This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft File: ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft (raw, json) Hash identifier: hf9Rlfa2L+CZv/hYIZKxEbVOX1xnzS4Oe5fo0mMjJ3A= Subject key identifier: C2:D0:29:CE:BB:16:C2:53:CD:ED:2C:F6:3D:E4:26:E6:1D:87:84:E3 Authority key identifier: 64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF Certificate issuer: /CN=64f873adb6a1f3e81b3343c74998947526c43dcf Certificate serial: 019BF42BE17ADCDAA5DAB88CDDA18CDCFE09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft Manifest number: 147D Signing time: Sun 25 Jan 2026 08:01:14 +0000 Manifest this update: Sun 25 Jan 2026 08:01:14 +0000 Manifest next update: Mon 26 Jan 2026 08:01:14 +0000 Files and hashes: 1: VrGbU3QOrHG9m3kuxOwRhUx6Wbg.roa (hash: hDz07lJqNzJNY545cD3FDRksWHSBVWWDKwpbA8KVi0Q=) 2: ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl (hash: gNnIGKmbPBx+cbdAbzyoi1QXPRczoyUpdKCGJxw5Y/c=) 3: eKcVeXq2wt0SKbLGS84_xIQwRyI.roa (hash: o/AvUkqirZcVTc0Fj5CZijcSI6/NhaqXETyeyP//FGQ=) 4: enrj7Rmn-Rbin2HO4jtah8-M3bU.roa (hash: NrW7rDMpz8LFJnfE1GrWjyKulkBnQDA8wPMx4nsv1l4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:e1:7a:dc:da:a5:da:b8:8c:dd:a1:8c:dc:fe:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64f873adb6a1f3e81b3343c74998947526c43dcf Validity Not Before: Jan 25 08:01:14 2026 GMT Not After : Jan 26 08:01:14 2026 GMT Subject: CN=c2d029cebb16c253cded2cf63de426e61d8784e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:38:35:e1:e9:0b:07:5a:e4:a9:2c:3f:f4:84: 05:a5:a0:39:7b:ff:b9:bb:a1:0e:3b:e9:e2:e0:8a: fc:3b:e2:af:b1:ae:a5:59:22:73:de:2e:fc:b8:bc: d8:bf:74:1f:6b:09:7d:a7:e3:39:55:08:ef:8c:e4: 4c:34:9a:c6:8b:4c:e6:6b:cc:35:9a:86:ec:92:92: 11:7d:13:bd:a2:88:f6:b1:f0:67:a3:98:a4:62:ed: da:26:5b:55:97:8c:03:07:df:61:2f:99:4d:78:86: 26:6c:e4:c2:88:54:5c:88:50:07:5c:17:46:79:ea: 9f:0c:f6:13:ec:2e:fa:ce:39:00:0b:53:a9:68:14: 90:e1:3e:7c:e6:57:d1:6a:67:88:6b:51:da:59:06: 6a:e8:a2:c3:15:c5:ae:fa:3f:18:55:71:6e:05:9a: 47:08:23:fe:7d:bf:09:da:91:68:78:ca:2f:f5:0c: 70:84:aa:09:8f:63:a8:7f:22:1b:4c:db:9e:67:57: c5:74:b9:6a:d3:53:52:15:f0:2e:61:f4:47:4f:5c: a3:cb:f0:31:b0:4b:ad:4f:1b:e8:d6:f7:ed:d9:37: 8b:2c:fe:73:cd:73:30:2a:4d:74:a6:c5:45:7c:33: 50:dd:ce:fe:02:d3:21:c2:c8:7b:49:ac:17:22:15: c3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D0:29:CE:BB:16:C2:53:CD:ED:2C:F6:3D:E4:26:E6:1D:87:84:E3 X509v3 Authority Key Identifier: keyid:64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:86:f3:01:50:80:21:e4:7a:9e:f6:b4:a4:51:9f:5c:ed:78: f6:1f:02:af:9d:6b:50:52:b1:9b:5f:d4:b2:11:e6:9c:c9:df: a8:28:7a:3e:89:84:fd:98:c0:a9:16:69:7f:f3:8a:44:68:89: 91:7f:d3:44:de:51:b6:2f:b3:75:31:dc:83:5a:d7:ab:05:7b: 6b:19:1e:4b:ef:83:9a:8c:3d:40:69:d5:79:0c:57:74:32:87: 9b:ea:92:2a:39:2e:9c:70:c8:ab:1f:7e:b7:cd:87:5b:d8:a9: 12:57:51:42:a5:29:22:51:bb:e4:71:a4:59:7c:ee:a6:54:0f: cf:d4:92:21:4a:cf:bc:0b:bf:b7:97:be:a1:77:e5:1c:fd:2c: 65:09:ab:07:ca:9e:ac:3d:ed:61:af:6e:ea:f8:78:d9:c9:38: 52:ee:cf:31:6f:d6:a5:b9:e1:5a:b9:5a:13:fe:f9:d7:a1:e5: 87:ab:2d:f1:1c:06:d8:0c:6d:69:cd:08:1c:8f:46:bb:27:fb: 44:93:dc:ef:c5:13:53:a0:35:77:ab:bd:a4:4b:6d:33:65:61: a3:d9:6d:6b:c6:24:d8:b5:8e:de:24:c9:79:df:f6:d4:80:09: 5a:03:5f:f9:08:5d:b7:76:dd:fb:46:8c:f1:91:25:ca:d9:f2: c5:ec:34:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K+F63Nql2riM3aGM3P4JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Zjg3M2FkYjZhMWYzZTgxYjMzNDNjNzQ5OTg5NDc1MjZj NDNkY2YwHhcNMjYwMTI1MDgwMTE0WhcNMjYwMTI2MDgwMTE0WjAzMTEwLwYDVQQD EyhjMmQwMjljZWJiMTZjMjUzY2RlZDJjZjYzZGU0MjZlNjFkODc4NGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTg14ekLB1rkqSw/9IQFpaA5e/+5 u6EOO+ni4Ir8O+Kvsa6lWSJz3i78uLzYv3Qfawl9p+M5VQjvjORMNJrGi0zma8w1 mobskpIRfRO9ooj2sfBno5ikYu3aJltVl4wDB99hL5lNeIYmbOTCiFRciFAHXBdG eeqfDPYT7C76zjkAC1OpaBSQ4T585lfRameIa1HaWQZq6KLDFcWu+j8YVXFuBZpH CCP+fb8J2pFoeMov9QxwhKoJj2OofyIbTNueZ1fFdLlq01NSFfAuYfRHT1yjy/Ax sEutTxvo1vft2TeLLP5zzXMwKk10psVFfDNQ3c7+AtMhwsh7SawXIhXD8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLQKc67FsJTze0s9j3kJuYdh4TjMB8GA1UdIwQY MBaAFGT4c622ofPoGzNDx0mYlHUmxD3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBoenJiYWg4LWdiTTBQSFNaaVVkU2JFUGM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9iOWU0YzQtYTNkYy00NmU4LWFhM2Ut Mzk3ZjM2YzkxOTgyLzEvWlBoenJiYWg4LWdiTTBQSFNaaVVkU2JFUGM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9iOWU0YzQtYTNkYy00NmU4LWFhM2UtMzk3ZjM2YzkxOTgy LzEvWlBoenJiYWg4LWdiTTBQSFNaaVVkU2JFUGM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYbzAVCA IeR6nva0pFGfXO149h8Cr51rUFKxm1/UshHmnMnfqCh6PomE/ZjAqRZpf/OKRGiJ kX/TRN5Rti+zdTHcg1rXqwV7axkeS++Dmow9QGnVeQxXdDKHm+qSKjkunHDIqx9+ t82HW9ipEldRQqUpIlG75HGkWXzuplQPz9SSIUrPvAu/t5e+oXflHP0sZQmrB8qe rD3tYa9u6vh42ck4Uu7PMW/WpbnhWrlaE/7516Hlh6st8RwG2Axtac0IHI9Guyf7 RJPc78UTU6A1d6u9pEttM2Vho9lta8Yk2LWO3iTJed/21IAJWgNf+Qhdt3bd+0aM 8ZElytnyxew0NA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:50 2026 by rpki-client