This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft File: ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json) Hash identifier: ZpLPXCWCAmFtgxIC14E/Vv2BQLwrwbDBs9v+W6N5nHE= Subject key identifier: C1:2C:1C:34:E9:D4:C9:59:09:B3:F3:F0:43:2B:AB:CC:EF:A1:A2:03 Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A Certificate issuer: /CN=659c356633388e9bd897d000a3f38bc1e546ef4a Certificate serial: 019BF6F5FEF63CD4003B287FFEEE7C9684E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft Manifest number: 0FDD Signing time: Sun 25 Jan 2026 21:01:15 +0000 Manifest this update: Sun 25 Jan 2026 21:01:15 +0000 Manifest next update: Mon 26 Jan 2026 21:01:15 +0000 Files and hashes: 1: BMF2VpXZcBJDRIgbKu6WmPKlRZE.roa (hash: Qaj7moEkQ9ZCrPUXtOtCs5aCDU6SYqiy/nfoo9H7JTA=) 2: FUJsXxiOTQX7pzaDkL5Jbj6ETSk.roa (hash: Uv+Y92AvX9M/f9d8WVX2zm/JR3SnMp+hpIYMHfKMlJ0=) 3: QKv3-8YoDEK1Mitg0rmTL0SGOJM.roa (hash: DZBSel951tZH4WYCuGXNyVILmfYXwt90PA6IkSwgQS0=) 4: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: h0TgKvFuXiXzOghOK+xgoVp+wtGdfcphkzismVU135I=) 5: layLa7phubn33XrJU1BmwvtRXsY.roa (hash: cTdYPRtqorbWTxs8WaRuos58WsmGioXRqkoVdeR+lmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:fe:f6:3c:d4:00:3b:28:7f:fe:ee:7c:96:84:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a Validity Not Before: Jan 25 21:01:15 2026 GMT Not After : Jan 26 21:01:15 2026 GMT Subject: CN=c12c1c34e9d4c95909b3f3f0432babccefa1a203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:18:70:42:8f:7e:2a:5d:e3:e2:92:2f:d7:72: a2:a9:a5:03:1e:69:76:d7:b9:7e:a1:d6:3f:2f:64: 84:33:8b:2c:f0:7f:a5:58:f7:a0:1e:22:71:dc:a3: b7:4c:a1:52:2f:cc:14:b1:e9:66:01:46:3d:28:c2: a7:67:33:7d:d0:e7:f5:ad:e5:97:09:d5:a0:c8:ed: 06:8c:e1:04:ca:2c:1e:db:6d:d6:fb:56:66:ad:92: 9d:a1:6b:16:8d:54:21:cc:88:a9:69:29:8c:0d:b7: be:ca:e7:f3:a3:46:e0:9f:d1:1b:ec:6b:5a:d3:cb: 6e:c1:3c:71:51:a4:a5:68:4b:41:75:f0:22:d7:fe: 0f:d3:e9:fb:43:72:ae:87:e9:42:68:53:fc:05:cd: ca:9c:c0:ec:ee:70:8f:c8:90:ea:72:ba:6e:2a:c0: 4c:6a:55:65:f2:7a:c2:25:26:46:f8:33:e9:7f:36: 95:26:54:da:33:c9:28:e8:ff:27:5c:30:a1:bf:96: 85:42:81:e6:21:79:69:0d:59:a6:c8:f1:e9:04:cd: bb:c1:aa:77:73:95:59:4b:d1:35:bb:42:31:45:7b: 1d:29:44:ce:29:c0:ed:8c:98:30:3b:0e:a1:35:45: e9:00:b5:ac:b3:a0:7f:98:4e:06:e4:2a:d6:dd:e5: 39:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2C:1C:34:E9:D4:C9:59:09:B3:F3:F0:43:2B:AB:CC:EF:A1:A2:03 