This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft File: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json) Hash identifier: BYw9vLE+iMhsJvw2GKvi2XWRaetqZC/b34el3frczuY= Subject key identifier: 6B:25:DD:DF:DB:A5:9E:6C:D6:81:1F:65:01:69:C5:0B:3C:0D:15:C1 Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39 Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39 Certificate serial: 019BF4D11A3F003B0D71568B900C56DE1FFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft Manifest number: 0736 Signing time: Sun 25 Jan 2026 11:01:42 +0000 Manifest this update: Sun 25 Jan 2026 11:01:42 +0000 Manifest next update: Mon 26 Jan 2026 11:01:42 +0000 Files and hashes: 1: 5Vvt0AbvSxWyjAd-ALv69QCsNsk.roa (hash: 5/TeIgyVfAlprXjl0P+4FxuBA+lZL0C59tR8RwJwnQM=) 2: Cr-_Jks4-Nf_6cTAfqEm2bEkrqY.roa (hash: Lfoyt36d2xlYMQKhlmP8HR47UA8DZd6j01qEp/DuwGg=) 3: GElj9icCt-w2mx3YliBHFVCYPPg.roa (hash: PirS1DKcgnSFMhly0KbVf5RAZaqtFd0hZcWS32fEx7s=) 4: RGRGMmzLxpqCQOW-phn3KT39D9s.roa (hash: ZUPL8DNkteQ3PG2vzMcT8okE7rH1FO2YVjvr69odfCY=) 5: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: 046khLJMCVXCXulA1t4IHysQWHO74M/XPynIbdICmLc=) 6: _LFVw1RdLCWt-By3DgXS7TEwY-g.asa (hash: 7sp68pc4lJoudoB6GmnBQDPxVv/dJsT1KjSRKMkEvH8=) 7: gTAiJcqXUVhZkR4ZXv2cVDvzjVw.roa (hash: H8wggrXDtCuk8Xa7cBwaDqzCfoO3HXFepBg70R4642M=) 8: m1QjC3UV2Ny4UxXqYlT4s7dYaFg.roa (hash: 6V+rFBPB+VWm7if/CwhSgG0t42lVGrHbuCda8HK7Mzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d1:1a:3f:00:3b:0d:71:56:8b:90:0c:56:de:1f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65a665b90069bd71850602e7400c529793269e39 Validity Not Before: Jan 25 11:01:42 2026 GMT Not After : Jan 26 11:01:42 2026 GMT Subject: CN=6b25dddfdba59e6cd6811f650169c50b3c0d15c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:30:3e:6d:07:63:56:7e:e7:ca:fc:ea:ce:76: 85:53:5b:9f:8f:f9:a8:d3:1c:cd:88:af:84:2d:e5: ce:3c:0f:ed:1c:e9:74:0f:60:1a:a7:3f:d6:2b:5b: 4f:64:b6:54:6c:a9:3b:4b:d6:9d:ed:63:d4:26:58: 78:b3:17:48:97:ab:9d:2a:ac:9e:17:20:47:0d:90: 43:21:68:a6:99:8a:33:b4:ee:14:c9:3e:30:b6:49: 99:36:58:29:bc:8b:b4:38:32:c3:66:d8:dd:f6:e9: b5:68:e0:08:2e:94:7f:82:85:e6:d2:68:66:3e:5c: d7:88:bc:94:37:43:2e:aa:06:b2:7a:7a:1e:6d:ae: 5d:7f:45:0f:30:d1:66:df:94:b0:27:63:aa:98:65: fe:32:28:40:d1:a2:bd:68:74:31:4c:23:4c:57:65: e4:36:5b:11:bf:23:03:ea:d9:06:57:e5:d9:e5:7f: 99:5b:98:f1:e6:72:19:eb:4e:76:39:ba:1b:bd:58: f6:e2:f7:fa:c9:f6:33:8e:fd:ec:55:b4:11:a8:6c: 53:34:e8:1f:d2:39:0a:32:1c:27:b4:db:3a:4c:09: 8b:cc:de:5d:51:dd:68:62:90:19:02:b3:b7:5a:a8: 