This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json) Hash identifier: AJOIW2LH5SO/ZyjEJ8B+iVAa+gMFPWmZZ4sSdPTMIC8= Subject key identifier: 18:41:A4:08:0B:C2:03:C3:C8:F1:58:25:3D:42:FD:97:B7:A4:F2:AC Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56 Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756 Certificate serial: 019BE0A588B3979BEEE02F26182157E78D14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft Manifest number: 0213 Signing time: Wed 21 Jan 2026 13:01:43 +0000 Manifest this update: Wed 21 Jan 2026 13:01:43 +0000 Manifest next update: Thu 22 Jan 2026 13:01:43 +0000 Files and hashes: 1: WKKdAS92LVILbjnTiiXNrRI_064.asa (hash: WU7xtDYPq+tmZfgD8wJKGXUqlisupARfwtckbBQ0ds0=) 2: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: 6b+zRVtbBHXUVahQgFJKWNm8AlWOmLUI9d0EaMmKZQY=) 3: ymjEj-AVl-jhoYqun7KK_jww1EY.roa (hash: Lravz6mXezUcFlH14r837C4PlhGpAXXPBKh9Ost0iM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 13:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:a5:88:b3:97:9b:ee:e0:2f:26:18:21:57:e7:8d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756 Validity Not Before: Jan 21 13:01:43 2026 GMT Not After : Jan 22 13:01:43 2026 GMT Subject: CN=1841a4080bc203c3c8f158253d42fd97b7a4f2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:63:0f:d8:56:be:12:3b:d4:dd:06:5f:7b:5f: a9:95:9a:c5:ec:10:46:de:7c:ea:e6:6c:ff:dc:16: aa:ea:b0:c6:8f:5d:7d:7d:6a:6e:5e:3e:b2:a9:90: 66:d7:d5:db:fb:1d:16:47:ba:6f:ca:5a:09:f6:3f: a3:9b:a0:07:4c:4a:09:14:5e:35:9f:b7:bb:1e:c7: a1:8b:fe:70:b9:ca:b5:fb:74:1f:ef:e3:52:d1:83: af:e0:3e:fb:e4:84:8c:b2:5c:43:e5:68:f8:0c:7a: 83:bc:09:0b:a2:34:d2:40:5a:b1:3f:4e:35:45:9d: f7:eb:81:22:dc:1b:88:78:6e:e6:f5:64:c7:e8:27: db:b1:54:13:55:18:78:3f:6a:5d:79:8f:95:ec:09: 7b:2a:88:79:15:8e:9a:c3:bf:96:2b:b9:2a:85:49: c9:6a:4e:82:dd:a0:f0:95:14:0e:b1:d1:f7:88:03: 15:58:82:c9:69:f8:64:d9:cb:7b:da:43:24:c7:ec: 0f:27:9b:c1:bb:c5:75:7a:a1:9d:cb:64:87:d2:6e: ec:f2:2c:de:76:e5:27:d0:29:e1:39:a8:cb:c1:56: ea:c9:7d:9d:c9:1b:8e:c8:ca:b1:2a:bc:3b:f5:ba: fa:2a:9c:d9:6c:05:50:94:27:0a:3a:60:3f:cb:a1: d5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:41:A4:08:0B:C2:03:C3:C8:F1:58:25:3D:42:FD:97:B7:A4:F2:AC X509v3 Authority Key Identifier: keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:f8:3a:43:7f:29:e9:ca:e6:03:7a:ec:de:36:bd:96:13:82: e7:7b:5b:23:1d:04:b7:28:52:ef:37:b7:e0:a3:8f:d0:a0:d9: d9:4e:71:4a:37:06:62:c5:76:f3:70:a6:a5:46:b2:aa:f8:6e: fd:e4:75:f0:17:72:45:47:37:26:6f:0e:9a:28:00:75:6d:aa: 66:7b:ae:16:76:0b:b6:73:16:e8:a2:d3:3f:69:93:0b:e0:a1: d9:60:a1:87:05:cf:c1:ec:78:20:72:cc:81:3c:8a:4a:10:ab: 6e:8a:da:66:e0:44:e5:7a:2a:54:58:c1:15:ff:03:64:a3:88: 89:8a:56:7c:62:ff:30:56:fc:0b:29:80:16:7f:d8:65:f5:d4: 8b:9f:c1:d6:5c:92:95:a9:92:8c:ba:34:e0:4a:bd:51:8d:98: e7:d5:94:0c:3a:13:c0:a8:44:b3:5e:9f:3c:d0:45:d6:33:94: d4:87:54:dd:4d:ac:9c:41:4e:88:d1:ca:23:a0:81:19:3a:86: 7b:94:af:f2:d1:25:4f:7c:cf:cb:94:74:3a:86:0f:7d:10:75: 1e:f7:e0:6a:45:d3:79:f1:d1:94:05:c9:c1:35:b0:3a:df:28: 75:50:b3:49:e2:e3:ed:3c:bf:b8:b8:f5:7e:69:34:15:9b:3f: 53:37:52:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgpYizl5vu4C8mGCFX540UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmM2FkY2UzNjY0YmYwZTdmNjg4ZmY0MTIyNTUxNzM0YzRk MTQ3NTYwHhcNMjYwMTIxMTMwMTQzWhcNMjYwMTIyMTMwMTQzWjAzMTEwLwYDVQQD EygxODQxYTQwODBiYzIwM2MzYzhmMTU4MjUzZDQyZmQ5N2I3YTRmMmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWMP2Fa+EjvU3QZfe1+plZrF7BBG 3nzq5mz/3Baq6rDGj119fWpuXj6yqZBm19Xb+x0WR7pvyloJ9j+jm6AHTEoJFF41 n7e7Hsehi/5wucq1+3Qf7+NS0YOv4D775ISMslxD5Wj4DHqDvAkLojTSQFqxP041 RZ3364Ei3BuIeG7m9WTH6CfbsVQTVRh4P2pdeY+V7Al7Koh5FY6aw7+WK7kqhUnJ ak6C3aDwlRQOsdH3iAMVWILJafhk2ct72kMkx+wPJ5vBu8V1eqGdy2SH0m7s8ize duUn0CnhOajLwVbqyX2dyRuOyMqxKrw79br6KpzZbAVQlCcKOmA/y6HVXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhBpAgLwgPDyPFYJT1C/Ze3pPKsMB8GA1UdIwQY MBaAFK863ONmS/Dn9oj/QSJVFzTE0UdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xYjE5ZDEtMWRkNy00YzQ1LWJlZjkt MzM1ODgyZGI5YTI1LzEvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xYjE5ZDEtMWRkNy00YzQ1LWJlZjktMzM1ODgyZGI5YTI1 LzEvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofg6Q38p 6crmA3rs3ja9lhOC53tbIx0EtyhS7ze34KOP0KDZ2U5xSjcGYsV283CmpUayqvhu /eR18BdyRUc3Jm8OmigAdW2qZnuuFnYLtnMW6KLTP2mTC+Ch2WChhwXPwex4IHLM gTyKShCrboraZuBE5XoqVFjBFf8DZKOIiYpWfGL/MFb8CymAFn/YZfXUi5/B1lyS lamSjLo04Eq9UY2Y59WUDDoTwKhEs16fPNBF1jOU1IdU3U2snEFOiNHKI6CBGTqG e5Sv8tElT3zPy5R0OoYPfRB1HvfgakXTefHRlAXJwTWwOt8odVCzSeLj7Ty/uLj1 fmk0FZs/UzdSsw== -----END CERTIFICATE-----Generated at Wed Jan 21 21:10:30 2026 by rpki-client