This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft File: ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft (raw, json) Hash identifier: JT6XiCNFGhHyW6N32+yFoN3HS55Ahxk0kOx6BnCQE5k= Subject key identifier: E2:6F:45:F5:D6:67:87:A1:52:62:9B:82:F6:62:11:E1:CC:60:1F:E7 Authority key identifier: 66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A Certificate issuer: /CN=66a1d1a017802e5c57da5978544fc537403da73a Certificate serial: 019BF72C8E03591DCDF674CAB0BEE3A1D792 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft Manifest number: 0B01 Signing time: Sun 25 Jan 2026 22:00:50 +0000 Manifest this update: Sun 25 Jan 2026 22:00:50 +0000 Manifest next update: Mon 26 Jan 2026 22:00:50 +0000 Files and hashes: 1: 3YnZtmegxXoZvb9K7_HalTViL0w.roa (hash: B1b4mNLvcXEYUbcOc3EYX+Xry/YHoo7ZiUdGbEg4AFc=) 2: ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl (hash: Yyhv2KmSpzTCr9JFwYIXkg+FqZ81ESvxYC7wseoQpGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:8e:03:59:1d:cd:f6:74:ca:b0:be:e3:a1:d7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66a1d1a017802e5c57da5978544fc537403da73a Validity Not Before: Jan 25 22:00:50 2026 GMT Not After : Jan 26 22:00:50 2026 GMT Subject: CN=e26f45f5d66787a152629b82f66211e1cc601fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:32:4a:55:c7:a5:e1:fb:69:96:bf:fd:81:c4: 7a:75:47:41:11:e3:e1:45:b4:9f:38:21:a1:b8:50: 01:28:0d:63:f0:78:02:48:d6:09:ae:cf:20:06:09: 89:e6:1f:23:74:67:c6:d3:c2:06:a9:4e:a4:67:3e: e2:ea:68:59:99:c6:f6:3a:a6:6a:e5:fc:a1:03:9a: 7c:80:c3:29:a9:39:5e:26:8f:87:73:60:eb:6f:24: 59:95:8e:16:ff:cb:68:1b:6d:b1:2e:ac:e2:35:29: eb:e4:1e:cc:4d:ff:6f:87:a8:d7:41:f3:fc:c5:a3: 52:01:6a:07:16:2f:a2:23:91:46:91:d3:43:24:bb: 48:fe:3a:30:7c:7a:a9:ed:6a:e5:46:1a:e5:06:0e: 78:ce:7b:9c:f8:d4:86:b5:27:f6:7d:0f:f2:21:59: 32:8c:bd:18:54:4a:7b:5f:e5:eb:2d:31:80:a1:9d: ad:a7:0e:f1:27:b4:ac:85:ca:01:82:24:dd:44:be: 63:fb:af:ff:91:76:52:7d:28:0e:a3:a7:c1:cb:2d: 6f:33:cd:83:d2:6e:02:bc:79:40:c0:ec:52:ae:1f: 29:8d:45:1b:67:aa:08:ba:bd:da:6d:52:1b:9c:9a: a8:87:56:fb:59:b6:28:01:39:fb:9e:c9:01:08:52: da:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6F:45:F5:D6:67:87:A1:52:62:9B:82:F6:62:11:E1:CC:60:1F:E7 X509v3 Authority Key Identifier: keyid:66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:45:13:5b:bf:2c:b7:41:20:d7:dc:a5:3f:3f:ef:75:92:2f: 