This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft File: Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft (raw, json) Hash identifier: EXp++n7HLo2H4O7OC12qSOjfPNxSMT/zp5hxNRat7S8= Subject key identifier: F9:BF:E5:50:4F:45:6E:A0:56:F5:3A:57:F5:8E:BD:9E:66:70:17:32 Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00 Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00 Certificate serial: 019BF46277948F0BED0A233D9D38C8B1DE80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft Manifest number: 1071 Signing time: Sun 25 Jan 2026 09:00:52 +0000 Manifest this update: Sun 25 Jan 2026 09:00:52 +0000 Manifest next update: Mon 26 Jan 2026 09:00:52 +0000 Files and hashes: 1: 19m5MDbUFOo2nenyTAHaAJWRktg.roa (hash: ifiLYIYFLAmYeXVeugFRbq75qlpi3IBXffi18Sxi0dE=) 2: 3hk8gZRTXeoThSESdUyXemIodyY.roa (hash: EtnQ6xG64pJ8Zkp4+CHediwomKLAwpZwbAVhbYwHBLc=) 3: EcWTWsW7l7pSDkzIfszK-ABUpsY.roa (hash: psJpT6d58TfpqU9qeBsatlA8wNIaL/3bQDwy3Orowzs=) 4: Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl (hash: e4BMTnshC+EgeT/L0KpzAvgMxAgEfvwm9twL+Mgvgg0=) 5: doyYOGkkycNxN7CI_sa7Q6rCkOM.roa (hash: woc85YZFaTyz+Qogag/CUtpAQY4A09lS0R0JgcvwyKk=) 6: fUMkR8oLIxzDg5t3sIti8WEBY30.roa (hash: 38Z6yw8kMZdeEBs0/GMX1Xr3k7daRBkZk1bVdKcb/3U=) 7: lN52A8wmVdK-KeTgv5TB-V3C8VU.roa (hash: r7UmoxX/ZzMNRX796XCzomjg3WCGmP7MqKUteRQKBkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:77:94:8f:0b:ed:0a:23:3d:9d:38:c8:b1:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00 Validity Not Before: Jan 25 09:00:52 2026 GMT Not After : Jan 26 09:00:52 2026 GMT Subject: CN=f9bfe5504f456ea056f53a57f58ebd9e66701732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e7:fb:76:94:bd:4f:cb:21:13:e1:94:a1:d7: 69:1a:0c:51:d1:b4:ed:f3:a4:ff:7e:ff:e8:53:81: 64:ae:c0:07:bd:49:30:0b:b6:76:ca:93:4e:9c:87: 53:14:61:17:02:c0:95:9a:7e:e1:97:0c:62:0e:4d: 05:4d:6d:ca:f8:7f:06:7c:89:c2:da:66:57:28:e1: 6b:db:fc:ff:12:09:08:27:65:b7:80:46:02:e5:b8: a7:ba:e3:67:83:5b:39:b8:6f:f7:6f:ad:02:fa:6b: a9:fc:ff:8b:53:01:45:08:16:4c:b6:22:0e:b7:f4: 53:6c:1d:e1:5a:e0:28:21:f1:4b:ff:bc:5d:97:2f: 27:2b:db:eb:98:a6:40:c0:f1:32:ab:60:5d:c3:ca: 12:f0:42:e1:ca:eb:65:5e:70:cd:a6:8d:16:eb:d1: 1b:54:4b:03:52:c3:1a:af:59:92:ef:9c:20:b5:3e: 86:4e:9a:b5:89:19:c9:5b:6a:87:bf:b5:12:77:00: a5:b2:16:00:b9:f8:ab:79:3d:88:a0:f9:51:31:45: a0:d8:89:3d:e8:ed:71:b1:22:df:43:20:0f:2c:88: 8c:05:4c:65:62:11:24:cd:0a:9d:f7:a5:c2:2b:65: b3:ec:40:b0:e7:33:02:7e:d7:03:b6:38:86:e2:c1: 84:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BF:E5:50:4F:45:6E:A0:56:F5:3A:57:F5:8E:BD:9E:66:70:17:32 X509v3 Authority Key Identifier: keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:03:b6:ac:20:8e:aa:79:e7:52:5c:a5:6c:dc:43:cd:13:6f: 7b:46:51:23:8c:94:0c:fa:90:76:9f:0a:a1:40:d8:01:be:e7: 6f:24:c0:92:c1:8c:ad:fe:b5:69:e6:7e:79:e5:4c:b7:e5:ce: aa:23:b1:71:b7:74:00:68:9a:b4:33:bb:5a:cc:e0:20:7f:64: 32:9f:af:35:92:3a:4d:e1:6d:65:8c:75:5c:2a:f5:c0:2c:36: 82:a7:1e:26:e4:d9:45:75:92:5c:50:55:7b:7d:31:56:30:26: bd:dd:75:17:94:07:98:96:6d:09:fa:b4:24:ea:ce:9f:68:8d: e8:71:55:f4:8f:b3:ac:fb:3e:a7:6d:6f:7e:c4:df:8a:46:b1: f7:20:3c:48:5e:e4:e3:9a:97:c1:4a:32:44:ac:7a:c5:1e:88: c6:fe:55:ae:cd:e8:dc:ac:77:e2:e8:8e:3e:3a:b5:45:34:23: 7a:4a:b6:e5:19:7e:47:0c:73:29:65:07:de:1a:5b:f9:f1:88: dd:e8:6d:f1:3a:ee:23:05:a8:00:cc:99:d1:a9:ca:7a:fb:f9: 20:c0:37:ce:82:06:6d:20:08:5e:02:3f:5c:8c:0e:45:8d:cf: 45:9e:48:d3:bd:6f:78:dd:5b:0b:df:29:6c:50:47:26:8b:45: ec:76:bd:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YneUjwvtCiM9nTjIsd6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZTI0YzcyODRlZjQ4ODdlNDVkNGNjZDliZGU2NzljZDlh YjRmMDAwHhcNMjYwMTI1MDkwMDUyWhcNMjYwMTI2MDkwMDUyWjAzMTEwLwYDVQQD EyhmOWJmZTU1MDRmNDU2ZWEwNTZmNTNhNTdmNThlYmQ5ZTY2NzAxNzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuf7dpS9T8shE+GUoddpGgxR0bTt 86T/fv/oU4FkrsAHvUkwC7Z2ypNOnIdTFGEXAsCVmn7hlwxiDk0FTW3K+H8GfInC 2mZXKOFr2/z/EgkIJ2W3gEYC5binuuNng1s5uG/3b60C+mup/P+LUwFFCBZMtiIO t/RTbB3hWuAoIfFL/7xdly8nK9vrmKZAwPEyq2Bdw8oS8ELhyutlXnDNpo0W69Eb VEsDUsMar1mS75wgtT6GTpq1iRnJW2qHv7USdwClshYAufireT2IoPlRMUWg2Ik9 6O1xsSLfQyAPLIiMBUxlYhEkzQqd96XCK2Wz7ECw5zMCftcDtjiG4sGEWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPm/5VBPRW6gVvU6V/WOvZ5mcBcyMB8GA1UdIwQY MBaAFGfiTHKE70iH5F1MzZveZ5zZq08AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzct MDM3NWE5YzMyYjAwLzEvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzctMDM3NWE5YzMyYjAw LzEvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgO2rCCO qnnnUlylbNxDzRNve0ZRI4yUDPqQdp8KoUDYAb7nbyTAksGMrf61aeZ+eeVMt+XO qiOxcbd0AGiatDO7WszgIH9kMp+vNZI6TeFtZYx1XCr1wCw2gqceJuTZRXWSXFBV e30xVjAmvd11F5QHmJZtCfq0JOrOn2iN6HFV9I+zrPs+p21vfsTfikax9yA8SF7k 45qXwUoyRKx6xR6Ixv5Vrs3o3Kx34uiOPjq1RTQjekq25Rl+RwxzKWUH3hpb+fGI 3eht8TruIwWoAMyZ0anKevv5IMA3zoIGbSAIXgI/XIwORY3PRZ5I071veN1bC98p bFBHJotF7Ha9Zg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:42 2026 by rpki-client