This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft File: ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json) Hash identifier: M1cAAjGg4UOhCQy2Kwq1LI4gQx0NuSao12wkdHW8Nd8= Subject key identifier: 0A:DA:1B:FA:7A:CF:AF:7F:C2:3E:A2:93:01:DA:0A:09:DF:19:3E:8D Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 019BF619D056D8913B4439566336CA8558F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft Manifest number: 1856 Signing time: Sun 25 Jan 2026 17:00:45 +0000 Manifest this update: Sun 25 Jan 2026 17:00:45 +0000 Manifest next update: Mon 26 Jan 2026 17:00:45 +0000 Files and hashes: 1: 5fUbTKl8FSPc1kSYGwQAsVfb2vQ.roa (hash: PLRtthNs8hk5vDeIh9r/ACQzulJpBpXJunHHwis/BW4=) 2: JTjLA25EXJGse4vT8BX20j1O8LY.roa (hash: ojiSWq26fAHeHJAB/nBHHSFly0JE9P5HmIbkwqeejf4=) 3: WfYZ1TfImT3yRIrYlNuuVCM96nE.roa (hash: 4hQnLNa6AvcfooEXSYRpCYSRQGf1HFK3GJPOn5OeTYg=) 4: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: /rz5dgZy+ZcPUAclR0Nz0g7WaD0FkGN7PdAbO982P9g=) 5: oTNGV0Y7SaXlCklNzwFHJ1qEeUI.roa (hash: 1MTRBJjbkgRiCWVR5beZsUo8EaPKlW5X/iPni1dYgA8=) 6: orffpOuO_jX_WtUh2KMEtztj9-I.roa (hash: UZ8df/Kl2t9w2hO2zSNoEL0W2oHlORI4eoDSMqd89Ag=) 7: tOjC-880lUvIDXcMv4Td0baNxyA.roa (hash: 9ecFS71NaP3AlhNnMbdDSrsMVob6HFpLwU4ec3vZFPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:d0:56:d8:91:3b:44:39:56:63:36:ca:85:58:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Jan 25 17:00:45 2026 GMT Not After : Jan 26 17:00:45 2026 GMT Subject: CN=0ada1bfa7acfaf7fc23ea29301da0a09df193e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:34:d9:9c:f7:07:d0:67:6d:d8:af:71:13:62: 83:69:32:2a:1f:e8:8b:90:43:c0:0d:16:e7:7b:f3: 24:5f:85:13:47:db:be:38:19:af:60:79:e5:25:c9: b7:be:a5:8b:f7:cf:f3:8d:d0:50:69:6d:01:d8:07: 99:65:21:ed:be:c1:f0:35:17:93:ce:8c:ab:5e:bf: bc:32:81:8d:9e:85:50:70:ca:fb:66:38:65:dc:bc: 9d:ba:23:3e:a7:15:55:cc:84:2f:d0:a8:32:9c:6f: 1f:7a:41:94:53:2d:50:b9:f3:8f:23:78:76:19:e4: 13:01:15:99:47:78:32:83:37:1a:ce:74:2a:1b:8f: 1c:17:0c:0f:60:63:da:94:7d:d6:12:36:8d:d7:46: 66:65:3f:43:df:eb:4c:3b:3a:68:5c:ec:d4:35:f9: b5:01:d4:65:d0:09:12:eb:02:f9:c4:14:21:e1:4a: 60:e7:1d:6c:05:e0:1a:a2:3d:55:b8:d6:89:ca:27: 57:0e:a3:cf:85:f3:7c:f8:75:87:95:a6:67:a5:7d: d2:fd:32:61:f3:33:11:ae:39:04:d3:f2:fa:ef:2a: fb:93:f4:47:05:3b:71:ab:b3:1b:ab:2b:96:4f:c5: e0:4e:4f:be:0a:8d:e1:b9:c5:c7:d4:30:3d:cb:06: f8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DA:1B:FA:7A:CF:AF:7F:C2:3E:A2:93:01:DA:0A:09:DF:19:3E:8D X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:61:b0:21:a7:36:35:5a:29:3b:5c:26:c9:09:b7:89:5a:a1: bb:cd:98:5c:a3:fa:31:91:fe:5d:63:7f:7d:38:5f:11:a5:c0: 83:df:89:ea:86:f6:f7:77:38:0c:d6:9b:6f:ff:10:96:47:ff: 44:68:04:6f:b6:c5:e3:e4:7a:a7:28:b8:96:e7:ca:c0:ed:9b: d0:6d:70:3a:7d:e9:fd:85:c7:08:aa:7a:a3:2f:54:80:3c:72: e4:1b:f8:90:9c:f6:58:34:62:20:9a:91:5b:81:8f:f8:1d:95: 4c:c6:ae:4f:af:ec:92:3a:fa:48:9f:29:25:8b:69:29:51:67: 6b:51:fa:ad:18:91:c8:2c:c6:45:ea:de:e9:bd:fd:e6:55:c3: b6:ce:50:6d:0b:44:ed:bc:02:89:78:b5:47:9b:f8:e7:67:0a: e6:7f:4c:76:32:ff:35:37:d9:e6:2c:e4:76:96:85:ab:a4:a0: 57:20:d4:4c:05:bf:fc:58:53:a8:1d:f3:3c:a2:39:4c:a3:a4: 26:48:88:73:0e:9f:60:69:c9:8a:fd:06:ac:70:e9:61:f1:e0: 56:3e:5c:b0:d2:df:e6:7e:fb:26:3c:d5:e3:54:d8:a3:bf:cf: bb:0d:10:37:da:5a:b3:4e:aa:d3:8f:c3:7e:14:c3:55:67:e0: cb:da:55:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GdBW2JE7RDlWYzbKhVjzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjYwMTI1MTcwMDQ1WhcNMjYwMTI2MTcwMDQ1WjAzMTEwLwYDVQQD EygwYWRhMWJmYTdhY2ZhZjdmYzIzZWEyOTMwMWRhMGEwOWRmMTkzZThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zTZnPcH0Gdt2K9xE2KDaTIqH+iL kEPADRbne/MkX4UTR9u+OBmvYHnlJcm3vqWL98/zjdBQaW0B2AeZZSHtvsHwNReT zoyrXr+8MoGNnoVQcMr7Zjhl3LyduiM+pxVVzIQv0KgynG8fekGUUy1QufOPI3h2 GeQTARWZR3gygzcaznQqG48cFwwPYGPalH3WEjaN10ZmZT9D3+tMOzpoXOzUNfm1 AdRl0AkS6wL5xBQh4Upg5x1sBeAaoj1VuNaJyidXDqPPhfN8+HWHlaZnpX3S/TJh 8zMRrjkE0/L67yr7k/RHBTtxq7MbqyuWT8XgTk++Co3hucXH1DA9ywb4awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAraG/p6z69/wj6ikwHaCgnfGT6NMB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3WGwIac2 NVopO1wmyQm3iVqhu82YXKP6MZH+XWN/fThfEaXAg9+J6ob293c4DNabb/8Qlkf/ RGgEb7bF4+R6pyi4lufKwO2b0G1wOn3p/YXHCKp6oy9UgDxy5Bv4kJz2WDRiIJqR W4GP+B2VTMauT6/skjr6SJ8pJYtpKVFna1H6rRiRyCzGRere6b395lXDts5QbQtE 7bwCiXi1R5v452cK5n9MdjL/NTfZ5izkdpaFq6SgVyDUTAW//FhTqB3zPKI5TKOk JkiIcw6fYGnJiv0GrHDpYfHgVj5csNLf5n77JjzV41TYo7/Puw0QN9pas06q04/D fhTDVWfgy9pVKQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:32 2026 by rpki-client