This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json) Hash identifier: OULc0wfWqEMpr7YycT4BcTvNzB4z+NPIMG9OhXoheRA= Subject key identifier: 2E:5B:AA:99:59:29:63:86:29:69:35:F6:11:A5:EB:8E:91:68:1D:C9 Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601 Certificate serial: 019BF6F550E0E14127FF6204F9C9C5BCF7DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft Manifest number: 0CAB Signing time: Sun 25 Jan 2026 21:00:30 +0000 Manifest this update: Sun 25 Jan 2026 21:00:30 +0000 Manifest next update: Mon 26 Jan 2026 21:00:30 +0000 Files and hashes: 1: 8r1K1OM5qngui5thmoePxmjOGcI.roa (hash: Lc08lhuuRKkKxvYSfc9k1w2HHAp3Uz/xuk8BCj5oIrU=) 2: HMy1wxSppt6a370WgOiNsXQlVPk.roa (hash: nDhnb6wdJq1bcejnMDwW0L0rGJF02QbJ2F6fT5r9zng=) 3: JpNz-5mJsFq7butKO_csWbCEm5Q.roa (hash: VpAczQvbgQ1Ym4VsrRQcCrHDbx+vYYfxzFiOJ1msYps=) 4: KO2DY0u9wdedPHwObsI7cPYbfFQ.roa (hash: chzNX5SpmlEt8RciW6ST6qYzL/lzzcsJcvqyYaAMbaQ=) 5: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: caflrrhD3vDR1A9U5xpxXw79v/HDAfc0AHkU8nEJyd0=) 6: ZuS-gRLhfC_n_ype4xj8F1xzPiw.roa (hash: EZUmDI/jcW023J4DXzaS1TmCl7OpJwcwm1bJROBPAP8=) 7: _foadMbZdx4Kyy6kAY35bfy57Ew.asa (hash: f8gD+BKnO4V+AgW6MN335RkWYKE7LS8tKEs9AypX4GM=) 8: aOh1-99JcOZxqAcykG11EP2F9_g.roa (hash: 5HlRoHZPsDB8WS/Sga5nh3qNHpa39AaXfQFzVc0mT+4=) 9: fN_qyC3q0DgZifOUjvgGUIVLuLE.roa (hash: Ghng4SHLOPaXZFJc/gZf2VJ82XHj4yYptmX1zNVV1oI=) 10: mP8zF_bJOTWvXPulXS_oUR4vAd8.roa (hash: 4byK92brafemOMsopEaLGHGlykZBiRbGdrhWO9EemSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:50:e0:e1:41:27:ff:62:04:f9:c9:c5:bc:f7:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601 Validity Not Before: Jan 25 21:00:30 2026 GMT Not After : Jan 26 21:00:30 2026 GMT Subject: CN=2e5baa9959296386296935f611a5eb8e91681dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:24:79:90:fe:cd:65:b1:01:e4:97:d2:08:c6: c0:1c:71:a3:38:74:48:22:9c:c9:fb:30:2f:93:72: f6:2d:fb:01:bb:36:36:ee:c9:e6:ec:81:07:45:a3: b6:ef:3c:ff:a5:94:ad:a4:b9:df:6b:58:25:b7:b3: 36:93:bc:75:52:e3:59:6f:93:bd:ed:2e:40:75:b1: 54:c8:a4:37:5f:d5:7f:24:09:c1:82:5b:32:b9:fc: d0:77:35:bb:dd:0a:69:32:12:41:6a:c4:7a:55:af: bb:10:93:0b:83:be:c6:50:09:56:95:65:64:7d:f1: 8b:f2:7a:e4:6c:d8:dd:7e:9b:3f:fe:4c:db:26:dc: 45:f7:9b:cc:5e:e5:66:e0:0a:f8:b3:0c:51:51:0b: 14:31:80:13:aa:0f:43:52:51:c6:08:b5:f0:87:57: c9:d5:3b:2f:02:15:98:ab:d6:5b:e0:d4:fe:fc:17: c0:2b:0a:1e:4d:c1:68:97:43:0a:f0:64:3a:79:3f: 01:86:86:1c:62:7e:df:d4:69:3f:39:b3:f1:4e:b5: 15:43:97:38:85:4f:65:77:f5:f8:3f:a1:d2:51:ff: 