92:5e:2b:41:8b:39:ee:01:da:e2:05:33:ea:df:09:d8:8d:18: dc:8b:ba:98:1d:88:a9:37:2b:c9:a0:16:1a:71:31:a0:46:b9: e9:a3:f9:39:cd:c0:7a:32:13:ea:55:c6:61:bf:95:17:66:27: b5:ed:6c:e0:99:b6:76:3f:7d:0e:ef:66:b5:30:00:f0:fc:23: 9a:ff:89:81:fb:ba:05:36:23:29:5e:42:c5:3b:b6:82:83:77: c9:8f:8a:79:f5:4f:31:d9:18:68:da:a8:82:fb:9e:2e:8e:50: d8:ca:ff:09:c8:3e:7b:bd:5a:29:12:4b:72:25:f9:56:45:cc: 2a:af:9c:d7:75:a0:c6:0c:6a:af:11:4f:6e:31:22:54:14:2f: 53:6b:3c:a5:17:60:eb:01:1c:42:22:75:f0:44:da:7c:ca:ea: ad:f3:92:57:60:62:02:ce:89:1c:ec:fc:a8:7d:b5:ef:23:6e: fa:96:21:09:46:38:29:d3:c3:48:6d:05:dd:c1:f7:11:a3:1b: 98:87:34:38:3c:62:1b:5b:f7:4f:c6:6b:d3:5d:c5:b5:fe:7d: 06:3d:09:7e:33:e5:a7:a7:54:33:d3:0e:49:85:e4:10:82:81: 39:6f:65:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LI4DWR3N9nTKsL7jodeSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YTFkMWEwMTc4MDJlNWM1N2RhNTk3ODU0NGZjNTM3NDAz ZGE3M2EwHhcNMjYwMTI1MjIwMDUwWhcNMjYwMTI2MjIwMDUwWjAzMTEwLwYDVQQD EyhlMjZmNDVmNWQ2Njc4N2ExNTI2MjliODJmNjYyMTFlMWNjNjAxZmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTJKVcel4ftplr/9gcR6dUdBEePh RbSfOCGhuFABKA1j8HgCSNYJrs8gBgmJ5h8jdGfG08IGqU6kZz7i6mhZmcb2OqZq 5fyhA5p8gMMpqTleJo+Hc2DrbyRZlY4W/8toG22xLqziNSnr5B7MTf9vh6jXQfP8 xaNSAWoHFi+iI5FGkdNDJLtI/jowfHqp7WrlRhrlBg54znuc+NSGtSf2fQ/yIVky jL0YVEp7X+XrLTGAoZ2tpw7xJ7SshcoBgiTdRL5j+6//kXZSfSgOo6fByy1vM82D 0m4CvHlAwOxSrh8pjUUbZ6oIur3abVIbnJqoh1b7WbYoATn7nskBCFLa7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJvRfXWZ4ehUmKbgvZiEeHMYB/nMB8GA1UdIwQY MBaAFGah0aAXgC5cV9pZeFRPxTdAPac6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnFIUm9CZUFMbHhYMmxsNFZFX0ZOMEE5cHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85MTU0OGItYmFiNS00NTRjLWI2MGIt MTlmMmExZDE2MDMzLzEvWnFIUm9CZUFMbHhYMmxsNFZFX0ZOMEE5cHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85MTU0OGItYmFiNS00NTRjLWI2MGItMTlmMmExZDE2MDMz LzEvWnFIUm9CZUFMbHhYMmxsNFZFX0ZOMEE5cHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu0UTW78s t0Eg19ylPz/vdZIvkl4rQYs57gHa4gUz6t8J2I0Y3Iu6mB2IqTcryaAWGnExoEa5 6aP5Oc3AejIT6lXGYb+VF2Ynte1s4Jm2dj99Du9mtTAA8Pwjmv+Jgfu6BTYjKV5C xTu2goN3yY+KefVPMdkYaNqogvueLo5Q2Mr/Ccg+e71aKRJLciX5VkXMKq+c13Wg xgxqrxFPbjEiVBQvU2s8pRdg6wEcQiJ18ETafMrqrfOSV2BiAs6JHOz8qH217yNu +pYhCUY4KdPDSG0F3cH3EaMbmIc0ODxiG1v3T8Zr013Ftf59Bj0JfjPlp6dUM9MO SYXkEIKBOW9lkw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:55 2026 by rpki-client