This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: IpcPU/Zmftttuq1gpMrzPxh3N04qYgsmty7Lyz1UfCc= Subject key identifier: CB:F1:A5:60:5C:12:CF:BD:A7:1B:E5:52:1F:20:FF:0E:8A:CE:3B:D0 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019BF4999D80FC804A3ED93CF4F8EC9793A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 17F6 Signing time: Sun 25 Jan 2026 10:01:06 +0000 Manifest this update: Sun 25 Jan 2026 10:01:06 +0000 Manifest next update: Mon 26 Jan 2026 10:01:06 +0000 Files and hashes: 1: 6W_lqqr4XCqtlozx6jZa_HwcvJE.roa (hash: +SC2dGYQ2ttoS+d8AVtvk9KYeowICZx7DoYLwkElLYw=) 2: 7IiB6wLYcBraGw_uERrbZZeZ4Vc.roa (hash: 8XFXPojBBd8EORtLGUuBx7i8iQt6AYLfeRGvdOQb73o=) 3: FKIrEnLVEGUEjcSAtzRyr2KlHRE.roa (hash: rfgPddg851fVgVKnw41GRuMBmvRne+mWFfK25xMp0U0=) 4: GZP-shevrErtsalHq-t3Ev3Z6QQ.roa (hash: Zz7znfU/nmJjlpUXb5eF6SFHW31+NhBmZt/aV5nm3wA=) 5: LBel4j6DLZVVfRGz-0-iQ-jmsbY.roa (hash: rldpMJYV0VrrQKz0RP1E/BZyiXVx6a4IOZ4YwWS6dyE=) 6: LwvZJMmH87yRcJ6ljprVO-K5WOE.roa (hash: /RC0scZXUthpCQIXEz/eapoQTHlHyV8HYyVC6Sn1gHk=) 7: PfsLhCtbvE2n1tsnqd1GEpkMK7Y.roa (hash: tGDemrpcgfB44niW2RWNA2HJ8z15etD1aGQVWCC5rpI=) 8: YJCLPuiKOD06azvgbHCfZVXS54Y.roa (hash: mfC+l3Zuf7tuNPp3zdqrT5igLpftRpXuMkhUhcPle9M=) 9: Z3t_zw3D6QG3Aa3_e72eue1-iIE.roa (hash: gXeTwArkfxqcz+pXi1st+kC+rkoJqziqVPsg4xV6p4Q=) 10: ZAE6MNreQklHodS-dzXcd8WUAHI.roa (hash: a8xDwtFoUM04jxVU5IPyWh2mredIKSt7iSKSS+DBztA=) 11: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: jvsUb46CPc0saFAtEOYtYyZmpSAFBrQdzOwMbUqthvA=) 12: dWEsxhZGuKgXUX3Lbx2RLEFX77Y.roa (hash: SLk8Y+y9+rWVkNqKhTbWNpjrcVoW5RWdkt0Yj1ZsWoc=) 13: lmLaPT6QYXnaF3Rr-yUBRrVdyjQ.roa (hash: jf+7L0yO7fwHEkXIFGhHc8pj97Skwj043ZMv0kjJWuE=) 14: uMdvLhd0nAzb-t3qAHThe0aIqoc.roa (hash: R/qUt3vy2Q0qA3zo3sd4LqTWz9aSAv/W43kTlYx3ZuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:9d:80:fc:80:4a:3e:d9:3c:f4:f8:ec:97:93:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Jan 25 10:01:06 2026 GMT Not After : Jan 26 10:01:06 2026 GMT Subject: CN=cbf1a5605c12cfbda71be5521f20ff0e8ace3bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:a6:80:13:e2:50:15:93:14:34:c4:ab:55: 82:3e:55:01:5b:da:55:f0:f0:6c:c6:3a:a0:49:3d: 69:f7:6a:db:cf:ff:eb:dd:11:cf:d2:a0:90:dc:8c: 6a:9d:21:bd:30:45:69:15:e4:15:c9:f2:0d:39:37: e1:d4:a7:bb:39:ee:7b:87:43:c3:60:49:b5:67:e0: f3:d7:3e:a8:07:a8:df:a6:0f:30:07:3e:59:ef:7b: cb:c7:8c:6c:f4:ce:e5:3c:f4:0f:8f:07:dd:f9:69: 