This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft File: zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft (raw, json) Hash identifier: w8EdhVkbs0UTf0ExvLsll3ID/G1iJf2A8u2cSrSPeyE= Subject key identifier: E7:A0:44:28:73:EC:DE:01:73:54:7A:32:C3:72:12:9F:23:71:11:0F Authority key identifier: CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4 Certificate issuer: /CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4 Certificate serial: 019BF5AC3238BC930A20CE227677AD3C6F1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft Manifest number: 01FB Signing time: Sun 25 Jan 2026 15:01:01 +0000 Manifest this update: Sun 25 Jan 2026 15:01:01 +0000 Manifest next update: Mon 26 Jan 2026 15:01:01 +0000 Files and hashes: 1: Ie8I0nuyFSIj0t4UszRvtP-IzKI.roa (hash: GgIIKDtcsrLVWYyQhd2aVmcWoVxW/Iu8qODTyb1TUu4=) 2: zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl (hash: YsXkQ7Jmx59iRZp0ge6HEMniRpcgu+BNjEJZNTXfaM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:32:38:bc:93:0a:20:ce:22:76:77:ad:3c:6f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4 Validity Not Before: Jan 25 15:01:01 2026 GMT Not After : Jan 26 15:01:01 2026 GMT Subject: CN=e7a0442873ecde0173547a32c372129f2371110f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b9:23:9f:96:5e:8e:ae:51:91:cc:3c:fe:fb: 3d:db:50:7f:7a:ce:a5:74:b4:13:a0:ed:97:54:40: 9e:f4:99:fb:ca:3e:34:e7:6d:bc:dc:79:db:64:8c: 1d:f9:12:59:79:27:36:b4:a0:49:55:c6:c5:e7:47: f3:a8:b1:af:34:a6:9a:c8:f2:fc:aa:c4:98:48:4d: 71:af:d5:2b:2d:7d:19:b2:07:61:d7:04:62:27:6c: ce:d0:ad:69:1e:8a:b1:2d:28:4c:11:2f:97:3a:d7: 53:38:2b:6a:fb:1a:23:48:35:8c:08:1d:6f:39:c3: b0:3e:8e:91:9e:39:70:82:d7:b1:95:9d:a6:ea:cc: 0f:81:46:5b:04:44:a2:33:50:5b:be:b5:6a:1c:1a: ec:29:e0:74:fa:97:0e:1d:d0:d6:70:da:c6:b3:5a: 41:a7:08:47:09:a9:71:c4:eb:47:f5:4a:7f:1e:4c: cb:3e:d5:ca:a4:ee:57:fe:98:a2:54:41:b5:e2:62: 4a:e6:e5:44:d1:a5:48:14:50:40:cc:1b:16:79:11: 80:d4:4e:5d:b1:17:0d:45:8b:d7:6b:67:9b:64:a3: 93:07:73:c5:01:12:6c:53:c9:d9:be:49:35:14:4a: b3:ee:6f:e2:ba:42:47:32:4c:56:a5:46:6b:11:6a: d5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A0:44:28:73:EC:DE:01:73:54:7A:32:C3:72:12:9F:23:71:11:0F X509v3 Authority Key Identifier: keyid:CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:23:ff:46:da:66:f4:a8:9e:23:98:e5:72:0b:f6:af:10:1b: 88:21:7f:45:c1:48:ba:61:20:d3:d6:ee:e9:5c:10:64:5a:45: 66:25:6a:82:b7:21:36:20:11:98:52:e6:46:2b:86:24:b7:57: b0:9d:8b:a6:ae:4d:c9:2c:09:bc:96:f7:a7:77:21:a9:5c:3c: 3c:b6:0b:73:8b:97:a9:cb:bb:cb:2f:e2:eb:a0:f5:69:19:7e: 82:51:52:7f:67:a2:5a:d8:78:52:c6:96:76:b5:b4:d2:e3:c5: bc:e2:44:a4:2b:8c:24:f9:46:3c:4a:f5:a4:fc:2d:56:ff:21: e0:40:d2:31:c7:fa:33:eb:57:04:28:36:75:51:69:35:1f:37: e1:71:e3:f7:1b:00:d2:1a:a0:4d:f9:46:d6:97:07:df:e9:7a: 65:b5:e5:8f:b1:23:86:71:6a:25:0e:cb:84:96:6d:4c:62:90: c2:51:bb:7d:cd:cc:2c:ec:39:44:99:02:f2:96:19:9e:18:c9: 46:58:a3:b3:ff:a0:fb:23:80:0e:6f:d1:8b:03:46:d5:0b:9b: 41:87:fd:8a:9d:4f:2c:0c:99:60:ed:46:21:cd:81:bd:70:f4: 55:54:71:c0:99:6a:ee:c7:3d:0f:f0:ee:33:bc:2f:29:4f:5e: b5:b9:b2:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rDI4vJMKIM4idnetPG8aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZjhlZmQzZTMxNjZlODFhYWNmMTU4MGUyZjBiOTRkYTI5 YjNkYjQwHhcNMjYwMTI1MTUwMTAxWhcNMjYwMTI2MTUwMTAxWjAzMTEwLwYDVQQD EyhlN2EwNDQyODczZWNkZTAxNzM1NDdhMzJjMzcyMTI5ZjIzNzExMTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLkjn5Zejq5Rkcw8/vs921B/es6l dLQToO2XVECe9Jn7yj4052283HnbZIwd+RJZeSc2tKBJVcbF50fzqLGvNKaayPL8 qsSYSE1xr9UrLX0Zsgdh1wRiJ2zO0K1pHoqxLShMES+XOtdTOCtq+xojSDWMCB1v OcOwPo6RnjlwgtexlZ2m6swPgUZbBESiM1BbvrVqHBrsKeB0+pcOHdDWcNrGs1pB pwhHCalxxOtH9Up/HkzLPtXKpO5X/piiVEG14mJK5uVE0aVIFFBAzBsWeRGA1E5d sRcNRYvXa2ebZKOTB3PFARJsU8nZvkk1FEqz7m/iukJHMkxWpUZrEWrV+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOegRChz7N4Bc1R6MsNyEp8jcREPMB8GA1UdIwQY MBaAFM3479PjFm6Bqs8VgOLwuU2imz20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZqdjAtTVdib0dxenhXQTR2QzVUYUtiUGJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84NmMxNzAtMjA2Ny00MGVlLTg5MjMt YTAzYWQ1Mjk5OTdjLzEvemZqdjAtTVdib0dxenhXQTR2QzVUYUtiUGJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS84NmMxNzAtMjA2Ny00MGVlLTg5MjMtYTAzYWQ1Mjk5OTdj LzEvemZqdjAtTVdib0dxenhXQTR2QzVUYUtiUGJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSP/Rtpm 9KieI5jlcgv2rxAbiCF/RcFIumEg09bu6VwQZFpFZiVqgrchNiARmFLmRiuGJLdX sJ2Lpq5NySwJvJb3p3chqVw8PLYLc4uXqcu7yy/i66D1aRl+glFSf2eiWth4UsaW drW00uPFvOJEpCuMJPlGPEr1pPwtVv8h4EDSMcf6M+tXBCg2dVFpNR834XHj9xsA 0hqgTflG1pcH3+l6ZbXlj7EjhnFqJQ7LhJZtTGKQwlG7fc3MLOw5RJkC8pYZnhjJ Rlijs/+g+yOADm/RiwNG1QubQYf9ip1PLAyZYO1GIc2BvXD0VVRxwJlq7sc9D/Du M7wvKU9etbmyjw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:54:06 2026 by rpki-client