This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft File: Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft (raw, json) Hash identifier: EzQSf27LCCrMgkdYr06A9oVPhxz+4T0zhLGAHXfufaM= Subject key identifier: 6B:E3:B5:2F:09:F2:CB:B5:90:90:D2:AD:DF:3D:ED:FB:0D:31:C3:C8 Authority key identifier: 67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2 Certificate issuer: /CN=670ec53068393d90db601ec295e42908525e10c2 Certificate serial: 019BF53ECB9AB52D2B7F54D346F0969CB4C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft Manifest number: 0ED2 Signing time: Sun 25 Jan 2026 13:01:31 +0000 Manifest this update: Sun 25 Jan 2026 13:01:31 +0000 Manifest next update: Mon 26 Jan 2026 13:01:31 +0000 Files and hashes: 1: Nh6TGiZWo0EOxhMqHLoTd_RYjgw.roa (hash: jvTmWCCcSLAGtI/9GquGJ7vRIPsivGfTGeyKsvphVGk=) 2: Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl (hash: tcPjCWs+gHOCu1MqWtePQIZYt30qx6Fm0eCwtEMwqRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:cb:9a:b5:2d:2b:7f:54:d3:46:f0:96:9c:b4:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=670ec53068393d90db601ec295e42908525e10c2 Validity Not Before: Jan 25 13:01:31 2026 GMT Not After : Jan 26 13:01:31 2026 GMT Subject: CN=6be3b52f09f2cbb59090d2addf3dedfb0d31c3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:93:27:3f:74:27:05:6a:07:95:74:73:44:a4: fe:fb:ed:fd:21:30:16:6f:53:e0:0c:78:a3:ed:67: ef:66:7a:90:fc:b2:d8:18:f5:92:87:2c:a5:82:b0: 36:ab:77:78:39:e0:f0:23:5f:f4:66:f5:75:44:85: 83:05:11:93:25:10:41:d6:5c:fe:d3:c9:5c:c7:bc: 5c:23:4a:54:65:08:fd:12:a9:bc:f3:53:5e:9f:92: 80:5b:dd:db:16:54:13:4e:85:e3:da:8c:1c:09:a0: 9f:87:68:e0:38:e5:0e:b5:30:b7:92:3a:b1:23:b1: 20:67:cf:35:1e:5c:86:f7:95:37:2b:35:f9:b5:12: d3:52:34:4f:77:14:88:ab:86:e9:d4:30:5e:f9:14: 11:0a:b8:fb:f5:f6:56:18:d9:cf:4f:a4:d8:f4:9d: 2e:2a:e1:92:a1:ec:40:40:4b:b7:49:84:3e:72:f0: fc:9c:f8:28:40:1f:81:df:0a:7b:57:5c:8f:ff:2e: 16:0d:5c:15:28:45:cd:4a:ab:74:6f:7a:20:12:5f: 41:69:e7:fe:30:78:c5:09:d2:d2:1b:47:8b:8e:be: 27:99:40:79:7f:bd:4b:29:bd:62:51:f0:3c:d1:a9: 02:cb:6b:e9:0e:65:8a:aa:1d:07:6a:a7:0f:0a:71: 6e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E3:B5:2F:09:F2:CB:B5:90:90:D2:AD:DF:3D:ED:FB:0D:31:C3:C8 X509v3 Authority Key Identifier: keyid:67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:57:c4:aa:6b:73:c2:4b:98:36:fd:69:3b:28:48:61:7c:8f: