This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft File: zVW0Jf7PefCeB0stbzphbHtoVwA.mft (raw, json) Hash identifier: oxW4h6PXjN/7aNdYKNch8PCPJiR5XfrzCOLpxeHVkRw= Subject key identifier: 16:75:BF:1A:8D:04:BE:0B:99:53:D9:F8:C3:08:CD:4D:EF:DF:AB:25 Authority key identifier: CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00 Certificate issuer: /CN=cd55b425fecf79f09e074b2d6f3a616c7b685700 Certificate serial: 019BF65198C247C9B1EB8F448D74BAC24BEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft Manifest number: 1526 Signing time: Sun 25 Jan 2026 18:01:41 +0000 Manifest this update: Sun 25 Jan 2026 18:01:41 +0000 Manifest next update: Mon 26 Jan 2026 18:01:41 +0000 Files and hashes: 1: 7BLFrUv-21NPi5YU_QcyTQXK6sE.roa (hash: eZF7mM5D7X3yGSrbx54ZgMvJ5nO57jhcGZL0Higsrxw=) 2: zVW0Jf7PefCeB0stbzphbHtoVwA.crl (hash: JqiuipgbfYNcHQmZXfZzfrhrrRzHFXQlOC5/a7ociGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:98:c2:47:c9:b1:eb:8f:44:8d:74:ba:c2:4b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd55b425fecf79f09e074b2d6f3a616c7b685700 Validity Not Before: Jan 25 18:01:41 2026 GMT Not After : Jan 26 18:01:41 2026 GMT Subject: CN=1675bf1a8d04be0b9953d9f8c308cd4defdfab25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6e:a2:d1:99:7c:c4:e9:e1:72:80:1a:63:af: 37:aa:45:27:04:2a:eb:6e:42:cb:fc:65:4d:0f:1d: b0:05:f3:1a:1e:e4:ab:12:8d:14:a7:27:e2:07:2a: ed:86:1a:70:30:33:b9:22:b9:59:82:14:64:a5:d3: 87:57:55:de:d8:f1:11:b1:8c:44:cd:18:82:43:ff: d7:2f:9e:b2:cc:58:a0:76:f5:b5:56:c9:ce:78:a7: 62:88:34:b4:e3:d7:29:33:d6:8b:e5:13:d2:07:99: 9c:06:79:54:ef:c8:65:9b:13:f2:55:af:95:d9:69: 01:1f:2b:a4:26:34:ae:8c:38:e7:aa:d8:23:46:46: 60:49:5c:88:00:65:a3:8e:39:77:93:0e:bc:b9:9e: dd:ef:99:e5:e3:07:d0:65:26:79:2b:56:8c:36:ea: cf:de:d7:ac:df:0a:a6:01:23:21:fc:18:36:f3:91: 6c:e9:e3:ad:83:a4:f7:33:c5:72:85:b6:d1:51:c2: bd:be:44:36:93:8a:55:f2:19:ae:9e:a1:28:4b:65: e3:11:b3:dc:bd:4d:01:97:90:e4:14:79:fc:2a:33: cf:2a:69:05:8c:13:4e:56:1d:0a:23:6a:ba:cc:5e: d1:53:30:d5:fd:53:5d:b8:81:1a:35:01:b2:3f:ed: 48:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:75:BF:1A:8D:04:BE:0B:99:53:D9:F8:C3:08:CD:4D:EF:DF:AB:25 X509v3 Authority Key Identifier: keyid:CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:0e:d3:f1:2b:17:55:e5:85:a9:45:1b:5c:ff:78:26:b1:9c: 03:c6:6d:57:5e:7e:c0:33:01:45:04:2d:e7:14:c7:a3:dc:54: