This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft File: zahD6BKxbexgu3CYykEzEX24R00.mft (raw, json) Hash identifier: Hye5lOHYaTL9ziKRWCK5tMlxhhvX7mvVaEgC+LKTV/o= Subject key identifier: DD:66:6D:08:9F:60:C7:04:35:3D:4F:C1:40:EA:0F:A0:5E:F0:CA:B3 Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D Certificate issuer: /CN=cda843e812b16dec60bb7098ca4133117db8474d Certificate serial: 019BF3BE1F6967183D73F4455A372E792F03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 06:01:21 +0000 Manifest this update: Sun 25 Jan 2026 06:01:21 +0000 Manifest next update: Mon 26 Jan 2026 06:01:21 +0000 Files and hashes: 1: xAJAqKl5Srwo2ARzZhLG6xPoMEY.roa (hash: zXin4xfG6I9ng2fyOSNQGYSR3toHXgB+MkkZOtI6MnY=) 2: zahD6BKxbexgu3CYykEzEX24R00.crl (hash: mEfgRWhO597H0fHZAyPDHFwQFuNhBfE+v8sWk5U3P1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:be:1f:69:67:18:3d:73:f4:45:5a:37:2e:79:2f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d Validity Not Before: Jan 25 06:01:21 2026 GMT Not After : Jan 26 06:01:21 2026 GMT Subject: CN=dd666d089f60c704353d4fc140ea0fa05ef0cab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:15:4c:c9:df:53:46:05:1a:da:55:71:bb:d2: 68:f2:78:85:58:cb:f4:83:e3:86:4e:1d:e3:d6:df: b2:7d:ca:65:d9:81:11:d6:8e:b3:ad:7b:61:89:6d: 10:38:bb:2a:e5:79:1d:3b:21:04:29:a6:a1:de:e0: aa:1a:5c:dc:7a:55:f6:e3:69:e4:4f:3e:61:79:8b: c3:41:4f:7b:85:1d:d8:05:5f:98:09:04:01:49:98: df:3f:6a:f9:65:fe:41:37:ef:2a:45:ec:22:41:36: 9f:66:82:6c:e2:74:67:1e:88:98:92:b0:b5:bd:c8: 65:5d:ba:f2:7a:64:6d:0c:da:eb:f6:d2:59:a6:14: 3f:18:42:3a:c4:ce:b1:1f:80:8c:76:3f:52:0c:40: ba:37:ad:0a:bb:36:41:f1:d5:92:7a:6e:1c:53:23: b2:05:65:22:72:fb:95:c6:b9:c3:33:ed:8a:e6:35: 29:b5:10:6c:0c:65:3d:66:96:82:fd:9b:7d:cd:60: 5c:f5:c1:6b:07:fa:62:71:f8:3a:41:72:23:24:a8: 12:5e:fe:f6:1b:13:21:32:e0:9b:0b:f4:a7:89:e4: 8f:59:40:50:f6:87:18:e2:61:fc:61:fb:0b:a1:8b: a5:38:3a:f2:b6:ef:5f:03:5f:1f:6a:62:32:d2:62: 1c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:66:6D:08:9F:60:C7:04:35:3D:4F:C1:40:EA:0F:A0:5E:F0:CA:B3 X509v3 Authority Key Identifier: keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:b8:9a:f9:81:76:1d:7f:41:14:b0:b8:90:47:df:3a:2d:aa: f0:eb:59:7c:1b:eb:05:c6:7b:f7:67:75:8a:b8:a0:0c:41:23: 69:82:62:e8:ea:d3:7a:b6:0b:0b:35:c0:6d:2a:ee:23:19:60: 68:e9:af:87:7a:c7:d9:91:fe:35:c1:cd:30:d9:86:92:37:85: 0d:f6:fd:e0:07:72:a9:df:5c:9e:84:0a:62:92:fa:f0:40:a4: 1b:b9:64:8f:00:92:37:09:70:dd:40:61:11:5b:30:d2:b3:f4: 9f:01:b6:3a:d1:f8:43:eb:4e:f2:0a:43:c3:b2:12:67:e8:88: 70:31:57:e3:a2:dd:c0:5a:b2:99:b5:0e:a4:62:56:63:81:5f: ea:99:40:80:51:6c:05:b4:e7:f8:68:19:73:09:68:60:9c:49: 1d:01:de:1e:e5:06:e5:74:81:29:0a:be:26:92:6e:0d:10:3a: 64:75:d1:21:55:0f:23:ed:f0:c4:74:44:57:66:e8:ff:31:28: a4:26:53:05:8f:62:ba:71:7a:b3:f6:de:d2:dc:3f:94:f3:64: 36:f9:98:2a:a7:56:52:56:2e:12:b5:51:1d:79:53:79:86:14: 92:c4:1e:81:e1:be:43:46:88:59:ac:da:ae:34:e7:ca:52:f9: 38:60:48:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvh9pZxg9c/RFWjcueS8DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYTg0M2U4MTJiMTZkZWM2MGJiNzA5OGNhNDEzMzExN2Ri ODQ3NGQwHhcNMjYwMTI1MDYwMTIxWhcNMjYwMTI2MDYwMTIxWjAzMTEwLwYDVQQD EyhkZDY2NmQwODlmNjBjNzA0MzUzZDRmYzE0MGVhMGZhMDVlZjBjYWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRVMyd9TRgUa2lVxu9Jo8niFWMv0 g+OGTh3j1t+yfcpl2YER1o6zrXthiW0QOLsq5XkdOyEEKaah3uCqGlzcelX242nk Tz5heYvDQU97hR3YBV+YCQQBSZjfP2r5Zf5BN+8qRewiQTafZoJs4nRnHoiYkrC1 vchlXbryemRtDNrr9tJZphQ/GEI6xM6xH4CMdj9SDEC6N60KuzZB8dWSem4cUyOy BWUicvuVxrnDM+2K5jUptRBsDGU9ZpaC/Zt9zWBc9cFrB/picfg6QXIjJKgSXv72 GxMhMuCbC/SnieSPWUBQ9ocY4mH8YfsLoYulODrytu9fA18famIy0mIcQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1mbQifYMcENT1PwUDqD6Be8MqzMB8GA1UdIwQY MBaAFM2oQ+gSsW3sYLtwmMpBMxF9uEdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84ZWIzMmQtZjdlMy00YTljLWFhYTQt ODQyMWQ3ODFiMDNiLzEvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84ZWIzMmQtZjdlMy00YTljLWFhYTQtODQyMWQ3ODFiMDNi LzEvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7ia+YF2 HX9BFLC4kEffOi2q8OtZfBvrBcZ792d1irigDEEjaYJi6OrTerYLCzXAbSruIxlg aOmvh3rH2ZH+NcHNMNmGkjeFDfb94Adyqd9cnoQKYpL68ECkG7lkjwCSNwlw3UBh EVsw0rP0nwG2OtH4Q+tO8gpDw7ISZ+iIcDFX46LdwFqymbUOpGJWY4Ff6plAgFFs BbTn+GgZcwloYJxJHQHeHuUG5XSBKQq+JpJuDRA6ZHXRIVUPI+3wxHREV2bo/zEo pCZTBY9iunF6s/be0tw/lPNkNvmYKqdWUlYuErVRHXlTeYYUksQegeG+Q0aIWaza rjTnylL5OGBI2w== -----END CERTIFICATE-----Generated at Sun Jan 25 13:09:54 2026 by rpki-client