This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft File: z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json) Hash identifier: Mt0XA44tqJvBx5jExrsZSiIFrepMG+/UeW5qK2I5NKQ= Subject key identifier: D8:A4:2D:41:04:C6:53:ED:B7:4E:58:1D:5E:73:41:27:41:6C:0E:52 Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Certificate serial: 019BF3BDF42298BCFFAC360EB036490A5F9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft Manifest number: 17F9 Signing time: Sun 25 Jan 2026 06:01:10 +0000 Manifest this update: Sun 25 Jan 2026 06:01:10 +0000 Manifest next update: Mon 26 Jan 2026 06:01:10 +0000 Files and hashes: 1: 1-A-7q5MSfEASgOSJsLHqRfzUioE.roa (hash: Za0B6sbWjI78oQmGRktphtY5YZXqOifBcaQfnD50Rt0=) 2: 2KQ5ZpfUylUAta7ExfQtvEHkS4E.roa (hash: /7rSc6G6wbTQgfr6iC9XwInfsvw0txiwcKpJmnw/K7U=) 3: BgUnjCgAPDOfR4z_FTd_TpHVJ0U.roa (hash: heMoRIVQ8DTd9ArcP8LzeG/e00sDzEjtg2TIan/SctQ=) 4: Hhm4-xXrJa_SdRnbJRHBG-1HmF8.roa (hash: 2g901f2mJ95YUSaapsTP70+dUsRcUfZNWLYXTjA8fL8=) 5: IxsNRYHAIgIvIYAKThBCK8tDML0.roa (hash: RJ0zaAUP7bIQ80w1oqlJP/TAPNOQGvp2V17z1FFDB+Y=) 6: PLUJiaThhf8vD4EoQGrmDtWUb0E.roa (hash: Ua3H2xX0J2QbkZIMHCzW8qMZcFmI3y1PNsZ7jGLEkQo=) 7: Q0_TTJ70K_PUBlOuwEh20FJ9gVg.roa (hash: KTqGXYAG8vVcFM7tQyAq5GIJNdRRd5/01ktBU+ZaPWk=) 8: RJy0_gErJZBzBgAp03Ym2G21A8g.roa (hash: 1Cgh17v2P9NMqOn+8E4Hl2KRYgZQoFx9YjOwa8NDWuI=) 9: Rq696N8NiJae_ixwW3DNWDQK-5I.roa (hash: 8G+AAO8D+JWydyaPXEfoxJVXWUvhJ3zpB+8+KxSr940=) 10: Tq5kRwEao-OyUWFaQRx4AwmpHsA.roa (hash: hbeyCxUvYxY09fpLLNVHgBLPNg097amd0f2XaurjfCM=) 11: Yt-w69_I1wza2CvDEypwz6EYLMA.roa (hash: T9k6Uc+A+ePGrkY6SKOEbGhVQItgNDio3FncjOloEKs=) 12: ifWB4vc9qFtHVpS0YI5P2BXL05w.roa (hash: 72Jjs1xc2pL2LvIq/8wmACvnX6p0xGHA2swVmmlBIwU=) 13: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: DXSfZnHzH9Srp7GeARPEkS+9oBJ+IENgRBbaPnNkgfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:f4:22:98:bc:ff:ac:36:0e:b0:36:49:0a:5f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Validity Not Before: Jan 25 06:01:10 2026 GMT Not After : Jan 26 06:01:10 2026 GMT Subject: CN=d8a42d4104c653edb74e581d5e734127416c0e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:67:55:1c:87:f2:92:9c:6b:3d:af:70:38:09: 77:b1:f6:ce:88:70:a6:59:f1:09:ca:01:2c:be:76: a1:d9:06:16:df:68:18:7d:10:58:02:fd:6e:77:16: 82:f9:57:d4:e9:7d:58:75:39:56:42:ab:77:dc:0e: b7:26:33:19:73:f7:07:8c:71:5b:db:06:fd:bd:55: 35:3f:bf:7d:ca:d8:14:74:cf:e9:9b:e6:92:c6:08: 8c:59:a7:5e:f1:dc:c0:ee:d6:c5:a3:c4:7e:15:70: f8:05:64:89:eb:cd:60:f4:fc:65:2b:eb:36:a6:4e: 5c:20:29:21:e4:56:a9:eb:06:97:b3:11:c2:4b:1f: d5:19:d9:48:c1:26:8e:33:6d:0b:a2:70:3e:0f:ab: 8e:e8:aa:eb:22:9b:d8:b0:b2:fd:70:50:25:66:64: