This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft File: zuTBXIcH3739qDvjppPDWUfxbVk.mft (raw, json) Hash identifier: 7vxUcgF9DK9UKSIxNaK6iQXMWqwjo5gAQwZEv4pc+KA= Subject key identifier: 18:54:89:4B:F5:8C:A3:54:47:07:0B:DA:27:CB:84:F8:EE:59:C6:B0 Authority key identifier: CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59 Certificate issuer: /CN=cee4c15c8707dfbdfda83be3a693c35947f16d59 Certificate serial: 019BFBE4FB6991465A450AF728A684CCC17B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft Manifest number: 13B3 Signing time: Mon 26 Jan 2026 20:00:46 +0000 Manifest this update: Mon 26 Jan 2026 20:00:46 +0000 Manifest next update: Tue 27 Jan 2026 20:00:46 +0000 Files and hashes: 1: 3XADLdEbS1FY6n6yUx5o7fgS4pU.roa (hash: sJxb+ZizUKA1xitVNheZoX8adqgMHbTrnaDCSefof/w=) 2: zuTBXIcH3739qDvjppPDWUfxbVk.crl (hash: c1ds7nGNE/gAxELm+qa7R5bzuf0udSFr5g4nxuCMoy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e4:fb:69:91:46:5a:45:0a:f7:28:a6:84:cc:c1:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cee4c15c8707dfbdfda83be3a693c35947f16d59 Validity Not Before: Jan 26 20:00:46 2026 GMT Not After : Jan 27 20:00:46 2026 GMT Subject: CN=1854894bf58ca35447070bda27cb84f8ee59c6b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:db:8f:7c:a5:5f:74:54:72:3a:5e:4f:45:f0: 0b:0a:00:e5:40:ef:d0:34:b7:83:30:4b:6d:27:c1: dc:f6:8d:f0:b3:9e:2e:0a:4e:6e:be:d2:58:91:66: 2c:e8:bd:1c:41:e9:0c:f8:21:86:27:92:1e:dc:43: 35:4d:4e:9a:c5:a4:21:bd:c2:34:a3:27:d7:ee:73: 47:e3:2b:f1:40:45:09:17:c2:dd:b9:15:54:81:d3: d6:82:78:43:8b:b9:e9:f4:8f:87:59:25:c6:c1:2a: ba:2c:0c:32:17:e5:fb:33:f1:b1:d3:d8:4f:d0:12: f0:ef:81:ea:50:ef:22:92:46:4a:e9:27:41:58:92: 9a:a6:b8:02:36:12:f6:78:50:d8:6f:21:06:ee:90: 5f:c4:f3:f4:1d:c3:42:f2:03:25:32:38:65:ae:52: 02:70:52:5a:c4:05:62:d9:92:21:4c:c7:ce:19:8d: a6:8c:41:c8:37:d3:32:4b:91:f0:2b:d8:af:d9:68: 23:02:27:a4:f7:55:c0:bd:a8:60:1a:ce:63:90:49: b1:eb:83:fe:c4:ea:64:5d:c9:c9:5e:dc:ad:1b:ad: 4d:d7:6d:39:d7:68:44:9c:4f:3d:cc:f0:66:58:4d: 69:3f:54:17:18:d2:ee:6b:f5:47:fa:38:b0:b1:c9: b2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:54:89:4B:F5:8C:A3:54:47:07:0B:DA:27:CB:84:F8:EE:59:C6:B0 X509v3 Authority Key Identifier: keyid:CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:c0:4b:47:bd:4e:de:48:1b:a1:ca:2a:48:f2:fd:36:3a:3a: c9:92:2e:10:af:80:ee:48:cc:92:af:3e:0e:31:a7:a9:40:6a: 