This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft File: z13l9P7Bb1FvC8TWMcJidmP5BfM.mft (raw, json) Hash identifier: RPY0zZ5+abiuGUHGXLCTlVZmhCfWa6b7eJ9yY+Ra7pc= Subject key identifier: D3:D0:30:6A:D4:D2:26:71:52:23:4B:F0:DA:68:7E:9F:13:30:5D:E1 Authority key identifier: CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3 Certificate issuer: /CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3 Certificate serial: 019B7D828BC8BCE961ACCBA9ED142540DCC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft Manifest number: 17AA Signing time: Fri 02 Jan 2026 07:01:06 +0000 Manifest this update: Fri 02 Jan 2026 07:01:06 +0000 Manifest next update: Sat 03 Jan 2026 07:01:06 +0000 Files and hashes: 1: 3QNCUyziq2NCQzag95T2-uqk5kk.roa (hash: p0EolByolBbZ5LQrfo9cgFCeGxE7C5y0TvaxEkMa+Dc=) 2: z13l9P7Bb1FvC8TWMcJidmP5BfM.crl (hash: GobqGoxIfdOtc8vfYP58N8RkliQPr6HvLX9RAv5CF8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:82:8b:c8:bc:e9:61:ac:cb:a9:ed:14:25:40:dc:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3 Validity Not Before: Jan 2 07:01:06 2026 GMT Not After : Jan 3 07:01:06 2026 GMT Subject: CN=d3d0306ad4d2267152234bf0da687e9f13305de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:18:31:33:2a:e9:d7:87:2e:3c:14:59:41:47: a7:ec:c4:ed:b1:08:0e:a3:cc:3b:c1:0d:0f:f8:f6: 4d:b9:2e:0c:d7:09:a3:a0:05:61:6f:1e:09:de:a7: ae:0a:0a:f2:6c:e2:47:f4:8c:1a:47:e0:de:c9:3c: 83:02:3c:76:f4:c7:de:2c:f8:47:46:ba:6a:e4:a4: 2a:88:9d:26:2a:30:d6:5a:0d:42:8b:4e:8d:ad:03: 3b:a6:56:d9:10:8e:f7:80:88:7e:e1:03:e6:f5:d1: bd:06:59:a5:1d:d5:a0:33:da:f5:62:07:03:03:77: 33:0b:d8:76:12:a0:ef:17:12:49:24:ef:44:c0:fd: 08:59:6f:1e:e1:ba:ee:82:af:15:cc:d6:15:35:0b: bd:f0:8d:dc:a6:a5:75:56:fc:63:d2:b7:95:e2:70: b3:33:22:4b:0b:d1:a7:ad:34:36:82:88:17:4b:1f: ce:60:8e:3f:98:b4:27:f3:70:ad:44:ab:f0:44:fd: 4c:8e:48:ba:89:a9:12:8f:a3:6a:5b:27:b0:53:22: 21:9e:73:8f:1d:e9:db:ec:c2:b7:be:97:4e:d7:43: 15:9b:8f:e1:26:af:85:fd:5e:e5:ab:ad:c8:a9:af: 48:b5:98:19:d3:48:08:b9:d6:4c:6c:eb:51:5b:18: 20:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D0:30:6A:D4:D2:26:71:52:23:4B:F0:DA:68:7E:9F:13:30:5D:E1 X509v3 Authority Key Identifier: keyid:CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a2:3d:e3:f1:cc:1a:c7:ac:a4:e0:79:11:1b:63:28:cc:ec: a7:a5:ca:99:20:d2:24:c3:e3:88:d4:5b:c2:e3:9b:02:e3:8c: 