This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft File: zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft (raw, json) Hash identifier: QF9IgLQwgtRdsRmbXap7tQE/5POGs7E0gjAOg5Ipy+E= Subject key identifier: 44:41:1B:E7:77:18:CD:93:2A:1F:B0:37:D9:B7:E7:7B:A5:5B:34:F9 Authority key identifier: CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2 Certificate issuer: /CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2 Certificate serial: 019C2028E018FD25C22A9937C0686C3A1ED3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft Manifest number: 1800 Signing time: Mon 02 Feb 2026 21:01:15 +0000 Manifest this update: Mon 02 Feb 2026 21:01:15 +0000 Manifest next update: Tue 03 Feb 2026 21:01:15 +0000 Files and hashes: 1: P2B766sld6YbwOxda85NHhDsjNc.roa (hash: Rh+n3/ugGLGil4AXCXWWDwwftkzN5fZJ5lMUe38d6gg=) 2: zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl (hash: 4jNOghEa3QhptNP1cOgNAgKEK4itVSQtH0zb66yiNnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:20:28:e0:18:fd:25:c2:2a:99:37:c0:68:6c:3a:1e:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2 Validity Not Before: Feb 2 21:01:15 2026 GMT Not After : Feb 3 21:01:15 2026 GMT Subject: CN=44411be77718cd932a1fb037d9b7e77ba55b34f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:70:14:11:da:d8:14:c7:ff:44:10:9a:7c:c4: 5c:29:84:82:5c:34:64:be:fd:94:87:d5:bc:e6:72: 89:2c:8b:55:37:6e:59:29:b8:fc:aa:c0:ae:96:6b: 0a:8e:c8:73:23:83:92:e3:12:ee:79:e5:5f:a0:d7: 12:92:30:6b:10:fd:05:20:a2:dc:59:d0:1e:25:44: a4:69:fa:02:18:55:b5:c9:90:80:71:55:5e:44:b7: a1:53:31:64:2c:4f:00:64:f8:4a:fa:e8:98:53:d0: d5:02:63:82:a8:59:6e:fe:0d:a4:52:e5:59:9d:b7: 81:30:d7:e5:f6:31:8c:74:a5:a5:64:17:e5:53:a7: bb:e9:66:98:54:89:2a:d3:22:f1:8c:dd:39:9b:16: 45:9a:b5:aa:ce:33:0e:b3:e6:d8:8b:98:ea:b7:ab: 85:95:f3:5f:d0:32:f2:a2:46:07:aa:0e:10:82:15: b4:77:7e:47:1d:16:a7:9a:f5:5c:7d:e9:bb:77:6d: 2d:4e:0f:4e:45:ab:79:f5:16:53:51:05:7f:f3:3a: bf:c5:9c:3c:0f:f2:a7:08:76:bd:4b:f6:e5:9c:22: 18:25:6a:98:49:d9:3f:30:03:5e:0e:a4:2c:4b:ee: c9:ed:75:61:6f:c0:75:88:32:10:5d:96:40:76:73: cf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:41:1B:E7:77:18:CD:93:2A:1F:B0:37:D9:B7:E7:7B:A5:5B:34:F9 X509v3 Authority Key Identifier: keyid:CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:32:c3:3e:60:c9:3f:5d:65:06:b3:77:cd:dc:9e:da:70:67: 8c:03:e6:9d:0a:22:d5:8c:82:71:ad:89:cd:74:b1:d7:73:d6: