This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft File: zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json) Hash identifier: LkkDKB3CCOVmhDkxjgaVBUTV6n7E9T2QIkNYaUbcscM= Subject key identifier: A7:32:98:1E:C4:50:08:AC:58:65:B0:6F:7F:82:29:12:73:D0:0A:4D Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c Certificate serial: 019BA18F91703F351C6EA20DC0DF77DA3F80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft Manifest number: 1067 Signing time: Fri 09 Jan 2026 07:01:39 +0000 Manifest this update: Fri 09 Jan 2026 07:01:39 +0000 Manifest next update: Sat 10 Jan 2026 07:01:39 +0000 Files and hashes: 1: 5GenFMQsSYDx9FcfiAXgf9Uomdw.roa (hash: 4H+3cPhJ7oDZNP6D43X5l+hl9KT5PURFIDgzFceABtg=) 2: 5Zndcb8EJc7nslqP_7KqvtkxJPw.roa (hash: ogNnDwO6cHFOhG9TbGz5GUJ2wMKx53CTMIlKdOAYy7U=) 3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: V1doW4bBqLaIzgASoqNrUC1Jly4GAKW+8ssGHOAOkWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 07:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:8f:91:70:3f:35:1c:6e:a2:0d:c0:df:77:da:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd394757e1416202a4022956dbf48d707458520c Validity Not Before: Jan 9 07:01:39 2026 GMT Not After : Jan 10 07:01:39 2026 GMT Subject: CN=a732981ec45008ac5865b06f7f82291273d00a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:19:c0:c0:d6:78:44:72:95:7e:5f:4a:97:35: 84:cc:7c:0d:d4:b0:e4:b4:9e:e0:01:87:81:4b:70: 44:72:68:60:a1:fa:75:85:9e:f5:d7:e9:07:c7:d4: dc:e8:0b:2e:17:4b:67:32:47:09:a9:61:9c:80:53: fc:47:ea:c4:16:89:9f:0f:20:78:dc:23:c8:52:f1: fb:a3:6d:9b:cc:f6:8f:04:1e:7f:e2:30:18:c9:ca: 06:2f:21:f6:eb:5e:22:36:35:f1:e4:b1:4d:c1:aa: 68:e6:4d:db:cb:bb:2b:ae:82:fe:c1:c1:9a:82:63: b8:23:58:06:ea:0e:64:33:10:c1:5f:13:f8:a6:d6: 4c:c8:cf:7d:8a:af:37:85:46:f7:be:57:dc:48:88: 35:f3:a0:18:76:d9:f0:5f:05:77:f6:31:f6:45:8c: 59:a9:c8:4c:f7:1a:de:02:c7:13:34:dd:78:37:02: 8a:a8:b5:00:47:a6:23:0c:b1:7a:3b:b2:1c:be:6c: 47:6c:ec:4a:58:46:b2:61:e3:b5:4b:0a:2a:91:59: 5b:0a:f4:33:cd:81:a7:e7:aa:80:ca:6e:76:c2:7d: 02:d1:40:f6:0b:89:0b:e3:d8:3c:55:51:47:52:f0: 8c:80:70:b2:d4:5c:d3:3c:79:ce:b8:7c:09:c5:f1: 7f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:32:98:1E:C4:50:08:AC:58:65:B0:6F:7F:82:29:12:73:D0:0A:4D X509v3 Authority Key Identifier: keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:0b:2b:a8:01:cd:9e:93:fe:f8:75:99:69:44:49:60:12:f0: 89:14:8d:74:d5:c6:25:1b:c1:39:12:f6:8a:1f:8d:84:e3:14: 33:a6:e3:f7:0f:a8:62:ea:37:ff:92:d2:5d:af:59:0f:93:0d: c4:df:c8:95:c5:06:49:71:ae:b5:af:d4:55:09:88:d9:80:ad: b8:dd:2c:c6:c1:b6:17:16:4e:d6:8c:9e:96:38:eb:e8:76:0f: 07:20:95:f8:3b:33:8c:35:4f:74:df:13:7e:14:5b:e0:d6:ed: 3a:9c:9e:88:8f:4e:f2:9e:63:49:d1:1f:f2:f8:85:74:15:c5: 94:97:b1:73:b7:9f:4c:f5:3c:9a:4f:9c:8c:40:48:e6:94:1a: a1:79:e9:a8:96:23:09:01:3c:4b:56:05:cb:c8:71:49:12:ab: fa:cc:5c:25:8a:d6:c6:fc:d9:bd:2f:8f:fe:7d:48:5a:cf:76: 1e:6d:c7:29:94:b3:48:88:09:bf:13:0f:4c:e9:28:43:72:7d: 24:3a:40:f4:4b:45:38:3a:15:aa:3a:b4:11:27:27:bd:44:0b: 6a:c1:98:b8:57:b6:b8:3d:dd:f2:4e:5a:79:cf:81:0b:07:43: f4:98:08:92:d8:48:3c:f9:3b:0e:c9:dc:d4:cc:37:16:dd:89: 5a:9b:cb:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuhj5FwPzUcbqINwN932j+AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMzk0NzU3ZTE0MTYyMDJhNDAyMjk1NmRiZjQ4ZDcwNzQ1 ODUyMGMwHhcNMjYwMTA5MDcwMTM5WhcNMjYwMTEwMDcwMTM5WjAzMTEwLwYDVQQD EyhhNzMyOTgxZWM0NTAwOGFjNTg2NWIwNmY3ZjgyMjkxMjczZDAwYTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRnAwNZ4RHKVfl9KlzWEzHwN1LDk tJ7gAYeBS3BEcmhgofp1hZ711+kHx9Tc6AsuF0tnMkcJqWGcgFP8R+rEFomfDyB4 3CPIUvH7o22bzPaPBB5/4jAYycoGLyH2614iNjXx5LFNwapo5k3by7srroL+wcGa gmO4I1gG6g5kMxDBXxP4ptZMyM99iq83hUb3vlfcSIg186AYdtnwXwV39jH2RYxZ qchM9xreAscTNN14NwKKqLUAR6YjDLF6O7IcvmxHbOxKWEayYeO1SwoqkVlbCvQz zYGn56qAym52wn0C0UD2C4kL49g8VVFHUvCMgHCy1FzTPHnOuHwJxfF/swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcymB7EUAisWGWwb3+CKRJz0ApNMB8GA1UdIwQY MBaAFM05R1fhQWICpAIpVtv0jXB0WFIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85NzVlNGYtNmMyNi00NGJiLTlhZGEt MmZjNmQxN2Y4YjU4LzEvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85NzVlNGYtNmMyNi00NGJiLTlhZGEtMmZjNmQxN2Y4YjU4 LzEvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQsrqAHN npP++HWZaURJYBLwiRSNdNXGJRvBORL2ih+NhOMUM6bj9w+oYuo3/5LSXa9ZD5MN xN/IlcUGSXGuta/UVQmI2YCtuN0sxsG2FxZO1oyeljjr6HYPByCV+DszjDVPdN8T fhRb4NbtOpyeiI9O8p5jSdEf8viFdBXFlJexc7efTPU8mk+cjEBI5pQaoXnpqJYj CQE8S1YFy8hxSRKr+sxcJYrWxvzZvS+P/n1IWs92Hm3HKZSzSIgJvxMPTOkoQ3J9 JDpA9EtFODoVqjq0EScnvUQLasGYuFe2uD3d8k5aec+BCwdD9JgIkthIPPk7Dsnc 1Mw3Ft2JWpvLUg== -----END CERTIFICATE-----Generated at Fri Jan 9 18:08:06 2026 by rpki-client