This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft File: ZAD5U62_21K3iBX-z8DozeCXYsM.mft (raw, json) Hash identifier: BAEfuolzlymG9fBbJtmTwvETLoW9n7gQEeyob9578mE= Subject key identifier: 19:42:53:2D:55:BD:A4:77:0B:EE:EA:7E:B2:48:B1:65:14:D0:B4:38 Authority key identifier: 64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3 Certificate issuer: /CN=6400f953adbfdb52b78815fecfc0e8cde09762c3 Certificate serial: 019B8195F90926CB579D87DCF43028DA09B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft Manifest number: 129B Signing time: Sat 03 Jan 2026 02:00:48 +0000 Manifest this update: Sat 03 Jan 2026 02:00:48 +0000 Manifest next update: Sun 04 Jan 2026 02:00:48 +0000 Files and hashes: 1: 0K2GHqkNtHFH0tB9nWXJ94AFGAw.roa (hash: 5NSYWTgnAdKm8Hqko31XGdj55Gsj1FCzKYaW0vszh0w=) 2: ZAD5U62_21K3iBX-z8DozeCXYsM.crl (hash: Q+cJQLBMlE39NI3CB2zXfY6YjZg/yCnaShMD4zgqy8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:95:f9:09:26:cb:57:9d:87:dc:f4:30:28:da:09:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6400f953adbfdb52b78815fecfc0e8cde09762c3 Validity Not Before: Jan 3 02:00:48 2026 GMT Not After : Jan 4 02:00:48 2026 GMT Subject: CN=1942532d55bda4770beeea7eb248b16514d0b438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:57:76:bb:cd:eb:5f:87:22:b5:44:b7:63:c4: d8:36:ef:09:f5:76:4e:42:04:3c:96:5e:7c:51:85: 7e:7a:ef:d0:fb:ee:16:a2:49:ed:e3:17:62:94:56: a4:8e:49:de:ea:b2:d6:18:5f:66:da:e2:07:71:92: eb:ae:4d:5f:1e:d7:2b:fb:52:1b:23:73:f9:dc:36: 68:f3:5c:72:23:5f:9c:fd:36:0b:d1:49:1c:23:ef: 58:8a:73:27:fe:58:f5:41:93:05:7d:1a:99:4f:d3: de:5c:d2:fd:9f:46:9c:cc:af:59:29:39:60:d4:4e: 57:23:75:9c:47:c0:28:b5:01:6c:2e:54:9e:d1:e0: ec:9b:ea:1f:1f:82:82:c5:9d:b0:76:dd:ad:12:4a: f7:80:fd:8a:e3:93:9f:3b:61:de:89:eb:97:fc:80: 33:3d:81:cc:8e:b7:16:d3:b2:f6:d5:4c:e6:64:fa: 2c:66:40:3d:50:03:6b:40:49:15:da:41:47:02:88: d1:72:75:fb:5f:c0:aa:10:f0:43:98:67:54:b7:fa: c3:d5:61:cb:03:bf:74:8b:27:91:0f:fc:62:2b:9e: 88:6a:77:75:10:5f:62:9d:16:33:c9:23:ee:1c:92: 7f:83:39:1b:0f:fd:08:e0:2b:db:e7:29:bd:2b:a3: 31:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:42:53:2D:55:BD:A4:77:0B:EE:EA:7E:B2:48:B1:65:14:D0:B4:38 X509v3 Authority Key Identifier: keyid:64:00:F9:53:AD:BF:DB:52:B7:88:15:FE:CF:C0:E8:CD:E0:97:62:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAD5U62_21K3iBX-z8DozeCXYsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8308ff-fec8-48cb-9485-563c10dec80d/1/ZAD5U62_21K3iBX-z8DozeCXYsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:48:1a:b4:2c:8b:c3:50:95:d4:6f:3a:2b:06:96:90:5d:01: 