45:cb:bc:d9:66:21:9d:9c:cf:ef:c0:5a:23:e6:17:9a:87:c7: ca:0c:7e:f3:b7:39:5e:55:77:6f:f5:5a:53:cd:07:86:47:d1: e4:3c:e5:f7:5d:fb:6b:80:3a:e2:a4:cc:ac:4e:77:13:e4:0b: 69:1b:57:81:5e:12:f5:ea:61:3f:4c:12:63:a6:4a:93:37:56: d7:df:63:aa:2b:fe:30:26:a5:45:9e:cc:3a:f2:43:2e:09:27: 5a:ed:cd:49:0d:8c:db:7f:40:0c:37:c8:5e:ec:a1:fc:85:32: 52:12:d0:ff:04:02:16:fb:4f:46:f3:ae:e6:eb:5f:05:57:fa: 9d:12:c2:c3:99:a7:14:88:cc:fe:f8:ca:98:6f:c0:a8:94:a3: 97:c7:37:0d:10:dd:9a:8a:12:3d:69:83:1e:73:45:2d:ae:92: 6c:0b:64:f3:f9:82:61:8d:ee:05:74:f4:8f:5e:7a:4a:86:fa: 78:92:f9:2e:ec:26:c1:0c:87:ad:f9:76:88:e0:08:4b:0d:cf: 1e:e7:de:47:12:a2:10:6a:6d:37:33:fe:5d:54:d5:bc:42:af: d9:91:29:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75PtpkUZaRQr3KKaEzMF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZTRjMTVjODcwN2RmYmRmZGE4M2JlM2E2OTNjMzU5NDdm MTZkNTkwHhcNMjYwMTI2MjAwMDQ2WhcNMjYwMTI3MjAwMDQ2WjAzMTEwLwYDVQQD EygxODU0ODk0YmY1OGNhMzU0NDcwNzBiZGEyN2NiODRmOGVlNTljNmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNuPfKVfdFRyOl5PRfALCgDlQO/Q NLeDMEttJ8Hc9o3ws54uCk5uvtJYkWYs6L0cQekM+CGGJ5Ie3EM1TU6axaQhvcI0 oyfX7nNH4yvxQEUJF8LduRVUgdPWgnhDi7np9I+HWSXGwSq6LAwyF+X7M/Gx09hP 0BLw74HqUO8ikkZK6SdBWJKaprgCNhL2eFDYbyEG7pBfxPP0HcNC8gMlMjhlrlIC cFJaxAVi2ZIhTMfOGY2mjEHIN9MyS5HwK9iv2WgjAiek91XAvahgGs5jkEmx64P+ xOpkXcnJXtytG61N120512hEnE89zPBmWE1pP1QXGNLua/VH+jiwscmyawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhUiUv1jKNURwcL2ifLhPjuWcawMB8GA1UdIwQY MBaAFM7kwVyHB9+9/ag746aTw1lH8W1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenVUQlhJY0gzNzM5cUR2anBwUERXVWZ4YlZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yOGM5MGMtOWE2My00MGI0LTkyY2Yt MmQ3Yjg1NzBkZDAzLzEvenVUQlhJY0gzNzM5cUR2anBwUERXVWZ4YlZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8yOGM5MGMtOWE2My00MGI0LTkyY2YtMmQ3Yjg1NzBkZDAz LzEvenVUQlhJY0gzNzM5cUR2anBwUERXVWZ4YlZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8BLR71O 3kgbocoqSPL9Njo6yZIuEK+A7kjMkq8+DjGnqUBqRcu82WYhnZzP78BaI+YXmofH ygx+87c5XlV3b/VaU80HhkfR5Dzl9137a4A64qTMrE53E+QLaRtXgV4S9ephP0wS Y6ZKkzdW199jqiv+MCalRZ7MOvJDLgknWu3NSQ2M239ADDfIXuyh/IUyUhLQ/wQC FvtPRvOu5utfBVf6nRLCw5mnFIjM/vjKmG/AqJSjl8c3DRDdmooSPWmDHnNFLa6S bAtk8/mCYY3uBXT0j156Sob6eJL5LuwmwQyHrfl2iOAISw3PHufeRxKiEGptNzP+ XVTVvEKv2ZEpng== -----END CERTIFICATE-----Generated at Mon Jan 26 22:27:41 2026 by rpki-client