This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json) Hash identifier: ynELFf2a1de1JKhgZhLAMWoHcjBAg2+Mg/Y7/wsjmOg= Subject key identifier: A9:A6:61:58:07:16:DB:7E:E5:5F:AD:E4:72:2C:1F:A1:C4:C9:D1:8F Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce Certificate serial: 019BF72CAAEB17B46615F37D6636A7DCF5A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft Manifest number: 177A Signing time: Sun 25 Jan 2026 22:00:58 +0000 Manifest this update: Sun 25 Jan 2026 22:00:58 +0000 Manifest next update: Mon 26 Jan 2026 22:00:58 +0000 Files and hashes: 1: f8pXdTunsFienw12OWOwkjd9_Sg.roa (hash: D84B6IFhxTwUljKKeuMD7kN/I53xCeCr1djjSkG38Ek=) 2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: WWzT0VM1Tk5BL4AIIPePkc/pyuqD4TsBB/zDUcKyGTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:aa:eb:17:b4:66:15:f3:7d:66:36:a7:dc:f5:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce Validity Not Before: Jan 25 22:00:58 2026 GMT Not After : Jan 26 22:00:58 2026 GMT Subject: CN=a9a661580716db7ee55fade4722c1fa1c4c9d18f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:55:d0:c0:23:8d:88:59:35:75:29:bb:15:c6: cf:e9:40:4d:3e:3d:c5:35:c5:85:e1:2b:fa:fa:62: 4c:8e:5d:47:00:b0:9e:d8:5f:d2:f6:42:44:06:a6: 45:f9:a9:20:fe:35:ae:4e:2b:bf:56:e8:8b:a9:18: d6:d5:11:c4:30:17:ce:19:d8:70:49:f8:c5:7e:f9: 98:32:82:3a:a9:4b:36:d1:8d:ad:2d:9b:9f:b8:72: 4f:e4:f8:a6:58:a8:82:a0:be:3d:32:6f:40:cc:5f: e0:35:42:65:97:0b:27:27:62:ce:71:cc:d5:c2:f4: 03:ef:08:59:b0:3a:60:86:9d:1e:6f:c2:53:65:c1: cc:0b:b5:95:68:a3:12:12:9b:5c:8a:27:6d:90:98: 86:95:05:1f:16:e6:ad:95:a8:cd:bf:03:fb:0d:83: a0:49:92:5a:01:bd:6e:42:c9:3c:d2:58:94:f7:16: e4:36:e2:1b:d6:28:63:42:c5:8c:91:7e:62:e1:3d: c0:82:41:b6:4b:25:4b:b2:12:e7:70:80:2a:d7:fc: 82:b0:84:ba:87:a2:59:fc:ff:93:3b:81:58:5b:49: d4:a6:75:b2:ef:f9:32:97:b1:03:d2:de:cc:7b:6c: 5c:de:a8:1c:af:4e:3e:01:36:24:0d:50:54:f8:48: 7f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A6:61:58:07:16:DB:7E:E5:5F:AD:E4:72:2C:1F:A1:C4:C9:D1:8F X509v3 Authority Key Identifier: keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:73:d7:c3:58:15:e7:19:b5:e0:d0:ad:cf:da:d7:cb:a2:31: 6c:da:c3:79:9e:c0:be:dc:81:fb:8a:1e:31:85:d5:60:01:87: ef:21:1c:0f:f4:0f:e7:99:15:c5:b3:06:38:7d:a2:24:76:fb: 5b:3d:5c:29:29:6e:8d:3a:38:8a:af:2e:70:d8:9c:5b:eb:b4: 44:37:62:cd:81:4f:2f:ab:e8:69:5c:a2:c6:5b:ce:70:de:7b: ad:73:74:d0:9c:a3:b7:67:20:10:b8:c3:be:85:e8:42:71:43: 38:35:75:c8:52:62:f1:2e:c2:14:b3:d2:43:39:d0:e2:e9:ab: 2f:c3:38:9e:e6:48:5c:41:5c:3b:c0:68:a4:d5:be:cc:21:2a: d2:fa:96:07:87:f8:fb:8e:1b:78:77:ae:9b:94:89:e4:76:3e: 61:e1:8d:aa:45:ef:2d:f0:f5:a1:84:8e:36:4c:d4:c0:f4:4a: 87:f5:c6:4a:28:a5:a3:f5:17:ee:0c:89:33:88:2c:ac:00:39: 16:0d:03:79:be:24:f2:d7:03:56:25:5a:40:42:ef:16:73:13: 71:78:0f:8b:80:c0:32:82:d8:1d:f5:3f:1e:67:89:a0:71:34: b9:4a:ea:2c:13:b5:cb:a5:7e:dc:e9:39:5f:94:35:14:d5:20: 7f:83:ae:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LKrrF7RmFfN9Zjan3PWhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmODk3NTc0NmNiZjFmZjc1ZGRlYzZjZGI4MGFjYzg1MjE4 MTg0Y2UwHhcNMjYwMTI1MjIwMDU4WhcNMjYwMTI2MjIwMDU4WjAzMTEwLwYDVQQD EyhhOWE2NjE1ODA3MTZkYjdlZTU1ZmFkZTQ3MjJjMWZhMWM0YzlkMThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFXQwCONiFk1dSm7FcbP6UBNPj3F NcWF4Sv6+mJMjl1HALCe2F/S9kJEBqZF+akg/jWuTiu/VuiLqRjW1RHEMBfOGdhw SfjFfvmYMoI6qUs20Y2tLZufuHJP5PimWKiCoL49Mm9AzF/gNUJllwsnJ2LOcczV wvQD7whZsDpghp0eb8JTZcHMC7WVaKMSEptciidtkJiGlQUfFuatlajNvwP7DYOg SZJaAb1uQsk80liU9xbkNuIb1ihjQsWMkX5i4T3AgkG2SyVLshLncIAq1/yCsIS6 h6JZ/P+TO4FYW0nUpnWy7/kyl7ED0t7Me2xc3qgcr04+ATYkDVBU+Eh/LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmmYVgHFtt+5V+t5HIsH6HEydGPMB8GA1UdIwQY MBaAFM+JdXRsvx/3Xd7GzbgKzIUhgYTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hMWNkOWMtYzMxZS00YWJmLWIwODkt OWU3OTJiNmYyMzVkLzEvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hMWNkOWMtYzMxZS00YWJmLWIwODktOWU3OTJiNmYyMzVk LzEvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3PXw1gV 5xm14NCtz9rXy6IxbNrDeZ7AvtyB+4oeMYXVYAGH7yEcD/QP55kVxbMGOH2iJHb7 Wz1cKSlujTo4iq8ucNicW+u0RDdizYFPL6voaVyixlvOcN57rXN00Jyjt2cgELjD voXoQnFDODV1yFJi8S7CFLPSQznQ4umrL8M4nuZIXEFcO8BopNW+zCEq0vqWB4f4 +44beHeum5SJ5HY+YeGNqkXvLfD1oYSONkzUwPRKh/XGSiilo/UX7gyJM4gsrAA5 Fg0Deb4k8tcDViVaQELvFnMTcXgPi4DAMoLYHfU/HmeJoHE0uUrqLBO1y6V+3Ok5 X5Q1FNUgf4OuZA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:39 2026 by rpki-client