This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft File: z00MprtJ1sl6k6M0lXdt4nUDPUw.mft (raw, json) Hash identifier: Zb0g+WriOcDguruVCr8CVWVOps6C1SgCBmYGLQ6qxj4= Subject key identifier: EB:0A:B1:8D:3B:D1:64:BA:05:77:EC:B9:C5:96:41:6E:90:2B:40:EB Authority key identifier: CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C Certificate issuer: /CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c Certificate serial: 019BB05DC1B0BD5F5D30DAD7D983F20D8F48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft Manifest number: 0B2A Signing time: Mon 12 Jan 2026 04:01:32 +0000 Manifest this update: Mon 12 Jan 2026 04:01:32 +0000 Manifest next update: Tue 13 Jan 2026 04:01:32 +0000 Files and hashes: 1: z00MprtJ1sl6k6M0lXdt4nUDPUw.crl (hash: KdQVDUWlosPZmrl6sNDrqKOMNGWxmhltzinZzEjv1BI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:5d:c1:b0:bd:5f:5d:30:da:d7:d9:83:f2:0d:8f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c Validity Not Before: Jan 12 04:01:32 2026 GMT Not After : Jan 13 04:01:32 2026 GMT Subject: CN=eb0ab18d3bd164ba0577ecb9c596416e902b40eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:33:4f:f4:ea:6b:23:d9:26:21:ab:9f:a9:ef: a8:55:d1:6a:60:f2:29:62:98:8d:95:06:05:96:9f: fc:b4:af:d5:00:69:1c:7b:71:90:6a:48:b2:b4:0d: 24:f0:7b:6c:e3:9b:1e:b3:1a:b8:42:1e:e8:3c:e3: 5d:50:d7:8d:a5:89:61:e6:86:f2:91:dd:16:ce:e2: 09:bc:33:ea:79:36:4e:b6:22:8c:40:e5:5f:56:2c: 5b:19:b6:ee:b8:b8:cf:dc:11:6f:27:2c:e9:26:ae: 49:69:8a:b4:1f:42:2b:5c:19:94:ea:9e:91:41:d7: 94:5f:be:d1:2d:30:bf:23:60:75:a0:a7:03:99:8a: bd:ad:24:b6:3d:c4:cd:23:50:16:ae:ec:28:c4:eb: e4:c3:b1:5c:6f:7a:39:37:3f:de:77:b8:19:d2:93: f9:3a:30:d4:22:a4:ff:ea:a8:0b:b8:f0:bf:b1:1b: 60:f8:e6:01:89:6f:51:92:28:98:f8:a4:19:16:5c: 19:e0:01:dc:9b:ee:73:28:24:4f:a1:bd:d4:cd:5c: a4:78:1e:09:c3:34:9f:4f:c0:93:ae:5e:c7:13:d4: d7:95:64:51:99:a3:59:db:a2:a5:e4:d8:3b:2c:69: b0:5c:3f:36:36:26:c6:08:a1:d4:64:cc:90:17:5a: ce:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0A:B1:8D:3B:D1:64:BA:05:77:EC:B9:C5:96:41:6E:90:2B:40:EB X509v3 Authority Key Identifier: keyid:CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d4:61:45:c8:ec:5c:37:4e:b4:f5:f1:cf:c6:6f:59:f4:b5: 68:b6:dd:28:2a:b9:ec:45:df:4f:ce:e9:16:5d:37:05:ef:60: d5:4d:a7:88:1d:32:37:b2:93:95:6a:91:29:0e:f2:7b:87:9f: