This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft File: ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft (raw, json) Hash identifier: zWWaf1kDdDg59BOx04wc3fqI54/9BO+PzCS65cQGtjU= Subject key identifier: 63:CD:D7:AC:F4:CF:36:0D:B6:37:B8:71:20:53:84:B1:D5:9D:E1:A2 Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60 Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060 Certificate serial: 019BF386693CD55A96C36677D307A56EB98D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft Manifest number: 17EF Signing time: Sun 25 Jan 2026 05:00:30 +0000 Manifest this update: Sun 25 Jan 2026 05:00:30 +0000 Manifest next update: Mon 26 Jan 2026 05:00:30 +0000 Files and hashes: 1: 0z9citdXF8752nMEZiQ4oSMIADQ.roa (hash: JsB61vUCFnFWtGQaFlnVeeC8gXBCxefSLsjNjYyY9/g=) 2: 1QDofdrdxn1wg6XblVl9BvBWUmc.roa (hash: 8Sto9TSm0VzEJfpih+W00AHEzAW1aUXacQ7edZT+jK8=) 3: SHKEVaNgH9Bucka6k6DYJtipntE.roa (hash: BUtzhRgSiAPbFwNwynYtm2FzNHzBaqAfRxGfLRS/A6M=) 4: SiLSIEYAwNCN6yfvfGLloC6RIXg.roa (hash: f37/jtR+gmt7ksn8/WXr+fSg16YuTdrSXAgeLfyiBrs=) 5: VHWtEL_iyyJZZOqjrL2J-IKargg.roa (hash: rnSeZqJKS3ZOhG3KIGaYj7ByHskvac+xvOyX10SyZy8=) 6: ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl (hash: 0XgMT2GZ/7iKzMa5Bzv/dnaWPrl5BKUkluW+38P5J0M=) 7: mYZ-CoJ30ryRjfCq_ZwrN2mkqqU.roa (hash: yzaoDw2vJVnlrfgQa+Wm4W0pkL/1ud5VYXRkIehmaa4=) 8: qBMQ_OTzlhMPTgYD0x98v7ieh-M.roa (hash: srAfkImn91GUj6UJibeFHF6TEzTA92kUfQ1mQv9UhIQ=) 9: vivzNK4w1TVYnua5SgoJCXmDNng.roa (hash: 9/40NjL27IpJKJ6tBTmAIkD9cPnZOn2LOM7782cQFOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:69:3c:d5:5a:96:c3:66:77:d3:07:a5:6e:b9:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66e92c341e769443fde1d27566044b4b65159060 Validity Not Before: Jan 25 05:00:30 2026 GMT Not After : Jan 26 05:00:30 2026 GMT Subject: CN=63cdd7acf4cf360db637b871205384b1d59de1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fc:75:9f:62:a7:1d:46:5f:9f:b6:9a:12:7b: 26:e7:74:5e:1c:6a:9b:45:e4:46:fc:47:5d:dd:57: f2:37:07:4f:9a:b9:2c:e8:36:a1:58:33:6f:57:17: 57:3c:82:12:44:4f:29:71:5b:54:ff:ee:71:6f:0f: 09:90:23:ee:5f:40:8a:36:33:7d:6f:15:ff:f3:17: bf:33:da:c4:5e:ba:c7:ee:fb:66:4e:84:9f:31:ee: 3e:c3:2d:93:af:ac:82:5d:52:2c:cc:e8:dc:b7:46: bc:72:d6:5e:ed:38:52:70:34:38:42:b7:66:cf:b9: 80:c4:58:cc:7d:88:c9:11:03:aa:d2:45:34:c1:d0: 51:28:b1:8c:bf:ca:66:d2:43:98:3c:58:11:0f:2c: 8b:66:74:f9:06:6c:98:3f:bf:91:b3:dc:6a:1e:20: c1:09:d4:33:44:2f:0e:50:b1:fe:71:ab:0f:00:e5: e5:1e:97:aa:aa:64:55:1a:d0:38:eb:83:36:bd:f6: e2:41:11:e5:05:93:ef:72:53:d1:73:3f:47:fd:03: 27:33:31:ac:55:63:a2:72:1c:2f:ac:18:88:81:3f: 