This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json) Hash identifier: hSuICLEhf2mNOJdvhQE2eMFqfT21n0xMlIduS/WajGY= Subject key identifier: FB:B8:BA:43:01:99:AF:11:29:7D:81:24:B3:E6:3A:BD:CA:EA:6C:60 Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601 Certificate serial: 019BF507860918DD66298EE56B64336A14E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft Manifest number: 0CAA Signing time: Sun 25 Jan 2026 12:01:09 +0000 Manifest this update: Sun 25 Jan 2026 12:01:09 +0000 Manifest next update: Mon 26 Jan 2026 12:01:09 +0000 Files and hashes: 1: 8r1K1OM5qngui5thmoePxmjOGcI.roa (hash: Lc08lhuuRKkKxvYSfc9k1w2HHAp3Uz/xuk8BCj5oIrU=) 2: HMy1wxSppt6a370WgOiNsXQlVPk.roa (hash: nDhnb6wdJq1bcejnMDwW0L0rGJF02QbJ2F6fT5r9zng=) 3: JpNz-5mJsFq7butKO_csWbCEm5Q.roa (hash: VpAczQvbgQ1Ym4VsrRQcCrHDbx+vYYfxzFiOJ1msYps=) 4: KO2DY0u9wdedPHwObsI7cPYbfFQ.roa (hash: chzNX5SpmlEt8RciW6ST6qYzL/lzzcsJcvqyYaAMbaQ=) 5: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: UX3N9BlyHu6XsQCRykHGCSEQcggvYhIR1Iag7rwB9A4=) 6: ZuS-gRLhfC_n_ype4xj8F1xzPiw.roa (hash: EZUmDI/jcW023J4DXzaS1TmCl7OpJwcwm1bJROBPAP8=) 7: _foadMbZdx4Kyy6kAY35bfy57Ew.asa (hash: f8gD+BKnO4V+AgW6MN335RkWYKE7LS8tKEs9AypX4GM=) 8: aOh1-99JcOZxqAcykG11EP2F9_g.roa (hash: 5HlRoHZPsDB8WS/Sga5nh3qNHpa39AaXfQFzVc0mT+4=) 9: fN_qyC3q0DgZifOUjvgGUIVLuLE.roa (hash: Ghng4SHLOPaXZFJc/gZf2VJ82XHj4yYptmX1zNVV1oI=) 10: mP8zF_bJOTWvXPulXS_oUR4vAd8.roa (hash: 4byK92brafemOMsopEaLGHGlykZBiRbGdrhWO9EemSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:86:09:18:dd:66:29:8e:e5:6b:64:33:6a:14:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601 Validity Not Before: Jan 25 12:01:09 2026 GMT Not After : Jan 26 12:01:09 2026 GMT Subject: CN=fbb8ba430199af11297d8124b3e63abdcaea6c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9f:d8:ff:0c:a5:1b:4d:84:b3:e1:a6:fc:38: ff:cf:45:2d:2e:d2:05:5f:d0:73:f4:10:8c:cb:d7: 92:76:51:35:d2:ec:86:72:20:92:17:b5:21:f4:10: 33:f7:d2:a0:99:0f:03:5e:5c:94:fb:29:4b:9d:d7: 7e:59:c3:b5:27:59:b9:89:93:a2:ff:59:2c:62:03: 0e:0e:cf:2d:aa:d7:42:f3:47:8f:a0:53:09:09:0e: ae:f8:6e:60:9c:da:4e:e1:9f:a8:92:96:a5:1e:5c: 08:19:ef:e3:a9:3e:08:2c:72:a4:bc:95:47:1f:da: c2:c6:dd:90:ed:6d:05:f2:21:f6:5b:64:88:22:4a: 34:82:6a:1b:13:e8:a1:cc:92:6b:1d:e7:eb:fb:ab: 20:bb:a3:fc:94:69:75:23:03:c4:91:d0:b1:67:6f: f0:48:d4:9d:3a:e9:96:e5:3d:09:4d:27:26:c7:2a: 0b:91:3c:04:f1:86:1f:8b:7b:f9:d8:0d:b2:31:5f: b2:32:40:eb:0c:bf:c3:61:14:3b:04:e0:a4:09:3a: 01:82:fc:c3:5b:c4:d0:9f:37:f4:1d:a7:48:7a:9c: b5:fc:54:aa:61:f6:27:0e:cd:85:3c:9b:d3:65:c7: 7b:a7:f3:be:e9:cb:2d:83:b9:fe:9a:f3:74:17:0f: cd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B8:BA:43:01:99:AF:11:29:7D:81:24:B3:E6:3A:BD:CA:EA:6C:60 X509v3 Authority Key Identifier: keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:d4:dc:3c:97:c9:01:45:00:68:ff:e1:1b:8a:e5:7a:a0:01: 01:17:70:3e:85:43:6c:5f:60:90:a0:fd:aa:90:cf:c1:bc:37: 81:26:0a:17:a3:da:dd:35:b1:56:3a:19:f5:03:1a:3a:42:0e: 1a:ab:3c:e1:40:a2:90:64:39:6b:fb:73:aa:d8:31:a1:a1:94: f1:54:84:c6:04:e5:25:81:62:c2:3c:d6:c2:65:99:0f:fd:88: fd:ad:1c:1b:cf:33:62:4f:30:74:57:48:60:f4:4c:c5:e1:91: f1:f4:36:d2:aa:67:da:7c:af:46:51:0f:62:18:4c:34:6b:4a: 4a:d7:40:38:27:a6:2e:ed:27:13:c8:72:fe:2c:f5:fb:cf:bb: ff:ba:c6:72:6f:07:77:34:c2:99:63:e6:8b:d2:c4:3c:18:0a: a9:2c:48:6e:31:3d:c1:2a:e7:72:7b:35:5f:e8:4e:a0:b6:7d: b1:17:83:4c:53:65:cc:d2:72:86:9f:60:61:e6:ba:84:bd:88: 95:bc:32:d7:cd:0b:4c:f4:5e:ee:1b:7b:1e:00:18:09:38:60: 19:69:b4:7c:27:b3:e5:df:f0:d7:9d:8d:1c:f6:42:36:c4:12: 7e:06:47:a2:79:7f:a6:98:eb:45:ed:77:0f:a8:fa:66:55:83: a3:53:54:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B4YJGN1mKY7la2QzahTnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2UxNzljYmUxM2RkYjE0MDEyOTg1YTA2NzEwMGVmOThh NTU2MDEwHhcNMjYwMTI1MTIwMTA5WhcNMjYwMTI2MTIwMTA5WjAzMTEwLwYDVQQD EyhmYmI4YmE0MzAxOTlhZjExMjk3ZDgxMjRiM2U2M2FiZGNhZWE2YzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ/Y/wylG02Es+Gm/Dj/z0UtLtIF X9Bz9BCMy9eSdlE10uyGciCSF7Uh9BAz99KgmQ8DXlyU+ylLndd+WcO1J1m5iZOi /1ksYgMODs8tqtdC80ePoFMJCQ6u+G5gnNpO4Z+okpalHlwIGe/jqT4ILHKkvJVH H9rCxt2Q7W0F8iH2W2SIIko0gmobE+ihzJJrHefr+6sgu6P8lGl1IwPEkdCxZ2/w SNSdOumW5T0JTScmxyoLkTwE8YYfi3v52A2yMV+yMkDrDL/DYRQ7BOCkCToBgvzD W8TQnzf0HadIepy1/FSqYfYnDs2FPJvTZcd7p/O+6cstg7n+mvN0Fw/NzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPu4ukMBma8RKX2BJLPmOr3K6mxgMB8GA1UdIwQY MBaAFGfOF5y+E92xQBKYWgZxAO+YpVYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEt NjJjMDFkYzY5Y2NhLzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEtNjJjMDFkYzY5Y2Nh LzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdTcPJfJ AUUAaP/hG4rleqABARdwPoVDbF9gkKD9qpDPwbw3gSYKF6Pa3TWxVjoZ9QMaOkIO Gqs84UCikGQ5a/tzqtgxoaGU8VSExgTlJYFiwjzWwmWZD/2I/a0cG88zYk8wdFdI YPRMxeGR8fQ20qpn2nyvRlEPYhhMNGtKStdAOCemLu0nE8hy/iz1+8+7/7rGcm8H dzTCmWPmi9LEPBgKqSxIbjE9wSrncns1X+hOoLZ9sReDTFNlzNJyhp9gYea6hL2I lbwy180LTPRe7ht7HgAYCThgGWm0fCez5d/w152NHPZCNsQSfgZHonl/ppjrRe13 D6j6ZlWDo1NUmA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:41 2026 by rpki-client