This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft File: ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft (raw, json) Hash identifier: VfI5Nh+3A2Nwz7tlXADtAMJfeBWnL232jtniacEaFt0= Subject key identifier: D3:C6:5F:67:D5:86:8A:AC:C9:2D:2E:EC:9F:4C:A3:11:A9:0A:1F:0A Authority key identifier: 65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA Certificate issuer: /CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba Certificate serial: 019BF5E386C9D623CD5418063832BBE8A4F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft Manifest number: 0BF7 Signing time: Sun 25 Jan 2026 16:01:27 +0000 Manifest this update: Sun 25 Jan 2026 16:01:27 +0000 Manifest next update: Mon 26 Jan 2026 16:01:27 +0000 Files and hashes: 1: ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl (hash: H6jqX0eZsHxaf9CB5wFdlmg6WPcL3N0AyDfTLSPosmg=) 2: oAsWXs4gepUgdtyVum1Sl5zQ0yQ.roa (hash: On+gGjr8rTU+wqF8jInBbdR1DrtmCg/UcweFh0kLfjU=) 3: shLbklZTsl4AZPGv5XqOqviR4Fs.roa (hash: 3mVV646n9CiCww0apd2ZXdr2biN6kuu9VtbZKzpMXDk=) 4: wNWaeIo1EAzWYqKEsMEX14uNfGQ.roa (hash: pEDt/E1EsF0TWRhexvZPmk3z2Y8kiJZTlwVkYrWgB0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:86:c9:d6:23:cd:54:18:06:38:32:bb:e8:a4:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba Validity Not Before: Jan 25 16:01:27 2026 GMT Not After : Jan 26 16:01:27 2026 GMT Subject: CN=d3c65f67d5868aacc92d2eec9f4ca311a90a1f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fd:ff:01:3b:fe:f8:44:26:b3:75:4d:20:8f: e0:38:b9:0b:20:2b:c4:d9:71:2d:95:7d:7b:28:a7: 9e:56:af:c9:9d:7f:ff:6f:dc:34:39:a5:0e:40:12: 06:22:f7:f8:ae:bf:80:77:fa:92:f6:04:07:e2:ac: 7d:9a:81:5e:5c:af:c6:4f:d8:95:42:d3:a3:ff:f8: c8:63:29:cf:60:94:c3:da:ef:f9:a5:08:f1:d8:63: f4:aa:f3:46:41:48:f8:27:51:90:4b:7e:ad:ca:d0: e0:99:99:61:e1:1c:bf:b7:ed:8a:71:b8:bf:fb:66: cd:8f:a4:ed:13:56:00:b0:ca:e0:df:5a:c4:94:c4: b3:b5:97:e3:0b:00:17:0a:13:35:1b:60:93:ce:97: 0e:32:7a:76:3a:50:a6:72:34:bc:47:f7:d4:f0:e0: 64:fd:84:b9:e8:44:32:65:90:3a:8c:50:a1:fc:c1: b8:fe:b7:5e:73:a5:40:c5:4a:78:c5:e8:41:20:c7: a5:5d:85:1c:2c:8a:ba:9b:58:55:74:8f:82:49:b6: 29:b8:23:35:d8:48:dd:62:1d:4a:17:4a:0a:40:83: d4:20:59:c0:c1:3d:78:cf:10:24:34:52:2d:3a:aa: 90:e1:36:a4:ba:ca:5f:0a:f1:57:9c:98:23:13:28: 70:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C6:5F:67:D5:86:8A:AC:C9:2D:2E:EC:9F:4C:A3:11:A9:0A:1F:0A X509v3 Authority Key Identifier: keyid:65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:19:a5:3e:e7:bf:60:e0:d6:65:eb:76:3a:f6:2b:3f:79:a5: dd:92:71:11:b0:0f:7b:46:72:6e:e7:c4:f6:e2:44:96:a1:21: a1:39:0d:65:17:b7:fe:8e:01:e2:91:5a:cb:e4:c8:f3:78:41: f8:cd:b9:d6:28:94:99:62:b2:93:c7:f4:4f:cc:dd:c6:23:2b: 4c:42:09:55:6d:b0:c8:6a:12:73:bb:f4:b0:f2:c8:ee:44:7d: 69:22:95:8d:48:f3:f8:63:95:40:c4:61:1d:b0:c5:72:89:53: 55:35:18:25:9a:f3:2c:61:a1:f9:0d:f1:0c:fe:57:94:c2:08: cc:12:05:db:d9:02:65:2a:ee:e1:cb:e2:93:34:83:d9:6b:21: b9:84:d0:1c:1c:0c:15:e5:1b:86:a3:79:0c:b1:99:ce:aa:03: 77:2c:f8:df:ea:7f:c4:54:9b:71:bc:f6:59:eb:89:bd:4b:87: 94:ce:e5:58:58:29:20:11:00:80:1d:d8:dc:3e:f8:d8:0f:ea: c9:27:50:3b:21:3d:fc:56:ef:9f:df:ca:8d:8f:97:1e:9c:41: e3:cf:2e:01:b8:7d:ca:2e:de:67:85:13:aa:ff:89:4d:e7:70: 79:aa:bc:6f:26:0f:ae:94:12:02:ad:d6:b5:c6:39:c4:16:42: 6b:fd:cc:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv144bJ1iPNVBgGODK76KT3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NTJkMmNiNWE5ZThkNTY4OWZhZDY3YTk2MDUxNDljNmQ1 ZWY3YmEwHhcNMjYwMTI1MTYwMTI3WhcNMjYwMTI2MTYwMTI3WjAzMTEwLwYDVQQD EyhkM2M2NWY2N2Q1ODY4YWFjYzkyZDJlZWM5ZjRjYTMxMWE5MGExZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv3/ATv++EQms3VNII/gOLkLICvE 2XEtlX17KKeeVq/JnX//b9w0OaUOQBIGIvf4rr+Ad/qS9gQH4qx9moFeXK/GT9iV QtOj//jIYynPYJTD2u/5pQjx2GP0qvNGQUj4J1GQS36tytDgmZlh4Ry/t+2Kcbi/ +2bNj6TtE1YAsMrg31rElMSztZfjCwAXChM1G2CTzpcOMnp2OlCmcjS8R/fU8OBk /YS56EQyZZA6jFCh/MG4/rdec6VAxUp4xehBIMelXYUcLIq6m1hVdI+CSbYpuCM1 2EjdYh1KF0oKQIPUIFnAwT14zxAkNFItOqqQ4TakuspfCvFXnJgjEyhwxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPGX2fVhoqsyS0u7J9MoxGpCh8KMB8GA1UdIwQY MBaAFGVS0stano1WifrWepYFFJxtXve6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlZMU3kxcWVqVmFKLXRaNmxnVVVuRzFlOTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kMWZhYzctN2M1Yi00ZmE2LWI3ZTUt OWE1ZDhiYTdkODAzLzEvWlZMU3kxcWVqVmFKLXRaNmxnVVVuRzFlOTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9kMWZhYzctN2M1Yi00ZmE2LWI3ZTUtOWE1ZDhiYTdkODAz LzEvWlZMU3kxcWVqVmFKLXRaNmxnVVVuRzFlOTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBmlPue/ YODWZet2OvYrP3ml3ZJxEbAPe0ZybufE9uJElqEhoTkNZRe3/o4B4pFay+TI83hB +M251iiUmWKyk8f0T8zdxiMrTEIJVW2wyGoSc7v0sPLI7kR9aSKVjUjz+GOVQMRh HbDFcolTVTUYJZrzLGGh+Q3xDP5XlMIIzBIF29kCZSru4cvikzSD2WshuYTQHBwM FeUbhqN5DLGZzqoDdyz43+p/xFSbcbz2WeuJvUuHlM7lWFgpIBEAgB3Y3D742A/q ySdQOyE9/Fbvn9/KjY+XHpxB488uAbh9yi7eZ4UTqv+JTedweaq8byYPrpQSAq3W tcY5xBZCa/3MXQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:18 2026 by rpki-client