This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft File: Zckgon4-U6Nn-eqW23uve9Zag-o.mft (raw, json) Hash identifier: MKJTTb0HqhEf8rZXMpyDMhN7LiSZVsnOBovdmU8/slI= Subject key identifier: B3:5C:C1:DF:35:44:AA:2E:44:12:7B:64:90:45:15:DB:99:D6:FB:47 Authority key identifier: 65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA Certificate issuer: /CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea Certificate serial: 019BFC89AC11FC288AE8086004A3D2640D4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft Manifest number: 1390 Signing time: Mon 26 Jan 2026 23:00:39 +0000 Manifest this update: Mon 26 Jan 2026 23:00:39 +0000 Manifest next update: Tue 27 Jan 2026 23:00:39 +0000 Files and hashes: 1: Zckgon4-U6Nn-eqW23uve9Zag-o.crl (hash: 8daIVyBUw+pfR47169lKkJtsepnIymmb9P1LpvkbgdA=) 2: qvAyroJETTvqQMM_MVkdoGYncxA.roa (hash: nmTwuA7cbFKwFpXIGdTjihs7A1gDgSqO3ta9jqth4L8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:89:ac:11:fc:28:8a:e8:08:60:04:a3:d2:64:0d:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea Validity Not Before: Jan 26 23:00:39 2026 GMT Not After : Jan 27 23:00:39 2026 GMT Subject: CN=b35cc1df3544aa2e44127b64904515db99d6fb47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8b:83:37:36:3e:3f:58:f2:d2:6d:d4:f3:af: fa:e2:3c:44:2b:c2:75:f4:72:c9:b0:89:46:35:a8: 76:6f:5c:90:2c:be:3e:0a:35:ad:39:1f:ff:17:a7: d1:4d:af:ed:dc:3a:0c:1d:9f:b5:dd:14:64:11:37: 94:f5:75:9c:95:76:4b:f9:b7:e9:51:6a:34:e3:e9: 4f:65:7c:66:92:f7:1a:09:c4:47:c8:f4:54:d7:21: 64:5c:56:23:e8:57:e6:2c:39:cb:1b:d6:6e:05:6b: 4d:b5:69:a8:5b:45:73:9c:e2:51:73:22:4d:31:a0: 9c:fa:1c:d1:b7:62:83:b7:2e:ab:cc:df:29:7c:f5: 43:3f:11:ae:c8:f3:ea:9e:2f:23:f6:36:ef:0f:a0: 9d:67:01:ec:2b:dd:ea:67:94:28:69:e8:32:57:fa: c0:24:68:ef:a2:e8:93:42:de:26:e7:6f:d8:b4:5a: 4c:76:0a:e5:c5:98:d2:76:e5:96:a3:d9:f6:27:95: 47:ff:85:78:ee:0f:5d:f2:3b:36:16:6c:db:c9:a6: b7:93:c8:88:85:a3:61:45:e0:0c:c3:e8:5e:55:83: 8f:62:b9:93:df:79:d7:48:e5:48:35:ae:31:fd:9d: d7:fc:fe:2c:bb:27:98:b6:0c:d1:b6:80:20:56:11: 31:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5C:C1:DF:35:44:AA:2E:44:12:7B:64:90:45:15:DB:99:D6:FB:47 X509v3 Authority Key Identifier: keyid:65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:18:4a:1a:e5:b3:d5:e0:fe:e7:35:ab:f2:42:95:fe:8d:a7: e3:fa:77:14:66:3c:5b:4f:b6:8d:66:15:16:5f:1d:ef:c7:1a: 