This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
File: Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json)
Hash identifier: rDwOcAzWkujlm9gv94Dh3JPWkJ2AWPAcc9Uyrcc7s58=
Subject key identifier: 12:AD:15:AB:BD:42:94:85:BE:F9:23:9A:7D:5D:3F:C8:95:8F:B3:88
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019BF2AB305B3F11F342506B04EDCF0DDDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
Manifest number: 0B4A
Signing time: Sun 25 Jan 2026 01:01:03 +0000
Manifest this update: Sun 25 Jan 2026 01:01:03 +0000
Manifest next update: Mon 26 Jan 2026 01:01:03 +0000
Files and hashes: 1: 1vbf4idXUPCWVm0PjanUNDzo3LM.roa (hash: /Im6rBlfP/hqnXVPz/7A/iNYH4vUpjF3xS/bQj/oQ5Q=)
2: 2KGI0ncnRfDhkkE_GeDt4kg9A6A.roa (hash: D03oFEIOCPyMTFkWyGOuVN6dyHDgUfDh2sP45/yVk0M=)
3: 5ezkBuUO_mRQaK77N71yAYPHDSk.roa (hash: 68pFo2CVd18e5RuuFBsy+sO6jAIproK/b7Z1zfrUu1Y=)
4: 7ZlxFMTrvWHxaDQj8cGRFKFOYRs.roa (hash: cMX6h6ESvCK8kLWWGv+cii+7hJJzZRIJOKQPIQ2Prc4=)
5: 99pLW5NSdSWyy1K_KuBziUqycLU.roa (hash: iIMALiQte4M3j2/lLwOQNkJ4eCV7WxTe0kTN8g67L1E=)
6: BVH6b7o32zruo819dGQ7RJqUDl8.roa (hash: xnWOB/u8pFkczKp6SQPwHh+agMf57JcMqkeEhSQno3k=)
7: CFRA8brf5sE4J0Vi_mv81svugxI.roa (hash: uvljp7f/z0E6aDzdRUCbiXg1uxB0BXMPXZAh/OfcnR8=)
8: O95FYcJt2MJqQBJC_AIOSexxhY0.roa (hash: 0fj+Bm1xvWakTGbe1RmNsauUNwiHSCe1QzuuMJQvQKI=)
9: R2Xs7XqXEclO85JXT59oGHv2UUY.roa (hash: nIFGF9nru9tSwOgFOZOY266TEUqFgtMmSxtUiekx1us=)
10: SRu3Oj_JR0Aqw1_pXOqCkyqZiNM.roa (hash: OXGfPj6oOrbejLX45mK4NILgwBe4FcCaUI2RA3UNsvQ=)
11: UGOdZFnWOaDTUW1gBJTVRUvwwsg.roa (hash: 31f0c90jHRTJFbEadEWirIAL83TgIDaQVunpcdqq/Lc=)
12: WBXZwfjVQMhyPd0wAfSbxYfJifA.roa (hash: 7Zi1rF/rVFpFWu59NAjvAspfxDVu7Q9niDEtiwGb2YM=)
13: YnEzVxxydocNJgTIMFRXPna0zB4.roa (hash: ZgavJWzGoXn3e/0BfVR/irboVRcmVNTc0rTuF6DBaG8=)
14: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: X6608pryvVsG49YbCMHO8erPi9UKGJYjuwCuW2u4fVw=)
15: fja8EDLSj-GXWp-ja1-kSk00taQ.roa (hash: fV9XPVZHv5y/fbzPwaa+4kN4atFK0nZgUPlx8b1imXU=)
16: qUJVzkvCS28CT-LmqvhYZclQCzE.roa (hash: BntXpT1OhjVzTBdajvz/YjJOLIAqWeZhu5LfIQJSn34=)
17: ulmVQiOp1gOs49EtEkyImPsqtd0.roa (hash: f351U+o3k5FK4942+J3BTuz1lhxg1e9CRMaV4iDlrp0=)
18: xYOjGrtanKeGVZ1Pt7PD6O358Pk.roa (hash: x/lvRLnCd056xaDMO54C/xWo//QMs29fskT6KgX2F4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:ab:30:5b:3f:11:f3:42:50:6b:04:ed:cf:0d:dd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jan 25 01:01:03 2026 GMT
Not After : Jan 26 01:01:03 2026 GMT
Subject: CN=12ad15abbd429485bef9239a7d5d3fc8958fb388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:63:fa:e3:23:f7:a3:79:1f:0a:1a:b0:ff:
4b:a1:91:ce:b5:95:da:86:2a:ea:9b:85:fc:24:b8:
b2:f7:4e:79:ac:d5:7f:65:40:9f:0b:77:f6:5f:fe:
31:15:64:b7:c4:c9:a0:ed:86:da:fe:e9:5b:d3:c7:
47:10:96:59:60:a1:a0:33:d5:1d:fb:d3:ba:c6:72:
32:f7:40:90:3f:19:c9:03:67:cb:74:68:50:4d:0a:
