This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft File: Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft (raw, json) Hash identifier: ZQ8JkD9goFKS/IYTtMzOvIYWQym0JuznLeA+gGw1nSk= Subject key identifier: D8:8C:33:4D:FF:A9:B0:12:66:1C:C8:FE:13:FF:3C:88:B1:9E:19:1D Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a Certificate serial: 019BF23D4686D16D1C6C808CA1B4DF78D47F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft Manifest number: 151B Signing time: Sat 24 Jan 2026 23:01:00 +0000 Manifest this update: Sat 24 Jan 2026 23:01:00 +0000 Manifest next update: Sun 25 Jan 2026 23:01:00 +0000 Files and hashes: 1: 0BfNXiDldo_liimaTypuMTcMOSA.roa (hash: qvgGIW8CiOWBIcpNa0moqJ+GSYLQ2vJbJF4fgORjC18=) 2: 0vetEjyw1WQWmCXUTx8290wF-5A.roa (hash: MRRpw2B7+36LyQgMqkGBs8Q1n0WozbWhLmzocDU6qn0=) 3: 2aBOuFf59wEBwbLziedpbp6FKYk.roa (hash: ZSpI5dlzWjQXy3Cna9NEiVVPFJtukMRorD24Z+VlJdk=) 4: 5ThevNNgZHzDF50h6krEfv1b2To.roa (hash: CbU07lcvi4HJ1brlMc0otrEIMctgZ4JB+I2bCfPEqZk=) 5: HdjsvuGngyQVaPI5fw1lo5MVCyY.roa (hash: 0CGNcQROu66TMRCGsRz+KuSUMZeH1aS1RfY+HTTw7Bg=) 6: MqZHWBmMNelEjKHD9rL777ZFFPQ.roa (hash: JT8l5waJdgBD+v5IZbCIxziinVIIlhSs3+boP+bJ1mw=) 7: PSIR06H4z2s5qNa4KFHuFAaaV8g.roa (hash: oRnCQq20bdis+X0hyq0doig5PPTGiNbLUonI7s/5uqs=) 8: Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl (hash: Gh6kUxsPKmdlZ8DiSPUNFdzRrj2meDqjW7YheYFCIAk=) 9: a_MXwN7MuegnVCIAkZ6clu1iX4o.roa (hash: 8VPNVVCKyMOejDUVqp4xHvLzU1vxgcPn/f9Z8nB1/Bk=) 10: jVIXwWQgWKZwGuSur5EA3NGOqW0.roa (hash: TF50UjRhC15wTuIUutY/LAyF28bPXMS3BlWJSGn8Kts=) 11: qivEJ1m8OXaZrLdVa5B-D4Lq4Tc.roa (hash: ohCD8OmMg+2pYrzqMLQR/f066MDBc9Qpw07iNGnx7cY=) 12: uTfCplkKF4NNKr9z0oAQOp5Z6bQ.roa (hash: lIrYsFTfLPn7qzWjWmqg9roRmjTFishbKowqgCzglJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:3d:46:86:d1:6d:1c:6c:80:8c:a1:b4:df:78:d4:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a Validity Not Before: Jan 24 23:01:00 2026 GMT Not After : Jan 25 23:01:00 2026 GMT Subject: CN=d88c334dffa9b012661cc8fe13ff3c88b19e191d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5e:59:52:aa:fc:a8:c3:4a:83:19:6d:71:15: d0:7a:06:6b:60:be:97:93:26:62:7b:0c:20:4a:ef: 84:86:cf:50:32:31:d5:2e:99:13:df:5d:70:62:40: 24:ba:46:45:54:1d:aa:b6:48:50:84:d7:ef:4b:53: 6d:dc:29:76:ca:fe:97:e2:6d:de:7e:ad:90:fc:42: de:5d:d7:0f:1f:e4:1d:a4:b9:d9:80:b6:52:ce:33: c4:dd:fd:52:7d:5d:05:6d:ec:ed:dc:46:c3:eb:3b: b8:49:40:48:7b:b9:ac:9b:83:6e:01:ad:54:98:02: da:d8:a9:ce:89:08:18:fe:54:4b:d6:11:be:c2:03: 91:6b:af:92:3e:1f:cb:c4:fc:d6:cb:49:25:15:4f: 08:79:eb:44:d8:3c:75:f7:f8:51:ce:ec:85:9f:cf: ad:27:7a:34:1d:27:e0:62:f9:5f:60:09:f0:f1:77: