This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft File: z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft (raw, json) Hash identifier: DuZQOyG5FvZkvzVeQCYg7nOFU8iuuHtPcMhUC8cYIcM= Subject key identifier: 65:27:37:60:B1:6D:AE:A0:46:4C:A1:B5:D4:6E:CB:1A:B6:AF:35:B5 Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7 Certificate issuer: /CN=cf9833261697652c35547e98fc05a7e2294edbc7 Certificate serial: 019BF5E3283673AE65297FBE848D66FFB55A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft Manifest number: 05B3 Signing time: Sun 25 Jan 2026 16:01:03 +0000 Manifest this update: Sun 25 Jan 2026 16:01:03 +0000 Manifest next update: Mon 26 Jan 2026 16:01:03 +0000 Files and hashes: 1: 0S-ozMaRAyvvdMvSJW3g5Kk4iVo.roa (hash: OQHH+g7JmAcn53oHjDt/GSfgh8qJfjfcS42p09F0WtU=) 2: NQIBAohX75IaNOk07YtqfQi_l2Q.roa (hash: FDra3udXguGsI5fh/D9xyGvlXRNRLrQbxmcagtWhiYA=) 3: wAgPAR1yzaKF5ISv6v3dvwjLWao.roa (hash: hhxh1IVQoJ4OjQ4sKNlyVMIfwcDlCbms6Xn0khvEao4=) 4: z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl (hash: bf+jOCKkfMBE30XqmVkBCeb+tRdUFr92hGMj/u5aBQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:28:36:73:ae:65:29:7f:be:84:8d:66:ff:b5:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7 Validity Not Before: Jan 25 16:01:03 2026 GMT Not After : Jan 26 16:01:03 2026 GMT Subject: CN=65273760b16daea0464ca1b5d46ecb1ab6af35b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:26:72:a1:65:bc:c9:af:7d:12:8c:88:6d:52: 10:88:6f:60:f4:b4:47:a2:a8:a7:1f:b2:ab:49:26: 47:a9:6d:e0:b6:98:d4:76:bc:83:0f:c1:88:8c:76: c7:a6:b7:36:f4:fa:e6:f5:4d:81:2f:f3:43:4a:80: 52:77:4c:10:a4:60:01:ec:8b:75:51:a8:11:14:7d: 68:a5:3e:57:84:f3:4e:cf:b9:49:6a:09:77:6d:6f: a9:c8:ca:da:2e:b9:5c:34:3f:d2:a4:39:0e:ae:6d: c8:24:b6:c0:35:97:cf:ff:e8:ad:12:4c:d6:db:72: 98:ff:4c:b0:5b:74:43:0b:66:d5:97:89:15:31:cf: b4:e2:9f:90:d8:e2:89:71:1f:af:6b:5c:bd:1e:75: 2b:f9:1c:5c:2c:cc:6a:ef:e8:c1:5f:2d:93:e4:df: 11:91:d0:a6:cc:74:2c:98:dd:4e:05:54:11:ac:a9: 57:0d:bf:28:e0:2f:7b:e9:26:4d:6e:5b:53:55:52: 65:3e:31:33:2c:f3:c6:f2:3e:6c:1c:eb:c7:d8:45: 21:47:50:d8:2b:8f:28:96:23:fa:c1:08:05:e2:e6: 22:ab:fa:79:18:69:c9:a8:aa:64:e8:03:a2:31:ec: 03:de:1f:0b:ea:af:06:8f:7e:b6:2b:de:02:ef:45: ff:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:27:37:60:B1:6D:AE:A0:46:4C:A1:B5:D4:6E:CB:1A:B6:AF:35:B5 X509v3 Authority Key Identifier: keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d3:1f:73:33:96:b8:bd:23:5f:b3:82:55:57:22:e2:9a:5c: 