This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft File: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft (raw, json) Hash identifier: MNUSNSDlBXTex12YjDr2AH3fUp2AwSk1YWsvmFniC7w= Subject key identifier: 8D:5E:36:C1:A7:94:50:21:24:90:C5:BE:FF:BB:73:A2:5A:8A:47:B6 Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8 Certificate issuer: /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8 Certificate serial: 019BFF1D35BE79DAA302C7FF592DAE9EEA78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft Manifest number: 10A2 Signing time: Tue 27 Jan 2026 11:01:02 +0000 Manifest this update: Tue 27 Jan 2026 11:01:02 +0000 Manifest next update: Wed 28 Jan 2026 11:01:02 +0000 Files and hashes: 1: 4MqnD80Bm4Q9Vwi3gClRgRwhb2o.roa (hash: x1GbrEL07BjOEaho/RiiT61nbrPNpOtoeGwW3Ksg7ps=) 2: QVoMIPeCUFrk5bxFsPoRfsrvGSw.roa (hash: eQ5qNmayw3NJjRPGsMleqFUXeNcmfxmEvvPybtQSVss=) 3: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl (hash: 3Q1QuqgY7iiH5NyPLMhP96WIETJw4tQLBZniF+sFKAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:1d:35:be:79:da:a3:02:c7:ff:59:2d:ae:9e:ea:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8 Validity Not Before: Jan 27 11:01:02 2026 GMT Not After : Jan 28 11:01:02 2026 GMT Subject: CN=8d5e36c1a79450212490c5beffbb73a25a8a47b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f4:7b:d6:d1:9f:b0:97:56:5b:eb:e7:ba:0d: a8:f3:88:3f:85:7a:d9:f8:24:2c:d5:17:77:ef:57: 35:07:31:e1:3a:a0:8d:86:29:19:90:b1:04:17:04: a8:be:c0:95:f5:aa:8c:a2:19:b1:dd:77:9f:2b:24: 91:3d:be:ac:28:e1:d0:94:54:e5:58:26:e0:db:ba: 93:42:de:0b:07:4f:f9:10:c2:70:d9:3f:f4:13:79: 53:dd:b0:fa:71:f6:17:63:a5:07:01:a2:8a:0e:6d: 86:e3:55:e3:d2:93:6f:32:84:0d:bd:04:0c:be:ae: 4d:9b:48:bc:9a:9e:37:70:1f:95:11:3e:79:dd:e2: 54:5b:6f:38:49:c1:f7:51:24:8b:94:78:a6:7a:20: 76:80:55:d5:0d:0b:73:3c:93:86:a8:aa:85:17:3e: 8c:3d:65:c6:01:5e:ed:21:2f:82:9b:9c:17:d9:dd: 62:ca:78:4a:91:32:a7:5a:2c:73:92:f6:57:48:50: 61:89:94:7a:4c:8e:83:0e:40:4c:43:0f:ec:85:b0: 64:11:7c:50:35:bc:dc:b0:e3:0e:3d:8f:d2:fc:42: f1:bb:62:73:2f:16:7a:56:f6:c8:89:70:c8:9d:e9: 08:85:7d:a4:29:fa:40:54:7a:ee:2c:f4:35:8c:7d: 58:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5E:36:C1:A7:94:50:21:24:90:C5:BE:FF:BB:73:A2:5A:8A:47:B6 X509v3 Authority Key Identifier: keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:9e:cf:cb:1e:83:c2:d3:e0:28:a0:0c:92:ad:c7:22:83:77: 2d:e4:78:c0:fe:3d:80:8e:67:76:d8:c2:25:a7:dc:94:64:7a: 13:3b:1d:f4:f4:b8:09:54:cf:c4:5c:20:b7:f0:24:61:68:7e: 65:ec:67:21:a5:3c:20:74:f4:ec:00:4a:58:fd:2a:8b:75:85: 4b:9a:38:1f:86:e4:d0:a5:01:0c:0e:37:ea:96:e1:06:40:e7: 58:8d:1f:7d:dc:86:53:9d:6c:fb:8d:ba:53:ff:2a:64:6c:70: 15:5b:ce:f4:fb:3b:66:4e:2d:ac:6e:c2:e3:b5:55:97:78:b9: a4:9f:a5:2d:6b:c1:91:89:45:02:28:1c:3b:47:55:49:92:51: 9e:b2:a0:eb:26:91:9d:f5:d1:b7:d2:8c:3a:94:4a:bd:4b:fe: 8a:58:d2:02:02:bb:35:ff:0e:b5:e0:c3:8c:a6:e6:66:f0:41: 53:ee:fe:78:69:75:68:8f:77:3e:0c:f5:38:b1:48:d2:d9:06: 9c:c1:97:3f:f8:c9:09:f1:d5:bd:42:29:41:04:57:4b:be:a9: e3:0d:df:aa:20:43:a7:03:5e:c0:4d:fd:3a:a5:7f:0b:89:9b: 53:5f:5c:5c:83:79:bc:b3:93:85:64:a1:b4:06:33:bb:86:b4: 78:36:93:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/HTW+edqjAsf/WS2unup4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MWM3OGZjMTc0OGJkY2M2YTZjODhjNjdkMjgzZTFkMDJk OWRjYzgwHhcNMjYwMTI3MTEwMTAyWhcNMjYwMTI4MTEwMTAyWjAzMTEwLwYDVQQD Eyg4ZDVlMzZjMWE3OTQ1MDIxMjQ5MGM1YmVmZmJiNzNhMjVhOGE0N2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vR71tGfsJdWW+vnug2o84g/hXrZ +CQs1Rd371c1BzHhOqCNhikZkLEEFwSovsCV9aqMohmx3XefKySRPb6sKOHQlFTl WCbg27qTQt4LB0/5EMJw2T/0E3lT3bD6cfYXY6UHAaKKDm2G41Xj0pNvMoQNvQQM vq5Nm0i8mp43cB+VET553eJUW284ScH3USSLlHimeiB2gFXVDQtzPJOGqKqFFz6M PWXGAV7tIS+Cm5wX2d1iynhKkTKnWixzkvZXSFBhiZR6TI6DDkBMQw/shbBkEXxQ NbzcsOMOPY/S/ELxu2JzLxZ6VvbIiXDInekIhX2kKfpAVHruLPQ1jH1YhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1eNsGnlFAhJJDFvv+7c6Jaike2MB8GA1UdIwQY MBaAFGQcePwXSL3MamyIxn0oPh0C2dzIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lNzJhOWQtOWVhNS00N2RiLWE2N2Ut NmQyZTExZmUwOGNkLzEvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lNzJhOWQtOWVhNS00N2RiLWE2N2UtNmQyZTExZmUwOGNk LzEvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJp7Pyx6D wtPgKKAMkq3HIoN3LeR4wP49gI5ndtjCJafclGR6Ezsd9PS4CVTPxFwgt/AkYWh+ ZexnIaU8IHT07ABKWP0qi3WFS5o4H4bk0KUBDA436pbhBkDnWI0ffdyGU51s+426 U/8qZGxwFVvO9Ps7Zk4trG7C47VVl3i5pJ+lLWvBkYlFAigcO0dVSZJRnrKg6yaR nfXRt9KMOpRKvUv+iljSAgK7Nf8OteDDjKbmZvBBU+7+eGl1aI93Pgz1OLFI0tkG nMGXP/jJCfHVvUIpQQRXS76p4w3fqiBDpwNewE39OqV/C4mbU19cXIN5vLOThWSh tAYzu4a0eDaTLQ== -----END CERTIFICATE-----Generated at Tue Jan 27 17:50:09 2026 by rpki-client