This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft File: zfy95jLRBvqtmMLBiVqHfKYBUho.mft (raw, json) Hash identifier: Dn3v38AfRK9QP62ifefOWOvUw+Fv2aOexVlos+vJ998= Subject key identifier: 58:52:56:F5:0E:17:7E:2A:EE:50:0B:2E:8C:CC:C2:18:93:C9:84:17 Authority key identifier: CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A Certificate issuer: /CN=cdfcbde632d106faad98c2c1895a877ca601521a Certificate serial: 019BF688426DB7E6BE11219B1CCA8155F3A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft Manifest number: 177C Signing time: Sun 25 Jan 2026 19:01:23 +0000 Manifest this update: Sun 25 Jan 2026 19:01:23 +0000 Manifest next update: Mon 26 Jan 2026 19:01:23 +0000 Files and hashes: 1: KGwwtGzR65TxQF-2vzhHlmHOTo8.roa (hash: o/WFBpe3yFcgt0UEYgNY9hSYO7UsE0F6pNNZUvTlLxk=) 2: zfy95jLRBvqtmMLBiVqHfKYBUho.crl (hash: Prtv6aYoCNkJTOGNLz9yTPfW8dkZWSgSQnnS0ogrHvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:42:6d:b7:e6:be:11:21:9b:1c:ca:81:55:f3:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdfcbde632d106faad98c2c1895a877ca601521a Validity Not Before: Jan 25 19:01:23 2026 GMT Not After : Jan 26 19:01:23 2026 GMT Subject: CN=585256f50e177e2aee500b2e8cccc21893c98417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d9:ca:9f:17:ec:ad:c3:6c:1e:72:92:a5:46: ad:76:09:ce:b3:93:67:fe:0f:9a:43:99:0a:6d:6d: 09:cc:b3:be:70:eb:9c:65:c5:cf:42:c2:c9:e4:2b: 10:f3:e3:72:7a:21:b2:7c:13:1a:f9:41:2a:62:9e: 7e:ab:8c:5f:38:42:44:fb:77:85:c5:0c:9e:0f:0a: e2:bb:95:c8:af:ac:42:7a:30:50:ee:29:9a:50:50: 3d:5b:bc:11:a3:ff:66:6e:d8:a2:24:8e:93:2b:bb: c7:92:ef:b7:1e:4d:bc:e2:32:e4:c6:a9:c5:e1:ce: 53:1d:1c:95:0a:f8:99:3a:d7:28:e9:c6:32:9e:60: 8d:a3:a9:d6:64:aa:78:2d:f8:63:3d:3b:7c:d2:81: 64:86:ae:21:9e:ea:a2:db:11:ea:da:4b:e4:bd:af: e9:b4:39:5e:5b:2f:4d:3b:05:c0:44:53:5e:4d:77: ee:8b:dc:32:37:d7:b2:6a:07:e4:23:f6:08:99:e7: 25:8b:8a:cb:cf:51:19:42:cf:c0:18:ad:7f:04:f0: d4:f3:ef:86:22:08:8e:87:dc:00:04:63:d3:13:2e: 18:7e:9b:45:16:31:b8:ea:11:38:f4:53:fa:cb:8c: f8:1f:ca:44:ff:ec:c7:07:d1:35:6e:20:b8:83:61: 86:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:52:56:F5:0E:17:7E:2A:EE:50:0B:2E:8C:CC:C2:18:93:C9:84:17 X509v3 Authority Key Identifier: keyid:CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f9:85:76:02:00:04:cf:c6:3c:6b:78:c2:9d:f5:2b:b0:13: e8:87:c5:f1:ea:e7:78:dd:e0:8d:6a:2b:e9:1c:74:e3:76:bb: