This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft File: 1zeCTg_6efGLn8SdbLDdgcmmyig.mft (raw, json) Hash identifier: iENZ1sEBY5fm4UEtJYcqrdqh8TdrYDvQrQkofVUIqcM= Subject key identifier: B5:37:47:17:CE:FE:5D:FA:D3:96:CF:2D:E7:65:6B:EB:9C:8A:54:0B Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28 Certificate issuer: /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28 Certificate serial: 019BA1FD519A07C74DB7B6FEF7528696A1E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft Manifest number: 11B7 Signing time: Fri 09 Jan 2026 09:01:31 +0000 Manifest this update: Fri 09 Jan 2026 09:01:31 +0000 Manifest next update: Sat 10 Jan 2026 09:01:31 +0000 Files and hashes: 1: 1zeCTg_6efGLn8SdbLDdgcmmyig.crl (hash: HaCTQICAXJNvswjV7Efpt2sFpzB3lDfXiwPA7Bw3h2Q=) 2: CQ2Fo1iuspCmEI2hwKYfO4__cWY.roa (hash: 6UG3E6BSMIFC2YC9VNs/S3EPWadhLSS97sUzfp/jObs=) 3: mJoDlO3NR5D8OqKGLKWGSnN77Dc.roa (hash: 5iVJo/pmU4tCOmzWx6Yvb+04DOT0wTAh7Zm7gKM4+zQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 09:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:fd:51:9a:07:c7:4d:b7:b6:fe:f7:52:86:96:a1:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28 Validity Not Before: Jan 9 09:01:31 2026 GMT Not After : Jan 10 09:01:31 2026 GMT Subject: CN=b5374717cefe5dfad396cf2de7656beb9c8a540b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:dd:51:93:7b:e3:e6:8d:fa:7b:24:c5:b7: 55:97:ae:a0:c4:15:c6:47:6b:f5:8c:b7:42:ae:22: 99:a5:09:86:5b:98:fb:33:01:d5:2f:d6:3f:73:ad: 1e:5f:a0:42:19:e0:65:e8:71:d3:4f:48:e7:a9:b8: a1:e3:94:7e:c8:d5:9e:b1:bd:62:c4:e6:f0:32:42: dc:68:11:e8:d0:8d:7b:91:c9:8f:67:5e:61:bc:27: 7d:97:56:b8:f2:3c:35:fa:f0:d1:3d:de:52:f6:19: 44:db:c0:8e:7d:4d:61:36:95:8c:0b:6f:0b:8b:9f: ce:7e:5f:d3:af:24:c7:20:1a:5e:40:48:c0:a0:5a: 52:e8:71:26:0b:4c:f5:29:62:21:b1:40:a9:e3:71: e9:f9:b5:19:d8:70:fd:21:47:a2:2b:51:4f:76:ae: 0c:27:d4:e8:d6:38:8e:0a:04:42:45:9b:7c:86:41: 1a:d9:fb:33:75:94:98:2d:7c:28:f5:1a:74:4d:25: 89:79:8a:f2:74:bd:ce:af:b3:6c:2f:f7:b5:41:6d: 35:1f:5d:d6:fa:e8:a8:4d:ac:13:62:1e:de:3f:d9: 1e:8a:1f:ce:25:8a:71:63:f7:03:f5:bb:53:a9:2e: 9c:52:b1:56:b0:cf:9f:78:9c:8f:dd:bc:02:bd:4d: d5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:37:47:17:CE:FE:5D:FA:D3:96:CF:2D:E7:65:6B:EB:9C:8A:54:0B X509v3 Authority Key Identifier: keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:d7:b9:d3:a3:b1:97:3c:89:85:7f:14:fc:e4:ea:b6:b5:9c: 8c:bf:88:a7:4c:17:f5:cf:f9:1a:14:5d:62:7c:0e:c9:6c:e6: 2c:fe:ac:74:e2:77:c9:df:90:3d:84:2a:89:7a:1a:1e:d4:c4: a0:21:6b:cd:a2:61:ce:a1:58:2e:98:66:27:57:8f:17:ab:ae: 31:67:3b:0b:65:bd:42:b8:77:1b:8e:9b:dc:ac:03:48:94:b0: fd:0a:97:eb:c8:d9:07:ce:65:d4:9b:3a:35:83:3d:21:64:51: fd:81:47:91:b8:da:32:79:b8:94:30:b2:74:19:5d:fb:f0:f2: 16:40:28:6f:95:75:a3:13:4c:6e:a9:4e:8f:3b:f4:3d:21:1a: 48:5e:d1:67:85:20:b5:1e:b6:9d:b8:ed:57:d4:52:46:26:a7: 9e:5f:1e:3f:7c:64:dc:ec:bc:2f:cf:96:ec:78:f2:de:01:d1: bf:98:4c:4d:4b:43:38:95:df:49:2a:36:71:4e:2d:3b:57:c1: 25:05:fc:e6:c0:03:56:25:f4:fe:fc:30:4f:46:ac:9f:bd:d5: 79:92:2c:c0:28:08:66:22:aa:c6:b9:46:33:6d:71:4d:37:ef: 1a:cb:7b:24:b9:60:7f:44:94:5a:83:1f:23:eb:b2:8b:cb:ba: 63:0e:e6:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuh/VGaB8dNt7b+91KGlqHiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3Mzc4MjRlMGZmYTc5ZjE4YjlmYzQ5ZDZjYjBkZDgxYzlh NmNhMjgwHhcNMjYwMTA5MDkwMTMxWhcNMjYwMTEwMDkwMTMxWjAzMTEwLwYDVQQD EyhiNTM3NDcxN2NlZmU1ZGZhZDM5NmNmMmRlNzY1NmJlYjljOGE1NDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwPdUZN74+aN+nskxbdVl66gxBXG R2v1jLdCriKZpQmGW5j7MwHVL9Y/c60eX6BCGeBl6HHTT0jnqbih45R+yNWesb1i xObwMkLcaBHo0I17kcmPZ15hvCd9l1a48jw1+vDRPd5S9hlE28COfU1hNpWMC28L i5/Ofl/TryTHIBpeQEjAoFpS6HEmC0z1KWIhsUCp43Hp+bUZ2HD9IUeiK1FPdq4M J9To1jiOCgRCRZt8hkEa2fszdZSYLXwo9Rp0TSWJeYrydL3Or7NsL/e1QW01H13W +uioTawTYh7eP9keih/OJYpxY/cD9btTqS6cUrFWsM+feJyP3bwCvU3V1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLU3RxfO/l3605bPLedla+ucilQLMB8GA1UdIwQY MBaAFNc3gk4P+nnxi5/EnWyw3YHJpsooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80NDZkNDAtNTc4Mi00ZGUwLWEyYzUt YjY4ZjVkOGY2NTFhLzEvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80NDZkNDAtNTc4Mi00ZGUwLWEyYzUtYjY4ZjVkOGY2NTFh LzEvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINe506Ox lzyJhX8U/OTqtrWcjL+Ip0wX9c/5GhRdYnwOyWzmLP6sdOJ3yd+QPYQqiXoaHtTE oCFrzaJhzqFYLphmJ1ePF6uuMWc7C2W9Qrh3G46b3KwDSJSw/QqX68jZB85l1Js6 NYM9IWRR/YFHkbjaMnm4lDCydBld+/DyFkAob5V1oxNMbqlOjzv0PSEaSF7RZ4Ug tR62nbjtV9RSRiannl8eP3xk3Oy8L8+W7Hjy3gHRv5hMTUtDOJXfSSo2cU4tO1fB JQX85sADViX0/vwwT0asn73VeZIswCgIZiKqxrlGM21xTTfvGst7JLlgf0SUWoMf I+uyi8u6Yw7mxw== -----END CERTIFICATE-----Generated at Fri Jan 9 17:09:00 2026 by rpki-client