9a:a7:33:b8:4b:37:d5:ce:e4:c0:a7:11:6f:f2:56: 34:30:da:d2:1e:d1:23:a6:26:97:fa:f9:f3:82:10: 70:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5B:AA:99:59:29:63:86:29:69:35:F6:11:A5:EB:8E:91:68:1D:C9 X509v3 Authority Key Identifier: keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:a1:95:c2:23:b2:3e:d4:be:50:c3:05:8b:bd:ec:2e:7d:d1: 2a:43:e1:fb:4c:29:30:fb:e0:ed:76:03:79:96:6a:8a:8f:83: 70:9c:43:26:25:da:a7:58:2a:d8:19:a0:fc:18:c9:76:6a:cc: d5:7c:89:55:31:ab:92:fb:7d:2f:58:11:6c:fb:62:0d:d3:dd: ce:23:77:af:d6:1c:16:32:39:96:dc:a6:11:d8:c9:f3:10:44: e8:29:79:7b:f3:a8:b1:6f:e7:6a:9f:50:83:14:40:28:d6:a7: 5d:9b:08:2b:f2:8a:d3:1c:f8:fd:14:e5:21:6d:dc:46:18:ba: cd:4e:62:0f:f3:0b:54:91:1b:97:87:7c:cb:d3:d5:1d:34:de: eb:08:49:9f:f8:6f:ba:61:ba:83:8f:3a:f3:85:a3:7e:22:af: 8e:9c:e4:39:4f:fb:0a:db:55:ec:92:72:c4:f9:63:98:e9:9e: 2b:94:b3:1f:7f:70:da:4d:e6:2d:80:01:ef:07:07:f7:5b:f6: 01:5b:d1:42:c1:9b:19:4b:8c:cb:bf:ef:47:cd:84:f3:69:8e: 13:af:95:f6:39:9d:85:7c:c3:34:35:d6:46:69:bf:56:c3:6a: 17:4e:98:60:05:fa:ea:b9:5b:c3:20:c9:67:24:e4:69:79:4b: 25:d0:bb:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29VDg4UEn/2IE+cnFvPfcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2UxNzljYmUxM2RkYjE0MDEyOTg1YTA2NzEwMGVmOThh NTU2MDEwHhcNMjYwMTI1MjEwMDMwWhcNMjYwMTI2MjEwMDMwWjAzMTEwLwYDVQQD EygyZTViYWE5OTU5Mjk2Mzg2Mjk2OTM1ZjYxMWE1ZWI4ZTkxNjgxZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iR5kP7NZbEB5JfSCMbAHHGjOHRI IpzJ+zAvk3L2LfsBuzY27snm7IEHRaO27zz/pZStpLnfa1glt7M2k7x1UuNZb5O9 7S5AdbFUyKQ3X9V/JAnBglsyufzQdzW73QppMhJBasR6Va+7EJMLg77GUAlWlWVk ffGL8nrkbNjdfps//kzbJtxF95vMXuVm4Ar4swxRUQsUMYATqg9DUlHGCLXwh1fJ 1TsvAhWYq9Zb4NT+/BfAKwoeTcFol0MK8GQ6eT8BhoYcYn7f1Gk/ObPxTrUVQ5c4 hU9ld/X4P6HSUf+apzO4SzfVzuTApxFv8lY0MNrSHtEjpiaX+vnzghBwAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5bqplZKWOGKWk19hGl646RaB3JMB8GA1UdIwQY MBaAFGfOF5y+E92xQBKYWgZxAO+YpVYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEt NjJjMDFkYzY5Y2NhLzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEtNjJjMDFkYzY5Y2Nh LzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKGVwiOy PtS+UMMFi73sLn3RKkPh+0wpMPvg7XYDeZZqio+DcJxDJiXap1gq2Bmg/BjJdmrM 1XyJVTGrkvt9L1gRbPtiDdPdziN3r9YcFjI5ltymEdjJ8xBE6Cl5e/OosW/nap9Q gxRAKNanXZsIK/KK0xz4/RTlIW3cRhi6zU5iD/MLVJEbl4d8y9PVHTTe6whJn/hv umG6g48684WjfiKvjpzkOU/7CttV7JJyxPljmOmeK5SzH39w2k3mLYAB7wcH91v2 AVvRQsGbGUuMy7/vR82E82mOE6+V9jmdhXzDNDXWRmm/VsNqF06YYAX66rlbwyDJ ZyTkaXlLJdC7cQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:10:09 2026 by rpki-client