20:3d:3f:d5:3a:2f:83:a8:cb:a9:aa:3d:e9:56:28:8d:6a:44: 88:6a:ec:94:5a:e6:57:37:1b:83:c9:9b:26:ee:3c:8d:45:ae: e2:ec:0d:a3:27:9b:0b:e8:6a:eb:2c:94:1e:23:eb:8f:d0:7c: 30:0a:7d:e5:b7:35:92:d9:16:6b:49:0d:48:6f:09:dc:69:98: b3:b3:e5:e7:a7:cc:67:07:12:ec:69:0a:8a:4e:f7:10:38:7d: cf:61:1c:26:0d:fb:9d:c6:02:92:a9:98:4c:9a:44:53:8d:2e: f5:5f:50:60:25:e0:60:ac:d1:a3:90:2e:7a:52:6d:c0:2b:1e: 07:89:81:3c:e3:63:75:4f:0b:f8:b1:23:1b:41:b3:10:89:17: a1:eb:4b:4e:49:47:3f:b8:14:66:8a:4c:2e:65:b1:8e:8d:34: e4:66:c4:ec:2c:79:16:e3:5c:5e:08:19:dd:72:4a:bf:52:22: 1d:49:41:b9:df:d3:ee:60:ad:8c:b5:23:4e:12:40:37:50:8a: 01:28:ef:57:94:4b:f8:07:5a:3c:ab:ed:a1:9b:4d:9f:b9:2c: 78:7e:48:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9govIvOlhrMup7RQlQNzDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNWRlNWY0ZmVjMTZmNTE2ZjBiYzRkNjMxYzI2Mjc2NjNm OTA1ZjMwHhcNMjYwMTAyMDcwMTA2WhcNMjYwMTAzMDcwMTA2WjAzMTEwLwYDVQQD EyhkM2QwMzA2YWQ0ZDIyNjcxNTIyMzRiZjBkYTY4N2U5ZjEzMzA1ZGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+RgxMyrp14cuPBRZQUen7MTtsQgO o8w7wQ0P+PZNuS4M1wmjoAVhbx4J3qeuCgrybOJH9IwaR+DeyTyDAjx29MfeLPhH Rrpq5KQqiJ0mKjDWWg1Ci06NrQM7plbZEI73gIh+4QPm9dG9BlmlHdWgM9r1YgcD A3czC9h2EqDvFxJJJO9EwP0IWW8e4brugq8VzNYVNQu98I3cpqV1Vvxj0reV4nCz MyJLC9GnrTQ2gogXSx/OYI4/mLQn83CtRKvwRP1Mjki6iakSj6NqWyewUyIhnnOP Henb7MK3vpdO10MVm4/hJq+F/V7lq63Iqa9ItZgZ00gIudZMbOtRWxggAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPQMGrU0iZxUiNL8Npofp8TMF3hMB8GA1UdIwQY MBaAFM9d5fT+wW9RbwvE1jHCYnZj+QXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejEzbDlQN0JiMUZ2QzhUV01jSmlkbVA1QmZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lMWU2NzAtNjI2YS00YzE1LWE2Njkt NmZlMTQ5NGZiYzJjLzEvejEzbDlQN0JiMUZ2QzhUV01jSmlkbVA1QmZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9lMWU2NzAtNjI2YS00YzE1LWE2NjktNmZlMTQ5NGZiYzJj LzEvejEzbDlQN0JiMUZ2QzhUV01jSmlkbVA1QmZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6I94/HM GsespOB5ERtjKMzsp6XKmSDSJMPjiNRbwuObAuOMID0/1Tovg6jLqao96VYojWpE iGrslFrmVzcbg8mbJu48jUWu4uwNoyebC+hq6yyUHiPrj9B8MAp95bc1ktkWa0kN SG8J3GmYs7Pl56fMZwcS7GkKik73EDh9z2EcJg37ncYCkqmYTJpEU40u9V9QYCXg YKzRo5AuelJtwCseB4mBPONjdU8L+LEjG0GzEIkXoetLTklHP7gUZopMLmWxjo00 5GbE7Cx5FuNcXggZ3XJKv1IiHUlBud/T7mCtjLUjThJAN1CKASjvV5RL+AdaPKvt oZtNn7kseH5Ihg== -----END CERTIFICATE-----Generated at Fri Jan 2 09:53:09 2026 by rpki-client