This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft File: ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft (raw, json) Hash identifier: BwStceYkNSaL+wYzc1NVHqiIkZl+3zO2UQNvCvihceY= Subject key identifier: DB:AC:AB:50:E8:A9:C8:19:8C:63:F8:13:0C:80:F8:52:D6:14:76:D1 Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7 Certificate issuer: /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7 Certificate serial: 019C039EB4982448BF950740B8F9A16DAFF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft Manifest number: 0BD9 Signing time: Wed 28 Jan 2026 08:00:58 +0000 Manifest this update: Wed 28 Jan 2026 08:00:58 +0000 Manifest next update: Thu 29 Jan 2026 08:00:58 +0000 Files and hashes: 1: LebVW7P05wxSQg1aNkxf4K6jaA4.roa (hash: oIBElQY2pkJQLbuxxdHqzf3ND0BBOWd73Tj7RbmTBBE=) 2: ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl (hash: iyG3ghlsCRzs8TZH7a13U7cZHalpXFeIvNVYAueHcnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 08:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:03:9e:b4:98:24:48:bf:95:07:40:b8:f9:a1:6d:af:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7 Validity Not Before: Jan 28 08:00:58 2026 GMT Not After : Jan 29 08:00:58 2026 GMT Subject: CN=dbacab50e8a9c8198c63f8130c80f852d61476d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bf:e7:6f:7d:79:4a:18:43:b4:68:c7:dd:4a: 06:bb:92:c4:06:78:29:e6:a2:50:0c:6f:ad:c7:4c: f6:7e:98:bb:51:69:a9:b4:83:78:3e:80:d6:6a:16: 3a:13:13:e8:6b:a4:70:1f:5a:50:be:9f:d9:e5:a6: 3f:50:48:1e:3e:f4:20:05:a8:b1:d9:96:f0:4d:50: 8e:be:59:37:1b:ac:37:89:eb:c0:76:29:84:f7:80: ef:92:3e:f6:e4:78:0b:a8:3e:21:89:5a:d5:92:14: fa:83:fc:3e:f2:f9:77:22:8a:6d:b3:96:a6:ec:78: 24:7d:30:f5:99:fc:66:23:b1:89:3f:83:3a:2b:fa: cb:c1:19:a0:38:a3:6a:ee:ef:0b:de:a4:2f:a2:da: 1f:1b:aa:91:a7:8d:0b:75:83:e8:74:1a:db:87:7f: 11:15:e5:5d:dd:ad:92:ba:62:c3:51:9e:a9:29:56: 08:14:15:ee:50:21:95:60:a9:12:b8:0e:d4:1a:d5: 52:b9:fd:ea:5a:3a:d3:40:02:7d:31:ef:c6:82:a4: 57:ca:23:7a:47:12:c1:83:23:7e:09:36:b1:a8:7c: 0b:72:b4:aa:2a:0b:4c:6e:60:ec:fe:34:0e:b2:cf: d7:c1:c5:dc:83:fc:e9:5b:73:5e:49:34:ac:55:0c: ab:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AC:AB:50:E8:A9:C8:19:8C:63:F8:13:0C:80:F8:52:D6:14:76:D1 X509v3 Authority Key Identifier: keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:fc:79:70:e8:42:a1:6d:04:32:66:48:73:fc:37:75:d1:04: d6:5b:3e:ac:4d:f7:5a:4f:ee:cb:d1:b7:a0:9a:06:7c:03:3b: 81:82:e3:08:e0:0a:91:e5:b8:0b:93:df:13:a2:5e:7e:88:a6: 11:e8:6a:5f:fc:8d:ca:6c:22:3d:a5:24:a8:99:b0:2c:6a:ce: b3:7b:54:66:3f:78:67:63:76:7c:a2:25:c4:42:94:ed:3d:31: d8:87:3d:c3:5d:13:66:1a:79:c3:58:59:2c:ed:d6:19:0d:5f: b3:b7:92:b4:39:23:d9:95:14:1b:3f:ee:57:6b:02:32:53:d4: c6:65:73:d6:a7:51:01:44:50:25:34:ed:1a:8a:91:82:77:41: 0d:c9:01:a9:9e:44:f6:16:9c:c5:26:62:e1:33:63:07:36:78: 4a:56:db:e5:9c:cf:f6:f8:db:36:4e:a5:2e:ea:48:2d:4d:6e: 22:00:03:71:98:59:ac:e6:89:24:09:f6:92:90:99:25:c4:fa: 20:64:49:86:8c:42:6d:6b:fc:27:05:12:1d:33:62:f2:f2:7c: ac:1c:5b:9b:53:d8:30:37:26:3c:fe:8c:6a:11:2a:25:1f:b3: 59:13:c8:1e:36:89:ab:00:a5:97:d5:f9:21:7b:19:ad:c6:ba: 9b:29:10:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwDnrSYJEi/lQdAuPmhba/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YTgzMjI0NGQwZTIzZjVmMjhiM2E2ZGVmN2FmYzAxYjIy NTIxYzcwHhcNMjYwMTI4MDgwMDU4WhcNMjYwMTI5MDgwMDU4WjAzMTEwLwYDVQQD EyhkYmFjYWI1MGU4YTljODE5OGM2M2Y4MTMwYzgwZjg1MmQ2MTQ3NmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb/nb315ShhDtGjH3UoGu5LEBngp 5qJQDG+tx0z2fpi7UWmptIN4PoDWahY6ExPoa6RwH1pQvp/Z5aY/UEgePvQgBaix 2ZbwTVCOvlk3G6w3ievAdimE94Dvkj725HgLqD4hiVrVkhT6g/w+8vl3Iopts5am 7HgkfTD1mfxmI7GJP4M6K/rLwRmgOKNq7u8L3qQvotofG6qRp40LdYPodBrbh38R FeVd3a2SumLDUZ6pKVYIFBXuUCGVYKkSuA7UGtVSuf3qWjrTQAJ9Me/GgqRXyiN6 RxLBgyN+CTaxqHwLcrSqKgtMbmDs/jQOss/XwcXcg/zpW3NeSTSsVQyr+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNusq1DoqcgZjGP4EwyA+FLWFHbRMB8GA1UdIwQY MBaAFGaoMiRNDiP18os6be96/AGyJSHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mMmVmMDYtMmRkMi00YTIxLTljZTkt ZGVmZmZhNWYwNmUxLzEvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mMmVmMDYtMmRkMi00YTIxLTljZTktZGVmZmZhNWYwNmUx LzEvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPx5cOhC oW0EMmZIc/w3ddEE1ls+rE33Wk/uy9G3oJoGfAM7gYLjCOAKkeW4C5PfE6Jefoim EehqX/yNymwiPaUkqJmwLGrOs3tUZj94Z2N2fKIlxEKU7T0x2Ic9w10TZhp5w1hZ LO3WGQ1fs7eStDkj2ZUUGz/uV2sCMlPUxmVz1qdRAURQJTTtGoqRgndBDckBqZ5E 9hacxSZi4TNjBzZ4Slbb5ZzP9vjbNk6lLupILU1uIgADcZhZrOaJJAn2kpCZJcT6 IGRJhoxCbWv8JwUSHTNi8vJ8rBxbm1PYMDcmPP6MahEqJR+zWRPIHjaJqwCll9X5 IXsZrca6mykQAA== -----END CERTIFICATE-----Generated at Wed Jan 28 17:55:17 2026 by rpki-client