This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft File: Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json) Hash identifier: yV47hK6FJkJYRb0ZEK/9UlWPb9C3dWecj1txgenfaOg= Subject key identifier: C5:9B:D1:84:71:36:0F:19:04:9F:0C:05:C7:3A:DA:52:F5:CD:13:AC Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d Certificate serial: 019BF53E39CB037A8467A141EC4965EE56CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft Manifest number: 17FB Signing time: Sun 25 Jan 2026 13:00:54 +0000 Manifest this update: Sun 25 Jan 2026 13:00:54 +0000 Manifest next update: Mon 26 Jan 2026 13:00:54 +0000 Files and hashes: 1: Yo2OMvKcfdcYupX4YzMuNg6YOoU.roa (hash: m4lMqUG0bdl6WZJBNR/JE1WP+BWFScOk7QdsyR0VQzU=) 2: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: 75YDSzh5XFmH7dxZQvd0xAjEOWlKHuJrRCspIKkzlSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:39:cb:03:7a:84:67:a1:41:ec:49:65:ee:56:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d Validity Not Before: Jan 25 13:00:54 2026 GMT Not After : Jan 26 13:00:54 2026 GMT Subject: CN=c59bd18471360f19049f0c05c73ada52f5cd13ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e9:6e:f4:57:3c:b5:5e:b9:57:58:26:90:30: 0c:66:72:bb:81:69:dc:6d:e9:da:84:9d:8c:2b:02: 98:bb:11:b2:cb:49:73:b6:e5:37:5b:45:51:9f:9b: 20:cc:c3:f4:98:ce:65:6f:4a:04:9e:08:e8:1f:6f: 15:a7:74:65:6d:68:99:1e:3e:d4:c1:37:a6:47:d0: 33:5c:d3:81:2e:61:a3:3e:80:1d:f1:1a:78:c8:ab: 2c:50:63:8b:e3:5b:eb:b7:ab:fd:92:1f:2c:5c:73: 07:4a:9e:0b:ac:89:ff:0e:d4:e8:4a:44:23:6d:ad: e9:11:b8:bf:56:3e:c3:53:1a:e1:08:af:c0:63:81: 16:9b:99:b3:2c:8f:20:20:57:f3:5c:7f:c6:4f:4f: e2:5c:ff:71:e6:26:09:aa:e4:d6:b7:e4:cc:7a:22: c4:76:55:73:1c:a6:71:16:3d:83:a4:23:62:0f:62: 0c:e9:80:bd:f6:af:14:8c:72:8b:37:49:de:21:f2: 19:19:22:e1:90:1d:40:ec:8a:7b:d4:bb:fe:89:02: 94:2b:df:6d:6f:e8:50:33:56:9a:ab:22:c0:d0:f0: e9:8e:52:84:a4:70:b7:80:07:79:f6:0c:3b:f4:5f: f0:94:0a:af:f9:00:ee:4e:6a:a2:86:f0:85:43:27: 37:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9B:D1:84:71:36:0F:19:04:9F:0C:05:C7:3A:DA:52:F5:CD:13:AC X509v3 Authority Key Identifier: keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:44:2b:5e:20:b8:aa:4d:27:b4:a9:bc:85:0c:85:1f:bf:92: 1a:fe:3b:6d:e1:a4:1c:82:62:c8:ff:d3:8c:c7:d8:42:ed:80: ac:44:02:3f:41:51:19:bc:02:3d:fc:b2:40:18:98:1e:7f:f7: e8:5a:37:e8:e1:c6:da:62:72:fe:21:69:05:da:98:87:dc:15: 0a:3b:40:7b:1f:f5:59:3a:80:cb:aa:1c:54:f2:85:31:d9:6d: a9:b0:05:25:df:38:66:c6:f3:62:da:fb:fe:01:ec:b8:5b:48: 82:22:b3:4c:ed:46:6a:82:ce:d0:24:6a:a8:37:ab:de:83:5c: a6:6d:85:b8:6b:b1:7d:61:64:52:85:a8:07:5f:7b:c6:74:f3: 65:81:d6:19:b4:bc:53:60:ef:28:de:f3:0e:97:b3:74:4c:13: 90:b8:4b:8e:22:98:8e:c7:61:1d:1f:20:80:af:21:25:d4:52: 40:9f:cc:ec:9c:6b:09:61:74:ac:70:2b:3c:1b:37:d0:d7:82: 1e:52:da:28:9b:35:8a:d1:93:50:24:3c:00:25:1d:f7:4c:a0: 5e:4f:0a:cf:0e:37:5f:6c:7e:6b:07:e0:f2:30:49:c1:06:9c: 4a:fe:29:84:90:38:da:46:a5:35:86:f6:df:70:4a:ab:cf:a6: 2c:b2:c6:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PjnLA3qEZ6FB7Ell7lbKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDlhZWRhOGE4YWNlN2VjNTk2ZmMxODdhMmZlMTA1ODJh NjcwNGQwHhcNMjYwMTI1MTMwMDU0WhcNMjYwMTI2MTMwMDU0WjAzMTEwLwYDVQQD EyhjNTliZDE4NDcxMzYwZjE5MDQ5ZjBjMDVjNzNhZGE1MmY1Y2QxM2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+lu9Fc8tV65V1gmkDAMZnK7gWnc benahJ2MKwKYuxGyy0lztuU3W0VRn5sgzMP0mM5lb0oEngjoH28Vp3RlbWiZHj7U wTemR9AzXNOBLmGjPoAd8Rp4yKssUGOL41vrt6v9kh8sXHMHSp4LrIn/DtToSkQj ba3pEbi/Vj7DUxrhCK/AY4EWm5mzLI8gIFfzXH/GT0/iXP9x5iYJquTWt+TMeiLE dlVzHKZxFj2DpCNiD2IM6YC99q8UjHKLN0neIfIZGSLhkB1A7Ip71Lv+iQKUK99t b+hQM1aaqyLA0PDpjlKEpHC3gAd59gw79F/wlAqv+QDuTmqihvCFQyc35QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWb0YRxNg8ZBJ8MBcc62lL1zROsMB8GA1UdIwQY MBaAFGdJrtqKis5+xZb8GHov4QWCpnBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZDM2YWItZGVlNS00NjlkLTkyMTYt NjY2M2ZhYmExZGQwLzEvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yZDM2YWItZGVlNS00NjlkLTkyMTYtNjY2M2ZhYmExZGQw LzEvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1UQrXiC4 qk0ntKm8hQyFH7+SGv47beGkHIJiyP/TjMfYQu2ArEQCP0FRGbwCPfyyQBiYHn/3 6Fo36OHG2mJy/iFpBdqYh9wVCjtAex/1WTqAy6ocVPKFMdltqbAFJd84ZsbzYtr7 /gHsuFtIgiKzTO1GaoLO0CRqqDer3oNcpm2FuGuxfWFkUoWoB197xnTzZYHWGbS8 U2DvKN7zDpezdEwTkLhLjiKYjsdhHR8ggK8hJdRSQJ/M7JxrCWF0rHArPBs30NeC HlLaKJs1itGTUCQ8ACUd90ygXk8Kzw43X2x+awfg8jBJwQacSv4phJA42kalNYb2 33BKq8+mLLLG3g== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:19 2026 by rpki-client