This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft File: ZRHOXi9Tt7uMrI854pTomkWyACk.mft (raw, json) Hash identifier: 7x1Dx+zFFTFvNYxayJ05ombbTo4UJ/MtFesiXIQ6UfA= Subject key identifier: 8E:36:DF:85:79:64:C4:CC:31:3B:A4:42:A4:1F:FF:A2:99:3B:B0:D8 Authority key identifier: 65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29 Certificate issuer: /CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029 Certificate serial: 019BF619F6653941C1C37A51E538FB7CA5B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 17:00:55 +0000 Manifest this update: Sun 25 Jan 2026 17:00:55 +0000 Manifest next update: Mon 26 Jan 2026 17:00:55 +0000 Files and hashes: 1: 7a3jx1e7OA1EvpScFrXmNMe5y_M.roa (hash: tYNpUtLbZOwbXL/8gGlkXA0JhxkITkZz7z+FpesOG/s=) 2: LO7eXF6OcCBWRqiHSI58WfsNfTc.roa (hash: kS9qCezSVg1pWa1B2LuRlgPBMoX60MqXPWVZsOzHZq8=) 3: ZRHOXi9Tt7uMrI854pTomkWyACk.crl (hash: Yfp6d8SGQKF+jo8ZhJIQS7tXdqlJjRFcNV2TiNyuR/Y=) 4: osWiuCxFKK7p5wtHqJimdeaWv-0.roa (hash: uNL2gHPQqgqmPM9/9Y5/YfTqQyz7bRjGXXYyc1z5tGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:f6:65:39:41:c1:c3:7a:51:e5:38:fb:7c:a5:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029 Validity Not Before: Jan 25 17:00:55 2026 GMT Not After : Jan 26 17:00:55 2026 GMT Subject: CN=8e36df857964c4cc313ba442a41fffa2993bb0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ae:47:30:23:88:38:bf:a7:9a:a0:c3:ef:a8: 61:e6:cb:53:07:63:02:30:72:36:9f:d4:e8:8c:30: ca:03:cd:77:fb:a0:02:c8:25:91:36:21:0f:fa:ac: 1c:27:2c:49:48:15:52:d9:45:0b:d8:75:0e:4b:d7: cb:82:e5:27:97:7f:f8:cb:2f:df:fc:42:32:56:ed: 0d:12:cc:6c:1f:07:1d:77:1f:cf:13:ea:d8:20:8d: 64:f7:c5:50:e2:13:a2:b1:aa:21:36:16:96:b8:bc: 83:e2:c3:69:56:52:18:99:60:22:cc:41:f5:c6:6e: c4:31:d6:e4:46:9c:73:c3:32:f7:ec:03:8f:7b:1a: 2d:76:2f:61:6f:7f:26:6d:d2:de:80:dc:8d:87:0b: d1:8c:3f:25:35:5b:5c:6c:b4:29:9c:52:e2:73:f3: 19:dd:de:4b:8e:8e:52:4a:81:4f:51:11:93:2e:7e: 86:0b:54:fe:61:94:dc:ac:37:1c:0c:f8:42:2a:73: 99:65:25:61:44:ef:9b:0e:6d:e9:30:30:81:6d:ea: f3:1e:2e:fb:e9:8f:22:09:5e:99:5e:19:81:c2:88: a2:be:41:43:98:4e:8a:b0:0b:d9:6b:d7:d3:4a:aa: 4f:56:2a:47:7f:56:3e:ab:9e:7c:66:25:e3:d0:2a: f6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:36:DF:85:79:64:C4:CC:31:3B:A4:42:A4:1F:FF:A2:99:3B:B0:D8 X509v3 Authority Key Identifier: keyid:65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:36:61:3d:c8:ca:7e:1b:b3:08:0d:78:3a:8b:e8:15:97:e0: 