This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft File: zE4rrFHZy3KbGnVijua0ycHp_8g.mft (raw, json) Hash identifier: FAoBXObJqXoQaqWwinXcfs7a8xEkV89NPUptL0wdT5Y= Subject key identifier: 09:A1:D7:77:3D:A7:18:37:56:27:CB:71:A5:A2:07:BF:7D:0F:0A:8F Authority key identifier: CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8 Certificate issuer: /CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8 Certificate serial: 019C0556B20245A412894BD6BC299C8B6ED8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft Manifest number: 039B Signing time: Wed 28 Jan 2026 16:01:33 +0000 Manifest this update: Wed 28 Jan 2026 16:01:33 +0000 Manifest next update: Thu 29 Jan 2026 16:01:33 +0000 Files and hashes: 1: CVwCEsbzumpXgEnKDDCCAaIDrYM.roa (hash: lxu8mh9bo97HPFI+56oJ6vzMl5ukNpSkTrJqrOGog30=) 2: zE4rrFHZy3KbGnVijua0ycHp_8g.crl (hash: HAecQOmqValoMNrtJBmXsqa7zNCxI0f97YtxqpeRYMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:56:b2:02:45:a4:12:89:4b:d6:bc:29:9c:8b:6e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8 Validity Not Before: Jan 28 16:01:33 2026 GMT Not After : Jan 29 16:01:33 2026 GMT Subject: CN=09a1d7773da718375627cb71a5a207bf7d0f0a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ad:1b:9e:00:fa:72:18:1a:d6:1a:a9:f1:dc: d1:26:9a:2c:7c:72:b1:24:a4:10:a1:f0:b6:2d:de: e2:47:8d:2b:c9:26:77:e9:4f:48:7f:8a:8f:12:16: 68:87:e2:16:2d:09:4e:53:ba:0f:6d:7a:34:69:00: 9f:04:68:ba:8b:eb:40:51:fe:35:28:e3:ea:86:71: 41:85:92:a9:b6:aa:b7:af:97:17:50:22:cc:c3:ee: c2:bc:96:84:88:8b:a1:31:87:e3:1c:d1:c7:60:f0: e0:13:32:09:78:94:29:86:d3:d2:78:fd:e6:13:f6: 7e:f8:ac:7b:cb:c1:f6:76:6d:c4:0d:2f:38:1c:6b: f8:9e:e2:b0:c8:e1:ab:f4:df:4c:d3:27:99:12:13: 05:24:28:18:f0:4c:41:c1:75:37:93:0b:47:a6:29: aa:f4:27:3a:a1:a5:d1:e6:30:f6:7e:23:77:84:a2: 67:73:e5:70:b0:c8:42:fc:e4:aa:76:66:8d:4e:76: 5b:07:7a:77:4d:22:c9:a7:10:1a:f4:30:17:6f:f8: 29:b9:87:22:f4:2f:dc:00:f8:64:66:80:86:c0:0c: 87:c3:22:a6:39:af:31:0b:92:e3:11:c2:b2:14:0c: 0d:e6:f5:03:d5:ce:ab:c4:27:e3:3a:a5:58:10:f4: 77:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A1:D7:77:3D:A7:18:37:56:27:CB:71:A5:A2:07:BF:7D:0F:0A:8F X509v3 Authority Key Identifier: keyid:CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:48:7b:d0:6f:c6:c4:4d:ed:44:15:42:14:d1:71:03:ed:1d: de:19:bb:4b:a1:95:4f:b7:3e:86:6d:fa:5e:e4:a4:45:28:2c: