This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json) Hash identifier: dNyPrOS3wQcISe91SzhT5BsYlHmaHUPHerVCoxo3vYo= Subject key identifier: 39:AB:89:A1:49:3F:3D:E2:E5:94:A3:2D:6C:DB:E4:91:19:97:37:64 Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea Certificate serial: 019BFAD2A6EE312B46CA788761204E5AAD50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft Manifest number: 0CA2 Signing time: Mon 26 Jan 2026 15:01:07 +0000 Manifest this update: Mon 26 Jan 2026 15:01:07 +0000 Manifest next update: Tue 27 Jan 2026 15:01:07 +0000 Files and hashes: 1: 3wE9z3o-LZC9L1Wi744_KuJH-nA.roa (hash: vmvu4StBrIILT2zOsTXLqhGSv13Lo4k+H588mDsH8cM=) 2: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: BDURIogN0o5JAS5Nt/8Hgo3EmOucE64GS/5Id0mRMr8=) 3: amULFHSQIT1lD63zvSrNJGtGM-I.roa (hash: UX9F+FQcAi88JV/0o8okdIg01PgokJoY/+NJIGfsY+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:a6:ee:31:2b:46:ca:78:87:61:20:4e:5a:ad:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea Validity Not Before: Jan 26 15:01:07 2026 GMT Not After : Jan 27 15:01:07 2026 GMT Subject: CN=39ab89a1493f3de2e594a32d6cdbe49119973764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:00:18:fd:c0:5b:c1:78:71:af:15:70:8a:17: ed:0d:5b:8d:e6:c4:8a:34:bd:d3:19:24:c5:b2:8a: c1:ae:54:fb:27:9e:87:10:09:00:f0:d3:d9:b8:c4: 97:45:26:72:bf:0e:ba:72:5e:a2:06:8b:9b:15:14: e9:45:df:8b:67:26:f2:9b:53:8a:8b:36:04:42:8c: db:ee:f4:75:9e:01:21:59:59:04:e4:44:23:1d:4e: 1b:60:b1:f4:61:fa:7b:eb:26:a7:96:a7:db:0e:44: 09:47:3b:90:2b:d2:e8:15:26:db:1e:48:57:1b:29: f2:57:4a:27:c0:d2:d3:ad:d8:99:58:44:8a:84:e1: e2:ab:0f:83:13:c6:c6:8f:63:cf:c5:af:ef:bd:3a: 99:5b:a8:ae:b5:1c:ce:b0:a1:d9:98:8f:6a:56:be: a8:9b:b9:e5:19:48:d4:53:7f:33:c2:b1:03:18:6b: 37:24:d2:eb:18:df:92:ae:56:12:94:f3:9b:f1:53: 12:54:15:42:66:bb:25:50:d0:af:95:a4:af:54:47: 65:64:87:61:fb:03:ef:3c:6f:c4:a8:4a:84:1d:ad: 21:ff:33:e6:bf:9f:34:51:a3:3b:6c:87:79:83:ac: d5:fe:69:72:f0:14:47:c2:e0:a8:a1:06:4c:f1:da: f2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AB:89:A1:49:3F:3D:E2:E5:94:A3:2D:6C:DB:E4:91:19:97:37:64 X509v3 Authority Key Identifier: keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a2:bb:de:be:a1:8c:60:ab:9c:7d:3d:32:60:df:6d:1e:6d: 45:c0:3b:1e:3e:e6:21:00:0f:8a:65:94:b5:28:f1:c9:a4:85: 9d:64:f6:ae:e7:b0:fb:b2:4b:66:d5:53:36:f7:94:7f:04:cf: c4:a3:f6:6b:36:c8:7b:b5:9d:71:52:a2:1f:1e:44:e1:e3:54: 43:e1:f9:35:bc:a8:66:14:c4:bb:37:a0:2b:65:e4:b9:4f:30: 8b:8b:18:2a:3d:ac:31:b3:0f:4a:a0:66:9a:3e:08:17:52:93: fb:4d:89:95:db:f6:0d:1d:15:a5:8f:92:df:84:a7:fe:68:57: 4a:ed:57:b5:8f:9c:7e:ba:6f:db:60:64:b8:be:98:cf:e0:a1: 54:fd:55:6c:6a:c3:38:21:70:4c:02:3a:af:f0:32:73:43:96: 09:ed:b2:91:df:2e:23:56:6c:55:da:0f:0b:e0:7a:3e:b9:11: 13:c1:bb:30:92:1d:5b:62:31:08:60:dc:e9:d2:46:e2:e8:3f: 11:d3:ab:2c:c3:08:cb:c2:49:7d:0d:25:ed:9e:db:e0:27:4e: 24:e5:88:5a:dc:7f:c4:03:fd:c6:f3:41:8e:66:58:d5:9c:d0: 99:26:6d:ed:99:2b:27:52:41:41:ca:7c:07:4e:6e:bb:02:f8: 4d:68:51:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60qbuMStGyniHYSBOWq1QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmZiMzA5YzI4OWFjZmZjMWJlMzRhNmYwYjY2NzVjMDAx NzEzZWEwHhcNMjYwMTI2MTUwMTA3WhcNMjYwMTI3MTUwMTA3WjAzMTEwLwYDVQQD EygzOWFiODlhMTQ5M2YzZGUyZTU5NGEzMmQ2Y2RiZTQ5MTE5OTczNzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwAY/cBbwXhxrxVwihftDVuN5sSK NL3TGSTFsorBrlT7J56HEAkA8NPZuMSXRSZyvw66cl6iBoubFRTpRd+LZybym1OK izYEQozb7vR1ngEhWVkE5EQjHU4bYLH0Yfp76yanlqfbDkQJRzuQK9LoFSbbHkhX GynyV0onwNLTrdiZWESKhOHiqw+DE8bGj2PPxa/vvTqZW6iutRzOsKHZmI9qVr6o m7nlGUjUU38zwrEDGGs3JNLrGN+SrlYSlPOb8VMSVBVCZrslUNCvlaSvVEdlZIdh +wPvPG/EqEqEHa0h/zPmv580UaM7bId5g6zV/mly8BRHwuCooQZM8dryewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmriaFJPz3i5ZSjLWzb5JEZlzdkMB8GA1UdIwQY MBaAFGT/swnCiaz/wb40pvC2Z1wAFxPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUt Y2E0NDQ3MDQ0MTZmLzEvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUtY2E0NDQ3MDQ0MTZm LzEvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaK73r6h jGCrnH09MmDfbR5tRcA7Hj7mIQAPimWUtSjxyaSFnWT2ruew+7JLZtVTNveUfwTP xKP2azbIe7WdcVKiHx5E4eNUQ+H5NbyoZhTEuzegK2XkuU8wi4sYKj2sMbMPSqBm mj4IF1KT+02Jldv2DR0VpY+S34Sn/mhXSu1XtY+cfrpv22BkuL6Yz+ChVP1VbGrD OCFwTAI6r/Ayc0OWCe2ykd8uI1ZsVdoPC+B6PrkRE8G7MJIdW2IxCGDc6dJG4ug/ EdOrLMMIy8JJfQ0l7Z7b4CdOJOWIWtx/xAP9xvNBjmZY1ZzQmSZt7ZkrJ1JBQcp8 B05uuwL4TWhRKg== -----END CERTIFICATE-----Generated at Mon Jan 26 19:19:10 2026 by rpki-client