cf:02:03:7e:50:f4:3b:fa:c0:42:7a:f3:d8:a9:67: 51:d8:b3:73:4e:87:f2:3b:32:eb:42:a0:dc:1a:8c: 3f:61:fd:bb:8f:28:ce:b7:d1:b7:e7:34:aa:a5:8b: 8f:c4:ba:0d:71:70:5b:dc:d4:05:8c:60:62:8c:20: 6b:28:5c:93:99:8e:69:3b:6e:7b:39:29:70:8a:14: f0:5b:b0:87:89:44:66:25:cd:a0:68:d1:93:c6:65: 50:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A4:2D:41:04:C6:53:ED:B7:4E:58:1D:5E:73:41:27:41:6C:0E:52 X509v3 Authority Key Identifier: keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:83:31:b0:ed:df:01:31:6b:96:0a:40:e3:c4:c0:f1:6b:d4: 8c:9f:3d:8d:fd:a2:cd:32:9e:7c:32:09:50:e0:15:37:65:61: 47:a5:8e:ea:44:2e:64:c2:20:be:8b:51:2c:51:53:1b:15:22: b4:1c:f8:ff:ce:61:8a:2f:e1:68:2c:40:12:74:fe:1e:1d:a6: 33:c4:a7:4e:8d:49:5a:11:80:54:69:1e:6d:50:fa:40:1d:ce: 18:f3:ca:fa:50:81:88:0b:b9:01:cd:8f:27:92:6e:65:ea:8d: 13:0d:5b:f9:00:67:9f:fe:4f:40:11:9a:ae:d3:8e:d6:81:26: 1d:98:c6:c7:54:92:dc:2e:0a:04:84:b8:de:dd:11:3c:de:13: 62:19:31:87:2a:16:60:b7:9f:33:93:84:75:02:54:db:a6:37: 7f:c5:f2:54:bc:62:2e:9f:b6:6a:fa:31:0e:f2:56:d5:ab:db: a1:b0:bc:57:64:fa:46:a9:82:bf:86:b2:2b:52:60:b3:28:ed: 0c:4f:bf:e4:67:3b:fd:9c:9e:b6:67:fd:2f:7f:6c:21:8b:4f: 39:1d:57:aa:fa:a3:33:4d:b0:19:bf:22:18:b4:5b:14:9f:a3: ce:b3:1b:f5:ef:1e:aa:1e:77:6c:89:9e:ba:70:ad:80:5b:2b: f0:a4:64:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvfQimLz/rDYOsDZJCl+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1 NTI2ZmEwHhcNMjYwMTI1MDYwMTEwWhcNMjYwMTI2MDYwMTEwWjAzMTEwLwYDVQQD EyhkOGE0MmQ0MTA0YzY1M2VkYjc0ZTU4MWQ1ZTczNDEyNzQxNmMwZTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGdVHIfykpxrPa9wOAl3sfbOiHCm WfEJygEsvnah2QYW32gYfRBYAv1udxaC+VfU6X1YdTlWQqt33A63JjMZc/cHjHFb 2wb9vVU1P799ytgUdM/pm+aSxgiMWade8dzA7tbFo8R+FXD4BWSJ681g9PxlK+s2 pk5cICkh5Fap6waXsxHCSx/VGdlIwSaOM20LonA+D6uO6KrrIpvYsLL9cFAlZmTP AgN+UPQ7+sBCevPYqWdR2LNzTofyOzLrQqDcGow/Yf27jyjOt9G35zSqpYuPxLoN cXBb3NQFjGBijCBrKFyTmY5pO257OSlwihTwW7CHiURmJc2gaNGTxmVQ3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNikLUEExlPtt05YHV5zQSdBbA5SMB8GA1UdIwQY MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct NmVkYzFiMjI1NjI1LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTctNmVkYzFiMjI1NjI1 LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIMxsO3f ATFrlgpA48TA8WvUjJ89jf2izTKefDIJUOAVN2VhR6WO6kQuZMIgvotRLFFTGxUi tBz4/85hii/haCxAEnT+Hh2mM8SnTo1JWhGAVGkebVD6QB3OGPPK+lCBiAu5Ac2P J5JuZeqNEw1b+QBnn/5PQBGartOO1oEmHZjGx1SS3C4KBIS43t0RPN4TYhkxhyoW YLefM5OEdQJU26Y3f8XyVLxiLp+2avoxDvJW1avbobC8V2T6RqmCv4ayK1Jgsyjt DE+/5Gc7/Zyetmf9L39sIYtPOR1XqvqjM02wGb8iGLRbFJ+jzrMb9e8eqh53bIme unCtgFsr8KRkKQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:10:20 2026 by rpki-client