a8:6c:2a:4a:82:72:03:f0:f5:cb:49:59:2d:d0:61:53:43:e6: df:72:32:85:71:24:bc:f7:19:ea:42:ec:c0:d1:fa:10:60:fd: cb:c3:6c:93:4c:32:f3:b8:97:74:82:a1:f0:ca:0f:14:cc:57: 75:77:72:25:a6:76:0e:7c:b5:64:bc:d1:00:e3:27:47:23:df: d0:73:fb:18:20:df:a0:6f:fe:5f:c8:fa:7f:ea:fc:7e:3b:3e: 25:a9:05:c4:c1:00:89:a9:4a:bd:06:d0:5e:ba:26:2e:42:03: c1:90:f7:de:a1:ea:db:bd:a1:92:31:ba:e6:ed:97:99:7c:14: 11:ce:9d:a3:18:e5:65:01:df:4e:e8:4a:dd:c5:e9:ac:e1:75: ac:59:f2:51:06:5f:27:7f:50:cb:d5:7d:0c:56:fe:e0:6a:d2: d9:6d:54:cb:cc:09:d9:fd:64:e6:b9:9a:35:85:3b:6b:03:57: 06:57:4f:b7:b4:48:bb:7f:d3:1a:08:ac:72:56:12:fa:b5:98: 48:27:6f:ad:49:8f:17:44:d2:7f:71:b4:7f:24:b3:f1:d5:82: 38:82:ce:cc:e0:b7:8d:73:f3:a9:17:c0:82:92:a2:7f:4c:7d: be:2b:b9:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PsuatS0rf1TTRvCWnLTJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MGVjNTMwNjgzOTNkOTBkYjYwMWVjMjk1ZTQyOTA4NTI1 ZTEwYzIwHhcNMjYwMTI1MTMwMTMxWhcNMjYwMTI2MTMwMTMxWjAzMTEwLwYDVQQD Eyg2YmUzYjUyZjA5ZjJjYmI1OTA5MGQyYWRkZjNkZWRmYjBkMzFjM2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5MnP3QnBWoHlXRzRKT+++39ITAW b1PgDHij7WfvZnqQ/LLYGPWShyylgrA2q3d4OeDwI1/0ZvV1RIWDBRGTJRBB1lz+ 08lcx7xcI0pUZQj9Eqm881Nen5KAW93bFlQTToXj2owcCaCfh2jgOOUOtTC3kjqx I7EgZ881HlyG95U3KzX5tRLTUjRPdxSIq4bp1DBe+RQRCrj79fZWGNnPT6TY9J0u KuGSoexAQEu3SYQ+cvD8nPgoQB+B3wp7V1yP/y4WDVwVKEXNSqt0b3ogEl9Baef+ MHjFCdLSG0eLjr4nmUB5f71LKb1iUfA80akCy2vpDmWKqh0HaqcPCnFugwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvjtS8J8su1kJDSrd897fsNMcPIMB8GA1UdIwQY MBaAFGcOxTBoOT2Q22AewpXkKQhSXhDCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnc3Rk1HZzVQWkRiWUI3Q2xlUXBDRkplRU1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9jNDI0ZDEtMjdmZC00ZjQ3LWJiNzEt NzNkMjE4YTQ5MDNlLzEvWnc3Rk1HZzVQWkRiWUI3Q2xlUXBDRkplRU1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9jNDI0ZDEtMjdmZC00ZjQ3LWJiNzEtNzNkMjE4YTQ5MDNl LzEvWnc3Rk1HZzVQWkRiWUI3Q2xlUXBDRkplRU1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVfEqmtz wkuYNv1pOyhIYXyPqGwqSoJyA/D1y0lZLdBhU0Pm33IyhXEkvPcZ6kLswNH6EGD9 y8Nsk0wy87iXdIKh8MoPFMxXdXdyJaZ2Dny1ZLzRAOMnRyPf0HP7GCDfoG/+X8j6 f+r8fjs+JakFxMEAialKvQbQXromLkIDwZD33qHq272hkjG65u2XmXwUEc6doxjl ZQHfTuhK3cXprOF1rFnyUQZfJ39Qy9V9DFb+4GrS2W1Uy8wJ2f1k5rmaNYU7awNX BldPt7RIu3/TGgisclYS+rWYSCdvrUmPF0TSf3G0fySz8dWCOILOzOC3jXPzqRfA gpKif0x9viu5hw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:37 2026 by rpki-client