This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft File: ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json) Hash identifier: DN8L0yEeYaokCiBpKXqDCnzVRlGN9Ds8CckKxa6DFos= Subject key identifier: 40:5C:31:80:11:96:F2:E4:AC:6E:9B:50:5B:A0:04:66:99:5B:97:2F Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5 Certificate issuer: /CN=66689087e787990916878db20d555684c22cd9d5 Certificate serial: 019BFC8A2466B8812DDA342D56417DD35898 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft Manifest number: 0727 Signing time: Mon 26 Jan 2026 23:01:10 +0000 Manifest this update: Mon 26 Jan 2026 23:01:10 +0000 Manifest next update: Tue 27 Jan 2026 23:01:10 +0000 Files and hashes: 1: C25elKe2pxAvHopmJZwOBFRueMk.roa (hash: Qq1OVKMJ6dN2Sv+dYbNP/bXX/PATPp6T5W6nqB2fjes=) 2: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: T6MChcWQAsSLtqqZcxp8qMCeJdRD/3ySv7KN7JZa7uE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:24:66:b8:81:2d:da:34:2d:56:41:7d:d3:58:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66689087e787990916878db20d555684c22cd9d5 Validity Not Before: Jan 26 23:01:10 2026 GMT Not After : Jan 27 23:01:10 2026 GMT Subject: CN=405c31801196f2e4ac6e9b505ba00466995b972f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5c:2b:40:e4:9d:5e:bb:02:89:b0:59:e7:34: 4d:84:15:0d:bd:d8:00:a9:20:da:7e:41:60:b7:e9: f9:ae:77:81:13:f8:78:93:6a:4e:33:e2:20:c9:7f: 44:f1:ef:7f:f8:b0:de:a8:11:c8:6b:ad:55:ec:34: 96:25:95:97:52:70:02:47:79:14:14:ec:66:79:97: a8:0c:0b:ac:59:67:30:dc:71:61:90:60:0b:ab:99: fc:04:d0:4a:ec:dc:55:30:f5:10:26:af:c1:52:f5: 39:d8:53:ea:b2:20:c1:a1:17:bc:4c:df:91:d6:8b: 79:48:f2:3f:64:a9:9b:9e:96:cc:dc:74:0e:73:be: 66:d6:88:30:15:cf:e1:64:ae:3e:3e:95:81:0b:df: be:19:f5:d1:cb:99:55:20:4e:67:6c:6f:2e:ec:64: a3:cb:93:63:f8:92:51:0e:7c:55:6e:3d:24:fd:60: f9:b7:2d:d2:e6:2f:15:1a:c7:0b:62:7f:9b:d2:4d: 7f:a4:55:c8:fc:2e:0d:d5:cc:1f:a4:22:14:0b:e8: 14:ad:33:b3:a9:3b:62:5a:b8:af:60:7d:2c:01:4e: 32:15:78:9c:f3:92:b2:83:ea:6d:b8:e1:2a:df:e0: 7f:a6:0f:93:d7:19:1c:1b:91:68:22:6e:c0:d4:5a: 70:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5C:31:80:11:96:F2:E4:AC:6E:9B:50:5B:A0:04:66:99:5B:97:2F X509v3 Authority Key Identifier: keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:31:a1:f4:61:c8:e7:ea:d9:c4:bb:30:a9:ac:f4:b6:22:8b: 1b:d4:80:24:bc:6e:f4:5c:a1:5e:9d:e2:24:a0:44:62:71:bc: 