This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json) Hash identifier: maqxnvQaQ7bP5bj/fzkA0UEykaIMwBcoOCrzzm7A52w= Subject key identifier: 8F:27:2A:85:45:A3:03:6E:D0:75:12:7B:10:37:86:66:09:28:9B:AF Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb Certificate serial: 019BF9F6E374D1C0E93AED5FE0E4FC4EC594 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 11:01:05 +0000 Manifest this update: Mon 26 Jan 2026 11:01:05 +0000 Manifest next update: Tue 27 Jan 2026 11:01:05 +0000 Files and hashes: 1: Ui7fU_ExtBQjRDUB3fQ-b_PpUpk.roa (hash: k7V6RcZgsQ7uAKSC8Cpi5tMaIoKJRCG66jYZCk0ZWm8=) 2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: ruOUkTvTenm9vp87wsJ72+QyLVrslfS6SdlHP8ZzF0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:e3:74:d1:c0:e9:3a:ed:5f:e0:e4:fc:4e:c5:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb Validity Not Before: Jan 26 11:01:05 2026 GMT Not After : Jan 27 11:01:05 2026 GMT Subject: CN=8f272a8545a3036ed075127b1037866609289baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:34:4d:24:a4:be:27:f1:84:b1:55:9b:af:39: 40:ac:96:c6:f2:e0:c2:ac:56:d2:af:c5:f6:12:0a: f2:d6:e4:b3:e9:bd:29:da:92:d7:38:39:d7:b5:a5: 8a:19:32:d9:13:96:22:cb:36:62:16:1a:56:9f:a2: 55:a3:66:d6:24:45:c0:4a:50:12:5a:0e:ed:d6:20: a6:d1:39:16:cf:83:c6:97:e5:78:0a:84:3c:8e:c4: 3c:27:c1:30:a4:58:05:93:9f:55:61:d7:e7:df:0c: b7:fd:3a:40:e7:61:aa:a0:fb:70:08:96:eb:6e:45: f9:a5:67:cf:3e:4d:4b:61:48:f5:46:66:d4:75:b4: 61:ff:07:bc:78:a9:64:0e:ff:80:03:3f:11:3f:5b: bd:79:e7:f8:bd:06:6d:47:0a:0f:36:c6:23:21:7e: 2b:2a:c7:bf:c1:69:08:2e:99:c0:a6:70:1f:aa:cb: 12:d9:4b:69:84:03:29:4c:f9:f7:77:dd:04:7c:8c: 1a:47:2a:1b:3c:04:db:02:fe:86:fd:af:4d:8b:a2: 2d:09:dd:2c:b9:af:30:06:a0:a3:bc:6d:53:86:24: 9f:ac:65:ba:bf:65:c4:b0:40:03:c7:8a:1f:eb:71: 48:6c:9c:17:c9:67:d1:57:37:1f:50:1f:f4:99:31: 3b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:27:2A:85:45:A3:03:6E:D0:75:12:7B:10:37:86:66:09:28:9B:AF X509v3 Authority Key Identifier: keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c0:7e:0a:fa:9b:d0:19:df:35:de:02:95:17:b0:3e:92:d1: 83:6f:df:d1:23:6b:a4:b5:b0:dc:21:81:56:be:e0:cc:be:84: 7e:c0:3a:a9:cd:ae:09:ed:10:65:f7:42:49:4d:56:a9:0d:6e: 24:76:0e:4e:4d:88:a9:f8:a8:ed:99:eb:00:c9:6c:1e:4b:f0: 15:bb:fe:36:62:58:02:f3:23:56:7e:32:c0:ef:de:d9:0d:97: 45:e9:4d:aa:ee:b1:31:ca:a4:08:c5:fc:4a:da:cd:fc:c0:f4: ea:1e:85:2e:b6:d6:1f:23:85:7e:a2:e8:67:53:57:07:f6:b6: 1d:3f:83:f0:0c:b2:30:d9:29:f6:c3:90:31:93:b5:09:fb:c8: d0:57:da:17:66:a4:b7:c0:2d:2f:a6:76:84:b3:a6:78:e1:42: 46:e7:8a:3e:40:ac:67:33:b9:0c:19:26:6a:c2:9b:10:b0:7a: a4:cf:06:4e:8d:d0:b2:17:d5:c5:32:25:bc:c5:e4:74:e2:40: 25:72:e9:84:68:22:bf:53:99:7c:0d:16:cb:32:4b:d6:a4:62: e7:18:05:01:f7:8d:d2:27:f8:bc:9b:d4:fd:73:fc:fe:a6:95: 3b:f9:77:60:b0:27:22:d5:ef:ed:a3:3a:5a:72:38:4f:a8:c7: 31:42:1f:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59uN00cDpOu1f4OT8TsWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZjY4ZWMxMjdmYjMyYzY3OTIxOGFmYzc2ZTFiNmVhYTU5 NTIxYmIwHhcNMjYwMTI2MTEwMTA1WhcNMjYwMTI3MTEwMTA1WjAzMTEwLwYDVQQD Eyg4ZjI3MmE4NTQ1YTMwMzZlZDA3NTEyN2IxMDM3ODY2NjA5Mjg5YmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzRNJKS+J/GEsVWbrzlArJbG8uDC rFbSr8X2Egry1uSz6b0p2pLXODnXtaWKGTLZE5YiyzZiFhpWn6JVo2bWJEXASlAS Wg7t1iCm0TkWz4PGl+V4CoQ8jsQ8J8EwpFgFk59VYdfn3wy3/TpA52GqoPtwCJbr bkX5pWfPPk1LYUj1RmbUdbRh/we8eKlkDv+AAz8RP1u9eef4vQZtRwoPNsYjIX4r Kse/wWkILpnApnAfqssS2UtphAMpTPn3d90EfIwaRyobPATbAv6G/a9Ni6ItCd0s ua8wBqCjvG1ThiSfrGW6v2XEsEADx4of63FIbJwXyWfRVzcfUB/0mTE7qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8nKoVFowNu0HUSexA3hmYJKJuvMB8GA1UdIwQY MBaAFM32jsEn+zLGeSGK/HbhtuqllSG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wODM3N2YtZjIzMi00NGIwLWEzYjUt OTgyNDZhNGNiNmY4LzEvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8wODM3N2YtZjIzMi00NGIwLWEzYjUtOTgyNDZhNGNiNmY4 LzEvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsB+Cvqb 0BnfNd4ClRewPpLRg2/f0SNrpLWw3CGBVr7gzL6EfsA6qc2uCe0QZfdCSU1WqQ1u JHYOTk2Iqfio7ZnrAMlsHkvwFbv+NmJYAvMjVn4ywO/e2Q2XRelNqu6xMcqkCMX8 StrN/MD06h6FLrbWHyOFfqLoZ1NXB/a2HT+D8AyyMNkp9sOQMZO1CfvI0FfaF2ak t8AtL6Z2hLOmeOFCRueKPkCsZzO5DBkmasKbELB6pM8GTo3QshfVxTIlvMXkdOJA JXLphGgiv1OZfA0WyzJL1qRi5xgFAfeN0if4vJvU/XP8/qaVO/l3YLAnItXv7aM6 WnI4T6jHMUIfkQ== -----END CERTIFICATE-----Generated at Mon Jan 26 15:21:18 2026 by rpki-client