This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json) Hash identifier: xqizYWT64OBbjZOBdFpP0LVxhFoscpmzx8kW28FfdeY= Subject key identifier: AA:EC:FD:04:59:54:DE:CF:39:40:5E:2C:2D:18:8C:27:4D:2F:01:99 Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3 Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3 Certificate serial: 019B9FA0A30DED0E7D1A8BD307252B3CB228 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft Manifest number: 07F4 Signing time: Thu 08 Jan 2026 22:01:03 +0000 Manifest this update: Thu 08 Jan 2026 22:01:03 +0000 Manifest next update: Fri 09 Jan 2026 22:01:03 +0000 Files and hashes: 1: aESuuALkp9R98yDiNUY5nveL4-o.roa (hash: o135yeh0bwtH5IHdNJMNH9c/+RcrghX/j14puM1j2sk=) 2: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: cEmpjrF/s+iUxV2Kzy8ibZycg6AucjsaVxHA4eyZ3MA=) 3: zp6kT4fjph_A7Z-y494w10c-4u0.roa (hash: WOnZMPb4q3t7/YEohAO+g25GuBKKPvaAblQVDeWj5K0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9f:a0:a3:0d:ed:0e:7d:1a:8b:d3:07:25:2b:3c:b2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3 Validity Not Before: Jan 8 22:01:03 2026 GMT Not After : Jan 9 22:01:03 2026 GMT Subject: CN=aaecfd045954decf39405e2c2d188c274d2f0199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8c:6a:2d:a3:fa:9e:c6:12:30:79:52:c7:2d: 3b:49:41:04:21:b5:87:06:b5:c5:7f:6b:92:79:a2: ab:19:c0:f3:d0:b4:05:10:8c:d7:66:ac:f4:77:42: 91:ca:da:41:60:ab:8d:09:00:63:f1:93:f2:24:3e: 99:92:87:49:72:8f:d4:f0:50:d3:e3:01:cb:ae:3f: 92:72:3a:0b:b8:64:17:de:90:3b:8d:2e:c4:aa:30: 90:83:ca:33:0f:59:d1:ac:eb:5a:44:87:ae:82:5d: a2:06:89:17:d6:f1:8e:c8:86:5f:a4:c7:cd:79:b4: 71:e4:33:24:32:8e:75:99:24:53:9c:29:35:e6:47: 24:1b:91:b7:24:ff:b3:f7:6e:b0:86:90:75:26:cc: 38:73:a6:d8:b5:9b:a4:c7:c2:eb:67:4e:5b:52:d1: d2:31:54:98:9e:02:16:55:ee:fa:ad:3c:c0:1b:dc: a3:ff:34:93:18:3d:a5:6b:81:c5:ee:79:3d:97:c4: ee:5c:84:da:9d:3c:98:87:2d:68:17:a5:62:24:0d: 97:fb:3b:c6:71:6a:bf:d7:c7:8d:a9:fd:a8:35:d6: 7e:4f:74:a5:7a:98:a0:cc:49:7b:da:05:5d:60:a7: 7e:8c:77:1a:90:fe:3c:05:63:3c:ca:83:6e:f3:97: 49:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EC:FD:04:59:54:DE:CF:39:40:5E:2C:2D:18:8C:27:4D:2F:01:99 X509v3 Authority Key Identifier: keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:34:f9:78:fc:ac:08:80:57:50:6b:4c:39:b3:6d:01:4f:c5: d9:6a:87:44:f2:b8:96:3f:7d:70:eb:5d:71:0c:7a:8c:09:f7: 