This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft File: ZjhRXzKUSWmuADG94C0fTL0NK5g.mft (raw, json) Hash identifier: xpzexipnJW0ltvvnaslp9kwFJLdxQ1wnJfMuQBXq0UQ= Subject key identifier: 9D:97:0B:98:8A:8A:7A:14:D8:94:A0:38:64:99:EA:B8:5A:D5:C1:C0 Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98 Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98 Certificate serial: 019BF53E6874A81274F9E53FE3511894E620 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft Manifest number: 0348 Signing time: Sun 25 Jan 2026 13:01:06 +0000 Manifest this update: Sun 25 Jan 2026 13:01:06 +0000 Manifest next update: Mon 26 Jan 2026 13:01:06 +0000 Files and hashes: 1: EQIS8hUY1cmRXKR2EV3HGZu3pAA.roa (hash: Wp9jKVUnjH19KZBMjioHvcWYEkt9n8/MKYDMHRVjrW8=) 2: U6_BOZR92hnw_a9L4P6TzqeXhec.roa (hash: g5QjwrMvRa/952IazG0KYw2xw/6dTSo8fap6F5NGQ7c=) 3: ZjhRXzKUSWmuADG94C0fTL0NK5g.crl (hash: Dg9l6AD9RfDdc7bh1Tu3zvv2YcqvrKPnk05e7DfIib0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:68:74:a8:12:74:f9:e5:3f:e3:51:18:94:e6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98 Validity Not Before: Jan 25 13:01:06 2026 GMT Not After : Jan 26 13:01:06 2026 GMT Subject: CN=9d970b988a8a7a14d894a0386499eab85ad5c1c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:96:d8:1e:28:7f:b6:07:c5:86:66:4a:8c:a2: ae:58:11:6e:52:aa:10:9a:1d:63:28:39:82:6c:e9: 08:66:43:b5:46:44:1c:09:51:96:39:5b:8e:a7:99: 1b:0b:d0:50:a3:be:22:2a:5c:26:ed:6d:ca:3a:87: e1:50:e4:7e:02:55:d6:62:11:85:29:46:81:40:fe: dd:13:dc:a0:cd:8d:90:0f:46:c9:ae:ea:ef:81:66: 87:5d:58:22:be:f3:47:45:99:0c:a8:9a:ec:59:99: ad:3a:be:fd:42:d1:2c:c8:66:fd:a5:f6:df:f8:20: f3:6d:26:b8:ea:e9:22:a4:c7:aa:99:39:1c:70:02: 0e:5e:8f:3a:db:ce:82:cf:cc:21:fb:b8:60:40:c4: 6d:76:b8:4b:2f:0a:c7:e4:06:16:de:61:3d:19:e4: 00:ba:6a:ba:7a:42:d2:c8:93:ca:05:2a:39:19:ca: 8e:f2:b6:f8:d7:f8:f1:07:89:3c:2e:c8:ff:8b:74: 87:a1:18:15:3e:64:ea:0a:99:00:55:9f:14:8b:ca: 76:60:e2:16:2b:64:5d:38:0a:9e:2f:4f:5b:1f:60: 26:e8:4a:3d:c6:b9:4d:72:d5:3b:74:53:bd:b0:08: fa:d6:68:d8:78:25:64:8a:3d:1e:c2:c7:92:e2:1e: 76:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:97:0B:98:8A:8A:7A:14:D8:94:A0:38:64:99:EA:B8:5A:D5:C1:C0 X509v3 Authority Key Identifier: keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:9a:fb:85:fe:d5:15:b0:f6:e1:45:f4:07:43:bd:22:f6:db: 