2f:1e:06:30:b6:31:f0:41:9d:7e:5d:56:db:7a:f9:49:ee:4a: 3c:71:82:36:87:5d:8d:65:22:2a:f4:2a:b7:16:cd:e7:d5:21: 59:f6:0a:e5:1b:8c:16:9d:6f:ab:f4:02:74:ae:ff:68:01:3b: 1c:df:4d:f4:64:2a:75:02:f9:42:2d:cb:e2:4c:66:7d:23:c0: 85:55:43:ba:0a:83:9e:dd:21:27:b4:21:8a:cd:f9:08:eb:43: c8:b3:85:d2:c3:68:1d:9f:e3:2e:47:a2:b0:98:1b:16:cc:f6: bb:c6:63:71:fd:99:fc:3a:aa:1a:ea:84:60:ea:c2:e2:19:8b: 8e:be:fa:29:dc:46:cb:91:7a:5a:22:ff:6e:9e:91:e7:ce:4a: 36:4a:14:a9:02:a6:5c:0d:df:57:c0:42:9f:91:af:3b:20:48: a1:87:73:9c:0f:51:f8:c3:c9:9d:a8:14:a3:4e:31:ce:ce:92: 37:76:95:35:59:cf:d3:b7:34:71:93:49:ab:79:de:66:6e:30: d8:8b:14:dc:ae:20:da:5c:04:ac:7e:dd:50:9c:7c:1c:cc:34: 18:40:3d:55:36:29:e2:90:4b:c5:0a:51:61:68:a6:05:63:3d: 43:f6:3f:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuBlfkJJstXnYfc9DAo2gm2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MDBmOTUzYWRiZmRiNTJiNzg4MTVmZWNmYzBlOGNkZTA5 NzYyYzMwHhcNMjYwMTAzMDIwMDQ4WhcNMjYwMTA0MDIwMDQ4WjAzMTEwLwYDVQQD EygxOTQyNTMyZDU1YmRhNDc3MGJlZWVhN2ViMjQ4YjE2NTE0ZDBiNDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFd2u83rX4citUS3Y8TYNu8J9XZO QgQ8ll58UYV+eu/Q++4Woknt4xdilFakjkne6rLWGF9m2uIHcZLrrk1fHtcr+1Ib I3P53DZo81xyI1+c/TYL0UkcI+9YinMn/lj1QZMFfRqZT9PeXNL9n0aczK9ZKTlg 1E5XI3WcR8AotQFsLlSe0eDsm+ofH4KCxZ2wdt2tEkr3gP2K45OfO2HeieuX/IAz PYHMjrcW07L21UzmZPosZkA9UANrQEkV2kFHAojRcnX7X8CqEPBDmGdUt/rD1WHL A790iyeRD/xiK56Iand1EF9inRYzySPuHJJ/gzkbD/0I4Cvb5ym9K6MxPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlCUy1VvaR3C+7qfrJIsWUU0LQ4MB8GA1UdIwQY MBaAFGQA+VOtv9tSt4gV/s/A6M3gl2LDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkFENVU2Ml8yMUszaUJYLXo4RG96ZUNYWXNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MzA4ZmYtZmVjOC00OGNiLTk0ODUt NTYzYzEwZGVjODBkLzEvWkFENVU2Ml8yMUszaUJYLXo4RG96ZUNYWXNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84MzA4ZmYtZmVjOC00OGNiLTk0ODUtNTYzYzEwZGVjODBk LzEvWkFENVU2Ml8yMUszaUJYLXo4RG96ZUNYWXNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEgatCyL w1CV1G86KwaWkF0BLx4GMLYx8EGdfl1W23r5Se5KPHGCNoddjWUiKvQqtxbN59Uh WfYK5RuMFp1vq/QCdK7/aAE7HN9N9GQqdQL5Qi3L4kxmfSPAhVVDugqDnt0hJ7Qh is35COtDyLOF0sNoHZ/jLkeisJgbFsz2u8Zjcf2Z/DqqGuqEYOrC4hmLjr76KdxG y5F6WiL/bp6R585KNkoUqQKmXA3fV8BCn5GvOyBIoYdznA9R+MPJnagUo04xzs6S N3aVNVnP07c0cZNJq3neZm4w2IsU3K4g2lwErH7dUJx8HMw0GEA9VTYp4pBLxQpR YWimBWM9Q/Y/sQ== -----END CERTIFICATE-----Generated at Sat Jan 3 04:19:51 2026 by rpki-client