This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft File: ZN_ibUAxQb6QWashRDJbQC1Mq30.mft (raw, json) Hash identifier: Isc953cS/CnsiZDKwxUtcCjsH/l0jrbfwn8HDXUStxw= Subject key identifier: D9:5F:C2:91:39:71:D3:5B:2F:11:AB:E3:8D:A4:C0:26:B4:D6:C7:F4 Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D Certificate issuer: /CN=64dfe26d403141be9059ab2144325b402d4cab7d Certificate serial: 019BF6519581E830519BA08B870CA77C6E5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft Manifest number: 17F2 Signing time: Sun 25 Jan 2026 18:01:40 +0000 Manifest this update: Sun 25 Jan 2026 18:01:40 +0000 Manifest next update: Mon 26 Jan 2026 18:01:40 +0000 Files and hashes: 1: 1pSJC06N2KwFbuJcYdGA9i6Uz70.roa (hash: 1Wkw53r6H28/yvkp4A/xsBcJ3W3ggfnnl0PpFBIprJY=) 2: 6ypYvWruLHwnduCjwA1yDgUF7iQ.roa (hash: vim8165CflcUEUPI7LyT6xVnJSwwiA/ZIHCcO7/ZyYY=) 3: WXEMaOaFXRYu5I1vij7KWtGaWy4.roa (hash: Bmbg+nTd8Sk24eSeeR56bOusRM0ye1c9iznMWMYGi8o=) 4: ZN_ibUAxQb6QWashRDJbQC1Mq30.crl (hash: GhaPtoM4tp2hEmsflGQyPC4CM6Bpvui0LQF1fwFZ2Aw=) 5: eXtz9qlxcUXDY9qv_cOL7OrM1mg.roa (hash: mPvwGs5vghXg97JZBpfO6Y5/bAb5kwiLFDsCj8CY49c=) 6: olLV4SbqUJ3z5a7HJ7Eva4wXMo8.roa (hash: DvzOagp2lGIceeK3FkMPLVn9xoT8VD4iuom7PdIZAFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:95:81:e8:30:51:9b:a0:8b:87:0c:a7:7c:6e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d Validity Not Before: Jan 25 18:01:40 2026 GMT Not After : Jan 26 18:01:40 2026 GMT Subject: CN=d95fc2913971d35b2f11abe38da4c026b4d6c7f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:58:87:c3:49:aa:af:f0:70:cb:a6:95:fc:f8: 19:14:00:61:7d:22:5f:99:c6:3e:16:e0:04:0d:e3: 0c:96:ff:16:3c:a7:26:a2:53:01:2f:30:18:1d:aa: 8f:b8:a8:12:df:9d:2e:59:2b:ff:89:ed:35:5f:94: 9f:d7:d2:9c:2b:78:39:35:0d:7b:71:e3:4d:0f:ac: c0:c0:e6:32:d1:cd:2e:de:5e:bd:dc:90:26:2f:00: 50:03:59:df:50:a6:d1:1e:cc:c9:41:fa:5a:c7:f1: 0c:35:8b:f6:7e:fb:e7:36:78:c8:2d:45:96:ba:f3: 25:51:c8:d1:f9:98:ad:a6:23:50:17:21:65:c5:90: b6:34:98:9e:b7:36:8a:3a:fa:0f:12:ed:e0:f4:df: c2:a7:5b:cc:c2:39:e3:cb:b3:a4:9b:99:6c:6d:2d: f2:52:b8:23:36:dc:18:78:b3:91:fd:c9:b0:53:7f: ea:6e:dc:bf:00:6b:8a:14:61:86:1c:3e:ff:0f:dc: 1e:26:a1:1b:3a:7e:31:d9:b5:70:f6:98:d4:57:57: d0:c5:47:9a:9b:aa:f8:25:68:f6:29:86:e1:d2:c5: 45:9f:7b:46:13:68:49:73:32:dd:db:33:73:8a:35: 0e:73:b2:0d:02:b9:94:dc:a0:b2:9a:1e:27:35:4d: bd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5F:C2:91:39:71:D3:5B:2F:11:AB:E3:8D:A4:C0:26:B4:D6:C7:F4 X509v3 Authority Key Identifier: keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:1a:f7:75:92:0b:34:38:4e:50:94:c6:4e:b6:74:cf:e4:b4: 50:a9:84:86:9a:14:3d:52:46:3c:5d:9c:24:72:60:ed:bc:e9: 9d:fa:08:04:1e:27:fa:55:f3:c0:7b:83:fd:7a:77:1c:17:2d: 27:59:f8:27:00:1e:4e:17:b1:ff:d9:b5:ac:f6:97:6e:90:dd: 3b:d9:f8:ab:dc:f5:fa:5a:ef:f0:af:41:28:0d:c4:e2:6e:e1: 87:fe:f9:5b:a6:7c:4e:ac:0a:5a:b9:c3:43:77:19:ee:df:aa: 06:09:c6:c6:39:af:67:6c:7e:95:e7:39:46:79:a5:f1:22:0d: f2:c0:8a:e3:4e:f7:82:5f:d0:86:d8:ec:be:26:b8:77:28:cb: ef:52:7c:05:aa:e3:68:95:d1:1f:b4:9d:ee:42:99:57:c5:c3: a2:7d:9d:18:20:c3:27:53:1d:84:a8:23:85:b7:fd:46:a1:f9: b4:84:f6:0c:79:4a:79:c1:79:00:10:5d:ff:b5:df:9e:fc:10: 10:80:0b:9d:ff:61:f2:cb:f2:0a:dd:e9:c8:e3:8d:02:ea:0c: a3:8d:f8:31:3d:31:18:92:e9:88:b5:28:df:4d:49:18:3c:49: e7:99:4a:65:19:bf:f7:a3:cd:f6:35:73:2f:15:5f:d7:be:17: 06:22:fd:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UZWB6DBRm6CLhwynfG5bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZGZlMjZkNDAzMTQxYmU5MDU5YWIyMTQ0MzI1YjQwMmQ0 Y2FiN2QwHhcNMjYwMTI1MTgwMTQwWhcNMjYwMTI2MTgwMTQwWjAzMTEwLwYDVQQD EyhkOTVmYzI5MTM5NzFkMzViMmYxMWFiZTM4ZGE0YzAyNmI0ZDZjN2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFiHw0mqr/Bwy6aV/PgZFABhfSJf mcY+FuAEDeMMlv8WPKcmolMBLzAYHaqPuKgS350uWSv/ie01X5Sf19KcK3g5NQ17 ceNND6zAwOYy0c0u3l693JAmLwBQA1nfUKbRHszJQfpax/EMNYv2fvvnNnjILUWW uvMlUcjR+ZitpiNQFyFlxZC2NJietzaKOvoPEu3g9N/Cp1vMwjnjy7Okm5lsbS3y UrgjNtwYeLOR/cmwU3/qbty/AGuKFGGGHD7/D9weJqEbOn4x2bVw9pjUV1fQxUea m6r4JWj2KYbh0sVFn3tGE2hJczLd2zNzijUOc7INArmU3KCymh4nNU298QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlfwpE5cdNbLxGr442kwCa01sf0MB8GA1UdIwQY MBaAFGTf4m1AMUG+kFmrIUQyW0AtTKt9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5faWJVQXhRYjZRV2FzaFJESmJRQzFNcTMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81ZDYyNTUtNjVjOS00YmZhLWI5ZDct ZjY1NzUxOWQwMjMzLzEvWk5faWJVQXhRYjZRV2FzaFJESmJRQzFNcTMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81ZDYyNTUtNjVjOS00YmZhLWI5ZDctZjY1NzUxOWQwMjMz LzEvWk5faWJVQXhRYjZRV2FzaFJESmJRQzFNcTMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRr3dZIL NDhOUJTGTrZ0z+S0UKmEhpoUPVJGPF2cJHJg7bzpnfoIBB4n+lXzwHuD/Xp3HBct J1n4JwAeThex/9m1rPaXbpDdO9n4q9z1+lrv8K9BKA3E4m7hh/75W6Z8TqwKWrnD Q3cZ7t+qBgnGxjmvZ2x+lec5Rnml8SIN8sCK4073gl/Qhtjsvia4dyjL71J8Barj aJXRH7Sd7kKZV8XDon2dGCDDJ1MdhKgjhbf9RqH5tIT2DHlKecF5ABBd/7XfnvwQ EIALnf9h8svyCt3pyOONAuoMo434MT0xGJLpiLUo301JGDxJ55lKZRm/96PN9jVz LxVf174XBiL9Ow== -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:50 2026 by rpki-client