This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft File: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft (raw, json) Hash identifier: 5ZKSdo1xGB1V24WCCsvWYD02GHG9rkRbC0fwO18QPD0= Subject key identifier: 5F:94:95:A4:0E:DE:1C:23:19:40:B2:92:01:20:8D:D9:04:55:EC:D0 Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4 Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4 Certificate serial: 019BF8E436C2D6F9500DBB9C0F7686A2D0F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 06:01:04 +0000 Manifest this update: Mon 26 Jan 2026 06:01:04 +0000 Manifest next update: Tue 27 Jan 2026 06:01:04 +0000 Files and hashes: 1: 0Nhd8HDX6sg6Ga0qO0frLY4tJgo.roa (hash: SiLri2/+BqWzCqbvv2/gkd1DlEwX13aVYQvZZuSlTWA=) 2: ujsDjvc8O_UMPKpybYL3m05dxkQ.roa (hash: l2pAahFC+BLRkn5FZkCd0AQgZA8lDYBz+/BDHXLPl0o=) 3: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl (hash: 9Kd9tlw3hPQnqhdyhkUT9hjDcoE09QCN0k3VP1X8KAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:36:c2:d6:f9:50:0d:bb:9c:0f:76:86:a2:d0:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4 Validity Not Before: Jan 26 06:01:04 2026 GMT Not After : Jan 27 06:01:04 2026 GMT Subject: CN=5f9495a40ede1c231940b29201208dd90455ecd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1e:5d:09:29:a6:a0:ab:34:5e:83:49:a0:dc: cb:d5:cc:66:49:35:cf:7b:19:c5:e6:51:6e:30:49: d4:8e:0d:8a:b0:39:e5:c2:45:9c:db:ec:ff:41:8b: 5f:5a:c0:cd:17:f5:84:ca:80:f8:9d:f2:aa:1a:51: 40:3b:04:55:c3:76:f1:e2:a4:96:1d:5a:73:28:7b: 1d:16:09:3d:91:84:a3:e4:5c:03:53:30:38:38:60: 7f:cc:45:b8:2a:1a:ae:e1:6e:c9:64:34:4e:9b:38: 27:da:24:82:d4:e4:81:20:34:b0:a8:7e:34:e5:03: 21:4b:f9:f4:9f:9b:26:28:a7:5e:98:c0:76:89:4a: ea:bf:da:a8:ed:b6:bd:6f:a2:14:db:de:5c:39:91: d0:18:f1:31:dc:e8:10:5c:b1:51:35:f5:5a:d0:90: 91:75:24:74:fb:b7:37:f8:ef:2b:7d:9f:b7:bc:74: 2c:8c:b8:3f:ce:d1:da:5f:02:a9:fd:36:f7:93:27: 62:4d:4f:32:45:30:b7:b7:ca:2a:87:80:f3:ea:33: cf:55:9d:bb:b8:8b:34:c6:89:a7:7e:c2:7d:e2:af: e5:39:37:b3:01:77:c4:f2:36:a4:c8:ac:0b:bf:f8: 12:25:c6:7d:79:41:89:57:8a:53:81:ae:da:7d:74: c7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:94:95:A4:0E:DE:1C:23:19:40:B2:92:01:20:8D:D9:04:55:EC:D0 X509v3 Authority Key Identifier: keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:69:66:10:28:50:50:aa:c3:c4:f4:64:20:d0:54:70:98:ed: 17:5e:cd:68:05:72:9d:61:3e:1a:fe:8e:5a:1c:13:6c:14:dc: 05:da:34:86:62:21:f6:09:3b:a8:19:91:8c:6b:5b:82:02:eb: 89:e0:68:b9:36:18:13:60:d1:2b:42:63:a7:ed:91:d1:8a:2c: f3:63:4c:27:1b:98:3d:98:06:dc:fd:68:e0:5c:c9:c4:5b:1c: 48:58:a9:1f:17:6d:7f:4f:f0:fb:4f:d0:f8:69:cc:5e:4c:01: d2:b4:44:5f:16:e8:37:da:3b:be:3d:91:de:c9:be:04:69:c4: c3:8b:08:cf:00:51:c3:3b:e5:7b:49:3e:ef:2d:1a:b4:07:49: c8:4d:5e:25:d6:64:28:94:d0:6f:36:94:4f:5c:df:49:0e:ab: c5:1b:64:c2:4b:f8:15:78:4b:c0:9c:84:d2:7d:22:d3:c2:6b: 6b:5e:4a:bb:69:77:7a:01:19:92:6d:7d:93:c7:9b:48:1d:85: b9:26:05:53:a6:2b:c0:bc:9e:ce:44:cd:89:eb:81:b3:30:92: 66:91:83:d5:92:71:9e:61:47:04:d3:f5:60:9c:ff:ba:26:58: f8:1c:06:3e:cf:fc:21:78:04:ff:cb:ed:56:3a:78:ce:3c:02: 0a:bc:5e:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45DbC1vlQDbucD3aGotD4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkN2Y4Nzg5NDkwMTA3MDk3YjIwY2ZhNmUzZDQ1OWYxMzYy NzRiYTQwHhcNMjYwMTI2MDYwMTA0WhcNMjYwMTI3MDYwMTA0WjAzMTEwLwYDVQQD Eyg1Zjk0OTVhNDBlZGUxYzIzMTk0MGIyOTIwMTIwOGRkOTA0NTVlY2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx5dCSmmoKs0XoNJoNzL1cxmSTXP exnF5lFuMEnUjg2KsDnlwkWc2+z/QYtfWsDNF/WEyoD4nfKqGlFAOwRVw3bx4qSW HVpzKHsdFgk9kYSj5FwDUzA4OGB/zEW4Khqu4W7JZDROmzgn2iSC1OSBIDSwqH40 5QMhS/n0n5smKKdemMB2iUrqv9qo7ba9b6IU295cOZHQGPEx3OgQXLFRNfVa0JCR dSR0+7c3+O8rfZ+3vHQsjLg/ztHaXwKp/Tb3kydiTU8yRTC3t8oqh4Dz6jPPVZ27 uIs0xomnfsJ94q/lOTezAXfE8jakyKwLv/gSJcZ9eUGJV4pTga7afXTHBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+UlaQO3hwjGUCykgEgjdkEVezQMB8GA1UdIwQY MBaAFM1/h4lJAQcJeyDPpuPUWfE2J0ukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMt NDk4MGZjYThkMjc3LzEvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMtNDk4MGZjYThkMjc3 LzEvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWlmEChQ UKrDxPRkINBUcJjtF17NaAVynWE+Gv6OWhwTbBTcBdo0hmIh9gk7qBmRjGtbggLr ieBouTYYE2DRK0Jjp+2R0Yos82NMJxuYPZgG3P1o4FzJxFscSFipHxdtf0/w+0/Q +GnMXkwB0rREXxboN9o7vj2R3sm+BGnEw4sIzwBRwzvle0k+7y0atAdJyE1eJdZk KJTQbzaUT1zfSQ6rxRtkwkv4FXhLwJyE0n0i08Jra15Ku2l3egEZkm19k8ebSB2F uSYFU6YrwLyezkTNieuBszCSZpGD1ZJxnmFHBNP1YJz/uiZY+BwGPs/8IXgE/8vt Vjp4zjwCCrxewA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:35:58 2026 by rpki-client