This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft File: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft (raw, json) Hash identifier: JtfJ8F/HtFChF7hSjwDbbBpLm1JMUCCcpNzEYdB+sGo= Subject key identifier: 2C:FC:5C:3D:20:C2:35:DF:2C:BD:38:BB:AC:5B:BB:E3:32:BB:3B:4D Authority key identifier: CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4 Certificate issuer: /CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4 Certificate serial: 019C1C4C4BB3235BD7C7791B986182CCFEE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft Manifest number: 10AE Signing time: Mon 02 Feb 2026 03:01:27 +0000 Manifest this update: Mon 02 Feb 2026 03:01:27 +0000 Manifest next update: Tue 03 Feb 2026 03:01:27 +0000 Files and hashes: 1: 5mo5xCIsbIhrhc8a0MMdjoHlY1A.roa (hash: pyWlQmd0OGBAWyVjo0BfVWnydEoUEqSFJZF/M2RGZlA=) 2: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl (hash: +duINVpE0lD+kwceR5T0RAnHSFlEhGLpp68yD3gMsbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:4c:4b:b3:23:5b:d7:c7:79:1b:98:61:82:cc:fe:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4 Validity Not Before: Feb 2 03:01:27 2026 GMT Not After : Feb 3 03:01:27 2026 GMT Subject: CN=2cfc5c3d20c235df2cbd38bbac5bbbe332bb3b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0d:18:e8:e6:ee:1d:a6:ec:d4:91:c5:e5:9b: ba:0f:bb:cb:26:53:b8:ed:f2:b9:28:0a:01:6e:03: 47:2f:f2:3d:c5:85:d9:a5:77:bc:8e:a9:fd:1d:6e: fc:ca:24:f5:57:7f:41:5d:a8:bc:7b:8a:c7:66:8d: d1:3e:20:3e:40:1b:4c:e3:30:e7:5c:e2:79:43:0b: 04:21:04:bb:92:b1:e6:96:b0:dd:d8:c7:d9:8d:2f: 18:60:09:dc:6e:28:06:76:5e:5a:ba:fd:47:78:84: 97:67:cb:1e:b1:c7:45:a0:31:93:de:0e:b4:a7:0a: 5c:d5:be:44:15:5a:e7:0a:df:c8:8c:7c:37:9c:bd: 22:2f:5d:a0:46:c0:0f:61:0c:45:2a:74:90:13:98: 62:d5:8d:f8:c8:13:2e:bf:94:42:a3:c3:58:26:ac: 5c:1e:b2:a0:86:99:55:30:4a:bd:72:3e:22:35:e2: f8:83:cf:c3:33:70:b4:d3:b0:76:ad:76:8d:5c:20: 3b:fa:92:e0:16:a4:07:04:ae:f0:e4:75:be:14:e1: ac:38:af:54:6d:32:6d:9c:41:99:ce:cb:01:06:7d: 2d:90:f0:13:d0:02:0b:29:e8:cb:c5:1f:f2:df:13: 9c:b2:8a:09:9f:e0:99:f7:f0:35:34:59:29:21:00: 8b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:FC:5C:3D:20:C2:35:DF:2C:BD:38:BB:AC:5B:BB:E3:32:BB:3B:4D X509v3 Authority Key Identifier: keyid:CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:13:e1:3f:22:ee:56:72:9e:a6:30:48:57:d1:bb:49:a2:bc: 38:85:eb:7a:7c:dd:34:4e:b7:1a:d6:99:e5:1b:1a:f7:90:50: 0e:db:5f:82:d0:eb:ba:b2:04:2f:bf:78:46:96:20:8e:3f:66: a1:99:f8:82:f2:6b:5a:9e:0a:fc:0b:16:cc:d6:1d:eb:14:f7: 00:04:67:4a:2a:88:9d:8b:7f:1e:5d:4a:a3:23:08:b3:80:ac: 80:4e:86:9f:b0:76:2c:be:7f:c7:89:28:9c:ec:58:28:8e:c8: af:f8:a0:27:d5:c9:5b:74:00:72:32:1e:93:7e:c9:38:8d:c9: 08:63:7c:e7:27:79:f4:06:50:b3:fa:75:ac:0a:d3:20:f5:69: 2f:0b:79:a6:ae:fd:27:ba:62:7a:7c:3b:b2:c5:21:82:9d:11: ab:70:c4:cf:be:08:1e:26:36:1b:fe:dd:3f:db:53:33:d5:9e: e3:87:2f:d0:13:8a:4b:f2:a9:31:c5:7d:95:60:1b:04:98:7d: 17:be:6e:a9:9e:30:1d:41:8a:72:0c:94:88:24:11:7d:8c:65: b7:78:3d:89:90:61:16:bc:74:9f:99:be:af:c0:d4:07:d9:dd: 57:95:9d:77:17:ca:fd:3c:46:f1:2c:1c:a7:2b:c6:df:17:84: b4:b2:a2:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcTEuzI1vXx3kbmGGCzP7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNDZlYTYyOWFmYjBjMmQ1NDIwMGI1YTY1NzI3YmUxOGNi YjQ1YTQwHhcNMjYwMjAyMDMwMTI3WhcNMjYwMjAzMDMwMTI3WjAzMTEwLwYDVQQD EygyY2ZjNWMzZDIwYzIzNWRmMmNiZDM4YmJhYzViYmJlMzMyYmIzYjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3w0Y6ObuHabs1JHF5Zu6D7vLJlO4 7fK5KAoBbgNHL/I9xYXZpXe8jqn9HW78yiT1V39BXai8e4rHZo3RPiA+QBtM4zDn XOJ5QwsEIQS7krHmlrDd2MfZjS8YYAncbigGdl5auv1HeISXZ8sescdFoDGT3g60 pwpc1b5EFVrnCt/IjHw3nL0iL12gRsAPYQxFKnSQE5hi1Y34yBMuv5RCo8NYJqxc HrKghplVMEq9cj4iNeL4g8/DM3C007B2rXaNXCA7+pLgFqQHBK7w5HW+FOGsOK9U bTJtnEGZzssBBn0tkPAT0AILKejLxR/y3xOcsooJn+CZ9/A1NFkpIQCL7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCz8XD0gwjXfLL04u6xbu+MyuztNMB8GA1UdIwQY MBaAFM5G6mKa+wwtVCALWmVye+GMu0WkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yYmUwMDktMWVmMS00ZDU3LThmMDEt N2UxODRiMDcwYmJkLzEvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yYmUwMDktMWVmMS00ZDU3LThmMDEtN2UxODRiMDcwYmJk LzEvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBPhPyLu VnKepjBIV9G7SaK8OIXrenzdNE63GtaZ5Rsa95BQDttfgtDrurIEL794RpYgjj9m oZn4gvJrWp4K/AsWzNYd6xT3AARnSiqInYt/Hl1KoyMIs4CsgE6Gn7B2LL5/x4ko nOxYKI7Ir/igJ9XJW3QAcjIek37JOI3JCGN85yd59AZQs/p1rArTIPVpLwt5pq79 J7pienw7ssUhgp0Rq3DEz74IHiY2G/7dP9tTM9We44cv0BOKS/KpMcV9lWAbBJh9 F75uqZ4wHUGKcgyUiCQRfYxlt3g9iZBhFrx0n5m+r8DUB9ndV5WddxfK/TxG8Swc pyvG3xeEtLKiaw== -----END CERTIFICATE-----Generated at Mon Feb 2 04:45:11 2026 by rpki-client