70:d0:d4:0b:0a:d0:cc:b2:10:39:1e:cf:53:68:0d: 1e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:25:DD:DF:DB:A5:9E:6C:D6:81:1F:65:01:69:C5:0B:3C:0D:15:C1 X509v3 Authority Key Identifier: keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:29:f9:7a:c4:fd:ad:81:80:5e:db:86:25:ff:79:67:8b:6c: e8:03:80:94:33:e5:ab:c3:55:ae:5d:20:1a:d8:fe:33:27:3f: 5b:42:f6:d2:fa:03:0a:ad:68:93:55:21:86:5a:c9:ca:f1:d4: 2b:8e:29:ea:fd:62:65:5a:74:83:92:a4:8d:c1:02:8d:5d:52: 12:54:bb:58:9b:15:44:6f:10:da:d2:00:56:c8:88:28:81:8b: f2:30:d2:c8:74:8b:81:aa:ec:5c:1a:f8:ce:c8:86:44:6c:cb: 1f:d9:d1:57:10:46:eb:fb:33:4e:72:ea:62:fc:e2:fa:1f:f1: 67:ee:b2:d4:71:46:cd:4a:a7:f1:de:d8:23:48:64:74:83:32: c3:1f:9a:ec:5e:2d:6a:20:1d:78:4f:ca:fa:ce:cc:c0:1f:dd: 9f:a8:59:46:0c:df:05:24:e6:f8:11:91:2b:aa:f8:1a:8b:56: 9b:fe:b7:cb:79:11:60:a3:7d:b4:45:75:d0:b6:dd:ef:31:b3: b8:5f:97:95:e2:09:ed:62:99:08:dd:59:7b:3c:82:7a:b0:2f: 83:12:3a:2e:c6:81:54:c2:13:b3:cb:7b:a9:e7:20:a1:5e:34: ac:a3:b7:e7:9c:30:36:49:53:5e:bf:77:95:89:3c:70:f4:0b: 69:f1:aa:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00Ro/ADsNcVaLkAxW3h/9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YTY2NWI5MDA2OWJkNzE4NTA2MDJlNzQwMGM1Mjk3OTMy NjllMzkwHhcNMjYwMTI1MTEwMTQyWhcNMjYwMTI2MTEwMTQyWjAzMTEwLwYDVQQD Eyg2YjI1ZGRkZmRiYTU5ZTZjZDY4MTFmNjUwMTY5YzUwYjNjMGQxNWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDA+bQdjVn7nyvzqznaFU1ufj/mo 0xzNiK+ELeXOPA/tHOl0D2Aapz/WK1tPZLZUbKk7S9ad7WPUJlh4sxdIl6udKqye FyBHDZBDIWimmYoztO4UyT4wtkmZNlgpvIu0ODLDZtjd9um1aOAILpR/goXm0mhm PlzXiLyUN0Muqgayenoeba5df0UPMNFm35SwJ2OqmGX+MihA0aK9aHQxTCNMV2Xk NlsRvyMD6tkGV+XZ5X+ZW5jx5nIZ6052ObobvVj24vf6yfYzjv3sVbQRqGxTNOgf 0jkKMhwntNs6TAmLzN5dUd1oYpAZArO3Wqhw0NQLCtDMshA5Hs9TaA0e7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsl3d/bpZ5s1oEfZQFpxQs8DRXBMB8GA1UdIwQY MBaAFGWmZbkAab1xhQYC50AMUpeTJp45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lNmQ4ODAtMzkwMy00YTExLWJhMjct Yzk0NTdlYzgxMTUxLzEvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lNmQ4ODAtMzkwMy00YTExLWJhMjctYzk0NTdlYzgxMTUx LzEvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCn5esT9 rYGAXtuGJf95Z4ts6AOAlDPlq8NVrl0gGtj+Myc/W0L20voDCq1ok1UhhlrJyvHU K44p6v1iZVp0g5KkjcECjV1SElS7WJsVRG8Q2tIAVsiIKIGL8jDSyHSLgarsXBr4 zsiGRGzLH9nRVxBG6/szTnLqYvzi+h/xZ+6y1HFGzUqn8d7YI0hkdIMywx+a7F4t aiAdeE/K+s7MwB/dn6hZRgzfBSTm+BGRK6r4GotWm/63y3kRYKN9tEV10Lbd7zGz uF+XleIJ7WKZCN1ZezyCerAvgxI6LsaBVMITs8t7qecgoV40rKO355wwNklTXr93 lYk8cPQLafGqKg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:08 2026 by rpki-client