This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft File: ZD4bqRxWmoshptLWf1271sBOQ-o.mft (raw, json) Hash identifier: 3paedqi2lFHt38DZd8YrFUMfT6c8Kz40KUTZcp0tXp0= Subject key identifier: C1:D0:40:EB:34:C1:97:6D:53:DD:86:2A:98:28:7C:97:9A:81:84:0D Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA Certificate issuer: /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea Certificate serial: 019BF53E3BC3CF3C63BD53432E3EE772D7F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 13:00:54 +0000 Manifest this update: Sun 25 Jan 2026 13:00:54 +0000 Manifest next update: Mon 26 Jan 2026 13:00:54 +0000 Files and hashes: 1: 3s8sY8JfXcq5h0JX5tklV5kK-kI.roa (hash: tUMXR+PdDpzmT4OFEkUcYoWlIAGQobO28dDLQShQPJw=) 2: ATgciNvIucjKCFQUFyNe0yS56Xs.roa (hash: ODwExdkuk2O0WB+oRGE/a1ipu8Cu3cgAGkwUAaoVX9Y=) 3: OQzv-VnaVoUaemq98kXrP_sXKa8.roa (hash: 0UtFVm4divpIKSWLm6cbL2r77Cn14CFuHmjdZonPbwc=) 4: RS2ZY1uc0JYuhYWkx4aN_m6o7qE.roa (hash: ustjYTj3tB8+/KIrC0a07UkmqBeIt1gvoyIyFDQVlds=) 5: Wg4SVphoReQnCpUyJ5-oZULRakI.roa (hash: Q8EhoBGzMhLpl/1N6VdUdhxyINS1Dda6nBjz3JP3ehw=) 6: ZD4bqRxWmoshptLWf1271sBOQ-o.crl (hash: fvI+gqP8q295AZDuvajZAopGP2fwUFjZAv80svLNSFI=) 7: brDP8rCtmy1_6zegBiE3p8TvEes.roa (hash: Z9tvowz9KVQdbieVlExnm4rsZGGsOyESicqYmRLZjd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:3b:c3:cf:3c:63:bd:53:43:2e:3e:e7:72:d7:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea Validity Not Before: Jan 25 13:00:54 2026 GMT Not After : Jan 26 13:00:54 2026 GMT Subject: CN=c1d040eb34c1976d53dd862a98287c979a81840d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:17:a8:bb:09:4e:c2:38:a5:df:49:71:b5:43: 3f:29:53:2a:84:4f:1c:e8:04:e6:19:9b:d7:7e:4e: 34:d7:5a:61:92:f9:0d:2e:19:22:89:bc:23:9f:77: af:68:0d:bb:17:7b:6d:cf:24:c4:e8:95:d4:6f:bc: 3b:ae:9e:07:c5:06:76:f6:b6:91:b8:93:dd:98:03: 7f:30:db:a3:99:76:08:2d:6b:f9:bc:0d:d6:b9:99: ab:fd:7f:96:26:08:e4:32:a9:cf:a1:f3:3e:e0:71: 27:32:74:42:72:e9:a8:d9:9f:4e:f5:40:6e:4c:4d: 5e:a0:fc:58:6d:90:d5:f8:c6:1d:53:58:65:3b:55: 0f:88:db:6e:6f:79:0c:ec:70:b2:4a:3c:1a:d0:87: e3:75:73:f7:5d:86:81:5b:35:77:d0:95:0e:36:99: 40:9f:cc:47:00:58:78:66:ea:33:d8:99:32:f2:a7: 82:55:53:00:b0:34:48:01:9d:a4:f8:03:2a:f4:74: c0:35:85:fc:13:10:e3:78:3d:c7:c4:d7:62:7b:3b: 68:2c:ef:6a:9a:3b:d0:4a:1a:cd:fc:2f:34:9f:93: 42:5f:15:37:7c:f6:18:6b:42:99:18:d9:3d:cf:69: 22:ec:31:cd:b5:0d:4b:9e:39:90:08:2d:16:95:8d: 97:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D0:40:EB:34:C1:97:6D:53:DD:86:2A:98:28:7C:97:9A:81:84:0D