This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json) Hash identifier: bEIvKEdyClw2yI8wQX83AWFbF1JjBbNp70a+KsDeg+M= Subject key identifier: 39:21:10:8E:87:02:95:41:95:68:88:C6:17:46:2E:95:F5:97:D6:42 Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af Certificate serial: 019BFB772760FE0500792EEEB8CADED5E2D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 18:00:48 +0000 Manifest this update: Mon 26 Jan 2026 18:00:48 +0000 Manifest next update: Tue 27 Jan 2026 18:00:48 +0000 Files and hashes: 1: h8MAjW2nwR1TuDpY3gaR4GIp5Is.roa (hash: YMOvJ9hakU4xTrKD5f+aHfr6VChVy5zYjPbZPORV+p4=) 2: hq6cHZZmfTc8iDuXctwL9j8vYGA.roa (hash: gnwIM65nm0H3pqLfxC4cpwXQNNz6WAkiHxWYF953SRw=) 3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: CryF3ArFYqrSnedJ4ii9/UtIquSyx2yMmjZKKXEt63k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:27:60:fe:05:00:79:2e:ee:b8:ca:de:d5:e2:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af Validity Not Before: Jan 26 18:00:48 2026 GMT Not After : Jan 27 18:00:48 2026 GMT Subject: CN=3921108e87029541956888c617462e95f597d642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:6e:52:05:1a:cc:76:d7:86:93:33:1d:55: 30:e5:78:ae:b9:68:1e:d3:60:3b:26:52:5a:93:d8: 77:d0:0f:19:95:ed:0d:8a:03:6e:1d:71:b0:5c:1f: e2:7f:04:1a:08:31:46:dc:e4:7f:42:06:6c:30:45: 01:88:a7:38:03:3f:66:14:9b:80:3d:ee:4d:45:2a: e7:41:38:6e:e8:8b:c5:96:f2:e5:4a:2c:35:c5:87: b8:4f:03:d1:b0:07:32:f9:a8:bb:26:ce:12:19:87: 30:ed:31:9f:09:b5:82:b8:ac:27:85:1e:32:27:86: e9:15:de:a8:c9:1c:10:ba:cc:96:1d:f2:18:08:3d: f3:50:1d:11:36:a7:53:d8:06:c7:69:8d:47:3f:57: 7f:f1:01:66:4e:35:95:ef:87:56:1f:cc:46:95:bd: d7:5f:b4:de:11:7e:28:5d:b6:a5:95:ff:e8:4b:66: a9:06:86:13:3f:db:a8:fd:f1:d5:b4:cc:6b:64:b2: e2:88:ca:c8:5a:7d:fd:c0:cc:2b:2b:91:a6:42:24: 4a:cf:db:1d:ef:83:0a:4f:eb:6a:9b:a9:1f:8a:e9: 95:40:28:37:81:32:e0:7a:ed:b1:57:a9:4e:79:b1: 0c:17:23:fa:1d:19:24:62:a1:cd:f6:b0:6d:70:83: d1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:21:10:8E:87:02:95:41:95:68:88:C6:17:46:2E:95:F5:97:D6:42 X509v3 Authority Key Identifier: keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:2d:b6:47:bf:80:87:27:22:b4:40:04:cb:e5:55:af:3f:ed: 39:b8:c3:0c:2f:41:b7:47:f3:9d:ac:7c:47:fa:74:55:04:2a: c9:d3:ef:1d:c1:b9:85:88:26:05:c4:0a:dc:3b:a8:fd:4e:ad: 62:15:34:47:63:1c:75:67:49:f2:87:99:21:20:94:cc:da:6b: b9:fc:ed:d0:a3:cf:d9:df:24:a4:e3:13:ec:60:aa:f6:d8:37: 71:86:1d:3e:cd:d7:3f:98:67:9b:03:26:9b:2a:88:15:a8:52: ab:4b:05:7d:ee:61:f0:d7:84:a6:14:2f:cf:23:1b:0f:16:f7: 21:e5:51:88:7d:b6:3b:37:1b:cb:1c:54:b9:7a:80:ee:6a:ea: be:17:d9:8a:32:4c:4e:c3:a9:bf:0c:7b:1e:e3:f5:eb:88:57: 0d:1d:86:26:33:a0:d8:d6:bf:41:3f:c2:66:d6:37:7d:f3:0d: 5e:78:7e:26:00:d4:0c:7a:85:80:00:5a:55:fe:58:a3:fe:c0: a3:8a:63:6d:12:ce:5f:b0:33:f0:af:57:d3:5c:53:7b:94:4e: ff:84:e6:8c:96:bf:af:77:01:bd:b4:75:80:4f:31:ed:a4:01: b5:e4:d9:f3:76:1c:57:0d:88:8a:0d:b1:51:52:20:b2:2e:d4: b8:d7:5a:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7dydg/gUAeS7uuMre1eLSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMzllNmJlNDBkODAxMjg4OTZjY2QxMzFmNjVhNTVhZDk4 YTQwYWYwHhcNMjYwMTI2MTgwMDQ4WhcNMjYwMTI3MTgwMDQ4WjAzMTEwLwYDVQQD EygzOTIxMTA4ZTg3MDI5NTQxOTU2ODg4YzYxNzQ2MmU5NWY1OTdkNjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6VuUgUazHbXhpMzHVUw5XiuuWge 02A7JlJak9h30A8Zle0NigNuHXGwXB/ifwQaCDFG3OR/QgZsMEUBiKc4Az9mFJuA Pe5NRSrnQThu6IvFlvLlSiw1xYe4TwPRsAcy+ai7Js4SGYcw7TGfCbWCuKwnhR4y J4bpFd6oyRwQusyWHfIYCD3zUB0RNqdT2AbHaY1HP1d/8QFmTjWV74dWH8xGlb3X X7TeEX4oXballf/oS2apBoYTP9uo/fHVtMxrZLLiiMrIWn39wMwrK5GmQiRKz9sd 74MKT+tqm6kfiumVQCg3gTLgeu2xV6lOebEMFyP6HRkkYqHN9rBtcIPRjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkhEI6HApVBlWiIxhdGLpX1l9ZCMB8GA1UdIwQY MBaAFMw55r5A2AEoiWzNEx9lpVrZikCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iMmZmOTEtZDRjZS00MDViLWJlYmYt NjA5ZDhmNTY1ZmZjLzEvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iMmZmOTEtZDRjZS00MDViLWJlYmYtNjA5ZDhmNTY1ZmZj LzEvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUC22R7+A hycitEAEy+VVrz/tObjDDC9Bt0fznax8R/p0VQQqydPvHcG5hYgmBcQK3Duo/U6t YhU0R2McdWdJ8oeZISCUzNprufzt0KPP2d8kpOMT7GCq9tg3cYYdPs3XP5hnmwMm myqIFahSq0sFfe5h8NeEphQvzyMbDxb3IeVRiH22OzcbyxxUuXqA7mrqvhfZijJM TsOpvwx7HuP164hXDR2GJjOg2Na/QT/CZtY3ffMNXnh+JgDUDHqFgABaVf5Yo/7A o4pjbRLOX7Az8K9X01xTe5RO/4TmjJa/r3cBvbR1gE8x7aQBteTZ83YcVw2Iig2x UVIgsi7UuNdafA== -----END CERTIFICATE-----Generated at Tue Jan 27 03:10:55 2026 by rpki-client