This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft File: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft (raw, json) Hash identifier: DJOF8zhBBF9KdSsiSUtWa3lxNQpJ9fNcKTXbzgLfqcc= Subject key identifier: 74:76:3B:84:0A:E6:48:21:6B:BA:9A:BE:A1:CA:A1:0A:89:47:7C:CD Authority key identifier: 67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D Certificate issuer: /CN=675fbe4b1f00233ed767990071f04590c90c887d Certificate serial: 019BF687B522FA06260A43B67C3236AFC414 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft Manifest number: 1081 Signing time: Sun 25 Jan 2026 19:00:47 +0000 Manifest this update: Sun 25 Jan 2026 19:00:47 +0000 Manifest next update: Mon 26 Jan 2026 19:00:47 +0000 Files and hashes: 1: 1IAT8p5zJE7Cjb7zerrnkgwwgBo.roa (hash: JK2Pcklbnx9Qld5WIKxmuBJj4g+yCjwGVY5ntHTVBjs=) 2: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl (hash: Zf9qutrWzIZiLB7e8Oo3WRnUGvUjUqJpcXYwJlDJvPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:b5:22:fa:06:26:0a:43:b6:7c:32:36:af:c4:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=675fbe4b1f00233ed767990071f04590c90c887d Validity Not Before: Jan 25 19:00:47 2026 GMT Not After : Jan 26 19:00:47 2026 GMT Subject: CN=74763b840ae648216bba9abea1caa10a89477ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5e:36:3d:1e:11:06:a4:10:f0:7b:c9:0f:cb: c2:c3:89:77:ba:0d:34:93:5c:9d:80:e4:ea:b8:d5: 9e:23:e9:45:45:10:18:e7:85:97:2c:cc:de:12:08: 74:86:d3:6a:db:9f:9d:8b:15:10:c7:db:46:02:6d: 01:90:05:af:a3:c2:74:7d:b5:4a:8b:b1:29:51:90: 20:fe:c5:ad:3c:63:7c:db:9f:bf:e6:a7:01:1e:a2: e9:cc:d1:02:a2:a4:9c:c9:a0:9c:8f:e6:0e:52:7f: 4e:9f:8a:b3:48:0e:60:6c:83:0a:74:62:d7:50:47: cb:c8:51:ee:a2:50:f9:ba:2b:db:87:c3:68:f7:14: 0c:bb:55:7b:84:6d:d5:c7:7c:71:e8:30:f3:40:fd: b9:ff:67:92:ab:5b:01:b9:92:2c:af:a3:12:18:2b: 22:c4:fc:f8:2f:63:f9:75:af:7c:90:d3:dd:71:f3: 21:37:cf:29:17:14:26:7b:02:f0:b5:2d:c5:8a:3e: 82:d6:82:5a:e6:4e:d7:ca:20:08:60:9b:2b:68:30: c4:58:aa:c7:12:42:69:6e:06:d5:c7:8a:24:0a:d5: 78:2c:7e:9a:64:66:92:6c:4c:7d:9a:09:1d:6b:11: a2:39:ad:ce:5a:73:75:24:39:4b:a7:22:fa:d3:05: 75:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:76:3B:84:0A:E6:48:21:6B:BA:9A:BE:A1:CA:A1:0A:89:47:7C:CD X509v3 Authority Key Identifier: keyid:67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:11:8f:e8:8c:6d:71:45:53:ea:3c:d9:93:9e:f0:c9:8b:92: 47:6e:30:57:de:49:af:4a:0c:56:ff:37:a2:21:04:40:6b:fa: a2:57:87:ce:68:e0:d3:ec:a8:c7:c2:e2:c2:29:85:5f:bf:65: 7c:5c:db:29:9b:90:3f:3d:84:4e:58:ce:11:76:90:3b:0d:7e: 64:3a:74:8f:ea:f2:4b:92:3c:46:3a:db:b7:d8:63:7c:5b:5e: 32:9f:21:f6:01:5f:74:b8:e8:a1:06:16:1d:47:16:c9:b7:5b: 9f:5b:18:30:53:d8:d0:5c:b5:4e:fc:fb:98:eb:61:a6:f6:b6: c5:f9:60:9c:fb:e9:8b:26:c5:a0:7e:4c:de:1c:be:43:00:15: fb:55:1e:e6:5f:ec:7d:19:ec:f9:18:a7:23:0b:d3:17:e4:e9: ea:88:e7:02:ab:06:de:ce:90:af:9b:3d:ef:0b:13:a2:a9:62: 48:0d:5e:5c:21:16:b1:04:de:90:65:df:25:15:c8:0a:e5:d8: 61:d4:18:5f:d6:8b:c5:9d:f1:f8:aa:60:1f:04:f1:ef:d5:a6: ac:67:28:1f:a9:ec:6f:b2:14:6e:a9:0a:5c:0a:6f:ea:78:af: df:86:89:7e:d5:8b:4f:bf:f1:b5:2d:f5:6b:e3:7e:a6:16:cc: f4:99:31:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h7Ui+gYmCkO2fDI2r8QUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NWZiZTRiMWYwMDIzM2VkNzY3OTkwMDcxZjA0NTkwYzkw Yzg4N2QwHhcNMjYwMTI1MTkwMDQ3WhcNMjYwMTI2MTkwMDQ3WjAzMTEwLwYDVQQD Eyg3NDc2M2I4NDBhZTY0ODIxNmJiYTlhYmVhMWNhYTEwYTg5NDc3Y2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl42PR4RBqQQ8HvJD8vCw4l3ug00 k1ydgOTquNWeI+lFRRAY54WXLMzeEgh0htNq25+dixUQx9tGAm0BkAWvo8J0fbVK i7EpUZAg/sWtPGN825+/5qcBHqLpzNECoqScyaCcj+YOUn9On4qzSA5gbIMKdGLX UEfLyFHuolD5uivbh8No9xQMu1V7hG3Vx3xx6DDzQP25/2eSq1sBuZIsr6MSGCsi xPz4L2P5da98kNPdcfMhN88pFxQmewLwtS3Fij6C1oJa5k7XyiAIYJsraDDEWKrH EkJpbgbVx4okCtV4LH6aZGaSbEx9mgkdaxGiOa3OWnN1JDlLpyL60wV11QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHR2O4QK5kgha7qavqHKoQqJR3zNMB8GA1UdIwQY MBaAFGdfvksfACM+12eZAHHwRZDJDIh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81NWMyYTAtNDlkZi00ZDk2LTk4OGYt NGY5ZDA0MDEwNzEwLzEvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS81NWMyYTAtNDlkZi00ZDk2LTk4OGYtNGY5ZDA0MDEwNzEw LzEvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBGP6Ixt cUVT6jzZk57wyYuSR24wV95Jr0oMVv83oiEEQGv6oleHzmjg0+yox8LiwimFX79l fFzbKZuQPz2ETljOEXaQOw1+ZDp0j+ryS5I8Rjrbt9hjfFteMp8h9gFfdLjooQYW HUcWybdbn1sYMFPY0Fy1Tvz7mOthpva2xflgnPvpiybFoH5M3hy+QwAV+1Ue5l/s fRns+RinIwvTF+Tp6ojnAqsG3s6Qr5s97wsToqliSA1eXCEWsQTekGXfJRXICuXY YdQYX9aLxZ3x+KpgHwTx79WmrGcoH6nsb7IUbqkKXApv6niv34aJftWLT7/xtS31 a+N+phbM9Jkxdw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:41 2026 by rpki-client