e5:22:47:95:01:bd:3c:44:dd:58:c5:04:ba:4f:23:09:0b:79: 34:21:9e:8e:47:0b:dc:56:3d:32:44:25:7f:5d:05:31:d2:4b: 38:75:a3:d2:ad:4d:30:d1:6b:c1:e0:4e:33:ef:c7:75:06:7f: 2e:a0:87:5a:9d:67:4e:f5:25:af:c0:29:ee:f6:6f:2b:32:db: ff:25:81:83:0b:80:41:80:9b:78:67:9a:6e:8e:5a:7b:2c:26: 1d:9c:ab:f9:31:6d:b6:cb:8e:94:7a:ed:ec:6b:fc:0b:ad:62: 9f:3f:e0:0b:99:3c:08:72:94:be:c3:05:77:bf:bf:ed:f6:b0: ef:8f:0d:23:c7:96:42:ee:39:43:28:87:37:4c:3e:80:05:ab: f3:c2:b4:81:bb:7f:80:5b:26:89:e2:e6:e5:76:ee:13:07:f0: 86:6c:5f:ff:d5:2f:49:98:1f:84:ae:0c:63:d0:60:78:b9:03: b4:41:f5:48:72:04:ee:5a:8b:54:e1:ed:1a:5d:06:83:c9:7d: 33:25:0a:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwXcGwvV9dMNrX2YPyDY9IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNGQwY2E2YmI0OWQ2Yzk3YTkzYTMzNDk1Nzc2ZGUyNzUw MzNkNGMwHhcNMjYwMTEyMDQwMTMyWhcNMjYwMTEzMDQwMTMyWjAzMTEwLwYDVQQD EyhlYjBhYjE4ZDNiZDE2NGJhMDU3N2VjYjljNTk2NDE2ZTkwMmI0MGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzNP9OprI9kmIaufqe+oVdFqYPIp YpiNlQYFlp/8tK/VAGkce3GQakiytA0k8Hts45sesxq4Qh7oPONdUNeNpYlh5oby kd0WzuIJvDPqeTZOtiKMQOVfVixbGbbuuLjP3BFvJyzpJq5JaYq0H0IrXBmU6p6R QdeUX77RLTC/I2B1oKcDmYq9rSS2PcTNI1AWruwoxOvkw7Fcb3o5Nz/ed7gZ0pP5 OjDUIqT/6qgLuPC/sRtg+OYBiW9RkiiY+KQZFlwZ4AHcm+5zKCRPob3UzVykeB4J wzSfT8CTrl7HE9TXlWRRmaNZ26Kl5Ng7LGmwXD82NibGCKHUZMyQF1rOwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsKsY070WS6BXfsucWWQW6QK0DrMB8GA1UdIwQY MBaAFM9NDKa7SdbJepOjNJV3beJ1Az1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejAwTXBydEoxc2w2azZNMGxYZHQ0blVEUFV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85Mzk1YTAtMjNiOC00ZTQ2LTllNDkt YWMwYmQzN2M5ZGMxLzEvejAwTXBydEoxc2w2azZNMGxYZHQ0blVEUFV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC85Mzk1YTAtMjNiOC00ZTQ2LTllNDktYWMwYmQzN2M5ZGMx LzEvejAwTXBydEoxc2w2azZNMGxYZHQ0blVEUFV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9RhRcjs XDdOtPXxz8ZvWfS1aLbdKCq57EXfT87pFl03Be9g1U2niB0yN7KTlWqRKQ7ye4ef 5SJHlQG9PETdWMUEuk8jCQt5NCGejkcL3FY9MkQlf10FMdJLOHWj0q1NMNFrweBO M+/HdQZ/LqCHWp1nTvUlr8Ap7vZvKzLb/yWBgwuAQYCbeGeabo5aeywmHZyr+TFt tsuOlHrt7Gv8C61inz/gC5k8CHKUvsMFd7+/7faw748NI8eWQu45QyiHN0w+gAWr 88K0gbt/gFsmieLm5XbuEwfwhmxf/9UvSZgfhK4MY9BgeLkDtEH1SHIE7lqLVOHt Gl0Gg8l9MyUK2w== -----END CERTIFICATE-----Generated at Mon Jan 12 10:19:42 2026 by rpki-client