This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json) Hash identifier: f20qdr4B4Tkkzud/Ci3924+bb4YjQGmrZgaL/YYz5K0= Subject key identifier: 2A:C5:C1:7F:79:39:01:81:2A:DB:70:EC:8C:F1:91:4D:EC:9E:6F:DA Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d Certificate serial: 019BF350A809A8847917EFBB52AB4FAD4D71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft Manifest number: 17F0 Signing time: Sun 25 Jan 2026 04:01:47 +0000 Manifest this update: Sun 25 Jan 2026 04:01:47 +0000 Manifest next update: Mon 26 Jan 2026 04:01:47 +0000 Files and hashes: 1: 1-hd-jGZ4MVZi47nPzXJSf7Lg4GU.roa (hash: Zdx22tTGOTuJxXlStTXGJ2H5gGzDrcZyL0B14W8hVh0=) 2: 2aoGpLTGgK9wzCk0NHOhSBbwi24.roa (hash: CXhLfyqzlLn95FrK9zjRoOjfQ+gMogkZUp2jk/vKqTo=) 3: 6DeN01ACaOk4UT4cNyp6go_l9cA.roa (hash: Tnr/zZaEXUElLJBlgdEv3aoEsmGDmbMF/eY6+kGdmsE=) 4: G-aVVHLMC99yYOkBY3QkMmE3DqY.roa (hash: fvB74CE0O3+aj6NhVlobrpzhtdxqjyZg+fgfBzqKZNg=) 5: HWvGRqMe27--NoC2Dyw8FKUNjHk.roa (hash: ycBN27AOuQt6gtV2gw83af0DBTats6sXAt4skvhgHcE=) 6: JAPut0UfxbemMj59AxqmwrRJ0Ls.roa (hash: 0o1Sw2aOg/g6GSUlci0ay0W5MyPhGrJoF8RlAJMyZz4=) 7: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: NsS7qrTfKOziiyE7M+zpWOUXGw+dvyoFpZTKsmi0hPQ=) 8: qSsf5vEudpSeKXdovHkXjheUpNQ.roa (hash: lDG010Lrz1cwQmsgQKn3qDK0y/5g/pHYKd0HNTHtbvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:a8:09:a8:84:79:17:ef:bb:52:ab:4f:ad:4d:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d Validity Not Before: Jan 25 04:01:47 2026 GMT Not After : Jan 26 04:01:47 2026 GMT Subject: CN=2ac5c17f793901812adb70ec8cf1914dec9e6fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a0:f4:9d:62:86:3e:f1:3e:a5:4f:92:17:88: 97:59:4d:71:d7:a6:e6:94:fe:3b:13:67:2e:9f:f5: 85:f9:2d:79:ec:57:78:83:65:7d:e8:bf:9b:fc:47: 25:86:75:b2:c9:cc:71:38:05:a9:0c:c4:51:dd:f1: cf:6d:b9:03:a0:ba:42:46:1a:98:39:2d:9f:b2:f6: fe:34:11:e2:62:87:3c:9b:77:4a:fe:7d:37:5a:1d: eb:44:7b:04:03:5f:45:49:a3:70:56:48:97:ad:73: 2b:50:f6:c6:74:71:8e:f5:a0:10:d5:a9:6a:8d:1a: a8:4d:5e:f4:a1:43:6a:fe:e4:4f:f4:d8:89:4f:97: 32:dd:0d:c6:dc:9d:ac:d6:9f:35:e9:07:1d:23:47: d2:c3:ec:b0:81:e4:45:3f:04:89:84:f4:11:ef:70: 1a:fd:e1:9f:4c:47:3d:2a:4e:c8:ab:2f:cc:a4:4c: d1:a5:9a:2c:90:48:90:f7:40:7e:eb:40:50:2a:51: 84:fa:67:d5:69:93:59:5d:1a:a9:c2:8c:53:d2:5f: cb:4f:34:89:4d:8b:33:18:38:1a:b0:7c:09:c9:f1: f9:ee:96:cd:5c:f4:cf:ca:fd:e0:2b:c4:7a:8f:cb: 98:7e:f6:fa:92:c8:d6:db:c9:17:23:b6:b6:9e:fa: ee:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C5:C1:7F:79:39:01:81:2A:DB:70:EC:8C:F1:91:4D:EC:9E:6F:DA X509v3 Authority Key Identifier: keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:d3:03:38:8c:8c:45:cd:e5:56:a3:87:8c:c8:0c:1e:d5:21: 65:28:0b:1f:62:bc:10:cd:38:c4:0f:03:52:43:99:a5:8d:3e: 73:64:b7:bb:2e:df:d5:5c:6e:54:15:d2:c6:b6:c2:92:de:84: bb:02:24:52:e4:79:ec:dc:6c:d1:7e:8f:0c:3e:b2:a4:d4:4c: 38:3c:fd:61:75:9c:12:4e:45:a0:8c:6d:79:21:f9:e3:90:bc: 22:ce:9c:8e:93:6a:c6:ac:e7:14:cd:76:de:aa:99:de:7c:b5: 6c:c3:85:2a:13:c5:79:55:68:8f:e1:a8:a3:05:40:89:a7:f5: ab:00:7e:bd:cf:d0:05:54:94:93:8a:d2:2e:fc:c9:74:d9:92: 23:70:5f:24:c4:ea:1d:65:e8:99:c1:0b:3a:4a:c5:6d:df:ac: 7e:aa:bc:d4:6b:cf:3c:1b:d4:1f:29:c9:ca:27:d1:e6:cb:92: ef:d5:30:52:33:cf:1c:a2:74:49:86:a1:9c:c5:c3:c4:96:92: 53:f5:25:b4:a5:9a:fd:3c:6f:de:06:c5:0e:cc:04:94:73:b7: 14:89:df:8e:7f:d9:b6:4a:c8:d1:35:38:5d:e0:39:f5:09:9c: 67:4a:c9:e8:ff:53:aa:8e:10:82:bb:b3:89:47:68:08:7e:00: e3:05:58:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUKgJqIR5F++7UqtPrU1xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ODE2Nzc0YjdjNTY2NWQ2N2E4NmMyMGNlYjY0ODdiNWI3 OGIzOGQwHhcNMjYwMTI1MDQwMTQ3WhcNMjYwMTI2MDQwMTQ3WjAzMTEwLwYDVQQD EygyYWM1YzE3Zjc5MzkwMTgxMmFkYjcwZWM4Y2YxOTE0ZGVjOWU2ZmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qD0nWKGPvE+pU+SF4iXWU1x16bm lP47E2cun/WF+S157Fd4g2V96L+b/EclhnWyycxxOAWpDMRR3fHPbbkDoLpCRhqY OS2fsvb+NBHiYoc8m3dK/n03Wh3rRHsEA19FSaNwVkiXrXMrUPbGdHGO9aAQ1alq jRqoTV70oUNq/uRP9NiJT5cy3Q3G3J2s1p816QcdI0fSw+ywgeRFPwSJhPQR73Aa /eGfTEc9Kk7Iqy/MpEzRpZoskEiQ90B+60BQKlGE+mfVaZNZXRqpwoxT0l/LTzSJ TYszGDgasHwJyfH57pbNXPTPyv3gK8R6j8uYfvb6ksjW28kXI7a2nvrujQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrFwX95OQGBKttw7IzxkU3snm/aMB8GA1UdIwQY MBaAFGWBZ3S3xWZdZ6hsIM62SHtbeLONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYt NmIxNDY5YzNiOTVhLzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYtNmIxNDY5YzNiOTVh LzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzdMDOIyM Rc3lVqOHjMgMHtUhZSgLH2K8EM04xA8DUkOZpY0+c2S3uy7f1VxuVBXSxrbCkt6E uwIkUuR57Nxs0X6PDD6ypNRMODz9YXWcEk5FoIxteSH545C8Is6cjpNqxqznFM12 3qqZ3ny1bMOFKhPFeVVoj+GoowVAiaf1qwB+vc/QBVSUk4rSLvzJdNmSI3BfJMTq HWXomcELOkrFbd+sfqq81GvPPBvUHynJyifR5suS79UwUjPPHKJ0SYahnMXDxJaS U/UltKWa/Txv3gbFDswElHO3FInfjn/ZtkrI0TU4XeA59QmcZ0rJ6P9Tqo4Qgruz iUdoCH4A4wVYjA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:45:27 2026 by rpki-client