This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json) Hash identifier: ug30tEmr1dkkqMnSqJWyiXMTBqrxtKMUiCY8qkaytWo= Subject key identifier: A4:B9:F0:36:53:09:C6:24:0A:BB:37:AD:BD:C5:68:10:1A:B5:AF:69 Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26 Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326 Certificate serial: 019BF61A0DE00FE0A08A64626EDE9479066B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft Manifest number: 032A Signing time: Sun 25 Jan 2026 17:01:01 +0000 Manifest this update: Sun 25 Jan 2026 17:01:01 +0000 Manifest next update: Mon 26 Jan 2026 17:01:01 +0000 Files and hashes: 1: KyuLPj5o4j_n8r1tPjoVcUGqn_c.roa (hash: 6rz3nPgtR7nYzXOgSBXCSqdxgUf8eCA4QNV+oiGauy0=) 2: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: 82tz6njRcVpiMb+w8gIk5qgjlNPDGzsoqfzB68go0B4=) 3: xYG26TB2RrgqHuMvZiHsPq1NDVM.roa (hash: W2+WDoIzPRMoYogzmzQsW/rEEBQkgPMptZQ4oMSwz/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:0d:e0:0f:e0:a0:8a:64:62:6e:de:94:79:06:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326 Validity Not Before: Jan 25 17:01:01 2026 GMT Not After : Jan 26 17:01:01 2026 GMT Subject: CN=a4b9f0365309c6240abb37adbdc568101ab5af69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0e:7e:9c:c8:fb:d2:0a:c3:22:53:fa:d3:87: c7:a5:15:0e:be:bc:c0:3d:13:d6:73:3e:eb:86:75: d2:46:0e:9d:74:e9:99:e8:25:0a:7a:9f:21:cb:33: 86:64:bd:37:a8:de:15:12:32:49:cf:15:db:26:fe: f9:a6:65:e5:06:36:ce:33:f6:ff:27:66:3d:9f:24: cb:66:6d:a2:d6:ae:94:30:dd:d3:6a:3b:06:e8:49: 35:26:fd:41:21:b8:34:5a:cc:2a:7d:01:df:d2:7b: 89:8a:29:fb:80:c3:ff:7f:04:54:44:f6:35:d2:b7: c5:a5:a1:1c:0b:97:2d:52:ec:9b:66:d6:6b:0b:55: 03:c1:b5:9d:f3:e1:9f:c4:e0:63:af:3b:63:fd:c8: 78:3e:7c:98:df:ea:86:ab:b8:5e:97:ff:9d:02:2b: 8e:63:f3:30:32:f7:61:b7:89:54:6b:8e:e9:94:67: 9a:38:1b:79:3e:9a:6c:b7:ff:15:9d:3f:f5:55:f6: fa:b9:b3:2c:77:c6:87:a7:ce:b9:9b:62:70:86:b3: 11:30:61:d9:d2:62:f3:cb:89:d8:1c:7e:5d:3b:53: e7:f2:da:95:b9:05:a8:d1:60:9d:86:d6:1a:9b:c0: 0c:7b:81:c7:c7:55:b9:60:19:1a:83:12:21:bb:6b: 6f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B9:F0:36:53:09:C6:24:0A:BB:37:AD:BD:C5:68:10:1A:B5:AF:69 X509v3 Authority Key Identifier: keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:dc:c8:79:50:a3:b3:c8:67:0e:57:1e:d3:e2:8f:84:41:09: 4b:47:47:f8:2b:db:56:67:7a:e2:24:86:a8:c9:c5:f0:03:d6: 44:75:b2:90:8d:b9:f0:a4:8f:ab:10:d3:a8:c6:e9:8a:b1:e1: e5:0f:26:2c:3f:fc:05:de:e0:56:3a:0c:28:db:5e:8f:04:97: 7c:76:37:4b:fa:6c:67:c9:40:47:e3:4b:19:b0:91:9d:37:0c: 1e:33:7f:68:f6:10:73:79:74:35:b2:4f:ae:78:51:86:97:b7: c3:60:bd:63:4b:60:d4:fd:45:68:e3:42:e0:1a:af:04:ca:ae: 23:f0:bb:dc:55:f8:96:d3:08:e0:06:4c:80:bf:c3:fc:59:cf: 9d:d1:8a:af:83:62:0a:95:a2:91:b7:32:61:0c:5e:ab:4d:0a: 2f:76:e0:c2:14:f0:8f:54:2f:34:93:b2:14:46:0a:48:4d:52: 33:21:58:0e:c7:c3:10:68:b6:dc:79:44:1f:3c:10:0d:16:22: 90:20:77:4e:9f:2b:23:00:f8:60:16:dc:f8:5d:d8:05:86:d8: 53:be:c8:69:fc:0d:8f:e1:59:37:60:db:9e:a6:d6:7a:aa:f6: 60:5b:13:66:82:7c:29:cd:28:9b:9f:a0:46:90:9b:d0:d4:7f: 14:81:f5:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gg3gD+CgimRibt6UeQZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NTg5ZDVmZTRiYjFjNWJkYjgzYTM1M2MyNzM3ZGM2MDQz NDEzMjYwHhcNMjYwMTI1MTcwMTAxWhcNMjYwMTI2MTcwMTAxWjAzMTEwLwYDVQQD EyhhNGI5ZjAzNjUzMDljNjI0MGFiYjM3YWRiZGM1NjgxMDFhYjVhZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA5+nMj70grDIlP604fHpRUOvrzA PRPWcz7rhnXSRg6ddOmZ6CUKep8hyzOGZL03qN4VEjJJzxXbJv75pmXlBjbOM/b/ J2Y9nyTLZm2i1q6UMN3TajsG6Ek1Jv1BIbg0WswqfQHf0nuJiin7gMP/fwRURPY1 0rfFpaEcC5ctUuybZtZrC1UDwbWd8+GfxOBjrztj/ch4PnyY3+qGq7hel/+dAiuO Y/MwMvdht4lUa47plGeaOBt5Pppst/8VnT/1Vfb6ubMsd8aHp865m2JwhrMRMGHZ 0mLzy4nYHH5dO1Pn8tqVuQWo0WCdhtYam8AMe4HHx1W5YBkagxIhu2tvvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKS58DZTCcYkCrs3rb3FaBAata9pMB8GA1UdIwQY MBaAFGdYnV/kuxxb24OjU8JzfcYENBMmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWIt ZjU4Y2I2NDgwYTdlLzEvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWItZjU4Y2I2NDgwYTdl LzEvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9zIeVCj s8hnDlce0+KPhEEJS0dH+CvbVmd64iSGqMnF8APWRHWykI258KSPqxDTqMbpirHh 5Q8mLD/8Bd7gVjoMKNtejwSXfHY3S/psZ8lAR+NLGbCRnTcMHjN/aPYQc3l0NbJP rnhRhpe3w2C9Y0tg1P1FaONC4BqvBMquI/C73FX4ltMI4AZMgL/D/FnPndGKr4Ni CpWikbcyYQxeq00KL3bgwhTwj1QvNJOyFEYKSE1SMyFYDsfDEGi23HlEHzwQDRYi kCB3Tp8rIwD4YBbc+F3YBYbYU77IafwNj+FZN2DbnqbWeqr2YFsTZoJ8Kc0om5+g RpCb0NR/FIH1BA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:21:55 2026 by rpki-client