2c:55:be:67:12:37:04:6d:68:ed:5d:15:43:41:8f: 03:5c:b1:94:c0:d6:1e:6e:35:1f:bd:c7:7c:13:1c: 69:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CD:D7:AC:F4:CF:36:0D:B6:37:B8:71:20:53:84:B1:D5:9D:E1:A2 X509v3 Authority Key Identifier: keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ff:25:04:40:aa:50:45:b0:e4:18:bb:db:23:c0:4e:4e:22: 08:76:a2:84:ac:76:9d:96:f8:46:18:be:9f:46:aa:c8:43:0c: 26:13:34:7f:fc:09:6b:ef:a2:ba:10:51:66:a5:46:ff:b1:98: bc:59:77:e3:38:9b:7c:82:20:33:41:24:65:c9:39:13:09:67: 6c:9c:2c:7a:d8:01:8f:03:ce:67:f6:0b:de:6d:10:c0:85:80: 75:01:d6:0d:6d:8f:5a:a2:9a:a2:a6:fe:c5:67:2e:53:0e:49: 1e:ea:ab:14:8a:f1:0d:ef:5a:4b:7c:78:e5:5d:d6:ec:e5:9f: 9a:b0:70:88:76:24:d4:76:0b:c5:2d:e0:bf:03:85:98:64:46: eb:75:e1:72:55:13:fe:df:3f:ad:a8:41:02:f6:92:0e:06:f9: 70:df:cb:be:3d:2b:6f:3f:39:db:fb:32:5d:e4:a7:14:4e:96: bf:42:a9:19:12:92:0e:26:5a:ae:62:36:47:f6:e7:62:96:61: 1b:a2:13:08:25:6d:5b:79:f2:ff:ad:73:26:72:78:46:ce:eb: 8c:ae:f5:3e:f0:95:1e:52:f9:45:1a:4a:09:ad:43:6c:bd:0c: 1e:65:97:06:db:2d:95:24:15:de:5e:a5:78:b3:b5:33:3b:82: 04:a5:8e:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhmk81VqWw2Z30welbrmNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZTkyYzM0MWU3Njk0NDNmZGUxZDI3NTY2MDQ0YjRiNjUx NTkwNjAwHhcNMjYwMTI1MDUwMDMwWhcNMjYwMTI2MDUwMDMwWjAzMTEwLwYDVQQD Eyg2M2NkZDdhY2Y0Y2YzNjBkYjYzN2I4NzEyMDUzODRiMWQ1OWRlMWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvx1n2KnHUZfn7aaEnsm53ReHGqb ReRG/Edd3VfyNwdPmrks6DahWDNvVxdXPIISRE8pcVtU/+5xbw8JkCPuX0CKNjN9 bxX/8xe/M9rEXrrH7vtmToSfMe4+wy2Tr6yCXVIszOjct0a8ctZe7ThScDQ4Qrdm z7mAxFjMfYjJEQOq0kU0wdBRKLGMv8pm0kOYPFgRDyyLZnT5BmyYP7+Rs9xqHiDB CdQzRC8OULH+casPAOXlHpeqqmRVGtA464M2vfbiQRHlBZPvclPRcz9H/QMnMzGs VWOichwvrBiIgT8sVb5nEjcEbWjtXRVDQY8DXLGUwNYebjUfvcd8ExxpnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPN16z0zzYNtje4cSBThLHVneGiMB8GA1UdIwQY MBaAFGbpLDQedpRD/eHSdWYES0tlFZBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84ZjE5NjgtYTc5YS00YTA3LWFjZTYt YzFkMjk2ZjhmZDA3LzEvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS84ZjE5NjgtYTc5YS00YTA3LWFjZTYtYzFkMjk2ZjhmZDA3 LzEvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/8lBECq UEWw5Bi72yPATk4iCHaihKx2nZb4Rhi+n0aqyEMMJhM0f/wJa++iuhBRZqVG/7GY vFl34zibfIIgM0EkZck5EwlnbJwsetgBjwPOZ/YL3m0QwIWAdQHWDW2PWqKaoqb+ xWcuUw5JHuqrFIrxDe9aS3x45V3W7OWfmrBwiHYk1HYLxS3gvwOFmGRG63XhclUT /t8/rahBAvaSDgb5cN/Lvj0rbz852/syXeSnFE6Wv0KpGRKSDiZarmI2R/bnYpZh G6ITCCVtW3ny/61zJnJ4Rs7rjK71PvCVHlL5RRpKCa1DbL0MHmWXBtstlSQV3l6l eLO1MzuCBKWOOQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:45:47 2026 by rpki-client