bd:87:88:63:a0:29:de:f7:eb:2c:39:18:ae:d9:5a: a5:4e:fe:c2:09:8a:4b:eb:f0:96:68:fc:20:e8:ce: 6d:d3:c6:5a:68:e1:c8:45:ff:40:b4:1d:e1:df:5c: 5e:4d:56:61:4b:2d:1a:0c:d8:b1:4e:43:72:c5:34: 90:d7:e5:88:c5:5a:c2:8b:88:48:e5:84:55:10:50: 9f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8C:33:4D:FF:A9:B0:12:66:1C:C8:FE:13:FF:3C:88:B1:9E:19:1D X509v3 Authority Key Identifier: keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:7c:56:f7:a4:7d:d2:f6:b3:60:fc:d7:47:13:9a:5e:75:54: 4b:a3:cb:42:76:61:be:33:71:1e:cf:44:f3:db:95:16:cf:af: bd:2e:7a:49:d5:99:b9:dd:38:a5:53:e5:a6:59:16:28:db:f1: 5b:1d:2f:82:5e:89:ea:0d:2e:93:6a:f5:5c:8e:8a:a4:d1:34: fd:6b:d5:f1:ca:ac:b8:5d:c8:f9:78:30:c1:81:b2:67:8d:6e: 9a:ea:6a:c0:9f:8b:04:a9:b5:34:d4:a0:d1:f7:04:f7:52:16: 38:9f:5e:64:ad:5e:89:ab:3b:a6:5e:89:a4:4f:e8:c7:74:f2: b2:36:1a:0b:7d:3f:5a:c7:af:e2:9b:ce:33:d3:6f:5a:4a:a1: cf:72:ad:64:64:1f:5d:33:5c:11:13:19:f3:e0:0c:b3:52:2b: 5c:18:af:da:36:2c:9e:20:ab:81:b0:1e:aa:67:eb:50:6e:cf: be:76:2a:74:c1:c2:32:cd:53:f4:b7:4e:67:4a:d1:bf:f5:5d: 35:56:c2:3d:b9:89:49:97:fc:aa:58:f3:1b:44:62:80:bb:b8: aa:0d:7c:01:ed:b9:3b:0e:5a:e6:58:d7:53:fa:c0:cb:a3:7b: 9a:10:71:be:56:ad:35:d3:e1:54:71:85:a3:63:bb:f5:4c:fb: 05:f9:94:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyPUaG0W0cbICMobTfeNR/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5 ZDcwNmEwHhcNMjYwMTI0MjMwMTAwWhcNMjYwMTI1MjMwMTAwWjAzMTEwLwYDVQQD EyhkODhjMzM0ZGZmYTliMDEyNjYxY2M4ZmUxM2ZmM2M4OGIxOWUxOTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2F5ZUqr8qMNKgxltcRXQegZrYL6X kyZiewwgSu+Ehs9QMjHVLpkT311wYkAkukZFVB2qtkhQhNfvS1Nt3Cl2yv6X4m3e fq2Q/ELeXdcPH+QdpLnZgLZSzjPE3f1SfV0Fbezt3EbD6zu4SUBIe7msm4NuAa1U mALa2KnOiQgY/lRL1hG+wgORa6+SPh/LxPzWy0klFU8IeetE2Dx19/hRzuyFn8+t J3o0HSfgYvlfYAnw8Xe9h4hjoCne9+ssORiu2VqlTv7CCYpL6/CWaPwg6M5t08Za aOHIRf9AtB3h31xeTVZhSy0aDNixTkNyxTSQ1+WIxVrCi4hI5YRVEFCfOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNiMM03/qbASZhzI/hP/PIixnhkdMB8GA1UdIwQY MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt YjVkODg4YWRmZDM3LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3 LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0HxW96R9 0vazYPzXRxOaXnVUS6PLQnZhvjNxHs9E89uVFs+vvS56SdWZud04pVPlplkWKNvx Wx0vgl6J6g0uk2r1XI6KpNE0/WvV8cqsuF3I+XgwwYGyZ41umupqwJ+LBKm1NNSg 0fcE91IWOJ9eZK1eias7pl6JpE/ox3TysjYaC30/Wsev4pvOM9NvWkqhz3KtZGQf XTNcERMZ8+AMs1IrXBiv2jYsniCrgbAeqmfrUG7PvnYqdMHCMs1T9LdOZ0rRv/Vd NVbCPbmJSZf8qljzG0RigLu4qg18Ae25Ow5a5ljXU/rAy6N7mhBxvlatNdPhVHGF o2O79Uz7BfmUIw== -----END CERTIFICATE-----Generated at Sun Jan 25 05:40:43 2026 by rpki-client