This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json) Hash identifier: ewiE1eQYwpoyOsX1j9246H5Kiil0jrQX0YVdwfunT48= Subject key identifier: A9:69:DA:AA:D0:E9:07:9A:F4:5D:C5:88:42:C5:D1:8E:3C:02:23:DB Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78 Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578 Certificate serial: 019BAB0000C311661FDF519997A758CB8E71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft Manifest number: 039F Signing time: Sun 11 Jan 2026 03:01:02 +0000 Manifest this update: Sun 11 Jan 2026 03:01:02 +0000 Manifest next update: Mon 12 Jan 2026 03:01:02 +0000 Files and hashes: 1: XUebERbWFz0VzzOPVclokPtH7ZI.roa (hash: etgcVhxSEjllJBOIBBKIy18UocYNVDG++pFKb9lFGWM=) 2: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: 3od+qfOq356z8QHZ1yiykjREApV7lM43rVZHjfHgIOE=) 3: zwmO5OtCGJNIiJzbj5PsPCNBg1A.roa (hash: 4w1oRI5piM/eFxb64iTkw75OFvdOlvJgDWTugaHDe2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ab:00:00:c3:11:66:1f:df:51:99:97:a7:58:cb:8e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578 Validity Not Before: Jan 11 03:01:02 2026 GMT Not After : Jan 12 03:01:02 2026 GMT Subject: CN=a969daaad0e9079af45dc58842c5d18e3c0223db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:eb:88:ac:bf:9c:49:7d:7b:dc:af:b7:94: 61:73:8b:1e:0d:d9:35:af:7f:fb:ea:8a:ba:c3:67: 40:4d:e7:47:21:6c:0f:9b:22:ec:35:5d:1c:88:e0: 3b:cf:f5:48:6e:ab:63:fb:f1:1c:f4:e3:6e:33:de: 36:c5:2d:9f:a8:8d:5c:55:25:db:ae:cc:c7:22:9a: bd:d3:4d:70:ad:23:1f:6f:7e:36:8d:8c:bf:c7:74: 37:8f:0e:7d:61:d3:69:2a:dd:b3:15:3d:b4:ed:a9: 66:e3:9a:a3:51:f5:f7:5a:d1:74:f6:45:63:1a:0d: 70:f3:67:da:79:fa:66:6a:43:cc:fb:13:70:fc:3c: e4:6c:b8:91:76:b1:e2:77:99:25:7b:9d:f5:12:49: 59:b9:9d:ee:2b:ac:6a:3d:90:e0:6c:81:0c:59:96: 71:d6:2d:e1:50:74:46:05:d8:f7:d7:17:84:aa:bc: 1b:76:77:2a:c2:86:f6:32:84:3f:7e:71:47:ea:b6: 21:4a:c0:d8:f4:92:b1:53:98:9e:c8:c0:55:c6:93: 68:a1:10:6c:47:33:c0:d7:51:c2:b0:ba:62:5c:0f: cd:5b:b3:f1:08:5f:d3:c9:a7:de:9e:09:89:a0:15: cd:8c:cf:a8:dc:b6:19:1d:ba:88:ab:cc:d4:99:a6: af:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:69:DA:AA:D0:E9:07:9A:F4:5D:C5:88:42:C5:D1:8E:3C:02:23:DB X509v3 Authority Key Identifier: keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:0c:37:95:b2:db:ff:2c:6a:26:68:c1:ef:92:92:d2:56:fc: b1:fa:7a:50:d4:a0:dd:3a:b5:1a:a1:f6:95:0d:a7:da:0a:33: 1d:4b:d2:96:96:a0:de:db:31:d7:b5:b6:ca:70:6c:80:18:4f: e2:84:92:51:9b:e5:74:ae:c9:aa:59:18:0b:2b:af:9b:6b:b2: 53:7c:5f:a8:85:ea:c5:88:a3:5e:02:51:8b:b9:b7:67:9d:91: 82:2e:01:6c:10:7a:75:84:a4:a2:4f:20:03:e0:ab:0b:e4:9c: c4:84:1f:e6:7d:67:dd:f5:ad:7c:e8:01:d9:0c:49:46:5d:05: f5:40:5a:fb:bc:25:d7:e1:05:ef:ec:f0:c9:10:68:58:5e:80: 02:64:43:a1:99:e6:4f:1d:84:3c:66:d1:e4:b5:84:5f:5c:9e: 2e:cd:50:4e:f6:07:12:0c:90:1e:40:41:8e:7b:c9:2b:e9:13: 32:4e:1e:4c:43:93:e7:10:bd:f4:87:57:ac:d8:9c:12:51:27: a8:42:bf:fc:81:ec:d6:e9:f5:69:d7:dc:28:3b:07:90:9a:c7: 6a:66:d0:8b:c7:50:d4:b7:6c:1a:47:5e:7c:5b:55:30:34:6e: 06:a1:6a:3d:e7:2e:0d:5a:40:5d:13:01:07:ad:f7:6b:6c:21: 61:5a:10:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZurAADDEWYf31GZl6dYy45xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOWY2ZmJmZTAwYTA4NTkyYjdiYjBlZGZkYzIwMDJiZmM3 MmI1NzgwHhcNMjYwMTExMDMwMTAyWhcNMjYwMTEyMDMwMTAyWjAzMTEwLwYDVQQD EyhhOTY5ZGFhYWQwZTkwNzlhZjQ1ZGM1ODg0MmM1ZDE4ZTNjMDIyM2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKHriKy/nEl9e9yvt5Rhc4seDdk1 r3/76oq6w2dATedHIWwPmyLsNV0ciOA7z/VIbqtj+/Ec9ONuM942xS2fqI1cVSXb rszHIpq9001wrSMfb342jYy/x3Q3jw59YdNpKt2zFT207alm45qjUfX3WtF09kVj Gg1w82faefpmakPM+xNw/DzkbLiRdrHid5kle531EklZuZ3uK6xqPZDgbIEMWZZx 1i3hUHRGBdj31xeEqrwbdncqwob2MoQ/fnFH6rYhSsDY9JKxU5ieyMBVxpNooRBs RzPA11HCsLpiXA/NW7PxCF/TyafengmJoBXNjM+o3LYZHbqIq8zUmaav5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlp2qrQ6Qea9F3FiELF0Y48AiPbMB8GA1UdIwQY MBaAFM+fb7/gCghZK3uw7f3CACv8crV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83MzM5ODktZjEzMS00NWU5LTliNzUt MzQyYTllZTczZDg1LzEvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS83MzM5ODktZjEzMS00NWU5LTliNzUtMzQyYTllZTczZDg1 LzEvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQw3lbLb /yxqJmjB75KS0lb8sfp6UNSg3Tq1GqH2lQ2n2gozHUvSlpag3tsx17W2ynBsgBhP 4oSSUZvldK7JqlkYCyuvm2uyU3xfqIXqxYijXgJRi7m3Z52Rgi4BbBB6dYSkok8g A+CrC+ScxIQf5n1n3fWtfOgB2QxJRl0F9UBa+7wl1+EF7+zwyRBoWF6AAmRDoZnm Tx2EPGbR5LWEX1yeLs1QTvYHEgyQHkBBjnvJK+kTMk4eTEOT5xC99IdXrNicElEn qEK//IHs1un1adfcKDsHkJrHambQi8dQ1LdsGkdefFtVMDRuBqFqPecuDVpAXRMB B633a2whYVoQCA== -----END CERTIFICATE-----Generated at Sun Jan 11 07:38:08 2026 by rpki-client