This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/407bad-aed8-45e1-b3ea-2b369158a8b3/1/zrxhguhz_3oDHIiV79xXw2hx3XI.mft File: zrxhguhz_3oDHIiV79xXw2hx3XI.mft (raw, json) Hash identifier: Dyv0chyMBVqBPR9aIvrxEZWbjtRpCGOdFuU714bKfYI= Subject key identifier: BD:0B:49:84:AE:9D:A7:7A:4B:0A:26:2B:DA:DF:BC:9B:B0:2C:F2:83 Authority key identifier: CE:BC:61:82:E8:73:FF:7A:03:1C:88:95:EF:DC:57:C3:68:71:DD:72 Certificate issuer: /CN=cebc6182e873ff7a031c8895efdc57c36871dd72 Certificate serial: 019BAC8135AEF5A32467315B6772C7CF4ACF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrxhguhz_3oDHIiV79xXw2hx3XI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/407bad-aed8-45e1-b3ea-2b369158a8b3/1/zrxhguhz_3oDHIiV79xXw2hx3XI.mft Manifest number: 0356 Signing time: Sun 11 Jan 2026 10:01:47 +0000 Manifest this update: Sun 11 Jan 2026 10:01:47 +0000 Manifest next update: Mon 12 Jan 2026 10:01:47 +0000 Files and hashes: 1: zrxhguhz_3oDHIiV79xXw2hx3XI.crl (hash: +A4koQSKi2rFTwP+dS5IDtQlX/v/AWbegkdHTfTSstY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/407bad-aed8-45e1-b3ea-2b369158a8b3/1/zrxhguhz_3oDHIiV79xXw2hx3XI.crl rsync://rpki.ripe.net/repository/DEFAULT/da/407bad-aed8-45e1-b3ea-2b369158a8b3/1/zrxhguhz_3oDHIiV79xXw2hx3XI.mft rsync://rpki.ripe.net/repository/DEFAULT/zrxhguhz_3oDHIiV79xXw2hx3XI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:81:35:ae:f5:a3:24:67:31:5b:67:72:c7:cf:4a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cebc6182e873ff7a031c8895efdc57c36871dd72 Validity Not Before: Jan 11 10:01:47 2026 GMT Not After : Jan 12 10:01:47 2026 GMT Subject: CN=bd0b4984ae9da77a4b0a262bdadfbc9bb02cf283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:71:4b:ee:32:55:9d:8d:87:50:23:24:26:eb: 2d:2e:87:a7:67:eb:d1:52:1b:0c:73:7c:08:42:76: 40:31:20:12:12:b2:c3:e7:b6:8b:df:b6:44:9c:79: 00:5b:ae:ab:0b:5c:19:70:8c:6b:7f:2a:1a:ec:a4: 2b:2a:51:35:23:15:e2:4b:b4:4b:7d:56:ce:4e:ef: 5b:90:70:5a:b0:9a:82:73:4a:15:5a:5c:df:51:fc: de:63:70:53:59:a2:7c:3a:c1:c8:37:88:eb:80:1d: 11:11:51:10:e1:ad:37:75:bb:ee:cb:22:69:57:4e: 27:a1:3b:bd:d4:b3:21:3a:9f:d2:66:57:09:46:bd: 0d:e1:b4:c5:8c:42:0d:c5:9b:50:9a:1e:88:49:6a: 86:67:e1:64:a7:39:d7:bb:b8:40:9b:e7:7d:bf:7f: cd:a4:a1:22:aa:a8:00:93:cf:b6:8c:dd:7e:5d:9e: 27:f7:10:df:75:ae:7c:82:f5:8c:c4:aa:4d:c8:b2: 26:55:d4:d7:53:e4:09:d6:7b:fb:7b:47:64:8f:98: a8:3e:65:f5:88:bc:09:2e:d2:c5:8e:12:90:2f:4d: 80:80:51:c4:e8:34:a2:19:d1:e4:ee:87:2e:ec:5a: 0a:54:01:65:db:5c:7a:88:d5:0e:5a:25:36:75:38: f2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0B:49:84:AE:9D:A7:7A:4B:0A:26:2B:DA:DF:BC:9B:B0:2C:F2:83 X509v3 Authority Key Identifier: keyid:CE:BC:61:82:E8:73:FF:7A:03:1C:88:95:EF:DC:57:C3:68:71:DD:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrxhguhz_3oDHIiV79xXw2hx3XI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/407bad-aed8-45e1-b3ea-2b369158a8b3/1/zrxhguhz_3oDHIiV79xXw2hx3XI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/407bad-aed8-45e1-b3ea-2b369158a8b3/1/zrxhguhz_3oDHIiV79xXw2hx3XI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:22:b2:32:0f:ea:30:63:0b:d9:92:af:23:9d:42:3e:7c:07: ce:a4:fe:5a:02:c7:8f:68:a7:54:24:41:8f:a3:e3:0f:84:53: da:3d:33:d9:11:cd:31:60:0d:51:51:67:2f:62:9b:4b:30:71: bd:de:59:60:13:4b:f0:80:32:c6:0a:75:ea:53:d8:28:fb:11: c6:d1:f2:58:de:fb:82:98:d3:63:72:ba:6e:aa:9b:0b:12:c7: 8d:e9:42:1f:87:bf:94:4a:d8:a7:b9:38:86:e1:95:61:9d:0f: 6a:be:65:02:ef:c1:02:35:85:c7:ff:2c:cf:c0:eb:76:5a:b3: fc:e1:ee:53:5b:68:d9:b3:1f:eb:bc:a2:45:bf:ab:2b:b0:49: 9b:8e:cc:13:f1:b6:76:27:7b:c4:de:13:e5:bb:eb:e5:14:7d: 04:d2:a3:6d:89:8d:db:a2:d4:cf:8c:e8:38:ed:dc:ea:4a:21: 44:5b:05:e5:64:f7:dc:7d:89:a2:6e:e7:4e:ef:2e:87:a6:39: aa:6e:4d:04:3e:29:64:d1:ba:19:ba:e3:c7:9c:ed:bb:64:69: 7d:a3:37:cf:b2:06:60:d0:3b:44:17:60:f8:09:43:4a:ea:dc: 64:5b:05:0a:5d:32:bd:bb:cb:e6:39:94:03:00:99:4a:ab:eb: af:81:ab:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZusgTWu9aMkZzFbZ3LHz0rPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYmM2MTgyZTg3M2ZmN2EwMzFjODg5NWVmZGM1N2MzNjg3 MWRkNzIwHhcNMjYwMTExMTAwMTQ3WhcNMjYwMTEyMTAwMTQ3WjAzMTEwLwYDVQQD EyhiZDBiNDk4NGFlOWRhNzdhNGIwYTI2MmJkYWRmYmM5YmIwMmNmMjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnFL7jJVnY2HUCMkJustLoenZ+vR UhsMc3wIQnZAMSASErLD57aL37ZEnHkAW66rC1wZcIxrfyoa7KQrKlE1IxXiS7RL fVbOTu9bkHBasJqCc0oVWlzfUfzeY3BTWaJ8OsHIN4jrgB0REVEQ4a03dbvuyyJp V04noTu91LMhOp/SZlcJRr0N4bTFjEINxZtQmh6ISWqGZ+FkpznXu7hAm+d9v3/N pKEiqqgAk8+2jN1+XZ4n9xDfda58gvWMxKpNyLImVdTXU+QJ1nv7e0dkj5ioPmX1 iLwJLtLFjhKQL02AgFHE6DSiGdHk7ocu7FoKVAFl21x6iNUOWiU2dTjycQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0LSYSunad6SwomK9rfvJuwLPKDMB8GA1UdIwQY MBaAFM68YYLoc/96AxyIle/cV8Nocd1yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenJ4aGd1aHpfM29ESElpVjc5eFh3Mmh4M1hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS80MDdiYWQtYWVkOC00NWUxLWIzZWEt MmIzNjkxNThhOGIzLzEvenJ4aGd1aHpfM29ESElpVjc5eFh3Mmh4M1hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS80MDdiYWQtYWVkOC00NWUxLWIzZWEtMmIzNjkxNThhOGIz LzEvenJ4aGd1aHpfM29ESElpVjc5eFh3Mmh4M1hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCKyMg/q MGML2ZKvI51CPnwHzqT+WgLHj2inVCRBj6PjD4RT2j0z2RHNMWANUVFnL2KbSzBx vd5ZYBNL8IAyxgp16lPYKPsRxtHyWN77gpjTY3K6bqqbCxLHjelCH4e/lErYp7k4 huGVYZ0Par5lAu/BAjWFx/8sz8Drdlqz/OHuU1to2bMf67yiRb+rK7BJm47ME/G2 did7xN4T5bvr5RR9BNKjbYmN26LUz4zoOO3c6kohRFsF5WT33H2Jom7nTu8uh6Y5 qm5NBD4pZNG6Gbrjx5ztu2RpfaM3z7IGYNA7RBdg+AlDSurcZFsFCl0yvbvL5jmU AwCZSqvrr4Gr6w== -----END CERTIFICATE-----Generated at Sun Jan 11 14:39:19 2026 by rpki-client