This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft File: Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft (raw, json) Hash identifier: m0yBrNY/SHsCllRnYKCANGEHuGA27txMsnlmi5FJwao= Subject key identifier: F9:26:81:A8:0A:4C:0B:5D:49:90:82:D8:E9:BF:69:62:99:33:0B:21 Authority key identifier: 67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13 Certificate issuer: /CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13 Certificate serial: 019BFBE5069AA806386D04E87AE3B5A1BA55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft Manifest number: 0E00 Signing time: Mon 26 Jan 2026 20:00:49 +0000 Manifest this update: Mon 26 Jan 2026 20:00:49 +0000 Manifest next update: Tue 27 Jan 2026 20:00:49 +0000 Files and hashes: 1: Nl9enAQ5fxiyA3bgN-Zg8I6GiQM.roa (hash: A7OWUX4yXC7G/EYKNd9MidD+EY701iJQatSHjQ+zADU=) 2: Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl (hash: hqnazrgCqGKS9NKdi9hl0JZfnGClh2uUp+yNIAvRGTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e5:06:9a:a8:06:38:6d:04:e8:7a:e3:b5:a1:ba:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13 Validity Not Before: Jan 26 20:00:49 2026 GMT Not After : Jan 27 20:00:49 2026 GMT Subject: CN=f92681a80a4c0b5d499082d8e9bf696299330b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1e:f9:34:94:f1:73:c8:82:1a:1a:8a:28:be: be:0d:f1:9d:86:9e:db:81:56:f3:9a:2e:a5:a0:db: 7e:8b:54:a5:fe:93:05:76:05:f1:31:a7:a9:79:68: 7a:3e:f1:72:3d:0f:50:4e:fe:4f:00:c9:e8:18:be: e0:37:6f:45:f6:85:8b:69:56:f6:db:54:0f:91:b0: bd:d3:2d:ad:77:07:cc:f9:50:46:d1:f7:ad:e1:8d: 0f:e8:71:72:c4:44:32:4c:de:28:f8:bb:87:7c:42: d3:4d:f0:e3:97:35:3f:36:9c:d5:da:01:4f:ee:62: a3:3f:ae:a4:0e:54:f4:e2:cd:68:77:e6:9d:f6:64: de:dd:7f:c4:2d:e3:ee:66:4f:11:af:75:22:dd:0a: 03:d7:a0:ec:b1:b1:39:20:ab:15:59:49:96:d1:37: 7e:bd:27:18:6a:6d:ae:47:df:42:ba:20:41:e0:00: 36:d7:49:ef:bc:a9:b8:57:af:87:b7:c6:6e:bc:94: 63:92:67:69:db:95:f0:f5:7d:5b:02:f8:d4:74:6a: 6c:0d:3a:f8:e6:3f:e3:4a:6c:1d:7b:f6:39:b3:5e: 7c:63:f6:bf:42:44:9e:3e:1e:bc:c2:d0:bb:74:62: 71:c6:69:41:ca:19:4c:71:6f:11:fa:6e:78:ce:e3: 94:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:26:81:A8:0A:4C:0B:5D:49:90:82:D8:E9:BF:69:62:99:33:0B:21 X509v3 Authority Key Identifier: keyid:67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:23:4d:30:fc:d2:9c:2f:a8:b5:31:fc:56:51:80:1f:b5:11: eb:a8:70:e8:40:d1:95:b6:01:af:34:89:a3:9f:de:f3:8d:07: 