71:dd:89:e2:98:e9:34:0b:b3:db:d9:27:99:0a:10:d6:bd:e1: bb:a4:20:4e:84:d2:d4:2e:b1:77:86:31:8b:88:35:2b:dc:2b: 55:11:7c:69:ce:e6:f4:4b:0b:43:91:fe:37:6b:e5:a9:70:ca: 40:7a:34:6b:11:81:19:c6:4e:ab:21:08:71:12:55:6e:b3:80: dd:bb:9d:65:c8:92:23:8a:a4:84:9b:3b:1d:b8:6f:a5:bf:81: e4:b3:cd:f1:54:7a:34:ba:70:9b:8d:b3:dd:dd:99:e8:e8:fa: 22:2f:2e:57:de:a2:67:19:05:b1:aa:f1:ca:3e:08:5c:f0:0b: db:58:07:f4:ea:12:18:eb:05:6a:1b:e8:15:d4:f0:8e:0a:8a: 13:50:fc:4f:20:58:f9:b5:9d:10:e4:db:cb:db:3c:53:f4:58: ec:32:17:c3:e9:83:8c:bb:fe:08:b9:1f:59:56:08:f3:58:4b: 4f:ff:72:27:14:63:e0:45:d3:4e:8f:b1:db:e1:a4:4d:cb:d8: f5:ba:f8:95:a7:74:33:e3:09:7e:72:18:d5:a2:28:6c:55:58: 7a:80:c0:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZufoKMN7Q59GovTByUrPLIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZWZmZmMxNWE4M2EzOGJkZGE4Y2ZlMTIwYzMzNTI2N2Rj ZTUwZjMwHhcNMjYwMTA4MjIwMTAzWhcNMjYwMTA5MjIwMTAzWjAzMTEwLwYDVQQD EyhhYWVjZmQwNDU5NTRkZWNmMzk0MDVlMmMyZDE4OGMyNzRkMmYwMTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IxqLaP6nsYSMHlSxy07SUEEIbWH BrXFf2uSeaKrGcDz0LQFEIzXZqz0d0KRytpBYKuNCQBj8ZPyJD6ZkodJco/U8FDT 4wHLrj+ScjoLuGQX3pA7jS7EqjCQg8ozD1nRrOtaRIeugl2iBokX1vGOyIZfpMfN ebRx5DMkMo51mSRTnCk15kckG5G3JP+z926whpB1Jsw4c6bYtZukx8LrZ05bUtHS MVSYngIWVe76rTzAG9yj/zSTGD2la4HF7nk9l8TuXITanTyYhy1oF6ViJA2X+zvG cWq/18eNqf2oNdZ+T3SlepigzEl72gVdYKd+jHcakP48BWM8yoNu85dJxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrs/QRZVN7POUBeLC0YjCdNLwGZMB8GA1UdIwQY MBaAFMzv/8Fag6OL3ajP4SDDNSZ9zlDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek9fX3dWcURvNHZkcU1faElNTTFKbjNPVVBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jZmQ0ODgtYTI1ZC00MzlhLWJkMTct NGJlYjVkZmYxNzAxLzEvek9fX3dWcURvNHZkcU1faElNTTFKbjNPVVBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9jZmQ0ODgtYTI1ZC00MzlhLWJkMTctNGJlYjVkZmYxNzAx LzEvek9fX3dWcURvNHZkcU1faElNTTFKbjNPVVBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzT5ePys CIBXUGtMObNtAU/F2WqHRPK4lj99cOtdcQx6jAn3cd2J4pjpNAuz29knmQoQ1r3h u6QgToTS1C6xd4Yxi4g1K9wrVRF8ac7m9EsLQ5H+N2vlqXDKQHo0axGBGcZOqyEI cRJVbrOA3budZciSI4qkhJs7Hbhvpb+B5LPN8VR6NLpwm42z3d2Z6Oj6Ii8uV96i ZxkFsarxyj4IXPAL21gH9OoSGOsFahvoFdTwjgqKE1D8TyBY+bWdEOTby9s8U/RY 7DIXw+mDjLv+CLkfWVYI81hLT/9yJxRj4EXTTo+x2+GkTcvY9br4lad0M+MJfnIY 1aIobFVYeoDAxQ== -----END CERTIFICATE-----Generated at Fri Jan 9 00:53:20 2026 by rpki-client