This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft File: Zur1u0vnZQbp7F5pTYtYUKmOciM.mft (raw, json) Hash identifier: u+kj7C9ANi7pHxQMmTKDXa5d5cXzySlK2ueNOkOAFZs= Subject key identifier: F8:B5:4D:40:17:FB:6E:72:09:B3:3F:92:D6:CE:2E:B9:1E:FF:9E:95 Authority key identifier: 66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23 Certificate issuer: /CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223 Certificate serial: 019B969E0B78A5B9E9DD20BABE45B8FDBB47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft Manifest number: 0E23 Signing time: Wed 07 Jan 2026 04:01:38 +0000 Manifest this update: Wed 07 Jan 2026 04:01:38 +0000 Manifest next update: Thu 08 Jan 2026 04:01:38 +0000 Files and hashes: 1: Zur1u0vnZQbp7F5pTYtYUKmOciM.crl (hash: j41ajCHzg15M7Pk1Rs8nygLxEh1eyQZXyghYoFv8Rts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:96:9e:0b:78:a5:b9:e9:dd:20:ba:be:45:b8:fd:bb:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223 Validity Not Before: Jan 7 04:01:38 2026 GMT Not After : Jan 8 04:01:38 2026 GMT Subject: CN=f8b54d4017fb6e7209b33f92d6ce2eb91eff9e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e6:34:19:2d:43:5e:17:b7:d3:18:5a:e2:4a: 7f:75:85:45:f6:e3:4d:a5:a0:cc:05:28:1e:9f:e2: 04:fc:d5:8e:65:89:52:9b:f4:e4:3d:bf:1e:52:8c: a1:9a:b6:48:8a:ef:a5:e8:06:a9:20:b4:47:9c:3f: 21:82:e7:02:66:77:db:99:ff:88:82:bd:8b:5c:b7: be:85:9a:10:34:71:42:c7:22:53:cf:e2:7e:19:db: c7:fe:c7:11:49:bf:bd:62:b2:0c:9a:b0:83:94:89: e6:f4:53:c8:98:ce:40:a4:2f:36:1b:f1:c9:8f:7e: bf:2a:03:cc:65:98:52:84:fd:57:0e:32:fa:53:8d: 77:32:85:a7:7e:47:d5:dc:f3:70:92:1e:ff:92:b5: 48:e6:54:4a:ac:16:14:17:30:ec:f6:72:25:98:aa: f5:e5:a4:8d:fc:c0:6c:9e:2d:a7:d4:b1:c7:bf:f2: 12:c6:99:08:e4:c4:99:60:22:d2:5a:f2:20:95:3d: da:7e:6f:c5:7a:08:83:13:d3:3a:33:bb:14:3b:e4: 51:b0:c9:3a:d2:d5:42:8a:d4:52:de:33:45:fb:4b: 6e:87:f3:d1:15:0f:b0:d8:8e:21:5b:d7:51:29:1b: f3:c0:64:e6:0c:3c:07:fe:26:ec:6f:db:24:f5:fc: f2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B5:4D:40:17:FB:6E:72:09:B3:3F:92:D6:CE:2E:B9:1E:FF:9E:95 X509v3 Authority Key Identifier: keyid:66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:cd:1f:38:8b:44:75:16:36:00:52:54:ee:3a:f7:75:09:e5: e9:7c:2d:27:da:7b:60:0e:8c:79:f8:d8:7e:27:81:85:79:6b: 6a:d2:52:80:a9:b7:0b:bf:49:29:9e:97:71:54:c6:f2:5c:13: 