This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft File: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft (raw, json) Hash identifier: TOgVqnfizOmovtVeQFb712mx/DTlvX0kJO19IO5ufmY= Subject key identifier: AD:2E:9C:65:CE:EE:70:CD:DF:15:4C:1D:03:CD:4C:25:60:DE:2C:00 Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14 Certificate issuer: /CN=65295913c07c226100bd39f1ee2c52ea98aaee14 Certificate serial: 019BF9C04B8F7B2ADBECD24CDE66EF6791DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft Manifest number: 1376 Signing time: Mon 26 Jan 2026 10:01:27 +0000 Manifest this update: Mon 26 Jan 2026 10:01:27 +0000 Manifest next update: Tue 27 Jan 2026 10:01:27 +0000 Files and hashes: 1: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl (hash: v7XMYVTirA2V5UEYBp2pnH1PWGUYLo6eRS3zZZIcGBw=) 2: uD5eUDrQgXD4j74OWplFHBQd_hs.roa (hash: 1h/Ex6tXdCvENtcBMUtZd+XOEB+wQCjfinmzLg0hRdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c0:4b:8f:7b:2a:db:ec:d2:4c:de:66:ef:67:91:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14 Validity Not Before: Jan 26 10:01:27 2026 GMT Not After : Jan 27 10:01:27 2026 GMT Subject: CN=ad2e9c65ceee70cddf154c1d03cd4c2560de2c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ff:38:50:c2:67:96:ee:8e:86:5a:91:0f:bb: ef:38:37:50:b2:50:c0:24:15:b5:88:6e:9f:2c:00: 06:ee:14:ce:f5:34:66:1a:24:49:d9:96:91:44:6a: d7:12:ac:ad:61:a9:38:8c:a7:4f:88:08:25:c3:e3: 00:22:c0:d3:87:7c:10:1f:7a:5f:87:56:be:31:e0: 63:78:d3:d6:70:84:44:87:a1:e5:0e:c9:4e:da:49: 89:5e:6e:7a:29:59:74:81:fa:d3:dc:7b:7a:4a:fd: e0:2e:86:54:2d:ac:03:aa:ba:fa:41:21:89:ff:d3: aa:4e:e2:9a:b2:f5:57:f9:0f:9a:03:bd:b5:ec:c1: b2:9d:8d:04:ae:53:0d:60:ab:40:35:5d:2f:b4:6c: 7c:16:4b:fd:5d:1f:b8:2b:c4:19:da:fa:05:87:90: f5:f8:32:e5:fe:e2:6b:3b:8a:2b:0c:5e:7d:a2:e3: 01:1d:d6:27:15:67:1c:6c:ae:29:da:69:fb:30:c5: 75:17:82:f6:c5:59:1a:a1:55:39:a5:45:11:c4:5b: 1b:8b:69:bf:14:7b:f8:78:fa:a7:c6:8f:c5:9d:c2: 8a:6f:00:62:66:39:e5:68:d1:de:93:6f:b5:ec:6b: 43:5a:02:bd:9b:32:78:bb:ad:bc:8a:b8:f1:7c:53: cc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2E:9C:65:CE:EE:70:CD:DF:15:4C:1D:03:CD:4C:25:60:DE:2C:00 X509v3 Authority Key Identifier: keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:46:a1:ad:4d:67:71:20:0c:ed:67:69:7d:0c:f8:3f:27:32: 46:39:e9:dd:5e:d4:94:26:1e:24:46:4e:a2:49:b3:a0:c3:81: fa:d1:cf:bd:5a:4d:19:1a:ba:ab:73:d0:b4:34:e5:38:b9:7f: f5:24:61:00:2a:b0:de:8f:cc:18:0b:9c:29:6a:dc:03:0c:91: ad:ae:4d:21:c7:b5:fb:e2:65:b8:11:c2:44:6a:1f:b5:a6:e6: 09:9a:34:fb:fc:96:8c:f9:f7:9b:18:89:01:9b:8a:a8:b0:d3: 04:24:f5:36:8f:a4:9c:a6:2d:51:29:b1:70:a9:ab:7e:c3:50: 76:9d:f1:fb:5d:39:3b:5b:1e:f1:70:0d:2a:3c:7a:95:49:69: de:b4:3e:eb:55:82:19:1a:24:ce:7b:ba:3c:98:2a:09:26:1e: 36:f2:7a:61:c3:f5:69:93:41:18:66:20:8e:a6:a6:45:53:91: f8:d4:9f:7a:a1:c1:a5:17:85:06:1f:2d:63:a2:f8:d0:25:5d: 31:0d:82:3c:a1:7c:44:8e:97:9a:da:14:ac:70:d8:c7:2d:80: fe:b5:d8:26:fc:b7:20:1e:c4:e1:02:04:d2:6e:06:4d:c9:5f: 15:5b:38:5d:8c:94:48:42:73:ac:1a:a5:1a:30:2c:5c:78:96: 0b:de:21:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5wEuPeyrb7NJM3mbvZ5HbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1Mjk1OTEzYzA3YzIyNjEwMGJkMzlmMWVlMmM1MmVhOThh YWVlMTQwHhcNMjYwMTI2MTAwMTI3WhcNMjYwMTI3MTAwMTI3WjAzMTEwLwYDVQQD EyhhZDJlOWM2NWNlZWU3MGNkZGYxNTRjMWQwM2NkNGMyNTYwZGUyYzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/84UMJnlu6OhlqRD7vvODdQslDA JBW1iG6fLAAG7hTO9TRmGiRJ2ZaRRGrXEqytYak4jKdPiAglw+MAIsDTh3wQH3pf h1a+MeBjeNPWcIREh6HlDslO2kmJXm56KVl0gfrT3Ht6Sv3gLoZULawDqrr6QSGJ /9OqTuKasvVX+Q+aA7217MGynY0ErlMNYKtANV0vtGx8Fkv9XR+4K8QZ2voFh5D1 +DLl/uJrO4orDF59ouMBHdYnFWccbK4p2mn7MMV1F4L2xVkaoVU5pUURxFsbi2m/ FHv4ePqnxo/FncKKbwBiZjnlaNHek2+17GtDWgK9mzJ4u628irjxfFPMeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0unGXO7nDN3xVMHQPNTCVg3iwAMB8GA1UdIwQY MBaAFGUpWRPAfCJhAL058e4sUuqYqu4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81MGQ0NzYtZDcyMi00MGYyLTk4MGYt NjQyMzZmYzM2ZDFkLzEvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi81MGQ0NzYtZDcyMi00MGYyLTk4MGYtNjQyMzZmYzM2ZDFk LzEvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkahrU1n cSAM7WdpfQz4PycyRjnp3V7UlCYeJEZOokmzoMOB+tHPvVpNGRq6q3PQtDTlOLl/ 9SRhACqw3o/MGAucKWrcAwyRra5NIce1++JluBHCRGoftabmCZo0+/yWjPn3mxiJ AZuKqLDTBCT1No+knKYtUSmxcKmrfsNQdp3x+105O1se8XANKjx6lUlp3rQ+61WC GRokznu6PJgqCSYeNvJ6YcP1aZNBGGYgjqamRVOR+NSfeqHBpReFBh8tY6L40CVd MQ2CPKF8RI6XmtoUrHDYxy2A/rXYJvy3IB7E4QIE0m4GTclfFVs4XYyUSEJzrBql GjAsXHiWC94hOg== -----END CERTIFICATE-----Generated at Mon Jan 26 19:38:15 2026 by rpki-client