This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft File: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft (raw, json) Hash identifier: lhg6LkncGS8lnVolnYJ7/QhMeeyWctKsGAuI0GccF5s= Subject key identifier: B1:4F:16:0A:4D:E9:19:E8:8A:24:01:7E:32:6A:5F:0D:D9:2E:EA:41 Authority key identifier: 65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41 Certificate issuer: /CN=656cc25012e3a4c8b1626dd757c7b0510e457341 Certificate serial: 019B77B7342A126A0D083A3B15DDD31C8E01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft Manifest number: 17A9 Signing time: Thu 01 Jan 2026 04:00:53 +0000 Manifest this update: Thu 01 Jan 2026 04:00:53 +0000 Manifest next update: Fri 02 Jan 2026 04:00:53 +0000 Files and hashes: 1: 27WBhhpGCu8KcUXHgHNDtyT7qA4.roa (hash: hASVoi4FkuHDPpmp5IMQcLI7MKWjHmB6IplIj3b2UNs=) 2: BlXtwuXJZi1FsUYJseJuuvLHwG0.roa (hash: E+H4MQ+p60pNwEw6UNfCnrSspvLH+GiOyo4ssEl9XXQ=) 3: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl (hash: cL3fvbE5Sra8cyiDAHOTssXLtTZC1r/JI7lhdzGVHa8=) 4: l7PaOk1ocbrgfH7RkR-EmGKNBYI.roa (hash: 2MdjtNxo4ObSDeeX352JxmkPKpeMrJB/59RsZtzSS9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:b7:34:2a:12:6a:0d:08:3a:3b:15:dd:d3:1c:8e:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656cc25012e3a4c8b1626dd757c7b0510e457341 Validity Not Before: Jan 1 04:00:53 2026 GMT Not After : Jan 2 04:00:53 2026 GMT Subject: CN=b14f160a4de919e88a24017e326a5f0dd92eea41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f3:de:ea:d4:8f:ab:84:e3:17:75:eb:07:cf: 9e:bd:b6:9a:3f:68:c5:4f:c2:b1:bd:c9:da:9b:b5: 3d:b2:0c:c4:4d:d1:fb:f8:5d:97:8f:8a:d1:d3:84: d8:0b:05:ae:ed:ac:fb:75:25:45:45:e3:89:4b:3d: c8:73:cf:b8:47:0b:88:fe:64:0e:87:08:90:24:42: e8:48:42:90:96:e5:8b:69:6c:36:6a:f5:b5:d9:7c: c8:a3:3b:8e:26:c2:52:6f:4f:be:84:f5:8a:31:8a: 19:00:52:14:6f:66:e0:c9:88:e0:b8:f4:6e:27:2a: 26:08:fe:8d:ad:6d:60:10:0a:55:fa:9f:95:5a:39: 97:e6:ef:4f:86:87:f1:da:ac:46:55:7b:31:34:cd: 4e:62:78:c2:60:93:41:d4:49:2a:42:8e:c7:70:8b: a7:82:58:54:2a:43:4e:73:fd:43:41:7b:3b:66:70: ec:8c:1e:c6:86:5b:50:cc:4a:b9:e1:35:af:6a:a6: a7:b3:03:08:56:11:c1:3a:7b:e4:12:35:28:cc:64: 29:4d:43:28:04:c9:4f:e8:37:7c:e5:5c:77:80:da: a1:e1:0e:53:0e:fb:a4:5f:ad:64:6c:f6:47:71:13: e1:65:ca:99:b2:61:95:dd:4a:0a:17:6f:26:c3:f4: f7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4F:16:0A:4D:E9:19:E8:8A:24:01:7E:32:6A:5F:0D:D9:2E:EA:41 X509v3 Authority Key Identifier: