This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft File: ZC8kHMyieCtfxAfhu696l6mEdGA.mft (raw, json) Hash identifier: DH7vBD8WoooDyi8uT2yqCIh2ytc33hVnjFn0p2beNrQ= Subject key identifier: F1:F8:31:74:31:FA:C9:D4:83:40:F1:F8:14:E8:DB:68:BB:A9:0E:2B Authority key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60 Certificate issuer: /CN=642f241ccca2782b5fc407e1bbaf7a97a9847460 Certificate serial: 019BAB6E84397BE045B04C4144B8C37827A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft Manifest number: 08F6 Signing time: Sun 11 Jan 2026 05:01:45 +0000 Manifest this update: Sun 11 Jan 2026 05:01:45 +0000 Manifest next update: Mon 12 Jan 2026 05:01:45 +0000 Files and hashes: 1: ZC8kHMyieCtfxAfhu696l6mEdGA.crl (hash: YySpRm1KvMZg6wtcOkPS4/Z9FpL5yXr5205MvnsSTXc=) 2: ekOzOiDdfxxEUE52B61ICsigaF0.roa (hash: 6fj4c7wjlH2wB374dMtlshl1OSG/zfWE+ZknbaJj2LQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 05:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ab:6e:84:39:7b:e0:45:b0:4c:41:44:b8:c3:78:27:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460 Validity Not Before: Jan 11 05:01:45 2026 GMT Not After : Jan 12 05:01:45 2026 GMT Subject: CN=f1f8317431fac9d48340f1f814e8db68bba90e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bb:ec:d5:c8:01:6a:92:96:b7:db:5f:60:b1: 4c:05:49:52:19:ff:15:d0:86:7d:19:5c:ca:8a:6d: 9d:6c:66:77:2d:cb:24:14:5f:e3:aa:81:0e:39:7a: 9b:7a:1f:c2:ce:b9:d5:68:4e:cd:96:6a:27:56:86: 72:40:3d:09:6b:7f:2d:76:00:21:4c:58:a0:5f:03: 9b:e9:c1:ec:13:e3:09:7d:ce:89:94:fa:d2:7f:be: d0:88:66:76:59:9f:ef:e9:6d:7c:e4:d1:d5:54:78: 59:8c:18:6a:37:7f:2c:93:c4:d0:55:11:56:af:27: cc:d6:f3:0a:3f:55:fe:72:88:66:c7:1d:fd:14:cd: 19:ad:99:58:fe:7f:48:4d:6b:5f:60:f3:2e:b3:7b: 8d:7d:90:3b:55:87:be:cb:e6:9e:49:40:26:80:79: 24:40:90:7f:ad:99:af:5a:88:7c:30:31:2f:e5:20: 43:64:a4:91:a5:c8:7c:8d:e8:1a:d4:af:39:16:77: 59:06:78:0d:a6:8b:68:e2:2d:57:2e:6f:66:22:5f: e9:a1:47:5b:44:5b:a0:79:23:a7:4d:70:62:0e:fa: 8d:83:ad:b6:fa:aa:e6:b9:4a:56:d9:eb:57:f1:c2: 7a:45:52:ef:18:54:73:e9:c5:0b:93:2e:92:c0:d9: c8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F8:31:74:31:FA:C9:D4:83:40:F1:F8:14:E8:DB:68:BB:A9:0E:2B X509v3 Authority Key Identifier: keyid:64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ea:59:2b:29:2e:3f:4c:bb:96:2e:4c:45:4c:fc:64:79:50: a1:c9:3e:aa:2a:b0:f1:c2:0c:10:8c:27:64:5c:f5:fe:76:54: c1:83:03:a0:3e:a9:c7:9e:1c:db:56:a0:c9:1a:78:1d:bf:cf: 87:35:68:93:96:7e:34:0e:e6:6b:d3:23:ba:13:28:b2:3e:82: 90:1a:fe:d2:45:b8:af:4b:b4:15:09:63:70:72:fd:7d:7e:c4: ae:42:05:57:a1:20:ee:6a:3f:5e:f0:58:99:99:a0:3c:cf:32: 40:c5:ae:38:24:2e:f9:a9:ac:93:82:25:ba:0a:71:25:ab:de: 3b:c7:10:59:b2:84:75:8b:ef:87:9c:3b:45:4a:d0:3e:f3:a9: d4:fa:37:d4:d6:4c:53:aa:4f:d4:e6:01:b2:96:07:4a:7e:3e: cf:c7:ba:9c:77:d1:ed:ef:e0:1e:f0:cd:7f:8f:c0:8a:a9:bd: 4d:05:ac:d1:b2:cf:02:2b:fa:de:b3:cc:8b:97:bd:aa:2a:26: 4e:1d:f9:be:c9:0e:c0:05:47:75:89:c2:fc:ba:1b:7f:16:62: 78:73:f9:78:ad:08:ec:e9:2b:b9:25:e3:b5:b4:c5:91:df:28: c2:74:d3:2e:dd:c0:87:f6:02:f4:b8:15:0f:4d:35:be:e8:a8: 93:20:9a:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZurboQ5e+BFsExBRLjDeCejMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MmYyNDFjY2NhMjc4MmI1ZmM0MDdlMWJiYWY3YTk3YTk4 NDc0NjAwHhcNMjYwMTExMDUwMTQ1WhcNMjYwMTEyMDUwMTQ1WjAzMTEwLwYDVQQD EyhmMWY4MzE3NDMxZmFjOWQ0ODM0MGYxZjgxNGU4ZGI2OGJiYTkwZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrvs1cgBapKWt9tfYLFMBUlSGf8V 0IZ9GVzKim2dbGZ3LcskFF/jqoEOOXqbeh/CzrnVaE7NlmonVoZyQD0Ja38tdgAh TFigXwOb6cHsE+MJfc6JlPrSf77QiGZ2WZ/v6W185NHVVHhZjBhqN38sk8TQVRFW ryfM1vMKP1X+cohmxx39FM0ZrZlY/n9ITWtfYPMus3uNfZA7VYe+y+aeSUAmgHkk QJB/rZmvWoh8MDEv5SBDZKSRpch8jega1K85FndZBngNpoto4i1XLm9mIl/poUdb RFugeSOnTXBiDvqNg622+qrmuUpW2etX8cJ6RVLvGFRz6cULky6SwNnIfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPH4MXQx+snUg0Dx+BTo22i7qQ4rMB8GA1UdIwQY MBaAFGQvJBzMongrX8QH4buvepephHRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jYWU1NDgtYzNlMS00NTcxLTlhMGIt MTQ1ZTk1ZThhN2JlLzEvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9jYWU1NDgtYzNlMS00NTcxLTlhMGItMTQ1ZTk1ZThhN2Jl LzEvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOpZKyku P0y7li5MRUz8ZHlQock+qiqw8cIMEIwnZFz1/nZUwYMDoD6px54c21agyRp4Hb/P hzVok5Z+NA7ma9MjuhMosj6CkBr+0kW4r0u0FQljcHL9fX7ErkIFV6Eg7mo/XvBY mZmgPM8yQMWuOCQu+amsk4IlugpxJaveO8cQWbKEdYvvh5w7RUrQPvOp1Po31NZM U6pP1OYBspYHSn4+z8e6nHfR7e/gHvDNf4/Aiqm9TQWs0bLPAiv63rPMi5e9qiom Th35vskOwAVHdYnC/LobfxZieHP5eK0I7OkruSXjtbTFkd8ownTTLt3Ah/YC9LgV D001vuiokyCamw== -----END CERTIFICATE-----Generated at Sun Jan 11 15:51:54 2026 by rpki-client