94:19:4b:f8:a6:e6:30:91:e4:9c:8a:70:e1:5a:95:9a:62:b5: 29:f4:75:87:ba:65:11:f3:4e:a3:8d:5a:25:f7:7b:b3:5d:ef: 3a:4e:27:e9:82:48:bd:7b:35:ca:a8:96:27:8e:11:21:31:24: d9:ed:c6:dc:24:1f:f2:80:78:21:76:5f:fa:f1:db:fb:e0:06: 70:a8:16:4a:77:e0:f5:dc:93:b8:dc:ca:e1:dc:ef:0c:25:95: b2:c2:1a:5e:18:43:4e:7c:97:83:73:34:3e:d7:60:d1:87:cd: ea:fc:2d:42:fe:d0:c7:41:f9:13:cd:9d:dd:de:f4:db:ac:15: 55:c9:aa:98:dc:1d:84:12:2f:f4:20:9a:60:9e:17:5d:e6:6c: b9:ca:55:7c:d8:34:70:c7:03:59:09:74:e4:d4:65:bb:78:7d: ad:cf:90:51:b7:20:53:49:d6:a1:19:b9:d6:60:71:d3:64:5b: 24:42:b4:d3:57:5f:c7:1b:51:20:21:4f:d9:ec:61:d0:48:1e: a8:17:df:54:f3:7f:10:50:3e:8f:2b:9c:1a:19:4b:60:87:ed: 98:ed:1f:3d:a9:ef:54:97:80:f3:9b:40:d7:2f:72:bd:f6:4e: 0b:2d:56:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pmh0qBJ0+eU/41EYlOYgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2Mzg1MTVmMzI5NDQ5NjlhZTAwMzFiZGUwMmQxZjRjYmQw ZDJiOTgwHhcNMjYwMTI1MTMwMTA2WhcNMjYwMTI2MTMwMTA2WjAzMTEwLwYDVQQD Eyg5ZDk3MGI5ODhhOGE3YTE0ZDg5NGEwMzg2NDk5ZWFiODVhZDVjMWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZbYHih/tgfFhmZKjKKuWBFuUqoQ mh1jKDmCbOkIZkO1RkQcCVGWOVuOp5kbC9BQo74iKlwm7W3KOofhUOR+AlXWYhGF KUaBQP7dE9ygzY2QD0bJrurvgWaHXVgivvNHRZkMqJrsWZmtOr79QtEsyGb9pfbf +CDzbSa46ukipMeqmTkccAIOXo86286Cz8wh+7hgQMRtdrhLLwrH5AYW3mE9GeQA umq6ekLSyJPKBSo5GcqO8rb41/jxB4k8Lsj/i3SHoRgVPmTqCpkAVZ8Ui8p2YOIW K2RdOAqeL09bH2Am6Eo9xrlNctU7dFO9sAj61mjYeCVkij0ewseS4h529QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2XC5iKinoU2JSgOGSZ6rha1cHAMB8GA1UdIwQY MBaAFGY4UV8ylElprgAxveAtH0y9DSuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jNTA5ZGUtNGEwNi00ZjQ0LWIxMzct Yzk5NGZkMTc0ZTZlLzEvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9jNTA5ZGUtNGEwNi00ZjQ0LWIxMzctYzk5NGZkMTc0ZTZl LzEvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJr7hf7V FbD24UX0B0O9IvbblBlL+KbmMJHknIpw4VqVmmK1KfR1h7plEfNOo41aJfd7s13v Ok4n6YJIvXs1yqiWJ44RITEk2e3G3CQf8oB4IXZf+vHb++AGcKgWSnfg9dyTuNzK 4dzvDCWVssIaXhhDTnyXg3M0Ptdg0YfN6vwtQv7Qx0H5E82d3d7026wVVcmqmNwd hBIv9CCaYJ4XXeZsucpVfNg0cMcDWQl05NRlu3h9rc+QUbcgU0nWoRm51mBx02Rb JEK001dfxxtRICFP2exh0EgeqBffVPN/EFA+jyucGhlLYIftmO0fPanvVJeA85tA 1y9yvfZOCy1Wxg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:19 2026 by rpki-client