This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft File: Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft (raw, json) Hash identifier: dsykRjWquebMXkL0HWiwRENH8HnrxZCBRPmht6dye1E= Subject key identifier: 2F:9E:DB:83:BE:B1:FC:FE:64:F7:3D:8C:EE:DA:82:D6:65:5C:21:33 Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F Certificate issuer: /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f Certificate serial: 019BF6F5C0F1AEEB5EA2B642150B02BB0EE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft Manifest number: 177C Signing time: Sun 25 Jan 2026 21:00:59 +0000 Manifest this update: Sun 25 Jan 2026 21:00:59 +0000 Manifest next update: Mon 26 Jan 2026 21:00:59 +0000 Files and hashes: 1: EO1xuq0TyBN7jL2nsBNR6LuDlQo.roa (hash: 0YddX8lcftncrD+VCEJL3eDzYZ6fCFEVTyRED0oHXFA=) 2: Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl (hash: Tm/g1pDGocwQZVcTaa8uSXX13XlabwWdtPFm2lnsPAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:c0:f1:ae:eb:5e:a2:b6:42:15:0b:02:bb:0e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f Validity Not Before: Jan 25 21:00:59 2026 GMT Not After : Jan 26 21:00:59 2026 GMT Subject: CN=2f9edb83beb1fcfe64f73d8ceeda82d6655c2133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:89:a1:2f:7a:29:d5:dc:c0:d0:4d:72:6b:8a: 20:06:7e:ea:8f:e3:ef:73:81:bf:8d:63:f8:41:11: 50:f4:85:43:b2:b2:44:7d:1b:3b:bb:d3:26:5b:ab: 98:11:35:5d:b0:42:d5:90:c9:48:2e:9f:d3:36:50: be:3b:30:90:db:f9:0f:40:d7:5a:25:0c:ba:6e:e0: 14:00:22:b6:a6:c0:27:c9:fc:15:60:79:2b:0f:41: 41:39:64:7b:61:bb:09:21:6e:31:34:ef:20:05:76: 1b:86:51:55:7f:22:66:a2:7e:7c:d1:9c:54:d6:17: ea:ab:e9:7f:68:93:44:1f:93:da:3a:cc:f1:91:fb: 30:d5:40:76:57:0b:9f:48:01:e3:cd:94:77:e4:07: 54:c4:c4:8b:e3:3c:2c:ba:6d:4b:db:eb:28:4b:e0: 8d:7e:71:60:82:eb:41:79:c1:1c:26:0d:26:e5:92: be:78:d6:6e:d8:41:ab:ca:7c:78:ce:c0:5f:7c:a9: 6a:f1:5c:66:8b:70:86:d7:5a:37:1e:c9:65:5e:b0: f9:f0:ca:37:a0:5a:09:08:e9:4c:25:41:21:81:a7: ef:12:7b:70:06:e2:96:d9:29:5e:90:6c:b5:bd:e7: c0:1c:7a:c7:c9:bf:41:de:9b:d6:cc:fd:42:99:c0: 05:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9E:DB:83:BE:B1:FC:FE:64:F7:3D:8C:EE:DA:82:D6:65:5C:21:33 X509v3 Authority Key Identifier: keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3d:ae:8f:dd:bb:97:6c:fe:0f:a5:30:52:27:e4:0a:98:6b: 0b:93:23:a9:e5:5c:82:22:e8:3d:5f:0e:7e:bd:c1:b3:52:5e: 58:b3:cc:d7:5a:2d:24:99:84:9f:5e:8c:aa:7a:d3:09:20:ef: b2:b3:7c:28:1f:6b:94:d9:01:9e:e8:91:7a:e4:3e:d9:5b:30: 53:b6:20:f4:b4:8e:27:49:ac:2f:02:ea:da:c1:c3:bd:19:c3: 19:73:a5:65:c2:90:04:35:f1:f5:56:7b:ff:92:39:60:e7:f6: 74:9b:37:24:64:3d:83:22:64:d0:e4:1e:dd:8f:7d:80:0f:d0: 07:7f:26:94:3d:65:99:7c:ed:d5:7f:d4:5a:80:71:5f:ca:82: 2b:a4:6f:f5:05:a2:ab:d8:13:e4:cc:84:a2:1d:51:2d:41:75: c4:bc:20:46:e9:ea:38:c4:30:06:09:b3:9d:45:03:7b:72:cc: 85:86:8e:ca:18:ab:af:64:a1:c0:ba:68:a1:7e:60:85:eb:1d: 20:72:75:bc:7b:4e:ad:d6:ef:e8:5d:29:17:77:30:96:18:13: cd:56:01:99:34:d8:48:61:77:a7:50:e0:50:f7:6b:85:e8:f2: 23:60:b9:c2:68:d0:fb:e9:ea:e9:0d:28:c6:e6:ba:47:d2:1b: ef:8c:b4:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29cDxruteorZCFQsCuw7oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZmQzZTE5ZjU4MzM2MWZlNWQ5MGE0MTJiMTI4MGY3Y2Zm YjgwMWYwHhcNMjYwMTI1MjEwMDU5WhcNMjYwMTI2MjEwMDU5WjAzMTEwLwYDVQQD EygyZjllZGI4M2JlYjFmY2ZlNjRmNzNkOGNlZWRhODJkNjY1NWMyMTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvImhL3op1dzA0E1ya4ogBn7qj+Pv c4G/jWP4QRFQ9IVDsrJEfRs7u9MmW6uYETVdsELVkMlILp/TNlC+OzCQ2/kPQNda JQy6buAUACK2psAnyfwVYHkrD0FBOWR7YbsJIW4xNO8gBXYbhlFVfyJmon580ZxU 1hfqq+l/aJNEH5PaOszxkfsw1UB2VwufSAHjzZR35AdUxMSL4zwsum1L2+soS+CN fnFggutBecEcJg0m5ZK+eNZu2EGrynx4zsBffKlq8Vxmi3CG11o3HsllXrD58Mo3 oFoJCOlMJUEhgafvEntwBuKW2SlekGy1vefAHHrHyb9B3pvWzP1CmcAFwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+e24O+sfz+ZPc9jO7agtZlXCEzMB8GA1UdIwQY MBaAFGf9Phn1gzYf5dkKQSsSgPfP+4AfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wODFiODQtNGVjZS00MDA1LWIyOGQt OWYyOTMxNzJiYjZiLzEvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8wODFiODQtNGVjZS00MDA1LWIyOGQtOWYyOTMxNzJiYjZi LzEvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKz2uj927 l2z+D6UwUifkCphrC5MjqeVcgiLoPV8Ofr3Bs1JeWLPM11otJJmEn16MqnrTCSDv srN8KB9rlNkBnuiReuQ+2VswU7Yg9LSOJ0msLwLq2sHDvRnDGXOlZcKQBDXx9VZ7 /5I5YOf2dJs3JGQ9gyJk0OQe3Y99gA/QB38mlD1lmXzt1X/UWoBxX8qCK6Rv9QWi q9gT5MyEoh1RLUF1xLwgRunqOMQwBgmznUUDe3LMhYaOyhirr2ShwLpooX5ghesd IHJ1vHtOrdbv6F0pF3cwlhgTzVYBmTTYSGF3p1DgUPdrhejyI2C5wmjQ++nq6Q0o xua6R9Ib74y0Jw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:22 2026 by rpki-client