55:45:5c:0f:d5:9b:53:c3:3e:e5:50:d6:f5:79:83:
b9:22:28:47:2a:b4:a8:ba:d2:6c:68:3e:3e:0d:da:
0b:12:d7:89:c8:6f:a1:b3:45:f2:c2:e2:55:af:80:
7a:20:39:2c:9c:e8:5d:1a:b7:bc:a6:95:a0:dd:72:
18:89:89:da:06:7d:66:e4:90:fc:d0:cf:82:9d:b3:
61:66:ae:f4:92:00:b3:09:3e:ea:67:47:57:99:ff:
cd:0b:dc:b4:2d:eb:8b:c3:07:14:11:a4:ba:9b:40:
87:4e:9b:d9:97:2e:31:64:7c:a8:ae:7c:6f:94:1a:
c0:87:a0:48:23:7e:7f:9e:14:61:85:e7:86:c1:87:
44:47:68:fa:be:9e:f7:3c:ea:04:f4:cf:e7:a3:96:
17:ea:74:d1:37:09:34:e7:f2:31:2f:eb:89:19:86:
15:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AD:15:AB:BD:42:94:85:BE:F9:23:9A:7D:5D:3F:C8:95:8F:B3:88
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:af:14:37:37:7e:89:f3:64:ac:2d:46:76:3e:21:b1:90:16:
79:14:dc:c6:ef:1e:24:f1:b6:c7:80:9f:e0:5d:ee:23:8b:68:
71:14:6a:35:ec:af:70:63:45:84:c8:a6:7a:b3:eb:8e:04:db:
c5:ba:52:84:c0:75:86:ca:fe:19:28:2e:fd:e3:6e:b8:aa:b2:
ad:5e:d4:c0:f8:88:e0:80:ff:a5:c0:94:47:09:67:ea:6d:b8:
1b:0b:a7:3a:d8:56:52:3d:fd:1d:24:ee:91:63:30:0a:27:ad:
6a:3a:22:9f:d1:cf:a5:eb:29:2e:3c:3c:e1:f7:b1:ba:4c:51:
b1:58:eb:52:6a:e2:ac:f4:ea:12:9a:0e:e5:f3:92:e4:5a:c8:
38:9e:9e:fe:bf:f9:cf:73:13:b5:5c:31:e9:f8:8a:4a:99:e9:
2a:1d:ca:9a:1d:3a:76:fe:76:13:ec:39:22:ae:16:e3:46:cf:
32:cb:a7:02:6b:32:11:bf:34:79:70:07:93:ad:56:ae:32:05:
cd:b7:b9:5e:0e:5a:79:48:a0:de:1f:24:fc:49:e9:c1:9b:90:
a7:0a:d4:2c:55:e5:e9:98:99:bc:66:cd:10:44:8b:10:03:5a:
63:6f:a0:af:fb:6c:48:e4:d9:dc:b6:47:66:87:52:4a:13:25:
bb:4e:df:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvyqzBbPxHzQlBrBO3PDd3VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx
ZTllNjUwHhcNMjYwMTI1MDEwMTAzWhcNMjYwMTI2MDEwMTAzWjAzMTEwLwYDVQQD
EygxMmFkMTVhYmJkNDI5NDg1YmVmOTIzOWE3ZDVkM2ZjODk1OGZiMzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC9j+uMj96N5HwoasP9LoZHOtZXa
hirqm4X8JLiy9055rNV/ZUCfC3f2X/4xFWS3xMmg7Yba/ulb08dHEJZZYKGgM9Ud
+9O6xnIy90CQPxnJA2fLdGhQTQpVRVwP1ZtTwz7lUNb1eYO5IihHKrSoutJsaD4+
DdoLEteJyG+hs0XywuJVr4B6IDksnOhdGre8ppWg3XIYiYnaBn1m5JD80M+CnbNh
Zq70kgCzCT7qZ0dXmf/NC9y0LeuLwwcUEaS6m0CHTpvZly4xZHyornxvlBrAh6BI
I35/nhRhheeGwYdER2j6vp73POoE9M/no5YX6nTRNwk05/IxL+uJGYYVnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKtFau9QpSFvvkjmn1dP8iVj7OIMB8GA1UdIwQY
MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct
MzU1MDgwNDE2NTJkLzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk
LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAma8UNzd+
ifNkrC1Gdj4hsZAWeRTcxu8eJPG2x4Cf4F3uI4tocRRqNeyvcGNFhMimerPrjgTb
xbpShMB1hsr+GSgu/eNuuKqyrV7UwPiI4ID/pcCURwln6m24GwunOthWUj39HSTu
kWMwCietajoin9HPpespLjw84fexukxRsVjrUmrirPTqEpoO5fOS5FrIOJ6e/r/5
z3MTtVwx6fiKSpnpKh3Kmh06dv52E+w5Iq4W40bPMsunAmsyEb80eXAHk61WrjIF
zbe5Xg5aeUig3h8k/EnpwZuQpwrULFXl6ZiZvGbNEESLEANaY2+gr/tsSOTZ3LZH
ZodSShMlu07fxQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:14:54 2026 by rpki-client