0b:cc:19:54:c5:90:ea:c6:24:37:d2:06:9b:4c:f3:da:c5:b2: 7a:6c:e9:18:84:29:1c:7b:27:4a:f3:ce:ab:b2:73:b8:e3:bd: 64:27:8d:f7:b3:40:3d:c3:c0:b9:b0:d4:fc:1a:38:82:9e:34: fb:5b:a1:e5:a4:a1:97:30:04:a7:6a:50:c2:e9:31:72:8d:6f: f9:07:f2:a0:07:6c:72:03:5d:1f:c2:c8:d6:64:72:1d:ca:aa: c0:95:23:c0:91:32:e9:aa:5c:38:13:11:02:02:fe:1e:fc:91: 1a:89:41:f0:de:39:af:8c:67:51:45:a9:e7:f1:2e:e9:0e:c6: da:b1:f6:f5:d3:a4:15:fe:4f:52:38:79:b4:47:24:16:ec:cc: bf:75:10:bb:a2:7f:a2:e0:8e:91:68:34:02:a7:6c:c9:3c:b8: d5:87:8c:74:8a:2f:4d:82:01:d6:2a:a2:39:62:d1:2d:16:91: bf:f7:f3:0f:50:4b:97:55:7d:06:7b:8a:07:e0:93:fc:c5:1b: cc:d8:73:f6:be:a6:71:8d:bc:5f:dd:78:8b:f4:14:12:28:bd: ef:48:d7:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75QaaqAY4bQToeuO1obpVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZTFjZWRmZTA4MjZmMGY5Nzc1YmRmYThlOTQyNTMwMGJk ZTlmMTMwHhcNMjYwMTI2MjAwMDQ5WhcNMjYwMTI3MjAwMDQ5WjAzMTEwLwYDVQQD EyhmOTI2ODFhODBhNGMwYjVkNDk5MDgyZDhlOWJmNjk2Mjk5MzMwYjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx75NJTxc8iCGhqKKL6+DfGdhp7b gVbzmi6loNt+i1Sl/pMFdgXxMaepeWh6PvFyPQ9QTv5PAMnoGL7gN29F9oWLaVb2 21QPkbC90y2tdwfM+VBG0fet4Y0P6HFyxEQyTN4o+LuHfELTTfDjlzU/NpzV2gFP 7mKjP66kDlT04s1od+ad9mTe3X/ELePuZk8Rr3Ui3QoD16DssbE5IKsVWUmW0Td+ vScYam2uR99CuiBB4AA210nvvKm4V6+Ht8ZuvJRjkmdp25Xw9X1bAvjUdGpsDTr4 5j/jSmwde/Y5s158Y/a/QkSePh68wtC7dGJxxmlByhlMcW8R+m54zuOUQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkmgagKTAtdSZCC2Om/aWKZMwshMB8GA1UdIwQY MBaAFGfhzt/ggm8Pl3W9+o6UJTAL3p8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWi1ITzMtQ0Nidy1YZGIzNmpwUWxNQXZlbnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xOWZhNGEtZjQxZC00YmFmLWI5ZWEt ZWM5Yjc1NTIxMjk3LzEvWi1ITzMtQ0Nidy1YZGIzNmpwUWxNQXZlbnhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8xOWZhNGEtZjQxZC00YmFmLWI5ZWEtZWM5Yjc1NTIxMjk3 LzEvWi1ITzMtQ0Nidy1YZGIzNmpwUWxNQXZlbnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSNNMPzS nC+otTH8VlGAH7UR66hw6EDRlbYBrzSJo5/e840HC8wZVMWQ6sYkN9IGm0zz2sWy emzpGIQpHHsnSvPOq7JzuOO9ZCeN97NAPcPAubDU/Bo4gp40+1uh5aShlzAEp2pQ wukxco1v+QfyoAdscgNdH8LI1mRyHcqqwJUjwJEy6apcOBMRAgL+HvyRGolB8N45 r4xnUUWp5/Eu6Q7G2rH29dOkFf5PUjh5tEckFuzMv3UQu6J/ouCOkWg0AqdsyTy4 1YeMdIovTYIB1iqiOWLRLRaRv/fzD1BLl1V9BnuKB+CT/MUbzNhz9r6mcY28X914 i/QUEii970jXIw== -----END CERTIFICATE-----Generated at Tue Jan 27 00:09:50 2026 by rpki-client