaKeJ7Vacw2GU7vgkwryRys75IEjak9aoxhSm4pIWP7h1Y59+HoT62cD5WDTYI 9mVdM9EIvJ3Jpq5O10B0mealon13wM/cE1kfENNjWgElHTFhSQQ1TpFjHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRWubLiKlScYCcd3DKtR6p9xNdWMB8GA1UdIwQY MBaAFM7+GKyXHIKnd/fbGf+rM0oyU3cDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenY0WXJKY2NncWQzOTlzWl82c3pTakpUZHdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83Yzc5YTktNjFiMC00ODRjLTg3ZTUt ODE2MTExMzQ0ZmJmLzEvenY0WXJKY2NncWQzOTlzWl82c3pTakpUZHdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC83Yzc5YTktNjFiMC00ODRjLTg3ZTUtODE2MTExMzQ0ZmJm LzEvenY0WXJKY2NncWQzOTlzWl82c3pTakpUZHdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFChEDfpf M7Npamf2oAPrk2OrDaLqiH5kILYWVzkoVkUckWlnVJD6LwPCx/QSF0o0H42xpptQ nmqnyLBCikwITun/MJOiIWRiIMHxQZS5Vj0I09xIU8N4CjT3SuKRVmYl56pX3tdI nW2MJA63ftjogyQSwuLlEZGNk5JtJ7YTjrgdya4074d+AaCfdTY8T2Tfhv7uLfoe NWEGYzaSWGF0BNB4a6ANGmWqS4GoW+zbnOGJ2M83fZjK2T5YSZSPDBYf5coIlNQ0 RSlyZfKeUskgMe4auzqGdjJyKdhNqZebMTuUz9VWEbsNwoTOmwSDuduWaZ0p4iDw CwiN/wWX/rL0+Q== -----END CERTIFICATE-----Generated at Mon Jan 12 07:38:27 2026 by rpki-client