This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft File: Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft (raw, json) Hash identifier: rnaGSZAoFvz/ycbzwML7b10HhCF4ywirjBQR3Lf9sHY= Subject key identifier: DB:53:D5:8D:C6:6E:30:7E:CC:CB:9A:D6:78:AA:CA:5A:AC:81:92:A9 Authority key identifier: 67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0 Certificate issuer: /CN=6745314516483fe27c0530ccb9707c376d20e7f0 Certificate serial: 019BF4632A9FC22A51FAD0EFA8D8638DFA20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft Manifest number: 0CCB Signing time: Sun 25 Jan 2026 09:01:38 +0000 Manifest this update: Sun 25 Jan 2026 09:01:38 +0000 Manifest next update: Mon 26 Jan 2026 09:01:38 +0000 Files and hashes: 1: LceaXnMeu276vgP2oQyUQj1pB_Q.roa (hash: HrwRyFbgAYEEHCkLHWw/X0HtmQIyrz8WJ529vkNQigM=) 2: Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl (hash: 4Xw1YK9D69FNBb99nH9zV+mDKbU0lFzYnQY+15wSdlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:2a:9f:c2:2a:51:fa:d0:ef:a8:d8:63:8d:fa:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6745314516483fe27c0530ccb9707c376d20e7f0 Validity Not Before: Jan 25 09:01:38 2026 GMT Not After : Jan 26 09:01:38 2026 GMT Subject: CN=db53d58dc66e307ecccb9ad678aaca5aac8192a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:f4:a6:a6:40:42:14:8f:19:1b:32:58:0d:d3: be:7d:5e:87:0c:e8:a9:62:30:bb:b8:e1:40:04:09: 99:f2:cd:bd:b3:61:de:8c:fb:17:af:92:23:c4:a5: 63:78:1f:a0:98:22:8f:f0:c2:44:a7:3e:fb:63:a9: aa:6b:35:96:37:ec:f7:9f:d2:64:0d:dd:44:99:29: a5:03:05:69:dc:ed:1b:2a:e9:c4:85:f7:4a:38:7c: 1c:05:1a:5c:77:04:5e:34:1e:02:32:12:9c:39:79: 08:da:84:ce:93:b1:86:06:9f:8f:df:a4:f6:99:b8: 13:d0:6d:c6:fc:15:18:a7:a7:97:cd:83:9a:d7:81: ab:9f:80:f3:e0:59:80:3a:7d:c2:a5:c4:4c:89:f0: 33:89:9b:29:e2:6d:80:da:9e:5d:37:b9:d4:32:e4: 09:cd:c5:07:0c:4f:6b:cc:e8:6e:bb:e3:cc:e8:8c: 79:28:37:6f:4f:da:62:77:9f:6f:93:9f:0f:43:9f: b6:80:91:f5:b0:7d:93:49:82:89:4f:85:e6:c1:4e: 2f:f5:ce:2f:3f:e7:05:c8:af:ee:42:a9:51:5c:ff: e6:89:a5:c1:57:81:d3:70:e3:08:6a:54:f7:89:a5: 06:af:fd:af:d3:b3:0d:30:6e:a3:80:7d:8f:43:67: 50:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:53:D5:8D:C6:6E:30:7E:CC:CB:9A:D6:78:AA:CA:5A:AC:81:92:A9 X509v3 Authority Key Identifier: keyid:67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:3d:fa:27:fd:0d:8c:11:b3:e6:98:49:e8:6f:99:22:ae:eb: c5:d5:54:8d:38:fd:25:95:bd:15:dc:43:6d:cf:99:ac:d1:23: 67:1e:5d:60:e2:82:78:c4:5e:bb:9e:d7:f4:14:82:28:aa:66: f4:d7:68:c8:69:4f:d4:0c:68:4c:19:4c:d8:49:f7:d3:62:5f: ff:55:71:49:7b:4d:a6:83:f8:fa:47:b3:5d:fe:ec:3b:42:fc: 27:d6:72:8b:07:f5:ce:f7:7f:20:da:6e:aa:34:f1:86:64:f8: e7:dd:39:46:5e:bd:d5:da:10:28:b7:d5:f2:c9:c4:2e:91:4a: c2:cc:46:7b:66:c4:13:06:07:7d:e8:f5:65:32:2b:49:9e:4a: 9b:71:9f:6f:1b:20:62:8a:24:e7:47:c5:21:83:9c:7b:31:a3: a9:02:6b:49:23:6b:5a:12:f7:7b:71:40:b1:2c:57:56:23:6a: 69:01:9d:92:76:79:25:44:9c:7a:a2:9a:17:4b:04:64:31:01: a4:7b:af:fd:8e:e7:10:e1:eb:06:5b:9b:70:6b:2e:8b:7b:0b: 24:50:18:a3:13:8e:eb:5b:66:94:a0:a3:bb:f7:9e:ca:1a:9d: 31:b1:b6:bc:0a:30:34:69:62:6d:96:f0:10:2f:bf:c4:9a:23: 9f:a5:6c:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YyqfwipR+tDvqNhjjfogMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDUzMTQ1MTY0ODNmZTI3YzA1MzBjY2I5NzA3YzM3NmQy MGU3ZjAwHhcNMjYwMTI1MDkwMTM4WhcNMjYwMTI2MDkwMTM4WjAzMTEwLwYDVQQD EyhkYjUzZDU4ZGM2NmUzMDdlY2NjYjlhZDY3OGFhY2E1YWFjODE5MmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+/SmpkBCFI8ZGzJYDdO+fV6HDOip YjC7uOFABAmZ8s29s2HejPsXr5IjxKVjeB+gmCKP8MJEpz77Y6mqazWWN+z3n9Jk Dd1EmSmlAwVp3O0bKunEhfdKOHwcBRpcdwReNB4CMhKcOXkI2oTOk7GGBp+P36T2 mbgT0G3G/BUYp6eXzYOa14Grn4Dz4FmAOn3CpcRMifAziZsp4m2A2p5dN7nUMuQJ zcUHDE9rzOhuu+PM6Ix5KDdvT9pid59vk58PQ5+2gJH1sH2TSYKJT4XmwU4v9c4v P+cFyK/uQqlRXP/miaXBV4HTcOMIalT3iaUGr/2v07MNMG6jgH2PQ2dQmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtT1Y3GbjB+zMua1niqylqsgZKpMB8GA1UdIwQY MBaAFGdFMUUWSD/ifAUwzLlwfDdtIOfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBVeFJSWklQLUo4QlRETXVYQjhOMjBnNV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9mYjQ4ZmQtNGVjNS00M2YxLTkzY2Mt ODY1NDc4NmUyMGE5LzEvWjBVeFJSWklQLUo4QlRETXVYQjhOMjBnNV9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9mYjQ4ZmQtNGVjNS00M2YxLTkzY2MtODY1NDc4NmUyMGE5 LzEvWjBVeFJSWklQLUo4QlRETXVYQjhOMjBnNV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgj36J/0N jBGz5phJ6G+ZIq7rxdVUjTj9JZW9FdxDbc+ZrNEjZx5dYOKCeMReu57X9BSCKKpm 9NdoyGlP1AxoTBlM2En302Jf/1VxSXtNpoP4+kezXf7sO0L8J9Zyiwf1zvd/INpu qjTxhmT45905Rl691doQKLfV8snELpFKwsxGe2bEEwYHfej1ZTIrSZ5Km3Gfbxsg Yook50fFIYOcezGjqQJrSSNrWhL3e3FAsSxXViNqaQGdknZ5JUSceqKaF0sEZDEB pHuv/Y7nEOHrBlubcGsui3sLJFAYoxOO61tmlKCju/eeyhqdMbG2vAowNGlibZbw EC+/xJojn6Vscg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:40:14 2026 by rpki-client