This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft File: zGB34ATojv-PE7d0DfJU2eSN1XQ.mft (raw, json) Hash identifier: sDdN2KSX4wn921Xgmjs5ilXJDUVEhaVr8v6hQiyz2qg= Subject key identifier: A4:60:14:5F:6A:0B:98:79:19:51:F7:E7:1D:DD:B5:BC:CA:5E:10:41 Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74 Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574 Certificate serial: 019BF1CFAB5B4A70D04B02F32C839452E143 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft Manifest number: 17EA Signing time: Sat 24 Jan 2026 21:01:17 +0000 Manifest this update: Sat 24 Jan 2026 21:01:17 +0000 Manifest next update: Sun 25 Jan 2026 21:01:17 +0000 Files and hashes: 1: 8q97JD8tJUeeOn9fKUKNm7YiLwU.roa (hash: +XZNxuku4QOLJPqFzFk8t0v4pn8/FyRgMW7pvdNX3CU=) 2: MDkPOpYz1CFhy53GuyXV7mJS25Y.roa (hash: JdEyxxhM+8u/dWlLfW1Caxnykc4bJ7pVq4kK7m8J+m0=) 3: sPvIT2OpPdfQUjumOhMItUZScLE.roa (hash: 3ub5VhGbB2HUNoD3TI7D0yCIQk+I5O7LDn2pAlXC/k4=) 4: zGB34ATojv-PE7d0DfJU2eSN1XQ.crl (hash: 0XNxc74oj0Q/5OhARTX6zzVPBpSGyVr8vKVNmkvzKkA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:cf:ab:5b:4a:70:d0:4b:02:f3:2c:83:94:52:e1:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574 Validity Not Before: Jan 24 21:01:17 2026 GMT Not After : Jan 25 21:01:17 2026 GMT Subject: CN=a460145f6a0b98791951f7e71dddb5bcca5e1041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:28:02:61:dd:a3:c8:b5:b7:7b:d1:b7:e3:c6: 9a:01:ed:fd:c7:18:35:15:39:a4:2a:0d:72:29:57: 91:4f:d7:7c:c2:ea:80:fe:41:00:60:9c:d2:60:95: e4:88:2b:65:0a:d4:a8:8b:50:4d:20:a1:8d:33:ed: fd:65:67:d2:90:40:99:2f:52:64:4d:86:fe:da:46: a5:09:82:bf:c6:a3:c6:0a:13:d6:fe:fc:33:a0:7b: 05:2d:34:0b:64:56:1b:64:1c:e6:1e:e2:d2:5f:d2: 1b:f2:d7:88:2c:fc:ba:db:da:15:bb:45:aa:3a:dd: 43:07:a7:57:f2:a5:5f:48:c0:9c:c0:cf:c9:36:95: 99:03:9a:0f:52:6b:44:a7:68:a2:da:82:6b:f4:78: c3:67:8d:21:e2:c9:c6:ba:b9:3f:2f:66:0a:98:27: 15:c1:47:1e:98:ce:30:0a:ff:34:4e:b7:76:1d:b8: 4c:48:87:03:6b:71:37:30:a8:5a:cc:78:66:d6:06: 65:aa:b4:41:c5:1c:ec:e8:da:0f:1e:3f:c9:e6:70: 7e:ec:61:85:f9:55:e5:bd:42:e1:27:cf:20:51:21: 2e:60:a1:17:eb:a7:24:83:fb:7f:66:e9:80:c7:e7: a0:bf:05:96:90:89:8b:85:24:8c:4d:fb:bc:d6:d1: 35:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:60:14:5F:6A:0B:98:79:19:51:F7:E7:1D:DD:B5:BC:CA:5E:10:41 X509v3 Authority Key Identifier: keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:4b:88:dc:46:e5:65:a8:c7:9b:d9:38:ce:36:96:db:38:7c: ed:14:9d:72:62:f4:27:9c:8c:62:31:7d:53:9a:de:cd:d8:ab: 81:49:39:70:4a:99:5b:45:29:ae:18:7c:fa:b0:e3:ca:74:7f: 35:52:91:20:02:93:ce:98:e6:3b:c3:d4:e5:43:0c:9c:69:ed: 58:b0:4a:d6:4d:24:ff:68:b7:59:9e:e3:6b:0c:8b:9d:b3:14: 03:e0:96:ea:e9:93:9c:8c:3c:99:d4:76:73:ef:ec:e6:32:35: 7d:e7:9a:86:65:12:94:2a:83:71:e4:3f:68:cf:53:95:de:1c: 96:ee:86:ca:9c:bf:9a:1c:e2:3a:94:2a:60:37:56:64:8d:a6: 7b:9a:00:3b:ab:e4:0e:72:f1:55:36:3b:0c:a1:88:8a:3b:c4: 4d:17:b0:82:5b:26:d4:b1:84:b4:bd:0a:fc:37:b7:dc:77:66: 35:d3:3f:aa:76:58:72:9c:04:a7:e7:45:d0:8a:1e:06:09:22: 58:19:11:00:a5:ea:27:e6:84:31:e7:c0:13:8a:cb:db:11:88: ab:f9:6d:f9:c5:99:1b:26:80:d7:a1:b1:26:22:74:61:94:80: 31:4a:7f:f9:35:e4:dc:fb:0a:00:3d:cd:fa:92:e2:cf:df:b6: eb:5b:35:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvxz6tbSnDQSwLzLIOUUuFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNjA3N2UwMDRlODhlZmY4ZjEzYjc3NDBkZjI1NGQ5ZTQ4 ZGQ1NzQwHhcNMjYwMTI0MjEwMTE3WhcNMjYwMTI1MjEwMTE3WjAzMTEwLwYDVQQD EyhhNDYwMTQ1ZjZhMGI5ODc5MTk1MWY3ZTcxZGRkYjViY2NhNWUxMDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CgCYd2jyLW3e9G348aaAe39xxg1 FTmkKg1yKVeRT9d8wuqA/kEAYJzSYJXkiCtlCtSoi1BNIKGNM+39ZWfSkECZL1Jk TYb+2kalCYK/xqPGChPW/vwzoHsFLTQLZFYbZBzmHuLSX9Ib8teILPy629oVu0Wq Ot1DB6dX8qVfSMCcwM/JNpWZA5oPUmtEp2ii2oJr9HjDZ40h4snGurk/L2YKmCcV wUcemM4wCv80Trd2HbhMSIcDa3E3MKhazHhm1gZlqrRBxRzs6NoPHj/J5nB+7GGF +VXlvULhJ88gUSEuYKEX66ckg/t/ZumAx+egvwWWkImLhSSMTfu81tE1WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRgFF9qC5h5GVH35x3dtbzKXhBBMB8GA1UdIwQY MBaAFMxgd+AE6I7/jxO3dA3yVNnkjdV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81ODE3OGQtMzc3Yi00NjBhLTk0YjEt NDY3MWY0YmFhOWIxLzEvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81ODE3OGQtMzc3Yi00NjBhLTk0YjEtNDY3MWY0YmFhOWIx LzEvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUuI3Ebl ZajHm9k4zjaW2zh87RSdcmL0J5yMYjF9U5rezdirgUk5cEqZW0Uprhh8+rDjynR/ NVKRIAKTzpjmO8PU5UMMnGntWLBK1k0k/2i3WZ7jawyLnbMUA+CW6umTnIw8mdR2 c+/s5jI1feeahmUSlCqDceQ/aM9Tld4clu6Gypy/mhziOpQqYDdWZI2me5oAO6vk DnLxVTY7DKGIijvETRewglsm1LGEtL0K/De33HdmNdM/qnZYcpwEp+dF0IoeBgki WBkRAKXqJ+aEMefAE4rL2xGIq/lt+cWZGyaA16GxJiJ0YZSAMUp/+TXk3PsKAD3N +pLiz9+261s1Ng== -----END CERTIFICATE-----Generated at Sun Jan 25 06:15:05 2026 by rpki-client