a1:91:ef:18:06:b7:56:14:d0:87:31:14:ed:59:b3:71:25:b0: dd:43:33:9d:70:d4:18:64:81:5e:ad:3f:68:98:3e:f4:53:05: 4f:49:3d:0e:ea:8e:2a:20:13:f8:63:53:a4:42:b5:0e:35:af: ad:bb:08:18:6b:ee:ff:4d:4d:23:03:90:80:a4:52:be:bd:a6: 6d:c4:0e:a9:aa:61:11:1d:f5:37:be:12:79:ac:3a:26:08:03: 3e:66:0c:a8:bf:39:38:d7:6f:c4:69:00:e4:a4:06:e1:ed:a5: 28:cf:14:b4:03:4b:dc:6a:1e:7c:50:be:e4:37:16:d8:07:98: 82:d4:36:58:a7:f2:a5:6b:e4:7e:c1:02:09:c2:4a:e3:ac:e0: e0:27:e1:69:8e:25:6d:cf:ef:ea:93:6f:bb:c7:66:60:ba:72: d8:23:65:f4:51:69:a2:ed:53:b5:b4:ae:2f:27:b9:aa:65:fc: 7b:32:17:88:9e:ad:16:46:01:85:06:dc:d3:e3:26:d4:ed:a9: 98:f2:e1:19:b7:b6:8d:7e:c0:49:7e:7e:7e:c3:aa:85:2f:dd: c1:b9:a1:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iEJtt+a+ESGbHMqBVfOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZmNiZGU2MzJkMTA2ZmFhZDk4YzJjMTg5NWE4NzdjYTYw MTUyMWEwHhcNMjYwMTI1MTkwMTIzWhcNMjYwMTI2MTkwMTIzWjAzMTEwLwYDVQQD Eyg1ODUyNTZmNTBlMTc3ZTJhZWU1MDBiMmU4Y2NjYzIxODkzYzk4NDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdnKnxfsrcNsHnKSpUatdgnOs5Nn /g+aQ5kKbW0JzLO+cOucZcXPQsLJ5CsQ8+NyeiGyfBMa+UEqYp5+q4xfOEJE+3eF xQyeDwriu5XIr6xCejBQ7imaUFA9W7wRo/9mbtiiJI6TK7vHku+3Hk284jLkxqnF 4c5THRyVCviZOtco6cYynmCNo6nWZKp4LfhjPTt80oFkhq4hnuqi2xHq2kvkva/p tDleWy9NOwXARFNeTXfui9wyN9eyagfkI/YImecli4rLz1EZQs/AGK1/BPDU8++G IgiOh9wABGPTEy4YfptFFjG46hE49FP6y4z4H8pE/+zHB9E1biC4g2GGkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhSVvUOF34q7lALLozMwhiTyYQXMB8GA1UdIwQY MBaAFM38veYy0Qb6rZjCwYlah3ymAVIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZ5OTVqTFJCdnF0bU1MQmlWcUhmS1lCVWhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9mZTQ1Y2YtNGFkMi00MWQ5LWJiY2Et MjAzY2ZhMjM4Njk2LzEvemZ5OTVqTFJCdnF0bU1MQmlWcUhmS1lCVWhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9mZTQ1Y2YtNGFkMi00MWQ5LWJiY2EtMjAzY2ZhMjM4Njk2 LzEvemZ5OTVqTFJCdnF0bU1MQmlWcUhmS1lCVWhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/mFdgIA BM/GPGt4wp31K7AT6IfF8erneN3gjWor6Rx043a7oZHvGAa3VhTQhzEU7VmzcSWw 3UMznXDUGGSBXq0/aJg+9FMFT0k9DuqOKiAT+GNTpEK1DjWvrbsIGGvu/01NIwOQ gKRSvr2mbcQOqaphER31N74Seaw6JggDPmYMqL85ONdvxGkA5KQG4e2lKM8UtANL 3GoefFC+5DcW2AeYgtQ2WKfypWvkfsECCcJK46zg4CfhaY4lbc/v6pNvu8dmYLpy 2CNl9FFpou1TtbSuLye5qmX8ezIXiJ6tFkYBhQbc0+Mm1O2pmPLhGbe2jX7ASX5+ fsOqhS/dwbmhpg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:20 2026 by rpki-client