This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft File: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json) Hash identifier: 8YhK0/D800lqxXjD1NcTQRbWIoQQDz4ec3Rz8P3MrEU= Subject key identifier: B4:37:1C:CF:A7:72:60:E2:1A:CF:74:16:E2:E6:EE:6E:71:A9:0C:99 Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9 Certificate issuer: /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9 Certificate serial: 019BF763D9178E501337F269525186EF5AEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft Manifest number: 177D Signing time: Sun 25 Jan 2026 23:01:14 +0000 Manifest this update: Sun 25 Jan 2026 23:01:14 +0000 Manifest next update: Mon 26 Jan 2026 23:01:14 +0000 Files and hashes: 1: S0f6ldR7ma4WBAE-dRr9WopLDdU.roa (hash: H3wJKu7aKl/QyocGnlCHOBSPgMe8CiKy49N+Fdk99WU=) 2: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: FPdLfSIdvhrkiUWaez7XQKp/Opr3TWGtJgfI63xErK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:d9:17:8e:50:13:37:f2:69:52:51:86:ef:5a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9 Validity Not Before: Jan 25 23:01:14 2026 GMT Not After : Jan 26 23:01:14 2026 GMT Subject: CN=b4371ccfa77260e21acf7416e2e6ee6e71a90c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:1f:5a:9c:ba:2d:25:38:72:a3:30:0b:7b: 39:ca:a9:52:7c:49:8f:28:89:02:70:75:4f:48:76: ee:78:dc:3a:4e:51:db:18:d4:7c:cb:e6:2c:39:54: 90:b6:e2:20:7b:6c:e8:83:00:f8:17:a7:45:3e:9b: 1d:e6:b8:dc:3d:b6:eb:85:56:50:31:61:88:ce:be: 25:09:40:77:06:50:8e:4d:a9:ba:09:ca:89:41:7f: 28:1a:a8:7a:cb:e4:af:ba:88:9f:f0:fd:5a:d1:c0: 5f:c6:0f:08:74:5e:84:6f:12:c4:76:bb:12:bd:75: b4:dd:63:15:c8:8a:a4:35:66:fc:ac:05:36:97:1e: b7:63:55:23:ba:6b:82:44:76:b9:73:17:1a:d5:51: 5d:df:1f:6f:8d:e2:88:30:24:ff:91:d3:a9:37:11: b1:00:9c:25:c8:23:97:ad:c7:e9:ee:fe:11:f3:e6: b9:44:03:49:52:46:7d:4d:4f:8e:80:52:76:44:19: ad:79:cf:bb:1c:c8:5e:d8:06:66:1f:73:5e:85:27: eb:71:d8:68:40:7a:a6:2c:03:6e:36:47:ea:35:d5: 6e:34:5d:cb:59:61:f6:41:14:e9:dc:1d:21:7b:2e: 7d:0b:e3:2c:5d:5c:ca:b0:86:83:ec:5f:05:9c:31: a9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:37:1C:CF:A7:72:60:E2:1A:CF:74:16:E2:E6:EE:6E:71:A9:0C:99 X509v3 Authority Key Identifier: keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:25:a0:54:aa:f1:14:76:f3:73:65:fc:c9:47:e2:31:84:14: 9e:ac:07:2b:98:bc:44:be:f6:77:8d:4f:b6:6b:8e:e3:e3:27: 2f:75:16:8f:cb:7f:0e:c1:93:54:96:28:4b:50:57:25:e6:8d: e4:bc:c9:58:ed:3e:1f:4a:a2:57:14:b4:b3:3e:0c:b9:f3:4c: 8e:0c:bc:1d:b8:2d:ec:33:a6:b9:00:0c:60:34:e1:94:29:88: 5e:87:2a:ca:54:17:48:99:02:03:8e:26:27:4c:82:a3:a3:6d: a7:95:9f:76:f3:d2:62:39:8d:43:67:5c:9b:90:d5:ce:ad:a1: a7:a0:99:b0:38:20:49:54:1b:55:88:fc:44:8f:42:20:f7:3b: dc:59:b6:c0:48:71:b1:ab:e1:3b:c5:a4:29:b0:e6:38:a5:6e: f6:20:9f:89:6a:b7:12:de:63:3b:0d:d7:0c:ba:7c:9e:20:15: b7:1f:52:88:12:60:cd:bd:11:f1:50:cc:22:7a:d1:c8:28:8c: c6:e6:f4:13:1c:e3:6e:82:f8:f1:1e:e1:c2:c8:95:92:13:be: 4d:65:dc:70:f0:d6:f3:e1:4c:af:5b:98:e7:34:9a:66:07:20: e6:c7:20:43:8e:92:d8:1e:fa:ee:ca:1c:4b:df:41:48:6d:f9: 0c:d2:62:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y9kXjlATN/JpUlGG71rvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MTFhNTdkMmEwM2I3MDY1ZmE4YzE3YjMxMzczNWJkY2Rh MzkwZTkwHhcNMjYwMTI1MjMwMTE0WhcNMjYwMTI2MjMwMTE0WjAzMTEwLwYDVQQD EyhiNDM3MWNjZmE3NzI2MGUyMWFjZjc0MTZlMmU2ZWU2ZTcxYTkwYzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs58fWpy6LSU4cqMwC3s5yqlSfEmP KIkCcHVPSHbueNw6TlHbGNR8y+YsOVSQtuIge2zogwD4F6dFPpsd5rjcPbbrhVZQ MWGIzr4lCUB3BlCOTam6CcqJQX8oGqh6y+Svuoif8P1a0cBfxg8IdF6EbxLEdrsS vXW03WMVyIqkNWb8rAU2lx63Y1UjumuCRHa5cxca1VFd3x9vjeKIMCT/kdOpNxGx AJwlyCOXrcfp7v4R8+a5RANJUkZ9TU+OgFJ2RBmtec+7HMhe2AZmH3NehSfrcdho QHqmLANuNkfqNdVuNF3LWWH2QRTp3B0hey59C+MsXVzKsIaD7F8FnDGpBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQ3HM+ncmDiGs90FuLm7m5xqQyZMB8GA1UdIwQY MBaAFGYRpX0qA7cGX6jBezE3Nb3No5DpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lZGIyMDgtNmZlZC00NGU0LWIxYWIt ZGYwY2E0ZDQxOTU1LzEvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9lZGIyMDgtNmZlZC00NGU0LWIxYWItZGYwY2E0ZDQxOTU1 LzEvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSWgVKrx FHbzc2X8yUfiMYQUnqwHK5i8RL72d41PtmuO4+MnL3UWj8t/DsGTVJYoS1BXJeaN 5LzJWO0+H0qiVxS0sz4MufNMjgy8Hbgt7DOmuQAMYDThlCmIXocqylQXSJkCA44m J0yCo6Ntp5WfdvPSYjmNQ2dcm5DVzq2hp6CZsDggSVQbVYj8RI9CIPc73Fm2wEhx savhO8WkKbDmOKVu9iCfiWq3Et5jOw3XDLp8niAVtx9SiBJgzb0R8VDMInrRyCiM xub0ExzjboL48R7hwsiVkhO+TWXccPDW8+FMr1uY5zSaZgcg5scgQ46S2B767soc S99BSG35DNJitg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:50:45 2026 by rpki-client