96:fe:11:77:11:78:93:22:8f:34:3d:bc:09:94:c8:ab:12:11: 99:ec:96:a3:5a:75:79:5e:aa:40:2f:a8:f4:fc:d5:55:2a:4b: a3:a0:56:ac:08:0a:51:2f:67:10:c0:9f:ca:ed:c1:ce:ef:c2: a8:7e:42:d4:cf:18:93:3e:dd:33:d8:17:a7:a6:ef:24:ea:9b: 86:73:a8:65:ff:8b:57:48:2b:e5:f1:ff:f3:57:34:1b:65:32: e1:6e:a9:cf:56:94:ee:8d:8f:66:57:70:01:1c:18:95:5d:2e: e0:91:be:8f:ac:fe:8f:6a:e7:fd:78:af:cd:dd:24:46:46:43: 90:e7:b5:c7:54:a0:07:f8:df:bf:5a:a9:ba:88:9b:72:2a:c2: 4e:53:48:35:82:4b:16:1b:ce:fb:2b:56:ef:8b:4f:fc:db:88: ae:a4:5e:50:4e:9f:de:0a:ee:d8:2e:33:81:24:9c:94:d5:b9: f7:bc:9d:d4:ae:3a:8e:e4:0f:09:d9:b8:8e:82:37:4d:f6:06: 78:48:0b:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuWngt4pbnp3SC6vkW4/btHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZWFmNWJiNGJlNzY1MDZlOWVjNWU2OTRkOGI1ODUwYTk4 ZTcyMjMwHhcNMjYwMTA3MDQwMTM4WhcNMjYwMTA4MDQwMTM4WjAzMTEwLwYDVQQD EyhmOGI1NGQ0MDE3ZmI2ZTcyMDliMzNmOTJkNmNlMmViOTFlZmY5ZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+Y0GS1DXhe30xha4kp/dYVF9uNN paDMBSgen+IE/NWOZYlSm/TkPb8eUoyhmrZIiu+l6AapILRHnD8hgucCZnfbmf+I gr2LXLe+hZoQNHFCxyJTz+J+GdvH/scRSb+9YrIMmrCDlInm9FPImM5ApC82G/HJ j36/KgPMZZhShP1XDjL6U413MoWnfkfV3PNwkh7/krVI5lRKrBYUFzDs9nIlmKr1 5aSN/MBsni2n1LHHv/ISxpkI5MSZYCLSWvIglT3afm/FegiDE9M6M7sUO+RRsMk6 0tVCitRS3jNF+0tuh/PRFQ+w2I4hW9dRKRvzwGTmDDwH/ibsb9sk9fzyTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPi1TUAX+25yCbM/ktbOLrke/56VMB8GA1UdIwQY MBaAFGbq9btL52UG6exeaU2LWFCpjnIjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnVyMXUwdm5aUWJwN0Y1cFRZdFlVS21PY2lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iYjYxMGQtNmQ0Zi00NmFlLWIwZDgt OWExZjgyZTBkYmY1LzEvWnVyMXUwdm5aUWJwN0Y1cFRZdFlVS21PY2lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iYjYxMGQtNmQ0Zi00NmFlLWIwZDgtOWExZjgyZTBkYmY1 LzEvWnVyMXUwdm5aUWJwN0Y1cFRZdFlVS21PY2lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEs0fOItE dRY2AFJU7jr3dQnl6XwtJ9p7YA6MefjYfieBhXlratJSgKm3C79JKZ6XcVTG8lwT lv4RdxF4kyKPND28CZTIqxIRmeyWo1p1eV6qQC+o9PzVVSpLo6BWrAgKUS9nEMCf yu3Bzu/CqH5C1M8Ykz7dM9gXp6bvJOqbhnOoZf+LV0gr5fH/81c0G2Uy4W6pz1aU 7o2PZldwARwYlV0u4JG+j6z+j2rn/Xivzd0kRkZDkOe1x1SgB/jfv1qpuoibcirC TlNINYJLFhvO+ytW74tP/NuIrqReUE6f3gru2C4zgSSclNW597yd1K46juQPCdm4 joI3TfYGeEgL5g== -----END CERTIFICATE-----Generated at Wed Jan 7 06:58:43 2026 by rpki-client