This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft File: Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft (raw, json) Hash identifier: d25arZJaewSk4+BJuMd6bpJI++s4cbuuOcRgwNAnKWA= Subject key identifier: 23:41:BC:11:17:6C:1A:4B:C8:21:3F:E7:DE:41:DA:EA:52:79:DE:21 Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9 Certificate issuer: /CN=668da92f99b5407f28a2f36613e849447a93f6b9 Certificate serial: 019C1FF16E9CA9A4EA3A7036F6272F20E51A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft Manifest number: 1803 Signing time: Mon 02 Feb 2026 20:00:41 +0000 Manifest this update: Mon 02 Feb 2026 20:00:41 +0000 Manifest next update: Tue 03 Feb 2026 20:00:41 +0000 Files and hashes: 1: 0R8Nyml_jNijyqA_Jia2Nz1Ew_0.roa (hash: j8m8dgU0c2ttdrUH0oHPxb+CqlN+qsjDTMJ+LPXhKnk=) 2: Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl (hash: 5ThJjZg05YEFUP6Ga3C4prRLEnM2nLtBz6b4WoaxUBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 20:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:f1:6e:9c:a9:a4:ea:3a:70:36:f6:27:2f:20:e5:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9 Validity Not Before: Feb 2 20:00:41 2026 GMT Not After : Feb 3 20:00:41 2026 GMT Subject: CN=2341bc11176c1a4bc8213fe7de41daea5279de21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:34:0f:b3:2f:29:91:3d:15:14:59:19:83:5a: d0:89:12:e2:f2:56:10:96:d3:f2:6e:dc:7c:b6:e8: 85:8e:b2:f6:2b:c9:6f:04:ff:4a:fb:9f:45:7d:24: fb:35:46:74:17:e6:da:b7:a9:db:43:9d:36:ec:e6: 9a:81:87:83:05:9c:81:32:85:1d:8c:c6:c1:c5:ba: b1:ba:33:fe:fe:03:38:89:b5:17:6a:57:b8:ca:7d: 30:62:07:46:b6:d4:a2:63:fb:d6:fe:b1:40:b9:3f: 2c:08:da:27:a1:33:f2:ed:d6:4e:e2:42:6a:64:41: e9:c6:2e:91:91:79:44:47:69:be:cc:90:10:44:3a: 9f:7c:a7:ad:91:cc:3d:15:4d:93:15:c0:3d:ca:45: ea:c3:bb:0f:a7:94:91:97:67:3f:77:7b:1f:0a:6a: 57:47:17:21:33:ef:92:e5:7f:f9:4e:18:ca:79:f7: 82:9a:dd:45:b7:0d:b9:68:24:ee:9c:bd:a8:7d:61: 59:4d:39:21:1e:2e:c9:17:af:a2:6b:eb:00:c8:58: 45:57:b4:79:e8:38:27:e0:8f:83:f8:e3:39:64:51: b3:52:52:1f:14:69:5f:8b:07:da:0d:21:06:6c:b0: 2d:e7:e0:3b:4f:a9:2b:e5:7e:33:c3:be:72:e2:5c: 29:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:41:BC:11:17:6C:1A:4B:C8:21:3F:E7:DE:41:DA:EA:52:79:DE:21 X509v3 Authority Key Identifier: keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:d5:73:08:3d:a5:e2:dd:d9:47:12:db:d7:8a:42:62:0d:67: 85:c5:6b:e4:12:fd:54:dd:28:94:f5:38:97:00:23:b2:84:9c: dc:b0:cc:32:ea:b4:d8:37:49:d5:f7:70:41:19:d4:43:b1:5a: b7:a3:21:94:27:f7:5f:47:bb:3e:b1:da:96:a7:fe:c4:2b:2b: dc:bf:55:d8:0e:de:46:01:71:51:1a:9d:5e:83:87:9d:a9:f0: 46:28:b5:85:21:c9:b2:26:27:44:54:9a:b1:f5:9f:21:26:bc: 9c:4b:e4:d4:19:29:9a:18:5f:a6:cc:c2:f6:7d:62:81:16:b9: cf:e4:dd:10:21:72:20:17:53:fc:69:a2:d3:12:cd:39:a6:05: b0:2e:50:0f:ee:81:55:77:e9:f0:39:84:36:6e:a7:11:d7:bc: 42:3a:67:23:e7:86:c2:c7:1b:f0:a3:23:6a:26:8c:49:8f:8e: 04:08:99:de:4d:77:45:fa:f9:ea:82:48:58:6d:43:19:68:b8: c2:d8:1c:eb:46:0e:74:49:63:95:33:05:8c:a0:28:31:9b:78: 08:f6:64:dd:f9:b3:ba:65:16:49:b8:ed:3e:ef:99:74:04:a6: d8:69:77:1a:a2:e8:24:f7:2d:41:2b:53:65:86:48:79:7c:99: aa:14:da:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwf8W6cqaTqOnA29icvIOUaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OGRhOTJmOTliNTQwN2YyOGEyZjM2NjEzZTg0OTQ0N2E5 M2Y2YjkwHhcNMjYwMjAyMjAwMDQxWhcNMjYwMjAzMjAwMDQxWjAzMTEwLwYDVQQD EygyMzQxYmMxMTE3NmMxYTRiYzgyMTNmZTdkZTQxZGFlYTUyNzlkZTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzQPsy8pkT0VFFkZg1rQiRLi8lYQ ltPybtx8tuiFjrL2K8lvBP9K+59FfST7NUZ0F+bat6nbQ5027OaagYeDBZyBMoUd jMbBxbqxujP+/gM4ibUXale4yn0wYgdGttSiY/vW/rFAuT8sCNonoTPy7dZO4kJq ZEHpxi6RkXlER2m+zJAQRDqffKetkcw9FU2TFcA9ykXqw7sPp5SRl2c/d3sfCmpX RxchM++S5X/5ThjKefeCmt1Ftw25aCTunL2ofWFZTTkhHi7JF6+ia+sAyFhFV7R5 6Dgn4I+D+OM5ZFGzUlIfFGlfiwfaDSEGbLAt5+A7T6kr5X4zw75y4lwpUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNBvBEXbBpLyCE/595B2upSed4hMB8GA1UdIwQY MBaAFGaNqS+ZtUB/KKLzZhPoSUR6k/a5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm8ycEw1bTFRSDhvb3ZObUUtaEpSSHFUOXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jNmUwMGUtODFjZC00YzAwLWFmZjEt ZGM4ZTgzZTYyOWYyLzEvWm8ycEw1bTFRSDhvb3ZObUUtaEpSSHFUOXJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9jNmUwMGUtODFjZC00YzAwLWFmZjEtZGM4ZTgzZTYyOWYy LzEvWm8ycEw1bTFRSDhvb3ZObUUtaEpSSHFUOXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdVzCD2l 4t3ZRxLb14pCYg1nhcVr5BL9VN0olPU4lwAjsoSc3LDMMuq02DdJ1fdwQRnUQ7Fa t6MhlCf3X0e7PrHalqf+xCsr3L9V2A7eRgFxURqdXoOHnanwRii1hSHJsiYnRFSa sfWfISa8nEvk1BkpmhhfpszC9n1igRa5z+TdECFyIBdT/Gmi0xLNOaYFsC5QD+6B VXfp8DmENm6nEde8QjpnI+eGwscb8KMjaiaMSY+OBAiZ3k13Rfr56oJIWG1DGWi4 wtgc60YOdEljlTMFjKAoMZt4CPZk3fmzumUWSbjtPu+ZdASm2Gl3GqLoJPctQStT ZYZIeXyZqhTa8w== -----END CERTIFICATE-----Generated at Tue Feb 3 03:25:24 2026 by rpki-client