5f:ee:69:78:26:65:01:1a:58:cc:23:41:ec:a6:77:38:d7:13: 15:c0:d0:0a:93:28:31:c6:1d:61:4a:b5:49:91:e5:18:01:a1: a4:06:44:ac:e2:a5:15:70:40:9f:c1:af:59:a9:43:30:92:f2: 04:88:04:eb:44:19:e6:7a:63:17:87:17:60:b2:64:bc:8a:81: 09:13:59:af:c2:1b:c5:86:92:f4:6d:cd:2b:0f:38:7c:81:6f: 65:50:f4:1d:42:a1:8d:27:57:6d:61:e5:12:ee:2a:dc:64:a8: d4:05:37:4e:51:c6:74:fa:82:09:59:97:0f:5c:bd:2d:bd:06: d6:42:8c:11:1c:32:04:f7:1e:b5:b1:fc:e8:34:51:f5:5f:b7: 73:0e:48:24:64:bf:50:0c:90:7e:db:9b:4f:75:0d:23:ce:c1: f9:cd:54:ab:82:1d:21:e7:7a:82:64:78:0b:12:38:01:35:d3: 37:96:f1:05:df:1d:ff:03:d9:82:09:35:f2:fe:1f:b0:5a:4e: 68:b9:e9:83:1d:2e:2a:13:da:6f:db:68:90:76:7a:95:af:9c: 77:29:be:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8iiRmuIEt2jQtVkF901iYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2Njg5MDg3ZTc4Nzk5MDkxNjg3OGRiMjBkNTU1Njg0YzIy Y2Q5ZDUwHhcNMjYwMTI2MjMwMTEwWhcNMjYwMTI3MjMwMTEwWjAzMTEwLwYDVQQD Eyg0MDVjMzE4MDExOTZmMmU0YWM2ZTliNTA1YmEwMDQ2Njk5NWI5NzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlwrQOSdXrsCibBZ5zRNhBUNvdgA qSDafkFgt+n5rneBE/h4k2pOM+IgyX9E8e9/+LDeqBHIa61V7DSWJZWXUnACR3kU FOxmeZeoDAusWWcw3HFhkGALq5n8BNBK7NxVMPUQJq/BUvU52FPqsiDBoRe8TN+R 1ot5SPI/ZKmbnpbM3HQOc75m1ogwFc/hZK4+PpWBC9++GfXRy5lVIE5nbG8u7GSj y5Nj+JJRDnxVbj0k/WD5ty3S5i8VGscLYn+b0k1/pFXI/C4N1cwfpCIUC+gUrTOz qTtiWrivYH0sAU4yFXic85Kyg+ptuOEq3+B/pg+T1xkcG5FoIm7A1FpwYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBcMYARlvLkrG6bUFugBGaZW5cvMB8GA1UdIwQY MBaAFGZokIfnh5kJFoeNsg1VVoTCLNnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm1pUWgtZUhtUWtXaDQyeURWVldoTUlzMmRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84MGI0NDItNTAzOS00MDhlLTk4MTMt MWU3YzE3NzI4YjUwLzEvWm1pUWgtZUhtUWtXaDQyeURWVldoTUlzMmRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi84MGI0NDItNTAzOS00MDhlLTk4MTMtMWU3YzE3NzI4YjUw LzEvWm1pUWgtZUhtUWtXaDQyeURWVldoTUlzMmRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDGh9GHI 5+rZxLswqaz0tiKLG9SAJLxu9FyhXp3iJKBEYnG8X+5peCZlARpYzCNB7KZ3ONcT FcDQCpMoMcYdYUq1SZHlGAGhpAZErOKlFXBAn8GvWalDMJLyBIgE60QZ5npjF4cX YLJkvIqBCRNZr8IbxYaS9G3NKw84fIFvZVD0HUKhjSdXbWHlEu4q3GSo1AU3TlHG dPqCCVmXD1y9Lb0G1kKMERwyBPcetbH86DRR9V+3cw5IJGS/UAyQftubT3UNI87B +c1Uq4IdIed6gmR4CxI4ATXTN5bxBd8d/wPZggk18v4fsFpOaLnpgx0uKhPab9to kHZ6la+cdym+bQ== -----END CERTIFICATE-----Generated at Tue Jan 27 00:36:48 2026 by rpki-client