f8:c2:13:70:d4:96:1e:6f:1d:39:f9:48:53:8a:99:fa:72:fd: 29:b9:e4:0e:02:c0:28:31:87:ac:9e:95:0a:ab:00:99:13:af: 21:2c:06:c9:67:c4:1d:46:8c:b6:33:da:fa:2c:ab:e4:06:bd: 7d:5a:b2:e8:34:46:e0:13:f5:58:7c:b7:b8:c5:50:f5:f2:66: 9c:85:cd:ef:dd:32:ee:c3:c6:c5:29:ca:46:47:fb:16:76:b1: ba:0f:ee:9c:39:23:6a:ee:69:01:8b:bf:89:c1:b6:6e:f1:7c: 1e:20:03:fa:30:d8:7f:48:66:78:9a:ec:e2:b2:53:81:f7:26: ff:0a:b5:59:20:f4:ed:65:48:54:ab:4c:20:44:83:50:70:7b: bc:11:4a:38:8f:da:e2:17:f4:61:51:a5:4b:dc:a7:2c:bd:f4: 05:2c:57:43:12:75:63:74:4b:a5:34:12:dd:8d:75:94:69:d9: cf:a0:1b:73:bb:45:fb:5f:73:48:af:bd:4d:2c:44:1d:78:f1: cc:0d:a6:91:9e:61:b5:1b:d0:26:0d:8a:dc:7b:c2:8e:74:a6: 9a:dd:79:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwFVrICRaQSiUvWvCmci27YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNGUyYmFjNTFkOWNiNzI5YjFhNzU2MjhlZTZiNGM5YzFl OWZmYzgwHhcNMjYwMTI4MTYwMTMzWhcNMjYwMTI5MTYwMTMzWjAzMTEwLwYDVQQD EygwOWExZDc3NzNkYTcxODM3NTYyN2NiNzFhNWEyMDdiZjdkMGYwYThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK0bngD6chga1hqp8dzRJposfHKx JKQQofC2Ld7iR40rySZ36U9If4qPEhZoh+IWLQlOU7oPbXo0aQCfBGi6i+tAUf41 KOPqhnFBhZKptqq3r5cXUCLMw+7CvJaEiIuhMYfjHNHHYPDgEzIJeJQphtPSeP3m E/Z++Kx7y8H2dm3EDS84HGv4nuKwyOGr9N9M0yeZEhMFJCgY8ExBwXU3kwtHpimq 9Cc6oaXR5jD2fiN3hKJnc+VwsMhC/OSqdmaNTnZbB3p3TSLJpxAa9DAXb/gpuYci 9C/cAPhkZoCGwAyHwyKmOa8xC5LjEcKyFAwN5vUD1c6rxCfjOqVYEPR3cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmh13c9pxg3VifLcaWiB799DwqPMB8GA1UdIwQY MBaAFMxOK6xR2ctymxp1Yo7mtMnB6f/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekU0cnJGSFp5M0tiR25WaWp1YTB5Y0hwXzhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNTg4MDMtMjRlNy00NmNmLWIyNDQt OWRhNzg4N2Y2YTJmLzEvekU0cnJGSFp5M0tiR25WaWp1YTB5Y0hwXzhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hNTg4MDMtMjRlNy00NmNmLWIyNDQtOWRhNzg4N2Y2YTJm LzEvekU0cnJGSFp5M0tiR25WaWp1YTB5Y0hwXzhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUh70G/G xE3tRBVCFNFxA+0d3hm7S6GVT7c+hm36XuSkRSgs+MITcNSWHm8dOflIU4qZ+nL9 KbnkDgLAKDGHrJ6VCqsAmROvISwGyWfEHUaMtjPa+iyr5Aa9fVqy6DRG4BP1WHy3 uMVQ9fJmnIXN790y7sPGxSnKRkf7Fnaxug/unDkjau5pAYu/icG2bvF8HiAD+jDY f0hmeJrs4rJTgfcm/wq1WSD07WVIVKtMIESDUHB7vBFKOI/a4hf0YVGlS9ynLL30 BSxXQxJ1Y3RLpTQS3Y11lGnZz6Abc7tF+19zSK+9TSxEHXjxzA2mkZ5htRvQJg2K 3HvCjnSmmt15vQ== -----END CERTIFICATE-----Generated at Wed Jan 28 19:18:02 2026 by rpki-client