75:70:b0:79:d0:0b:26:22:24:ab:37:ac:ee:51:62:c3:f0:0e: 3b:94:57:df:19:bc:ec:0b:11:27:55:01:87:28:1c:e5:a3:5d: b8:1b:31:8d:89:c0:96:c5:24:1a:5b:02:09:7a:b8:02:ff:bf: 74:69:03:85:26:fe:1a:32:c0:39:37:b1:6e:f2:a6:63:75:ee: 88:d7:0d:07:b7:0e:af:93:c3:f4:f4:3b:0a:bf:c6:d8:bd:00: 4f:70:e9:ca:6d:fb:bc:69:28:47:41:b6:fb:07:43:9c:2c:34: 45:e2:ae:5a:f5:ca:fd:18:f4:e7:fb:79:62:51:30:25:e4:d8: c3:63:e4:84:fd:25:4c:14:12:82:d9:7f:38:cc:9b:fb:e3:66: 82:da:23:46:13:3b:bc:42:e8:66:3e:a0:9d:86:5b:92:a1:91: d6:cf:30:1f:08:50:40:a2:e4:4f:59:84:83:3c:58:ba:ed:f3: 96:46:a3:12:ee:8e:0c:52:80:4c:f9:2f:cf:b4:5c:66:f5:91: df:26:ce:60:44:b8:fd:52:08:2a:6d:20:19:a3:0a:5e:53:e4: d1:7e:4f:c1:56:f1:32:ff:28:f5:71:10:64:cc:f9:45:dc:2d: dc:a4:15:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14yg2c65lKX++hI1m/7VaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOTgzMzI2MTY5NzY1MmMzNTU0N2U5OGZjMDVhN2UyMjk0 ZWRiYzcwHhcNMjYwMTI1MTYwMTAzWhcNMjYwMTI2MTYwMTAzWjAzMTEwLwYDVQQD Eyg2NTI3Mzc2MGIxNmRhZWEwNDY0Y2ExYjVkNDZlY2IxYWI2YWYzNWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yZyoWW8ya99EoyIbVIQiG9g9LRH oqinH7KrSSZHqW3gtpjUdryDD8GIjHbHprc29Prm9U2BL/NDSoBSd0wQpGAB7It1 UagRFH1opT5XhPNOz7lJagl3bW+pyMraLrlcND/SpDkOrm3IJLbANZfP/+itEkzW 23KY/0ywW3RDC2bVl4kVMc+04p+Q2OKJcR+va1y9HnUr+RxcLMxq7+jBXy2T5N8R kdCmzHQsmN1OBVQRrKlXDb8o4C976SZNbltTVVJlPjEzLPPG8j5sHOvH2EUhR1DY K48oliP6wQgF4uYiq/p5GGnJqKpk6AOiMewD3h8L6q8Gj362K94C70X/DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUnN2Cxba6gRkyhtdRuyxq2rzW1MB8GA1UdIwQY MBaAFM+YMyYWl2UsNVR+mPwFp+IpTtvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejVnekpoYVhaU3cxVkg2WV9BV240aWxPMjhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zNjA2ZjUtMTdlMS00MzE5LTk3MDMt YWU0MDFhMzdjMDQ0LzEvejVnekpoYVhaU3cxVkg2WV9BV240aWxPMjhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8zNjA2ZjUtMTdlMS00MzE5LTk3MDMtYWU0MDFhMzdjMDQ0 LzEvejVnekpoYVhaU3cxVkg2WV9BV240aWxPMjhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdMfczOW uL0jX7OCVVci4ppcdXCwedALJiIkqzes7lFiw/AOO5RX3xm87AsRJ1UBhygc5aNd uBsxjYnAlsUkGlsCCXq4Av+/dGkDhSb+GjLAOTexbvKmY3XuiNcNB7cOr5PD9PQ7 Cr/G2L0AT3Dpym37vGkoR0G2+wdDnCw0ReKuWvXK/Rj05/t5YlEwJeTYw2PkhP0l TBQSgtl/OMyb++NmgtojRhM7vELoZj6gnYZbkqGR1s8wHwhQQKLkT1mEgzxYuu3z lkajEu6ODFKATPkvz7RcZvWR3ybOYES4/VIIKm0gGaMKXlPk0X5PwVbxMv8o9XEQ ZMz5Rdwt3KQVOg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:52 2026 by rpki-client