0b:6c:14:f0:b9:e5:ed:35:be:b8:11:e8:14:b9:d5:13:29:05: e5:08:6d:f7:c1:3a:38:71:a0:6a:d7:d9:4a:0b:58:d1:e9:4f: 4b:0d:94:c5:f1:fe:98:6b:46:58:93:2e:5f:bd:a0:c5:5d:59: 35:9b:79:e9:72:69:8a:47:f5:46:ea:e6:e1:c8:f0:c4:d1:1f: 9e:88:f3:48:ff:56:ea:8d:c2:73:21:90:14:6e:4d:89:00:41: 87:a4:de:f9:d1:4b:19:65:66:ab:23:68:ff:8f:a5:41:67:1b: 95:c7:6a:0a:29:2d:e5:4a:be:0e:bc:bb:48:44:3a:5c:58:d0: 66:23:8c:79:45:4c:e1:0a:60:74:a6:00:cb:44:a1:08:c3:09: ea:9e:2c:00:15:23:d5:cb:37:ba:e0:1b:be:aa:7f:2c:77:32: bb:6a:af:65:7b:fa:09:56:86:ce:cc:06:42:19:35:4f:57:60: 33:a9:78:ba:00:43:77:b4:23:21:9c:6a:08:a4:0f:97:3b:fa: a1:3f:38:0d:7b:e2:f5:7d:38:88:6e:ee:6b:b6:1b:05:19:c3: f6:65:37:3b:26:41:f9:85:ce:77:6d:6c:24:e0:e8:e5:79:8e: 3d:c9:50:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GfZlOUHBw3pR5Tj7fKWzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MTFjZTVlMmY1M2I3YmI4Y2FjOGYzOWUyOTRlODlhNDVi MjAwMjkwHhcNMjYwMTI1MTcwMDU1WhcNMjYwMTI2MTcwMDU1WjAzMTEwLwYDVQQD Eyg4ZTM2ZGY4NTc5NjRjNGNjMzEzYmE0NDJhNDFmZmZhMjk5M2JiMGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K5HMCOIOL+nmqDD76hh5stTB2MC MHI2n9TojDDKA813+6ACyCWRNiEP+qwcJyxJSBVS2UUL2HUOS9fLguUnl3/4yy/f /EIyVu0NEsxsHwcddx/PE+rYII1k98VQ4hOisaohNhaWuLyD4sNpVlIYmWAizEH1 xm7EMdbkRpxzwzL37AOPexotdi9hb38mbdLegNyNhwvRjD8lNVtcbLQpnFLic/MZ 3d5Ljo5SSoFPURGTLn6GC1T+YZTcrDccDPhCKnOZZSVhRO+bDm3pMDCBberzHi77 6Y8iCV6ZXhmBwoiivkFDmE6KsAvZa9fTSqpPVipHf1Y+q558ZiXj0Cr2EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4234V5ZMTMMTukQqQf/6KZO7DYMB8GA1UdIwQY MBaAFGURzl4vU7e7jKyPOeKU6JpFsgApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJIT1hpOVR0N3VNckk4NTRwVG9ta1d5QUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85MWIwOTMtYWNiNy00Y2I3LWJmOGYt NWNiOTM0YTU1YjBkLzEvWlJIT1hpOVR0N3VNckk4NTRwVG9ta1d5QUNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS85MWIwOTMtYWNiNy00Y2I3LWJmOGYtNWNiOTM0YTU1YjBk LzEvWlJIT1hpOVR0N3VNckk4NTRwVG9ta1d5QUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjZhPcjK fhuzCA14OovoFZfgC2wU8Lnl7TW+uBHoFLnVEykF5Qht98E6OHGgatfZSgtY0elP Sw2UxfH+mGtGWJMuX72gxV1ZNZt56XJpikf1Rurm4cjwxNEfnojzSP9W6o3CcyGQ FG5NiQBBh6Te+dFLGWVmqyNo/4+lQWcblcdqCikt5Uq+Dry7SEQ6XFjQZiOMeUVM 4QpgdKYAy0ShCMMJ6p4sABUj1cs3uuAbvqp/LHcyu2qvZXv6CVaGzswGQhk1T1dg M6l4ugBDd7QjIZxqCKQPlzv6oT84DXvi9X04iG7ua7YbBRnD9mU3OyZB+YXOd21s JODo5XmOPclQyw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:39 2026 by rpki-client