1f:c0:64:69:ad:44:77:75:0b:d5:c4:91:81:2b:e8:e9:11:f0: 9f:46:34:47:23:09:45:24:6e:ff:a1:b7:d0:66:ea:dc:05:55: 6b:05:04:66:11:e5:30:82:8b:cf:06:48:0a:66:84:3e:c8:32: 73:41:28:d9:d9:fe:86:c4:ff:2d:61:ea:bc:5f:0a:f1:d3:a2: 7c:27:0f:dc:f3:c0:64:e7:6a:c8:5b:c0:f4:ac:59:66:e9:ca: 41:57:ea:3e:2a:8d:51:cd:10:2d:7d:8d:af:a5:f3:e1:16:11: 7a:19:95:c6:52:40:5d:dc:66:d2:42:34:10:cf:50:aa:38:d8: a3:e5:36:07:75:e9:02:df:9b:1f:67:cc:f4:5b:21:6f:f5:7c: e4:2e:c9:c0:39:37:22:57:3d:68:f4:a7:31:c8:e0:48:a8:76: 63:b4:fb:6d:a9:e3:ab:1b:59:5c:19:e1:0f:65:11:a3:56:2e: 5b:23:5d:d6:8f:47:f9:73:ac:9c:f2:1c:6b:a7:eb:f7:3e:1f: 1c:72:46:1d:93:bd:5c:53:1c:18:42:bf:5d:85:dd:ee:fa:3b: 47:45:9f:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8iawR/CiK6AhgBKPSZA1NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YzkyMGEyN2UzZTUzYTM2N2Y5ZWE5NmRiN2JhZjdiZDY1 YTgzZWEwHhcNMjYwMTI2MjMwMDM5WhcNMjYwMTI3MjMwMDM5WjAzMTEwLwYDVQQD EyhiMzVjYzFkZjM1NDRhYTJlNDQxMjdiNjQ5MDQ1MTVkYjk5ZDZmYjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtouDNzY+P1jy0m3U86/64jxEK8J1 9HLJsIlGNah2b1yQLL4+CjWtOR//F6fRTa/t3DoMHZ+13RRkETeU9XWclXZL+bfp UWo04+lPZXxmkvcaCcRHyPRU1yFkXFYj6FfmLDnLG9ZuBWtNtWmoW0VznOJRcyJN MaCc+hzRt2KDty6rzN8pfPVDPxGuyPPqni8j9jbvD6CdZwHsK93qZ5QoaegyV/rA JGjvouiTQt4m52/YtFpMdgrlxZjSduWWo9n2J5VH/4V47g9d8js2Fmzbyaa3k8iI haNhReAMw+heVYOPYrmT33nXSOVINa4x/Z3X/P4suyeYtgzRtoAgVhExDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNcwd81RKouRBJ7ZJBFFduZ1vtHMB8GA1UdIwQY MBaAFGXJIKJ+PlOjZ/nqltt7r3vWWoPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmNrZ29uNC1VNk5uLWVxVzIzdXZlOVphZy1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iMmRkMDAtYTYyMS00OWE5LWJiYWIt MzdmOWJmNzg2MWI2LzEvWmNrZ29uNC1VNk5uLWVxVzIzdXZlOVphZy1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9iMmRkMDAtYTYyMS00OWE5LWJiYWItMzdmOWJmNzg2MWI2 LzEvWmNrZ29uNC1VNk5uLWVxVzIzdXZlOVphZy1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxhKGuWz 1eD+5zWr8kKV/o2n4/p3FGY8W0+2jWYVFl8d78caH8Bkaa1Ed3UL1cSRgSvo6RHw n0Y0RyMJRSRu/6G30Gbq3AVVawUEZhHlMIKLzwZICmaEPsgyc0Eo2dn+hsT/LWHq vF8K8dOifCcP3PPAZOdqyFvA9KxZZunKQVfqPiqNUc0QLX2Nr6Xz4RYRehmVxlJA Xdxm0kI0EM9QqjjYo+U2B3XpAt+bH2fM9Fshb/V85C7JwDk3Ilc9aPSnMcjgSKh2 Y7T7banjqxtZXBnhD2URo1YuWyNd1o9H+XOsnPIca6fr9z4fHHJGHZO9XFMcGEK/ XYXd7vo7R0WfEQ== -----END CERTIFICATE-----Generated at Tue Jan 27 01:33:15 2026 by rpki-client