This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft File: zfy95jLRBvqtmMLBiVqHfKYBUho.mft (raw, json) Hash identifier: ccCdb6LJqZRcsJdAUQJ4zddErOgsOX6+i0kNJ9CZQT8= Subject key identifier: EA:65:60:56:19:BB:FA:D7:95:39:54:02:06:9E:A4:89:5D:F4:FB:B7 Authority key identifier: CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A Certificate issuer: /CN=cdfcbde632d106faad98c2c1895a877ca601521a Certificate serial: 019C1F1639768C0366B2242C1D24792BE26A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft Manifest number: 1791 Signing time: Mon 02 Feb 2026 16:01:15 +0000 Manifest this update: Mon 02 Feb 2026 16:01:15 +0000 Manifest next update: Tue 03 Feb 2026 16:01:15 +0000 Files and hashes: 1: KGwwtGzR65TxQF-2vzhHlmHOTo8.roa (hash: o/WFBpe3yFcgt0UEYgNY9hSYO7UsE0F6pNNZUvTlLxk=) 2: zfy95jLRBvqtmMLBiVqHfKYBUho.crl (hash: /uQXQb7e6TKwuzSBlT12llwROPytf4FpiftdnWvGAD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 16:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:16:39:76:8c:03:66:b2:24:2c:1d:24:79:2b:e2:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdfcbde632d106faad98c2c1895a877ca601521a Validity Not Before: Feb 2 16:01:15 2026 GMT Not After : Feb 3 16:01:15 2026 GMT Subject: CN=ea65605619bbfad795395402069ea4895df4fbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:30:13:2d:4b:47:d3:94:84:bf:df:5b:f8:09: a2:40:f7:bf:8b:20:3d:b2:bb:97:15:ea:e7:28:e9: 2f:5d:e3:f6:77:7b:d7:cd:98:1a:b5:09:93:19:0d: da:88:c5:df:6a:66:7d:48:e9:59:56:22:2e:4d:e7: 6e:ee:d9:37:7f:18:8d:14:72:cc:19:93:04:e9:95: 3c:19:41:70:97:23:14:f3:a7:45:7e:c0:48:fc:fb: 90:51:5e:57:22:36:49:f3:a5:38:d0:41:7e:85:7d: bd:fc:ca:7c:00:9d:ba:5b:8f:d6:fe:bb:c8:21:52: e4:93:02:b4:07:87:28:8c:25:b4:d7:76:b6:0f:70: e1:82:74:b8:c0:2a:33:d6:1b:13:b8:f4:82:00:9c: 51:a5:19:ef:df:09:7e:ca:39:03:ae:2b:11:21:0f: 58:e2:a5:1a:df:6a:e5:9f:a8:28:52:08:d2:b5:98: a9:f8:b5:c6:2b:6b:47:a4:59:ec:df:91:da:66:3e: 44:c0:e6:e3:70:57:da:0e:e8:3d:fa:22:e2:ba:90: b7:42:59:5f:81:0a:fb:36:f4:78:e2:62:35:59:e3: 58:58:5b:7e:4d:eb:54:77:21:88:18:9d:6d:cc:59: 70:de:68:7c:db:06:6b:b3:cc:fb:38:11:e0:62:3e: 5a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:65:60:56:19:BB:FA:D7:95:39:54:02:06:9E:A4:89:5D:F4:FB:B7 X509v3 Authority Key Identifier: keyid:CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:5b:af:00:22:3f:e0:f4:d4:51:f8:f7:6b:a6:f0:25:5f:90: f8:0c:ae:57:6c:d6:70:0a:3e:a3:3a:91:37:49:09:41:fa:fd: 3d:57:7a:c2:44:79:51:11:b4:45:88:eb:ff:e5:40:59:91:b3: 1c:e2:10:8b:ed:98:ad:2c:e3:c9:f3:04:c5:54:64:ed:fa:ba: 52:45:65:ef:01:f3:34:73:8f:a8:c2:4b:fa:89:2a:23:fa:31: 1d:c1:c9:31:a4:f2:57:83:f1:be:92:3e:9f:0a:77:38:07:cf: 30:be:08:93:8f:04:34:dc:d7:53:a3:40:26:e0:d6:c3:20:41: 2a:0d:84:5f:fa:bc:2c:39:2f:75:76:44:11:40:a8:db:f0:65: 99:9d:20:74:79:ce:18:df:ea:c9:38:a0:c1:ca:e4:f3:63:27: cc:d7:8e:22:6c:e9:77:f7:48:a3:73:96:07:dd:c6:56:2e:36: 80:02:3c:9d:36:d0:af:05:f7:7f:08:a0:3d:04:7c:f6:63:92: 43:09:70:ad:60:21:39:b1:ba:d6:61:77:72:d2:c7:ec:05:63: 53:87:7c:5b:c9:70:0f:3e:70:ca:6d:77:dc:f0:8b:09:79:41: 44:6b:23:f3:1a:66:b9:18:39:0e:e0:88:8c:02:3c:cb:98:d7: 1d:df:95:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwfFjl2jANmsiQsHSR5K+JqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZmNiZGU2MzJkMTA2ZmFhZDk4YzJjMTg5NWE4NzdjYTYw MTUyMWEwHhcNMjYwMjAyMTYwMTE1WhcNMjYwMjAzMTYwMTE1WjAzMTEwLwYDVQQD EyhlYTY1NjA1NjE5YmJmYWQ3OTUzOTU0MDIwNjllYTQ4OTVkZjRmYmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTATLUtH05SEv99b+AmiQPe/iyA9 sruXFernKOkvXeP2d3vXzZgatQmTGQ3aiMXfamZ9SOlZViIuTedu7tk3fxiNFHLM GZME6ZU8GUFwlyMU86dFfsBI/PuQUV5XIjZJ86U40EF+hX29/Mp8AJ26W4/W/rvI IVLkkwK0B4cojCW013a2D3DhgnS4wCoz1hsTuPSCAJxRpRnv3wl+yjkDrisRIQ9Y 4qUa32rln6goUgjStZip+LXGK2tHpFns35HaZj5EwObjcFfaDug9+iLiupC3Qllf gQr7NvR44mI1WeNYWFt+TetUdyGIGJ1tzFlw3mh82wZrs8z7OBHgYj5anwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOplYFYZu/rXlTlUAgaepIld9Pu3MB8GA1UdIwQY MBaAFM38veYy0Qb6rZjCwYlah3ymAVIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZ5OTVqTFJCdnF0bU1MQmlWcUhmS1lCVWhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9mZTQ1Y2YtNGFkMi00MWQ5LWJiY2Et MjAzY2ZhMjM4Njk2LzEvemZ5OTVqTFJCdnF0bU1MQmlWcUhmS1lCVWhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9mZTQ1Y2YtNGFkMi00MWQ5LWJiY2EtMjAzY2ZhMjM4Njk2 LzEvemZ5OTVqTFJCdnF0bU1MQmlWcUhmS1lCVWhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1uvACI/ 4PTUUfj3a6bwJV+Q+AyuV2zWcAo+ozqRN0kJQfr9PVd6wkR5URG0RYjr/+VAWZGz HOIQi+2YrSzjyfMExVRk7fq6UkVl7wHzNHOPqMJL+okqI/oxHcHJMaTyV4PxvpI+ nwp3OAfPML4Ik48ENNzXU6NAJuDWwyBBKg2EX/q8LDkvdXZEEUCo2/BlmZ0gdHnO GN/qyTigwcrk82MnzNeOImzpd/dIo3OWB93GVi42gAI8nTbQrwX3fwigPQR89mOS QwlwrWAhObG61mF3ctLH7AVjU4d8W8lwDz5wym133PCLCXlBRGsj8xpmuRg5DuCI jAI8y5jXHd+VUA== -----END CERTIFICATE-----Generated at Tue Feb 3 01:52:45 2026 by rpki-client