This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft File: ZN_ibUAxQb6QWashRDJbQC1Mq30.mft (raw, json) Hash identifier: lQXCiVtoqFg+cMWpUtqo1t2ZVl/07nx5TyMP94ffOJo= Subject key identifier: 68:70:F3:52:7A:48:A4:50:5A:C5:23:66:E9:8D:09:D2:25:E2:9F:97 Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D Certificate issuer: /CN=64dfe26d403141be9059ab2144325b402d4cab7d Certificate serial: 019BF4623DDA5BE491546594775E107A580D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft Manifest number: 17F1 Signing time: Sun 25 Jan 2026 09:00:37 +0000 Manifest this update: Sun 25 Jan 2026 09:00:37 +0000 Manifest next update: Mon 26 Jan 2026 09:00:37 +0000 Files and hashes: 1: 1pSJC06N2KwFbuJcYdGA9i6Uz70.roa (hash: 1Wkw53r6H28/yvkp4A/xsBcJ3W3ggfnnl0PpFBIprJY=) 2: 6ypYvWruLHwnduCjwA1yDgUF7iQ.roa (hash: vim8165CflcUEUPI7LyT6xVnJSwwiA/ZIHCcO7/ZyYY=) 3: WXEMaOaFXRYu5I1vij7KWtGaWy4.roa (hash: Bmbg+nTd8Sk24eSeeR56bOusRM0ye1c9iznMWMYGi8o=) 4: ZN_ibUAxQb6QWashRDJbQC1Mq30.crl (hash: 8/7142vgfiCHvfFFjKIEurlGOHOWNyYivW5M7MvCvpc=) 5: eXtz9qlxcUXDY9qv_cOL7OrM1mg.roa (hash: mPvwGs5vghXg97JZBpfO6Y5/bAb5kwiLFDsCj8CY49c=) 6: olLV4SbqUJ3z5a7HJ7Eva4wXMo8.roa (hash: DvzOagp2lGIceeK3FkMPLVn9xoT8VD4iuom7PdIZAFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:3d:da:5b:e4:91:54:65:94:77:5e:10:7a:58:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d Validity Not Before: Jan 25 09:00:37 2026 GMT Not After : Jan 26 09:00:37 2026 GMT Subject: CN=6870f3527a48a4505ac52366e98d09d225e29f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fd:a1:2d:c4:38:c6:21:98:5f:65:3a:5c:34: 67:d2:da:d0:02:58:46:46:56:dd:d9:19:ec:cf:b5: 54:66:b2:fd:ec:ad:cc:b3:bb:dd:d7:bc:0c:eb:4a: b9:ce:23:03:8a:4f:4b:1c:24:d3:91:75:e7:c4:1d: a4:aa:6d:59:cf:9a:3c:99:81:a1:b6:07:ff:a2:1b: 7e:91:2a:48:c3:1c:f0:0d:ad:0d:be:c6:20:cc:90: 4f:14:51:18:4b:97:69:a9:45:4f:cf:75:65:4b:64: 61:12:27:2b:f9:5b:48:c6:95:b1:b0:fc:62:4f:e1: 47:64:3e:4a:44:a7:8c:93:f1:48:a5:01:52:b6:04: 6d:9b:7c:35:d6:0c:c6:ab:60:c2:97:74:fb:07:62: 25:d2:3d:1c:4f:f9:0d:69:19:65:7b:02:6b:1b:79: e3:92:9e:ac:31:46:95:9d:90:dc:95:43:8c:27:b6: f5:07:03:fe:fb:49:95:b3:e7:f7:30:ec:ba:f4:ea: 3e:1c:db:a9:60:c3:55:62:44:28:97:b1:97:57:25: ec:d5:68:1d:de:06:d0:e4:b1:78:c7:a2:7a:20:75: ae:d3:79:91:6d:ab:f9:da:73:0a:fd:13:a2:95:b8: 97:1c:cc:73:5c:53:9e:de:0d:47:e9:9a:9c:24:e8: 84:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:70:F3:52:7A:48:A4:50:5A:C5:23:66:E9:8D:09:D2:25:E2:9F:97 X509v3 Authority Key Identifier: keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:bb:77:d6:f1:13:bb:26:d4:df:f5:0b:c2:56:f4:1d:23:f6: 69:ca:aa:f6:58:76:c4:d8:e0:d9:b5:bc:a6:36:6a:75:30:c1: ad:9f:a3:9b:5d:da:6b:16:9b:e2:c1:02:5e:0e:f8:0a:14:60: 10:25:34:28:84:88:2b:6c:63:31:de:1d:05:ed:0c:d9:ae:16: 00:09:67:46:b1:43:22:78:da:13:84:70:78:0d:24:ca:ce:d1: 2c:cc:8a:70:14:88:71:a5:8c:ce:34:18:25:ea:ac:9c:5e:71: f0:e8:ac:55:21:6b:f6:e7:72:f5:5d:4e:cd:98:85:55:84:d3: 6a:0e:ff:41:a3:89:82:bf:74:92:4e:aa:bb:eb:cd:6b:55:15: c3:b1:66:79:ea:79:4b:72:26:9d:65:72:75:fa:3c:10:31:01: 17:c8:7a:11:30:13:b6:1f:c7:59:0e:9b:09:16:2d:c4:77:e3: 89:68:9a:bc:cd:6d:3c:21:56:eb:05:c6:7a:a6:37:76:71:dd: 37:ac:db:bb:61:81:2e:19:47:96:ce:8f:1b:40:67:9a:f5:02: df:bb:9e:33:ef:26:48:77:c1:f5:66:c1:ec:88:fc:8d:af:32: 47:1c:9d:04:08:10:37:81:ff:41:8d:a4:9b:68:67:4f:fe:ec: d9:89:09:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yj3aW+SRVGWUd14QelgNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZGZlMjZkNDAzMTQxYmU5MDU5YWIyMTQ0MzI1YjQwMmQ0 Y2FiN2QwHhcNMjYwMTI1MDkwMDM3WhcNMjYwMTI2MDkwMDM3WjAzMTEwLwYDVQQD Eyg2ODcwZjM1MjdhNDhhNDUwNWFjNTIzNjZlOThkMDlkMjI1ZTI5Zjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP2hLcQ4xiGYX2U6XDRn0trQAlhG Rlbd2Rnsz7VUZrL97K3Ms7vd17wM60q5ziMDik9LHCTTkXXnxB2kqm1Zz5o8mYGh tgf/oht+kSpIwxzwDa0NvsYgzJBPFFEYS5dpqUVPz3VlS2RhEicr+VtIxpWxsPxi T+FHZD5KRKeMk/FIpQFStgRtm3w11gzGq2DCl3T7B2Il0j0cT/kNaRllewJrG3nj kp6sMUaVnZDclUOMJ7b1BwP++0mVs+f3MOy69Oo+HNupYMNVYkQol7GXVyXs1Wgd 3gbQ5LF4x6J6IHWu03mRbav52nMK/ROilbiXHMxzXFOe3g1H6ZqcJOiEmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhw81J6SKRQWsUjZumNCdIl4p+XMB8GA1UdIwQY MBaAFGTf4m1AMUG+kFmrIUQyW0AtTKt9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5faWJVQXhRYjZRV2FzaFJESmJRQzFNcTMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81ZDYyNTUtNjVjOS00YmZhLWI5ZDct ZjY1NzUxOWQwMjMzLzEvWk5faWJVQXhRYjZRV2FzaFJESmJRQzFNcTMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81ZDYyNTUtNjVjOS00YmZhLWI5ZDctZjY1NzUxOWQwMjMz LzEvWk5faWJVQXhRYjZRV2FzaFJESmJRQzFNcTMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbt31vET uybU3/ULwlb0HSP2acqq9lh2xNjg2bW8pjZqdTDBrZ+jm13aaxab4sECXg74ChRg ECU0KISIK2xjMd4dBe0M2a4WAAlnRrFDInjaE4RweA0kys7RLMyKcBSIcaWMzjQY JeqsnF5x8OisVSFr9udy9V1OzZiFVYTTag7/QaOJgr90kk6qu+vNa1UVw7Fmeep5 S3ImnWVydfo8EDEBF8h6ETATth/HWQ6bCRYtxHfjiWiavM1tPCFW6wXGeqY3dnHd N6zbu2GBLhlHls6PG0BnmvUC37ueM+8mSHfB9WbB7Ij8ja8yRxydBAgQN4H/QY2k m2hnT/7s2YkJkw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:33:55 2026 by rpki-client