c7:51:e5:36:93:f5:a0:a5:d9:86:a2:f9:45:d7:35:31:0a:bd: d7:45:e8:ef:35:ee:b4:48:9a:0f:10:06:8c:76:76:32:78:b0: fa:96:5e:47:64:c1:75:da:58:05:c5:e0:cd:5f:63:fc:01:28: bf:cb:fa:0b:78:c5:a1:3c:91:68:ce:2f:8c:47:24:a2:e1:73: 59:89:75:85:a9:fc:9c:52:67:0a:c1:08:b5:c7:d4:60:e4:a1: 03:08:48:94:68:84:64:c4:54:55:c9:33:16:f2:17:10:de:ed: 80:63:df:9c:b6:62:37:15:4e:70:ff:f6:4a:09:c8:50:a4:ed: 64:7f:22:de:e2:af:da:95:af:13:45:7f:2c:b3:6f:0b:2b:b7: 9c:91:4e:0b:d7:15:35:e5:a4:37:bf:e8:28:5a:bf:99:7e:69: bd:65:e6:11:ff:7b:9c:1b:73:28:1d:f8:4a:0d:2b:48:e2:03: 42:0f:03:81:57:2e:f7:3c:b2:d4:42:03:31:f4:a1:f4:d0:c9: 5b:c4:ca:bb:0b:16:5c:50:9d:bd:92:f5:a3:61:f7:9d:6e:e1: c8:28:2b:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UZjCR8mx649EjXS6wkvsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNTViNDI1ZmVjZjc5ZjA5ZTA3NGIyZDZmM2E2MTZjN2I2 ODU3MDAwHhcNMjYwMTI1MTgwMTQxWhcNMjYwMTI2MTgwMTQxWjAzMTEwLwYDVQQD EygxNjc1YmYxYThkMDRiZTBiOTk1M2Q5ZjhjMzA4Y2Q0ZGVmZGZhYjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3W6i0Zl8xOnhcoAaY683qkUnBCrr bkLL/GVNDx2wBfMaHuSrEo0UpyfiByrthhpwMDO5IrlZghRkpdOHV1Xe2PERsYxE zRiCQ//XL56yzFigdvW1VsnOeKdiiDS049cpM9aL5RPSB5mcBnlU78hlmxPyVa+V 2WkBHyukJjSujDjnqtgjRkZgSVyIAGWjjjl3kw68uZ7d75nl4wfQZSZ5K1aMNurP 3tes3wqmASMh/Bg285Fs6eOtg6T3M8VyhbbRUcK9vkQ2k4pV8hmunqEoS2XjEbPc vU0Bl5DkFHn8KjPPKmkFjBNOVh0KI2q6zF7RUzDV/VNduIEaNQGyP+1I+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZ1vxqNBL4LmVPZ+MMIzU3v36slMB8GA1UdIwQY MBaAFM1VtCX+z3nwngdLLW86YWx7aFcAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelZXMEpmN1BlZkNlQjBzdGJ6cGhiSHRvVndBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hMDU2MTctZTgwOC00YWVkLWJlMjYt Yjg3MjM1YjRkNzYzLzEvelZXMEpmN1BlZkNlQjBzdGJ6cGhiSHRvVndBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hMDU2MTctZTgwOC00YWVkLWJlMjYtYjg3MjM1YjRkNzYz LzEvelZXMEpmN1BlZkNlQjBzdGJ6cGhiSHRvVndBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdg7T8SsX VeWFqUUbXP94JrGcA8ZtV15+wDMBRQQt5xTHo9xUx1HlNpP1oKXZhqL5Rdc1MQq9 10Xo7zXutEiaDxAGjHZ2Mniw+pZeR2TBddpYBcXgzV9j/AEov8v6C3jFoTyRaM4v jEckouFzWYl1han8nFJnCsEItcfUYOShAwhIlGiEZMRUVckzFvIXEN7tgGPfnLZi NxVOcP/2SgnIUKTtZH8i3uKv2pWvE0V/LLNvCyu3nJFOC9cVNeWkN7/oKFq/mX5p vWXmEf97nBtzKB34Sg0rSOIDQg8DgVcu9zyy1EIDMfSh9NDJW8TKuwsWXFCdvZL1 o2H3nW7hyCgrPg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:17 2026 by rpki-client