X509v3 Authority Key Identifier: keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:86:54:98:56:34:50:21:58:87:5a:2f:09:3e:aa:07:b2:aa: de:60:2a:42:b3:99:15:cb:e4:78:aa:e3:8d:ce:80:8f:6f:31: f5:03:fe:9a:a3:92:93:5d:f4:22:fb:13:4b:9c:18:23:90:a8: 36:d9:c1:50:12:bf:8e:5b:ce:76:71:a8:de:31:57:7a:b6:46: 89:4a:ab:33:61:3a:42:ac:f1:1d:fa:5e:4b:e2:01:c3:a6:c3: a4:a3:c8:81:76:e0:b8:27:3f:a4:e7:b1:ba:45:6a:b1:9e:58: 8c:82:f7:ab:65:01:e7:94:c0:31:64:64:5c:a9:d1:5e:1d:e2: 70:8a:32:bc:8c:48:72:54:62:8d:c7:d5:52:c0:12:66:df:54: 07:a6:99:08:92:4c:4c:5c:0d:0a:99:55:35:01:1b:7c:d8:8e: cd:5c:47:85:77:5c:51:38:4c:db:f1:ae:54:13:91:34:0c:3d: 13:89:00:15:d5:25:e6:df:df:dc:ce:b5:e2:e5:a2:da:41:a6: 88:e4:69:8f:2b:60:b6:4c:3f:39:15:7e:53:a9:d9:af:74:f8: 98:20:95:7d:08:d3:84:ee:07:0f:d9:98:57:ee:4f:8f:c7:cc: b9:81:2f:f5:da:28:a8:a5:1f:83:59:8c:ab:50:0b:26:0e:6f: 16:01:79:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PjvDzzxjvVNDLj7nctf0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0M2UxYmE5MWM1NjlhOGIyMWE2ZDJkNjdmNWRiYmQ2YzA0 ZTQzZWEwHhcNMjYwMTI1MTMwMDU0WhcNMjYwMTI2MTMwMDU0WjAzMTEwLwYDVQQD EyhjMWQwNDBlYjM0YzE5NzZkNTNkZDg2MmE5ODI4N2M5NzlhODE4NDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApheouwlOwjil30lxtUM/KVMqhE8c 6ATmGZvXfk4011phkvkNLhkiibwjn3evaA27F3ttzyTE6JXUb7w7rp4HxQZ29raR uJPdmAN/MNujmXYILWv5vA3WuZmr/X+WJgjkMqnPofM+4HEnMnRCcumo2Z9O9UBu TE1eoPxYbZDV+MYdU1hlO1UPiNtub3kM7HCySjwa0IfjdXP3XYaBWzV30JUONplA n8xHAFh4Zuoz2Jky8qeCVVMAsDRIAZ2k+AMq9HTANYX8ExDjeD3HxNdieztoLO9q mjvQShrN/C80n5NCXxU3fPYYa0KZGNk9z2ki7DHNtQ1LnjmQCC0WlY2XvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHQQOs0wZdtU92GKpgofJeagYQNMB8GA1UdIwQY MBaAFGQ+G6kcVpqLIabS1n9du9bATkPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9hY2E5MTItOWU4ZC00NzQ5LTk1ZTAt ZmVhMGFmZjM1OWY1LzEvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9hY2E5MTItOWU4ZC00NzQ5LTk1ZTAtZmVhMGFmZjM1OWY1 LzEvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1IZUmFY0 UCFYh1ovCT6qB7Kq3mAqQrOZFcvkeKrjjc6Aj28x9QP+mqOSk130IvsTS5wYI5Co NtnBUBK/jlvOdnGo3jFXerZGiUqrM2E6QqzxHfpeS+IBw6bDpKPIgXbguCc/pOex ukVqsZ5YjIL3q2UB55TAMWRkXKnRXh3icIoyvIxIclRijcfVUsASZt9UB6aZCJJM TFwNCplVNQEbfNiOzVxHhXdcUThM2/GuVBORNAw9E4kAFdUl5t/f3M614uWi2kGm iORpjytgtkw/ORV+U6nZr3T4mCCVfQjThO4HD9mYV+5Pj8fMuYEv9dooqKUfg1mM q1ALJg5vFgF5iQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:19:30 2026 by rpki-client