This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
File: ZN_ibUAxQb6QWashRDJbQC1Mq30.mft (raw, json)
Hash identifier: lQXCiVtoqFg+cMWpUtqo1t2ZVl/07nx5TyMP94ffOJo=
Subject key identifier: 68:70:F3:52:7A:48:A4:50:5A:C5:23:66:E9:8D:09:D2:25:E2:9F:97
Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
Certificate issuer: /CN=64dfe26d403141be9059ab2144325b402d4cab7d
Certificate serial: 019BF4623DDA5BE491546594775E107A580D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
Manifest number: 17F1
Signing time: Sun 25 Jan 2026 09:00:37 +0000
Manifest this update: Sun 25 Jan 2026 09:00:37 +0000
Manifest next update: Mon 26 Jan 2026 09:00:37 +0000
Files and hashes: 1: 1pSJC06N2KwFbuJcYdGA9i6Uz70.roa (hash: 1Wkw53r6H28/yvkp4A/xsBcJ3W3ggfnnl0PpFBIprJY=)
2: 6ypYvWruLHwnduCjwA1yDgUF7iQ.roa (hash: vim8165CflcUEUPI7LyT6xVnJSwwiA/ZIHCcO7/ZyYY=)
3: WXEMaOaFXRYu5I1vij7KWtGaWy4.roa (hash: Bmbg+nTd8Sk24eSeeR56bOusRM0ye1c9iznMWMYGi8o=)
4: ZN_ibUAxQb6QWashRDJbQC1Mq30.crl (hash: 8/7142vgfiCHvfFFjKIEurlGOHOWNyYivW5M7MvCvpc=)
5: eXtz9qlxcUXDY9qv_cOL7OrM1mg.roa (hash: mPvwGs5vghXg97JZBpfO6Y5/bAb5kwiLFDsCj8CY49c=)
6: olLV4SbqUJ3z5a7HJ7Eva4wXMo8.roa (hash: DvzOagp2lGIceeK3FkMPLVn9xoT8VD4iuom7PdIZAFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:62:3d:da:5b:e4:91:54:65:94:77:5e:10:7a:58:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d
Validity
Not Before: Jan 25 09:00:37 2026 GMT
Not After : Jan 26 09:00:37 2026 GMT
Subject: CN=6870f3527a48a4505ac52366e98d09d225e29f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:a1:2d:c4:38:c6:21:98:5f:65:3a:5c:34:
67:d2:da:d0:02:58:46:46:56:dd:d9:19:ec:cf:b5:
54:66:b2:fd:ec:ad:cc:b3:bb:dd:d7:bc:0c:eb:4a:
b9:ce:23:03:8a:4f:4b:1c:24:d3:91:75:e7:c4:1d:
a4:aa:6d:59:cf:9a:3c:99:81:a1:b6:07:ff:a2:1b:
7e:91:2a:48:c3:1c:f0:0d:ad:0d:be:c6:20:cc:90:
4f:14:51:18:4b:97:69:a9:45:4f:cf:75:65:4b:64:
61:12:27:2b:f9:5b:48:c6:95:b1:b0:fc:62:4f:e1:
47:64:3e:4a:44:a7:8c:93:f1:48:a5:01:52:b6:04:
6d:9b:7c:35:d6:0c:c6:ab:60:c2:97:74:fb:07:62:
25:d2:3d:1c:4f:f9:0d:69:19:65:7b:02:6b:1b:79:
e3:92:9e:ac:31:46:95:9d:90:dc:95:43:8c:27:b6:
f5:07:03:fe:fb:49:95:b3:e7:f7:30:ec:ba:f4:ea:
3e:1c:db:a9:60:c3:55:62:44:28:97:b1:97:57:25:
ec:d5:68:1d:de:06:d0:e4:b1:78:c7:a2:7a:20:75:
ae:d3:79:91:6d:ab:f9:da:73:0a:fd:13:a2:95:b8:
97:1c:cc:73:5c:53:9e:de:0d:47:e9:9a:9c:24:e8:
84:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:70:F3:52:7A:48:A4:50:5A:C5:23:66:E9:8D:09:D2:25:E2:9F:97
X509v3 Authority Key Identifier:
keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bb:77:d6:f1:13:bb:26:d4:df:f5:0b:c2:56:f4:1d:23:f6:
69:ca:aa:f6:58:76:c4:d8:e0:d9:b5:bc:a6:36:6a:75:30:c1:
ad:9f:a3:9b:5d:da:6b:16:9b:e2:c1:02:5e:0e:f8:0a:14:60:
10:25:34:28:84:88:2b:6c:63:31:de:1d:05:ed:0c:d9:ae:16:
00:09:67:46:b1:43:22:78:da:13:84:70:78:0d:24:ca:ce:d1:
2c:cc:8a:70:14:88:71:a5:8c:ce:34:18:25:ea:ac:9c:5e:71:
f0:e8:ac:55:21:6b:f6:e7:72:f5:5d:4e:cd:98:85:55:84:d3:
6a:0e:ff:41:a3:89:82:bf:74:92:4e:aa:bb:eb:cd:6b:55:15:
c3:b1:66:79:ea:79:4b:72:26:9d:65:72:75:fa:3c:10:31:01:
17:c8:7a:11:30:13:b6:1f:c7:59:0e:9b:09:16:2d:c4:77:e3:
89:68:9a:bc:cd:6d:3c:21:56:eb:05:c6:7a:a6:37:76:71:dd:
37:ac:db:bb:61:81:2e:19:47:96:ce:8f:1b:40:67:9a:f5:02:
df:bb:9e:33:ef:26:48:77:c1:f5:66:c1:ec:88:fc:8d:af:32:
47:1c:9d:04:08:10:37:81:ff:41:8d:a4:9b:68:67:4f:fe:ec:
d9:89:09:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:33:55 2026 by rpki-client