This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json) Hash identifier: Fxx731jZlHCjjpj/PVzl9S+nqf0gq0Z9BvaANCNInu4= Subject key identifier: 41:B3:A2:12:FE:86:74:EA:EF:B5:22:42:77:F4:97:31:25:17:38:EB Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d Certificate serial: 019BF2E2AEC6AB04034AD0D51638A87605C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft Manifest number: 0646 Signing time: Sun 25 Jan 2026 02:01:40 +0000 Manifest this update: Sun 25 Jan 2026 02:01:40 +0000 Manifest next update: Mon 26 Jan 2026 02:01:40 +0000 Files and hashes: 1: 99ql3Nj_XXqdJBUKyH1zSjprsmk.roa (hash: 8Q5g46XQnTAlgbAY9G1RdWl4ij89rLN6KeETKWp4UX4=) 2: UKvSxhXp6UeN9PA2d7zmzONW8dI.roa (hash: U2Kl3dxAuyKIqhwNvATcE57d94w+8GaKrGRAFwd2pQQ=) 3: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: HCwieIpOh0E0VwOjz8woUNA0x4kofoWx9rNcDml+QBk=) 4: yGnTUZ-K5iZvv_QJlyjyr1Vifo0.roa (hash: 3NvMCRIYGPgbO9Y+3R7bmJF+C6D6NUF59+RrT9ZBe2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:ae:c6:ab:04:03:4a:d0:d5:16:38:a8:76:05:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d Validity Not Before: Jan 25 02:01:40 2026 GMT Not After : Jan 26 02:01:40 2026 GMT Subject: CN=41b3a212fe8674eaefb5224277f49731251738eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8f:9c:7d:b4:63:11:a6:cb:58:1a:8f:69:c7: 18:1b:4d:92:36:52:61:79:d6:a2:93:4a:c8:96:15: a3:86:a1:55:eb:5b:53:06:8b:7a:be:21:4a:20:fb: 45:db:c1:cd:68:d1:5c:59:2c:d8:e2:da:23:89:5e: 62:9f:b1:33:8a:96:6a:62:41:ca:ce:3b:6b:93:e6: 7d:e1:fe:eb:1b:1f:90:be:c0:26:5d:61:71:4f:e0: bf:18:56:f1:79:1d:42:67:c8:24:30:fc:82:4d:16: 6d:f3:77:bd:2c:69:f6:83:70:32:70:50:a6:db:1f: e5:52:bc:ae:9a:93:62:18:48:57:a1:30:40:80:01: 52:06:f0:00:de:a2:41:74:51:3a:75:25:3d:cb:14: 27:7f:80:3a:2a:c7:9e:3a:a9:34:b4:89:d6:0d:18: 57:6e:fb:b7:dd:a0:cc:39:b1:fe:a2:35:06:88:ce: 66:12:71:ef:f5:a3:24:8f:4a:a1:81:70:13:73:74: e2:10:f5:aa:45:df:de:c7:fc:f7:33:07:a0:c5:7d: ba:c0:ba:19:fa:cb:d8:43:c4:63:aa:42:ce:3f:44: cd:c1:b7:38:d0:d5:75:39:7f:47:e5:d3:96:8a:54: a5:c1:af:aa:a6:41:b7:f4:c9:67:63:34:02:3a:43: 29:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B3:A2:12:FE:86:74:EA:EF:B5:22:42:77:F4:97:31:25:17:38:EB X509v3 Authority Key Identifier: keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:07:c3:65:7d:6a:40:9b:9d:4e:8a:8c:5f:81:0f:e4:24:44: af:03:fd:fb:15:c8:13:fb:d2:2b:3e:4a:aa:16:9c:5b:55:72: 3f:e4:52:71:96:f3:89:f1:3c:1c:6b:7c:df:60:f7:5a:51:ad: bc:d5:77:2e:21:74:d4:03:f6:28:5f:23:8e:9f:d0:9e:58:54: 70:ac:86:79:de:90:01:a5:2a:5a:76:db:7d:b1:a8:8f:7d:10: 36:c3:78:90:0c:02:24:97:3d:27:07:de:00:45:32:39:e7:fd: a7:98:ea:78:c3:c3:77:75:0e:e4:55:8f:4b:35:ee:55:fc:f9: b6:83:0e:29:33:b7:54:8a:34:8a:d1:db:17:66:0a:a3:db:32: 48:75:95:73:60:fe:5b:ef:6b:cb:a7:35:ae:08:0a:4a:d6:dd: ea:70:7b:bf:c9:b6:fc:3f:7f:fe:6c:37:fa:e6:92:b3:64:39: 82:84:46:16:ad:f7:36:16:e3:f3:69:e3:4d:94:8d:fd:e3:a1: 25:c5:01:6d:d3:c7:ee:b2:04:c3:72:96:b9:fb:6b:c4:f2:8b: 8d:b7:af:51:15:ce:73:16:9d:5a:19:8c:07:ea:19:96:a3:24: 9a:a5:1d:96:89:bf:2a:31:09:25:3f:c5:28:4c:6e:a2:fa:d5: cf:cc:50:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4q7GqwQDStDVFjiodgXBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MGU2MDc3OWYzY2Q0ZDAzZDVlNTA3ODQwZjVmYTJhMzFh NmFiOGQwHhcNMjYwMTI1MDIwMTQwWhcNMjYwMTI2MDIwMTQwWjAzMTEwLwYDVQQD Eyg0MWIzYTIxMmZlODY3NGVhZWZiNTIyNDI3N2Y0OTczMTI1MTczOGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY+cfbRjEabLWBqPaccYG02SNlJh edaik0rIlhWjhqFV61tTBot6viFKIPtF28HNaNFcWSzY4tojiV5in7EzipZqYkHK zjtrk+Z94f7rGx+QvsAmXWFxT+C/GFbxeR1CZ8gkMPyCTRZt83e9LGn2g3AycFCm 2x/lUryumpNiGEhXoTBAgAFSBvAA3qJBdFE6dSU9yxQnf4A6KseeOqk0tInWDRhX bvu33aDMObH+ojUGiM5mEnHv9aMkj0qhgXATc3TiEPWqRd/ex/z3MwegxX26wLoZ +svYQ8RjqkLOP0TNwbc40NV1OX9H5dOWilSlwa+qpkG39MlnYzQCOkMpSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGzohL+hnTq77UiQnf0lzElFzjrMB8GA1UdIwQY MBaAFGcOYHefPNTQPV5QeED1+ioxpquNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUt MzUwMDRhNjcxZWIzLzEvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUtMzUwMDRhNjcxZWIz LzEvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgfDZX1q QJudToqMX4EP5CRErwP9+xXIE/vSKz5KqhacW1VyP+RScZbzifE8HGt832D3WlGt vNV3LiF01AP2KF8jjp/QnlhUcKyGed6QAaUqWnbbfbGoj30QNsN4kAwCJJc9Jwfe AEUyOef9p5jqeMPDd3UO5FWPSzXuVfz5toMOKTO3VIo0itHbF2YKo9sySHWVc2D+ W+9ry6c1rggKStbd6nB7v8m2/D9//mw3+uaSs2Q5goRGFq33Nhbj82njTZSN/eOh JcUBbdPH7rIEw3KWuftrxPKLjbevURXOcxadWhmMB+oZlqMkmqUdlom/KjEJJT/F KExuovrVz8xQbA== -----END CERTIFICATE-----Generated at Sun Jan 25 06:14:35 2026 by rpki-client