This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft File: cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft (raw, json) Hash identifier: MNclXWBj+P/PF3dU1QQiHymxYPaFSSB1CcFp9bM2aMI= Subject key identifier: 48:5B:F5:6A:28:53:EE:24:E5:05:8A:6C:67:49:A8:DA:52:EE:8B:71 Authority key identifier: 71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62 Certificate issuer: /CN=7192f3560c15b94d1ef497726845d786786bc762 Certificate serial: 019B8F8955C93B36E9E1C4B5656B62869BFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft Manifest number: 0EE7 Signing time: Mon 05 Jan 2026 19:01:40 +0000 Manifest this update: Mon 05 Jan 2026 19:01:40 +0000 Manifest next update: Tue 06 Jan 2026 19:01:40 +0000 Files and hashes: 1: cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl (hash: denqFXx/1EO2whjZxM7Fi+qzsPecnckbpL7AfQmX/1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 17:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8f:89:55:c9:3b:36:e9:e1:c4:b5:65:6b:62:86:9b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7192f3560c15b94d1ef497726845d786786bc762 Validity Not Before: Jan 5 19:01:40 2026 GMT Not After : Jan 6 19:01:40 2026 GMT Subject: CN=485bf56a2853ee24e5058a6c6749a8da52ee8b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e2:ef:7a:fc:0f:ea:09:85:88:91:98:98:b5: ae:0d:86:93:66:ee:34:9d:67:c7:73:65:2f:0b:3c: 35:81:7e:71:a3:33:e9:ad:e5:38:c1:f9:23:9f:cc: e9:d3:25:26:be:9e:fd:22:b7:90:f4:ef:4a:65:61: 98:44:f8:2a:26:3f:95:22:3e:c4:d9:0d:46:e4:b1: 04:36:d3:c5:7f:04:3f:37:ad:b9:f3:20:42:3f:75: 25:16:2c:47:29:6d:96:4d:31:b7:2e:7b:ff:7f:74: c2:ff:31:8f:f9:23:91:c2:cd:49:6a:6a:e6:9c:2a: 15:4f:b5:55:9b:d8:02:99:36:8d:ef:b9:ed:24:85: 83:f7:4f:1a:d5:24:7c:74:7a:fc:6c:d3:94:1e:83: fe:1d:fe:2a:ea:c8:a9:ad:02:f9:b7:52:8c:5e:08: 17:bf:d4:d7:58:db:b5:ad:98:c3:ca:5f:d6:21:79: 57:fe:7b:13:2c:b2:ac:fe:4c:f8:11:15:20:17:7c: 3a:8e:24:e9:da:aa:d9:f8:a6:9f:4f:4e:18:b5:8b: 9a:c6:65:a8:2e:78:e4:5e:b8:e5:6a:de:c7:52:c4: 4e:81:1f:36:c9:8a:58:4f:17:0b:30:53:9f:59:a6: 30:75:46:fd:38:61:4c:9e:4a:db:09:d8:80:f6:aa: a6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5B:F5:6A:28:53:EE:24:E5:05:8A:6C:67:49:A8:DA:52:EE:8B:71 X509v3 Authority Key Identifier: keyid:71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:4b:be:03:68:5a:f2:ef:2e:7b:91:0e:86:c7:25:b6:39:2c: be:5b:38:ab:2e:9e:10:5e:6c:60:5c:a8:d4:00:f5:66:59:d1: 28:49:b7:2a:8a:e7:79:a3:0c:3b:55:90:63:6a:14:83:13:e3: ee:9d:60:8d:ab:3d:a2:16:45:f6:8d:50:dd:65:06:f7:96:3c: d2:08:79:1c:3a:65:48:f4:a2:9a:73:dd:bd:b6:2e:0d:67:60: 76:3f:9c:79:d6:8a:f7:de:d3:99:4e:84:3a:ed:86:fb:f8:70: c2:77:38:a4:60:d3:f1:60:65:8f:ff:ae:ef:e4:1e:4a:4d:72: 14:34:ef:0a:8b:40:02:7e:af:de:e6:17:37:f1:60:70:19:ca: 02:5f:a0:e2:e5:2a:85:39:b3:ad:5f:36:b0:a9:49:ec:7b:65: 42:3d:c6:ac:44:3a:ba:9b:4e:49:55:52:fb:d3:d5:f2:23:47: 24:bc:b9:34:f6:9d:2c:09:73:63:83:68:62:5c:44:9d:3d:98: fb:cf:30:5d:29:91:0a:c8:95:fb:92:25:ac:51:65:61:2c:13: 98:e8:ca:18:1e:41:d1:6e:5a:01:3d:f4:bc:df:95:65:a0:17: d7:3f:34:03:90:2d:9c:aa:43:ea:9f:67:1e:e8:58:db:81:5f: ed:31:38:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuPiVXJOzbp4cS1ZWtihpv8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOTJmMzU2MGMxNWI5NGQxZWY0OTc3MjY4NDVkNzg2Nzg2 YmM3NjIwHhcNMjYwMTA1MTkwMTQwWhcNMjYwMTA2MTkwMTQwWjAzMTEwLwYDVQQD Eyg0ODViZjU2YTI4NTNlZTI0ZTUwNThhNmM2NzQ5YThkYTUyZWU4YjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweLvevwP6gmFiJGYmLWuDYaTZu40 nWfHc2UvCzw1gX5xozPpreU4wfkjn8zp0yUmvp79IreQ9O9KZWGYRPgqJj+VIj7E 2Q1G5LEENtPFfwQ/N6258yBCP3UlFixHKW2WTTG3Lnv/f3TC/zGP+SORws1Jamrm nCoVT7VVm9gCmTaN77ntJIWD908a1SR8dHr8bNOUHoP+Hf4q6siprQL5t1KMXggX v9TXWNu1rZjDyl/WIXlX/nsTLLKs/kz4ERUgF3w6jiTp2qrZ+KafT04YtYuaxmWo LnjkXrjlat7HUsROgR82yYpYTxcLMFOfWaYwdUb9OGFMnkrbCdiA9qqm2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhb9WooU+4k5QWKbGdJqNpS7otxMB8GA1UdIwQY MBaAFHGS81YMFblNHvSXcmhF14Z4a8diMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1pMelZnd1Z1VTBlOUpkeWFFWFhobmhyeDJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82OWEwMzQtYjUwOC00MmU4LTk5ZTgt NzVlZTI0YTNmOTZiLzEvY1pMelZnd1Z1VTBlOUpkeWFFWFhobmhyeDJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi82OWEwMzQtYjUwOC00MmU4LTk5ZTgtNzVlZTI0YTNmOTZi LzEvY1pMelZnd1Z1VTBlOUpkeWFFWFhobmhyeDJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEu+A2ha 8u8ue5EOhscltjksvls4qy6eEF5sYFyo1AD1ZlnRKEm3KorneaMMO1WQY2oUgxPj 7p1gjas9ohZF9o1Q3WUG95Y80gh5HDplSPSimnPdvbYuDWdgdj+cedaK997TmU6E Ou2G+/hwwnc4pGDT8WBlj/+u7+QeSk1yFDTvCotAAn6v3uYXN/FgcBnKAl+g4uUq hTmzrV82sKlJ7HtlQj3GrEQ6uptOSVVS+9PV8iNHJLy5NPadLAlzY4NoYlxEnT2Y +88wXSmRCsiV+5IlrFFlYSwTmOjKGB5B0W5aAT30vN+VZaAX1z80A5AtnKpD6p9n HuhY24Ff7TE4SQ== -----END CERTIFICATE-----Generated at Tue Jan 6 01:47:40 2026 by rpki-client