a0:21:81:b6:68:ae:dd:3f:3e:22:7a:da:dd:d6:1b:8b:fb:9c: f4:22:bf:0d:8d:a8:f7:a4:9b:c8:1b:f8:e8:66:61:73:f0:ad: 11:88:1b:6b:67:1f:eb:da:be:5b:db:f8:b7:d1:5a:cc:f7:57: c7:9f:4f:17:13:83:1a:9f:35:cc:ef:82:a8:44:8f:bd:6e:2a: dd:f2:49:83:bd:da:81:38:9e:06:80:5a:fa:66:f5:b3:e5:60: bb:75:20:15:37:83:ad:ce:cc:1a:4e:ec:d6:1b:23:86:65:eb: 4b:03:e4:a9:9a:8e:c7:c2:40:4a:85:b7:ae:dd:b4:fd:d4:c2: 19:64:65:e4:ce:fa:78:fd:28:9d:4e:7f:5d:c6:63:e8:a2:e4: 32:cc:7b:4c:c4:7b:07:4c:0b:cd:a4:e8:91:16:90:57:3c:f0: 29:82:2b:39:af:b1:3d:9c:24:26:56:d4:85:b6:e3:65:53:3d: d5:77:85:94:59:c9:cf:21:90:0e:31:0e:5b:f5:0f:b5:1a:bd: f3:4d:48:59:16:29:71:91:f8:9f:b9:b9:60:1a:b8:a9:b9:e0: ba:36:9e:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwgKOAY/SXCKpk3wGhsOh7TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNTZhYTBlMjE1NThjOTJhNDg2NTQyNDRlMDU5NjFhMWZj ZmEwZjIwHhcNMjYwMjAyMjEwMTE1WhcNMjYwMjAzMjEwMTE1WjAzMTEwLwYDVQQD Eyg0NDQxMWJlNzc3MThjZDkzMmExZmIwMzdkOWI3ZTc3YmE1NWIzNGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHAUEdrYFMf/RBCafMRcKYSCXDRk vv2Uh9W85nKJLItVN25ZKbj8qsCulmsKjshzI4OS4xLueeVfoNcSkjBrEP0FIKLc WdAeJUSkafoCGFW1yZCAcVVeRLehUzFkLE8AZPhK+uiYU9DVAmOCqFlu/g2kUuVZ nbeBMNfl9jGMdKWlZBflU6e76WaYVIkq0yLxjN05mxZFmrWqzjMOs+bYi5jqt6uF lfNf0DLyokYHqg4QghW0d35HHRanmvVcfem7d20tTg9ORat59RZTUQV/8zq/xZw8 D/KnCHa9S/blnCIYJWqYSdk/MANeDqQsS+7J7XVhb8B1iDIQXZZAdnPPnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERBG+d3GM2TKh+wN9m353ulWzT5MB8GA1UdIwQY MBaAFM5Wqg4hVYySpIZUJE4Flhofz6DyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemxhcURpRlZqSktraGxRa1RnV1dHaF9Qb1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wNzQ3NmMtMmM1Yi00MGU5LWI1NjIt NTRmYTMwODY0YzIxLzEvemxhcURpRlZqSktraGxRa1RnV1dHaF9Qb1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8wNzQ3NmMtMmM1Yi00MGU5LWI1NjItNTRmYTMwODY0YzIx LzEvemxhcURpRlZqSktraGxRa1RnV1dHaF9Qb1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajLDPmDJ P11lBrN3zdye2nBnjAPmnQoi1YyCca2JzXSx13PWoCGBtmiu3T8+Inra3dYbi/uc 9CK/DY2o96SbyBv46GZhc/CtEYgba2cf69q+W9v4t9FazPdXx59PFxODGp81zO+C qESPvW4q3fJJg73agTieBoBa+mb1s+Vgu3UgFTeDrc7MGk7s1hsjhmXrSwPkqZqO x8JASoW3rt20/dTCGWRl5M76eP0onU5/XcZj6KLkMsx7TMR7B0wLzaTokRaQVzzw KYIrOa+xPZwkJlbUhbbjZVM91XeFlFnJzyGQDjEOW/UPtRq9801IWRYpcZH4n7m5 YBq4qbngujae0g== -----END CERTIFICATE-----Generated at Tue Feb 3 01:52:46 2026 by rpki-client