This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft File: zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json) Hash identifier: ptXZv/e7zqjrwXJ2VY4b9cxxEofal2vtV8s4HVbIvg8= Subject key identifier: 93:E6:D1:FD:C1:6A:F4:BB:5A:C1:C5:6F:EE:F3:14:C5:66:28:B9:F4 Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61 Certificate issuer: /CN=cd86b8ce222482a14f9b13468ce57e9992684961 Certificate serial: 019BFD9CC649B25321B66C0ECE0ABFCC94E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft Manifest number: 07C1 Signing time: Tue 27 Jan 2026 04:01:08 +0000 Manifest this update: Tue 27 Jan 2026 04:01:08 +0000 Manifest next update: Wed 28 Jan 2026 04:01:08 +0000 Files and hashes: 1: tOm2mcjBn8Ym8qVAgXlaktzQgQQ.roa (hash: QA1CzDp5HJkMD+7uuzpOHwQafKh/ybfi3Yylc1GPX2k=) 2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: iD/oeFjVX0eWJVITXtymrq4fu1S4ygrxGp+NxndGALI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:9c:c6:49:b2:53:21:b6:6c:0e:ce:0a:bf:cc:94:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961 Validity Not Before: Jan 27 04:01:08 2026 GMT Not After : Jan 28 04:01:08 2026 GMT Subject: CN=93e6d1fdc16af4bb5ac1c56feef314c56628b9f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ad:8d:9f:2b:98:10:f7:ac:69:5b:1b:e6:66: 7d:35:db:c6:ba:12:8b:52:81:44:83:ff:ba:d9:3f: 6a:88:53:8e:5d:f5:f6:75:aa:b9:ab:56:14:48:8a: 4d:35:9e:de:ba:d6:7e:32:b9:1f:4c:77:02:da:f0: 61:78:7c:2e:6d:39:96:af:4e:99:36:f7:86:aa:01: ee:b3:a0:84:68:e8:02:7a:60:9a:0f:33:c4:88:70: db:ee:5a:39:ca:08:f5:b5:cb:10:75:44:8f:21:b1: f7:ca:52:e0:55:32:ad:d5:db:e2:c1:9c:b3:80:7f: e7:ea:c7:e7:54:74:6c:8b:03:db:ea:e8:1e:20:79: 74:31:d8:a2:2e:99:f3:f7:28:48:bd:5f:2b:70:70: 14:e5:42:62:c9:f1:39:04:c9:06:43:c0:38:24:1f: 80:26:7e:e5:28:6a:42:01:81:9e:9e:12:99:67:c0: 3a:d2:10:ae:66:24:20:79:27:5b:48:d3:e2:db:a6: 70:c9:bc:36:15:e3:bc:3a:c5:b7:35:b7:73:0e:4f: 6f:a3:35:22:8a:74:14:b7:a3:b9:74:d9:90:05:56: bb:02:5c:76:76:db:74:1e:34:66:a5:6e:3a:7b:e1: d2:02:43:39:17:49:45:9a:e0:61:8c:1d:2f:42:f8: f0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E6:D1:FD:C1:6A:F4:BB:5A:C1:C5:6F:EE:F3:14:C5:66:28:B9:F4 X509v3 Authority Key Identifier: keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0c:6c:8e:b3:88:51:73:0b:3f:d1:cf:ac:91:4a:45:e8:c3: 71:1f:08:e1:e7:4c:58:64:66:50:44:c5:c1:4a:ce:7f:38:9a: 2c:08:c8:b5:83:4e:e0:1a:38:0a:a1:1d:f9:0d:28:fa:c9:a8: 75:3a:e8:71:d5:6c:11:65:40:15:46:5d:e7:32:db:65:97:01: 18:ce:b5:31:db:95:bd:e6:f2:d1:c6:b5:25:25:e4:18:bd:8d: b5:7f:00:bb:46:17:3d:66:ed:5d:14:7a:11:6e:b7:1c:65:06: 90:be:f5:9d:d6:4a:fd:fa:cc:aa:1b:e7:5f:0e:13:08:18:88: ad:5b:5e:d7:97:50:b3:1c:21:ac:8a:ed:3d:01:a7:c2:eb:5f: 9b:2d:d9:7d:9b:b1:73:53:d1:bf:b0:f5:3d:ab:18:18:f7:a1: 39:01:b1:b3:a5:9c:0a:1c:5e:34:d5:bc:46:70:6f:d0:20:2c: 0e:20:4e:56:91:7a:1d:46:64:32:c6:d6:51:57:82:bc:b1:01: b1:63:0b:21:07:ab:77:08:60:31:26:77:f8:88:bd:69:a3:27: 28:5c:89:6d:69:7e:3d:e5:f2:38:d7:72:df:72:29:26:af:b9: 80:01:cd:0a:8a:51:cc:88:cf:08:07:95:03:45:ca:88:e5:45: 57:bd:03:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9nMZJslMhtmwOzgq/zJTpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODZiOGNlMjIyNDgyYTE0ZjliMTM0NjhjZTU3ZTk5OTI2 ODQ5NjEwHhcNMjYwMTI3MDQwMTA4WhcNMjYwMTI4MDQwMTA4WjAzMTEwLwYDVQQD Eyg5M2U2ZDFmZGMxNmFmNGJiNWFjMWM1NmZlZWYzMTRjNTY2MjhiOWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr62NnyuYEPesaVsb5mZ9NdvGuhKL UoFEg/+62T9qiFOOXfX2daq5q1YUSIpNNZ7eutZ+MrkfTHcC2vBheHwubTmWr06Z NveGqgHus6CEaOgCemCaDzPEiHDb7lo5ygj1tcsQdUSPIbH3ylLgVTKt1dviwZyz gH/n6sfnVHRsiwPb6ugeIHl0MdiiLpnz9yhIvV8rcHAU5UJiyfE5BMkGQ8A4JB+A Jn7lKGpCAYGenhKZZ8A60hCuZiQgeSdbSNPi26Zwybw2FeO8OsW3NbdzDk9vozUi inQUt6O5dNmQBVa7Alx2dtt0HjRmpW46e+HSAkM5F0lFmuBhjB0vQvjwOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPm0f3BavS7WsHFb+7zFMVmKLn0MB8GA1UdIwQY MBaAFM2GuM4iJIKhT5sTRozlfpmSaElhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82MDgxMTQtYTk3YS00ODc3LTk0Yzct ZGMyZDU1NzUwM2VlLzEvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC82MDgxMTQtYTk3YS00ODc3LTk0YzctZGMyZDU1NzUwM2Vl LzEvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgxsjrOI UXMLP9HPrJFKRejDcR8I4edMWGRmUETFwUrOfziaLAjItYNO4Bo4CqEd+Q0o+smo dTrocdVsEWVAFUZd5zLbZZcBGM61MduVveby0ca1JSXkGL2NtX8Au0YXPWbtXRR6 EW63HGUGkL71ndZK/frMqhvnXw4TCBiIrVte15dQsxwhrIrtPQGnwutfmy3ZfZux c1PRv7D1PasYGPehOQGxs6WcChxeNNW8RnBv0CAsDiBOVpF6HUZkMsbWUVeCvLEB sWMLIQerdwhgMSZ3+Ii9aaMnKFyJbWl+PeXyONdy33IpJq+5gAHNCopRzIjPCAeV A0XKiOVFV70DSA== -----END CERTIFICATE-----Generated at Tue Jan 27 09:14:24 2026 by rpki-client