This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft File: zbFQJ29VuuRVmI06E-WTQQdNzQo.mft (raw, json) Hash identifier: HRZyJaD64XYVjyFh2Wy5ahbNpeHWfEtqwPP69cs+FEE= Subject key identifier: 83:10:C4:B7:E1:C8:99:C1:4B:35:9F:14:F3:7F:91:BE:96:D1:5E:A5 Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A Certificate issuer: /CN=cdb150276f55bae455988d3a13e59341074dcd0a Certificate serial: 019BF76359E8C8E02CBF3C1E22F32B6E1D8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 23:00:41 +0000 Manifest this update: Sun 25 Jan 2026 23:00:41 +0000 Manifest next update: Mon 26 Jan 2026 23:00:41 +0000 Files and hashes: 1: lz_wShBEMScRLpNIlFJG1rBoiF4.roa (hash: d/v05QGqY1AL+DPGS5unWRu61oq5dQYWqSy/Y4KvwgA=) 2: zbFQJ29VuuRVmI06E-WTQQdNzQo.crl (hash: Z4NG5qiBshLdtm5dZPxTtj8eVUjoz/KgYbdjA7rwh3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:59:e8:c8:e0:2c:bf:3c:1e:22:f3:2b:6e:1d:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a Validity Not Before: Jan 25 23:00:41 2026 GMT Not After : Jan 26 23:00:41 2026 GMT Subject: CN=8310c4b7e1c899c14b359f14f37f91be96d15ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:94:36:ac:ff:22:3e:c5:b5:0b:37:e1:a1:9d: e0:fe:6b:f5:ed:40:de:19:91:52:1c:e2:1a:e0:32: 4b:74:44:90:8f:a6:b8:16:36:c0:5b:f4:5b:11:96: 01:74:17:7a:8d:82:19:0c:e7:b6:5f:43:af:d2:1a: 07:5d:9a:6b:4b:75:0c:14:fd:31:e7:27:8c:5a:6c: 3e:3d:aa:f6:85:9b:90:49:10:2e:fe:43:e2:e3:5f: 9f:17:fa:cc:ae:d7:e6:46:b0:70:9d:9d:db:b9:0d: ed:b6:01:70:dc:c4:77:02:b5:cb:e4:af:90:65:a2: b0:0d:1b:25:37:b0:d7:8b:7e:23:2f:96:c8:bb:06: ac:60:ae:31:0d:20:de:6d:f3:98:39:0d:40:cb:63: 0b:1f:cb:0a:c8:6d:15:f4:02:e8:05:7d:87:73:59: 3d:18:ba:e2:c7:06:f6:62:1f:fc:c9:d9:47:5a:6d: c1:1e:7c:41:c2:05:2d:72:6b:15:e9:10:3e:53:03: 7b:73:d8:90:8f:14:5c:53:d9:13:88:99:59:d5:38: d3:47:59:13:aa:ca:51:f5:65:1a:16:91:45:9d:55: e9:26:97:ac:2a:c9:3b:fb:77:7e:d3:94:c6:30:d7: 5f:76:a7:29:1d:d7:f0:11:fc:46:8a:c4:61:9d:9c: 59:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:10:C4:B7:E1:C8:99:C1:4B:35:9F:14:F3:7F:91:BE:96:D1:5E:A5 X509v3 Authority Key Identifier: keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:f2:a5:64:71:3e:73:42:a3:4b:9a:c9:a3:2b:c1:41:c9:eb: 4d:2f:c0:37:b0:e8:73:cc:3a:8a:21:88:8b:cf:09:24:f5:e0: a5:60:3b:37:5b:63:63:4a:81:d3:c6:c9:8b:41:64:a2:e6:46: 