This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft File: ZUFaF2P-AFsBObAUxuV11fmypQQ.mft (raw, json) Hash identifier: 6KzlJNC/j0wUabGb1ygRGnG7qFA8Ik4mnHXjTEHdPNc= Subject key identifier: E3:EE:AD:C0:82:16:4B:26:6A:2F:6F:44:8A:A1:F7:CD:18:77:59:B0 Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04 Certificate issuer: /CN=65415a1763fe005b0139b014c6e575d5f9b2a504 Certificate serial: 019BF6F56FDD3F8752B91440336CB0BE2013 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft Manifest number: 13E2 Signing time: Sun 25 Jan 2026 21:00:38 +0000 Manifest this update: Sun 25 Jan 2026 21:00:38 +0000 Manifest next update: Mon 26 Jan 2026 21:00:38 +0000 Files and hashes: 1: ZUFaF2P-AFsBObAUxuV11fmypQQ.crl (hash: g14B3KHQjrbuENxBWhEiQFhkUcURlLkHXF99Mj7XOCU=) 2: aHNCfZJ-9wQZxvNMw3DS1H21hCo.roa (hash: 2DGefUYW6AHzEy+ZIacwyGwUVxEFyzaT1n0vrc2KxWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:6f:dd:3f:87:52:b9:14:40:33:6c:b0:be:20:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504 Validity Not Before: Jan 25 21:00:38 2026 GMT Not After : Jan 26 21:00:38 2026 GMT Subject: CN=e3eeadc082164b266a2f6f448aa1f7cd187759b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cc:bb:95:13:ef:60:63:97:40:9e:6e:a8:b2: 83:16:c2:1d:35:bd:18:a7:e8:9d:4c:16:47:ca:34: 60:2c:31:00:b2:9c:d5:12:6a:f0:c7:93:31:49:22: b0:ab:ce:d5:80:34:bc:7e:3f:b8:57:29:53:72:23: 01:14:58:7e:79:e3:35:8a:6b:20:51:08:cb:26:b4: d2:3b:ef:c3:57:cf:49:8b:28:ba:1b:a0:65:3e:76: b9:fb:79:e0:23:8c:e4:93:9c:5c:9f:ec:9c:00:c8: 1d:67:22:82:f0:7d:6b:be:e2:09:71:d5:65:3f:80: 2d:aa:45:f6:7f:83:a3:8b:54:25:04:da:95:3d:18: 58:73:18:d4:5e:32:6d:a6:2a:22:54:c7:1e:52:10: 7b:9b:05:ab:7c:08:57:05:85:1d:d4:fc:1f:4f:6b: 90:10:50:cb:98:7b:06:18:da:d8:aa:d3:74:39:f0: 33:af:f4:c5:5d:cb:12:4b:82:9c:3e:43:87:0a:85: f9:1f:80:b5:fc:a6:f2:d1:4d:82:2e:53:8a:22:83: a4:03:66:0a:f5:c2:9e:9f:13:8e:31:90:ce:e0:59: b0:29:2e:45:b6:2b:41:8d:57:b9:6d:2e:9b:d5:c5: 28:32:11:e1:23:b7:4d:04:e8:80:c3:81:7d:42:fd: 11:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EE:AD:C0:82:16:4B:26:6A:2F:6F:44:8A:A1:F7:CD:18:77:59:B0 X509v3 Authority Key Identifier: keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:45:9c:24:45:f7:ae:6c:d4:25:bf:00:71:b0:d9:db:cd:d9: d7:a9:ae:6b:af:58:c5:4e:17:4f:8b:dc:a4:0b:c5:16:e9:72: 49:9b:86:9d:84:c8:79:95:74:ed:fa:de:8b:32:8a:ad:5b:f2: 31:f6:68:e3:9d:6c:cc:81:23:40:37:89:96:8a:84:26:fc:85: 00:46:8e:40:53:56:a7:66:2e:60:b6:c0:e1:0b:e5:d1:70:d2: 5f:dc:ad:0e:64:c6:6d:d2:8f:98:87:9b:96:65:dd:de:56:0a: 37:15:70:88:f6:0d:7e:6c:99:24:8d:cd:55:cb:99:34:75:ad: 3e:f5:d2:11:32:cb:15:c5:36:b6:9f:2f:7e:e9:fb:89:e7:c8: 8b:25:e7:53:ac:fa:69:6a:8f:df:8f:47:9b:dc:64:51:0e:b0: 72:f3:4a:00:b2:5f:f6:f3:ca:dc:ff:94:6a:fb:16:e5:49:7c: 35:86:af:d8:b9:7b:b6:e5:3b:a2:22:b5:11:8a:5d:16:fe:50: 55:c7:cf:0e:ca:40:eb:9e:74:f4:4f:44:75:c8:cd:81:a6:e8: 1e:37:5a:1a:bc:97:fe:66:56:65:3d:25:d0:d3:4d:8c:61:05: 3a:43:90:cb:5a:4c:be:f6:c3:01:49:59:1b:c8:9d:d2:04:de: 23:41:58:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29W/dP4dSuRRAM2ywviATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NDE1YTE3NjNmZTAwNWIwMTM5YjAxNGM2ZTU3NWQ1Zjli MmE1MDQwHhcNMjYwMTI1MjEwMDM4WhcNMjYwMTI2MjEwMDM4WjAzMTEwLwYDVQQD EyhlM2VlYWRjMDgyMTY0YjI2NmEyZjZmNDQ4YWExZjdjZDE4Nzc1OWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcy7lRPvYGOXQJ5uqLKDFsIdNb0Y p+idTBZHyjRgLDEAspzVEmrwx5MxSSKwq87VgDS8fj+4VylTciMBFFh+eeM1imsg UQjLJrTSO+/DV89Jiyi6G6BlPna5+3ngI4zkk5xcn+ycAMgdZyKC8H1rvuIJcdVl P4AtqkX2f4Oji1QlBNqVPRhYcxjUXjJtpioiVMceUhB7mwWrfAhXBYUd1PwfT2uQ EFDLmHsGGNrYqtN0OfAzr/TFXcsSS4KcPkOHCoX5H4C1/Kby0U2CLlOKIoOkA2YK 9cKenxOOMZDO4FmwKS5FtitBjVe5bS6b1cUoMhHhI7dNBOiAw4F9Qv0RSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPurcCCFksmai9vRIqh980Yd1mwMB8GA1UdIwQY MBaAFGVBWhdj/gBbATmwFMblddX5sqUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zYWVjNzEtY2ExNy00ZWM1LTg3YTct ZWU3YTIwNTY5YjgzLzEvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8zYWVjNzEtY2ExNy00ZWM1LTg3YTctZWU3YTIwNTY5Yjgz LzEvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArkWcJEX3 rmzUJb8AcbDZ283Z16mua69YxU4XT4vcpAvFFulySZuGnYTIeZV07freizKKrVvy MfZo451szIEjQDeJloqEJvyFAEaOQFNWp2YuYLbA4Qvl0XDSX9ytDmTGbdKPmIeb lmXd3lYKNxVwiPYNfmyZJI3NVcuZNHWtPvXSETLLFcU2tp8vfun7iefIiyXnU6z6 aWqP349Hm9xkUQ6wcvNKALJf9vPK3P+UavsW5Ul8NYav2Ll7tuU7oiK1EYpdFv5Q VcfPDspA65509E9EdcjNgaboHjdaGryX/mZWZT0l0NNNjGEFOkOQy1pMvvbDAUlZ G8id0gTeI0FYPQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:03 2026 by rpki-client