keyid:65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:cb:69:89:77:64:18:7a:e2:06:be:e7:dc:55:8a:86:a4:cc: 3e:9f:21:3b:9f:7c:f2:09:10:84:77:6b:20:bd:f9:97:0c:16: 49:cd:d1:e2:18:1a:23:45:66:ef:11:7c:e0:3c:b6:64:31:39: 38:7c:68:7d:06:2d:ee:f1:0e:cd:30:6e:bb:81:4b:a9:78:1e: 90:e9:cc:8f:da:d8:2d:a8:7f:48:ec:d4:7c:cf:78:f9:67:09: 85:60:df:42:92:4b:f7:f2:8c:70:47:75:38:0e:c5:7c:e5:04: 52:a7:da:75:52:23:2f:60:f9:e7:7d:2b:21:11:18:5c:ec:6b: aa:3f:9f:83:97:ad:54:2a:0c:51:36:61:eb:82:cc:f7:fa:51: a3:92:be:b5:0a:86:42:97:60:e1:64:04:d8:f8:d9:13:97:37: 69:83:9c:fd:22:08:ab:bf:44:56:bb:16:4f:11:31:8f:38:df: 07:1a:87:57:d8:cf:af:a7:0c:0c:6b:c7:2f:1a:8e:35:73:c0: 36:06:4e:0f:96:a3:3d:6b:7e:e8:26:bc:eb:e6:90:6b:61:4d: 78:62:43:7d:14:9a:89:89:9e:3a:2d:0d:c0:d9:1b:6f:c3:b7: b6:00:03:bd:1f:c4:fd:e5:6d:d0:b7:5d:5d:2c:e5:3e:d8:d5: 3b:5c:fc:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3tzQqEmoNCDo7Fd3THI4BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NmNjMjUwMTJlM2E0YzhiMTYyNmRkNzU3YzdiMDUxMGU0 NTczNDEwHhcNMjYwMTAxMDQwMDUzWhcNMjYwMTAyMDQwMDUzWjAzMTEwLwYDVQQD EyhiMTRmMTYwYTRkZTkxOWU4OGEyNDAxN2UzMjZhNWYwZGQ5MmVlYTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/Pe6tSPq4TjF3XrB8+evbaaP2jF T8Kxvcnam7U9sgzETdH7+F2Xj4rR04TYCwWu7az7dSVFReOJSz3Ic8+4RwuI/mQO hwiQJELoSEKQluWLaWw2avW12XzIozuOJsJSb0++hPWKMYoZAFIUb2bgyYjguPRu JyomCP6NrW1gEApV+p+VWjmX5u9Phofx2qxGVXsxNM1OYnjCYJNB1EkqQo7HcIun glhUKkNOc/1DQXs7ZnDsjB7GhltQzEq54TWvaqanswMIVhHBOnvkEjUozGQpTUMo BMlP6Dd85Vx3gNqh4Q5TDvukX61kbPZHcRPhZcqZsmGV3UoKF28mw/T3KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFPFgpN6RnoiiQBfjJqXw3ZLupBMB8GA1UdIwQY MBaAFGVswlAS46TIsWJt11fHsFEORXNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWld6Q1VCTGpwTWl4WW0zWFY4ZXdVUTVGYzBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82ZGI0NmQtYmMyZC00NWQ3LWEyNzkt ODIwMzI1ZjUzY2NiLzEvWld6Q1VCTGpwTWl4WW0zWFY4ZXdVUTVGYzBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi82ZGI0NmQtYmMyZC00NWQ3LWEyNzktODIwMzI1ZjUzY2Ni LzEvWld6Q1VCTGpwTWl4WW0zWFY4ZXdVUTVGYzBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMtpiXdk GHriBr7n3FWKhqTMPp8hO5988gkQhHdrIL35lwwWSc3R4hgaI0Vm7xF84Dy2ZDE5 OHxofQYt7vEOzTBuu4FLqXgekOnMj9rYLah/SOzUfM94+WcJhWDfQpJL9/KMcEd1 OA7FfOUEUqfadVIjL2D5530rIREYXOxrqj+fg5etVCoMUTZh64LM9/pRo5K+tQqG Qpdg4WQE2PjZE5c3aYOc/SIIq79EVrsWTxExjzjfBxqHV9jPr6cMDGvHLxqONXPA NgZOD5ajPWt+6Ca86+aQa2FNeGJDfRSaiYmeOi0NwNkbb8O3tgADvR/E/eVt0Ldd XSzlPtjVO1z8Yg== -----END CERTIFICATE-----Generated at Thu Jan 1 08:37:39 2026 by rpki-client