91:27:61:cb:cd:37:93:e9:66:b1:ab:7f:34:e5:a5:71:10:30: 07:9d:01:8f:07:00:d5:7c:4d:98:89:42:32:b8:54:aa:47:44: 28:ab:30:aa:23:28:38:9f:f8:8e:16:3a:34:fb:ef:9c:20:66: 35:ac:54:12:53:e9:cb:01:4f:52:2b:a4:50:ae:af:b8:59:b2: 8d:36:79:d2:7b:74:2d:25:38:59:ef:7b:8f:7b:d3:cd:a0:cd: 62:0e:c2:89:e3:b7:12:2e:89:76:40:5e:98:38:17:89:d9:b4: 80:b3:fe:52:7b:9a:e4:b5:7f:10:34:6d:06:90:e5:eb:c9:8e: 58:a3:1b:e5:d8:86:6b:52:90:7b:32:1e:99:60:e7:6e:0f:28: 8d:fe:89:ce:40:8f:f0:bb:61:0f:0b:5c:86:6f:24:45:e2:67: bc:00:81:30:7e:23:08:c2:b6:da:ff:1c:ae:15:69:41:75:d4: 9b:55:27:50:59:23:cb:ba:62:e9:59:46:4e:56:bc:dd:72:3a: ff:87:90:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y1noyOAsvzweIvMrbh2LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjE1MDI3NmY1NWJhZTQ1NTk4OGQzYTEzZTU5MzQxMDc0 ZGNkMGEwHhcNMjYwMTI1MjMwMDQxWhcNMjYwMTI2MjMwMDQxWjAzMTEwLwYDVQQD Eyg4MzEwYzRiN2UxYzg5OWMxNGIzNTlmMTRmMzdmOTFiZTk2ZDE1ZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJQ2rP8iPsW1CzfhoZ3g/mv17UDe GZFSHOIa4DJLdESQj6a4FjbAW/RbEZYBdBd6jYIZDOe2X0Ov0hoHXZprS3UMFP0x 5yeMWmw+Par2hZuQSRAu/kPi41+fF/rMrtfmRrBwnZ3buQ3ttgFw3MR3ArXL5K+Q ZaKwDRslN7DXi34jL5bIuwasYK4xDSDebfOYOQ1Ay2MLH8sKyG0V9ALoBX2Hc1k9 GLrixwb2Yh/8ydlHWm3BHnxBwgUtcmsV6RA+UwN7c9iQjxRcU9kTiJlZ1TjTR1kT qspR9WUaFpFFnVXpJpesKsk7+3d+05TGMNdfdqcpHdfwEfxGisRhnZxZoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMQxLfhyJnBSzWfFPN/kb6W0V6lMB8GA1UdIwQY MBaAFM2xUCdvVbrkVZiNOhPlk0EHTc0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJGUUoyOVZ1dVJWbUkwNkUtV1RRUWROelFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iZTYzMzctNjYyZS00YzNiLTgxMmEt MzQwN2ZjYTEyMjY3LzEvemJGUUoyOVZ1dVJWbUkwNkUtV1RRUWROelFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9iZTYzMzctNjYyZS00YzNiLTgxMmEtMzQwN2ZjYTEyMjY3 LzEvemJGUUoyOVZ1dVJWbUkwNkUtV1RRUWROelFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvKlZHE+ c0KjS5rJoyvBQcnrTS/AN7Doc8w6iiGIi88JJPXgpWA7N1tjY0qB08bJi0FkouZG kSdhy803k+lmsat/NOWlcRAwB50BjwcA1XxNmIlCMrhUqkdEKKswqiMoOJ/4jhY6 NPvvnCBmNaxUElPpywFPUiukUK6vuFmyjTZ50nt0LSU4We97j3vTzaDNYg7CieO3 Ei6JdkBemDgXidm0gLP+Unua5LV/EDRtBpDl68mOWKMb5diGa1KQezIemWDnbg8o jf6JzkCP8LthDwtchm8kReJnvACBMH4jCMK22v8crhVpQXXUm1UnUFkjy7pi6VlG Tla83XI6/4eQTg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:01 2026 by rpki-client