This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft File: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft (raw, json) Hash identifier: HVpXFmZlWrywNns+Gc9JqWtQAElJDvo7okRJkkBBkMw= Subject key identifier: 03:BF:21:85:7A:AF:2C:80:AD:9E:33:8D:05:2E:B6:0B:43:66:7C:70 Authority key identifier: 67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00 Certificate issuer: /CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600 Certificate serial: 019BE0006E80B9139101596BD456F685FC3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft Manifest number: 0F8C Signing time: Wed 21 Jan 2026 10:01:23 +0000 Manifest this update: Wed 21 Jan 2026 10:01:23 +0000 Manifest next update: Thu 22 Jan 2026 10:01:23 +0000 Files and hashes: 1: Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl (hash: McngImIh3pzu7s3ip3HDNIUTWR9+ywv1lCdOY985Tfw=) 2: zY7N7I-0j2wyToIYtsy8gjVgKFc.roa (hash: eG6Aql8AjY8k7IpGUPh2hREkMKRNs6mKuXLIFh3G5Wk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:00:6e:80:b9:13:91:01:59:6b:d4:56:f6:85:fc:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67fb0328cbf0b254af7c99d3b69fc634cfd8f600 Validity Not Before: Jan 21 10:01:23 2026 GMT Not After : Jan 22 10:01:23 2026 GMT Subject: CN=03bf21857aaf2c80ad9e338d052eb60b43667c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5a:4d:17:67:be:8d:37:d7:4d:80:9f:09:09: 90:32:19:16:7c:48:8d:c7:71:46:bb:c5:35:bc:6c: 71:95:16:87:0b:db:01:e2:94:3a:a1:3b:d0:d1:28: d9:86:82:09:0c:ca:f5:97:3d:14:c3:80:fb:8d:ba: 74:a9:29:91:04:be:40:df:a9:c4:19:40:43:fc:1c: 8c:48:f3:62:c6:dd:3a:ed:9c:3c:a8:ec:2c:ca:70: bf:80:31:e1:2a:d4:2f:32:08:e3:1d:68:df:4a:23: b9:61:24:ba:37:f4:b0:5d:d8:8a:ea:83:70:05:31: e5:96:b9:ed:5f:49:68:28:87:05:05:63:c8:c9:72: ae:7d:2d:af:22:ca:52:b4:52:6c:ce:b6:68:24:e6: e3:52:8d:4a:d0:ef:09:93:37:93:92:88:ea:b6:ad: 7c:2c:92:35:7b:95:a5:96:f1:c0:b1:67:a4:43:fd: 8c:9e:63:e1:a2:f9:eb:43:60:b4:d9:99:1c:41:4c: 23:e8:55:d6:ec:6b:b0:af:72:8f:61:2a:4e:11:19: 38:76:62:28:3b:fd:19:08:24:56:50:66:f1:9b:fd: 34:a5:0b:fa:9a:52:c3:16:e3:13:13:7d:82:3a:32: 96:a2:bb:4c:87:71:e5:63:bd:8c:e4:89:c6:7b:28: d4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BF:21:85:7A:AF:2C:80:AD:9E:33:8D:05:2E:B6:0B:43:66:7C:70 X509v3 Authority Key Identifier: keyid:67:FB:03:28:CB:F0:B2:54:AF:7C:99:D3:B6:9F:C6:34:CF:D8:F6:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6fcb84-017c-4aaf-bde7-aa91c92d5c48/1/Z_sDKMvwslSvfJnTtp_GNM_Y9gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:02:5b:4e:24:cb:96:6e:e4:3f:4f:49:36:00:65:58:4d:0a: dd:3f:97:09:24:db:d6:ef:1f:82:f7:c9:d4:b1:9c:33:1d:03: 9d:3a:08:70:e1:a8:5b:b3:3e:44:d3:ed:c8:f8:c7:38:54:6f: f0:46:57:59:f0:ea:7c:30:8e:d5:68:4a:37:91:c9:d6:63:25: 91:d6:78:40:43:80:74:e3:5c:ea:07:ce:9f:0c:ae:e5:de:14: 53:e7:2d:6b:29:40:ce:a9:a5:3d:80:bd:07:e0:5b:ef:01:5f: 3d:64:02:3f:e6:48:95:d3:3d:ca:d4:72:cb:49:08:c6:ef:c8: d5:70:69:07:57:48:d3:41:6d:ae:54:e9:fd:67:3f:ee:a0:88: 9a:5f:47:7e:2a:aa:06:a5:88:20:c6:31:ac:ef:8e:27:c0:23: 76:1a:71:bf:fa:d8:7a:91:67:cd:86:f6:25:6b:79:e6:e9:c3: 5b:31:44:1f:af:4a:fa:c0:b7:b4:2d:a0:fa:cc:75:f8:71:21: ba:cf:b0:04:c2:d9:58:98:ef:b4:77:06:e6:2d:9a:bb:b1:8c: 3d:ae:6b:cc:f0:ec:65:7d:24:33:bb:01:0d:cf:7c:ac:68:9a: 65:f2:da:5f:9e:c5:8a:f6:b7:32:46:c8:0c:05:f2:2f:8f:79: 7a:eb:a5:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgAG6AuRORAVlr1Fb2hfw+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZmIwMzI4Y2JmMGIyNTRhZjdjOTlkM2I2OWZjNjM0Y2Zk OGY2MDAwHhcNMjYwMTIxMTAwMTIzWhcNMjYwMTIyMTAwMTIzWjAzMTEwLwYDVQQD EygwM2JmMjE4NTdhYWYyYzgwYWQ5ZTMzOGQwNTJlYjYwYjQzNjY3YzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1pNF2e+jTfXTYCfCQmQMhkWfEiN x3FGu8U1vGxxlRaHC9sB4pQ6oTvQ0SjZhoIJDMr1lz0Uw4D7jbp0qSmRBL5A36nE GUBD/ByMSPNixt067Zw8qOwsynC/gDHhKtQvMgjjHWjfSiO5YSS6N/SwXdiK6oNw BTHllrntX0loKIcFBWPIyXKufS2vIspStFJszrZoJObjUo1K0O8JkzeTkojqtq18 LJI1e5WllvHAsWekQ/2MnmPhovnrQ2C02ZkcQUwj6FXW7Guwr3KPYSpOERk4dmIo O/0ZCCRWUGbxm/00pQv6mlLDFuMTE32COjKWortMh3HlY72M5InGeyjUFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAO/IYV6ryyArZ4zjQUutgtDZnxwMB8GA1UdIwQY MBaAFGf7AyjL8LJUr3yZ07afxjTP2PYAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82ZmNiODQtMDE3Yy00YWFmLWJkZTct YWE5MWM5MmQ1YzQ4LzEvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82ZmNiODQtMDE3Yy00YWFmLWJkZTctYWE5MWM5MmQ1YzQ4 LzEvWl9zREtNdndzbFN2ZkpuVHRwX0dOTV9ZOWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgJbTiTL lm7kP09JNgBlWE0K3T+XCSTb1u8fgvfJ1LGcMx0DnToIcOGoW7M+RNPtyPjHOFRv 8EZXWfDqfDCO1WhKN5HJ1mMlkdZ4QEOAdONc6gfOnwyu5d4UU+ctaylAzqmlPYC9 B+Bb7wFfPWQCP+ZIldM9ytRyy0kIxu/I1XBpB1dI00FtrlTp/Wc/7qCIml9Hfiqq BqWIIMYxrO+OJ8Ajdhpxv/rYepFnzYb2JWt55unDWzFEH69K+sC3tC2g+sx1+HEh us+wBMLZWJjvtHcG5i2au7GMPa5rzPDsZX0kM7sBDc98rGiaZfLaX57Fiva3MkbI DAXyL495euulzg== -----END CERTIFICATE-----Generated at Wed Jan 21 13:35:57 2026 by rpki-client