X509v3 Authority Key Identifier: keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:88:33:bb:25:d4:ea:8a:ae:54:b0:e5:e3:37:c7:c6:d7:72: 74:5d:64:32:c0:cf:c5:68:fb:2e:da:4b:1a:bf:f4:60:d2:75: fd:d4:10:83:ad:51:8b:33:6b:a4:db:37:aa:0a:d0:ee:fd:46: c7:cb:9a:8d:45:30:32:30:75:1e:4b:64:0b:7d:13:09:22:81: 97:72:f4:64:76:5a:1e:5c:30:56:13:ca:a4:08:bf:1f:4b:1a: ca:e5:0c:72:59:f9:0b:74:ea:b7:48:47:9b:77:10:f8:ce:f2: 68:cf:01:cf:8c:57:50:c5:c0:d2:a1:11:a2:23:91:25:e3:89: a2:cb:ad:b2:e1:bb:29:58:d9:ab:ae:75:98:f3:33:55:2f:62: c1:3b:19:39:ff:f6:bc:a9:a0:42:ed:be:ea:3b:be:ce:dd:da: cd:97:25:67:2f:96:4c:9c:54:82:aa:71:3a:3d:d3:ac:85:fa: d6:3e:c1:b8:96:61:0f:87:e0:cd:bd:ec:42:de:1d:4b:9d:36: 5e:64:28:e7:5f:5a:ad:ed:c2:d5:f8:17:2e:0b:0c:d8:b8:f3: f6:51:c5:02:09:ba:b7:89:5c:91:4b:96:43:a1:ea:b1:f1:51: 03:b8:ee:9c:64:a5:5f:09:80:75:e6:23:c8:a1:ac:4e:fc:bd: 4a:7e:55:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29f72PNQAOyh//u58loToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OWMzNTY2MzMzODhlOWJkODk3ZDAwMGEzZjM4YmMxZTU0 NmVmNGEwHhcNMjYwMTI1MjEwMTE1WhcNMjYwMTI2MjEwMTE1WjAzMTEwLwYDVQQD EyhjMTJjMWMzNGU5ZDRjOTU5MDliM2YzZjA0MzJiYWJjY2VmYTFhMjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxhwQo9+Kl3j4pIv13KiqaUDHml2 17l+odY/L2SEM4ss8H+lWPegHiJx3KO3TKFSL8wUselmAUY9KMKnZzN90Of1reWX CdWgyO0GjOEEyiwe223W+1ZmrZKdoWsWjVQhzIipaSmMDbe+yufzo0bgn9Eb7Gta 08tuwTxxUaSlaEtBdfAi1/4P0+n7Q3Kuh+lCaFP8Bc3KnMDs7nCPyJDqcrpuKsBM alVl8nrCJSZG+DPpfzaVJlTaM8ko6P8nXDChv5aFQoHmIXlpDVmmyPHpBM27wap3 c5VZS9E1u0IxRXsdKUTOKcDtjJgwOw6hNUXpALWss6B/mE4G5CrW3eU5pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEsHDTp1MlZCbPz8EMrq8zvoaIDMB8GA1UdIwQY MBaAFGWcNWYzOI6b2JfQAKPzi8HlRu9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTkt M2M3ZTRmOTNlNDJiLzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTktM2M3ZTRmOTNlNDJi LzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIgzuyXU 6oquVLDl4zfHxtdydF1kMsDPxWj7LtpLGr/0YNJ1/dQQg61RizNrpNs3qgrQ7v1G x8uajUUwMjB1HktkC30TCSKBl3L0ZHZaHlwwVhPKpAi/H0sayuUMcln5C3Tqt0hH m3cQ+M7yaM8Bz4xXUMXA0qERoiORJeOJosutsuG7KVjZq651mPMzVS9iwTsZOf/2 vKmgQu2+6ju+zt3azZclZy+WTJxUgqpxOj3TrIX61j7BuJZhD4fgzb3sQt4dS502 XmQo519are3C1fgXLgsM2Ljz9lHFAgm6t4lckUuWQ6HqsfFRA7junGSlXwmAdeYj yKGsTvy9Sn5VAQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:43 2026 by rpki-client