62:76:07:b8:a2:57:8f:c8:22:d0:ba:17:be:16:4e: a8:aa:f7:0b:50:7e:3e:00:e2:95:25:d8:da:74:18: ff:a7:f4:e5:3e:55:8e:52:54:ca:ae:a5:29:5a:f3: 24:9e:dd:ff:45:b5:95:ed:46:d5:61:13:10:a5:35: bc:69:91:66:d3:c6:60:1e:67:1a:c9:dd:97:c8:d2: 34:6f:93:0a:63:e2:62:a1:b3:10:a2:e3:04:f4:b6: 0c:92:9f:8a:4b:1d:03:df:3b:4d:5c:5f:93:13:5d: 35:2b:fb:dd:2d:60:5c:89:be:15:9f:c7:9a:fa:a2: 06:5b:49:aa:80:5a:29:3f:96:51:5c:d5:1d:74:aa: 8c:10:2f:cf:39:a7:fc:d2:4a:6e:8b:b3:be:57:06: ac:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F1:A5:60:5C:12:CF:BD:A7:1B:E5:52:1F:20:FF:0E:8A:CE:3B:D0 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:1b:46:09:50:fc:a5:d9:f3:6f:46:a5:01:a2:f8:73:4f:c8: 92:24:75:e9:03:69:e1:d3:52:5b:f5:99:1a:55:7f:81:97:93: d0:2f:39:ef:e0:03:c6:65:a6:57:26:97:8b:bf:7a:77:8a:4c: 5d:54:55:2f:d1:8f:d7:61:ff:5a:23:03:92:c8:78:18:40:b6: 99:7f:a4:6b:78:8a:23:c7:3d:75:7c:9d:c0:62:14:af:f7:39: 26:30:64:78:e2:c9:f2:a5:03:39:30:81:76:a8:97:af:6b:3b: 4c:48:cd:9b:0b:42:1d:95:5c:d5:ae:bb:d1:48:dc:02:db:bd: 23:44:f2:e5:e4:38:1b:62:f4:8e:bb:f9:31:93:e7:e0:aa:a5: 97:c8:15:3e:76:97:58:c1:1d:eb:58:5f:41:32:2f:4f:37:5b: d1:ed:24:5b:78:80:49:dc:56:1f:c9:68:1d:ee:fc:d4:f3:b3: a7:42:2b:50:73:f6:5d:1e:dd:16:62:e8:fa:59:8c:db:5b:d5: 3b:4d:89:da:d6:b5:13:f9:59:12:64:f9:57:c6:e1:18:2f:a2: fd:b3:55:05:e6:d3:a8:02:c5:47:38:de:c4:3f:68:0e:26:e4: 0c:48:a3:e3:d0:7e:83:d8:58:df:0a:8b:5a:93:0f:e5:9e:c5: a3:59:4c:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mZ2A/IBKPtk89Pjsl5OnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwMTI1MTAwMTA2WhcNMjYwMTI2MTAwMTA2WjAzMTEwLwYDVQQD EyhjYmYxYTU2MDVjMTJjZmJkYTcxYmU1NTIxZjIwZmYwZThhY2UzYmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg2mgBPiUBWTFDTEq1WCPlUBW9pV 8PBsxjqgST1p92rbz//r3RHP0qCQ3IxqnSG9MEVpFeQVyfINOTfh1Ke7Oe57h0PD YEm1Z+Dz1z6oB6jfpg8wBz5Z73vLx4xs9M7lPPQPjwfd+Wlidge4olePyCLQuhe+ Fk6oqvcLUH4+AOKVJdjadBj/p/TlPlWOUlTKrqUpWvMknt3/RbWV7UbVYRMQpTW8 aZFm08ZgHmcayd2XyNI0b5MKY+JiobMQouME9LYMkp+KSx0D3ztNXF+TE101K/vd LWBcib4Vn8ea+qIGW0mqgFopP5ZRXNUddKqMEC/POaf80kpui7O+Vwas+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvxpWBcEs+9pxvlUh8g/w6KzjvQMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThtGCVD8 pdnzb0alAaL4c0/IkiR16QNp4dNSW/WZGlV/gZeT0C857+ADxmWmVyaXi796d4pM XVRVL9GP12H/WiMDksh4GEC2mX+ka3iKI8c9dXydwGIUr/c5JjBkeOLJ8qUDOTCB dqiXr2s7TEjNmwtCHZVc1a670UjcAtu9I0Ty5eQ4G2L0jrv5MZPn4Kqll8gVPnaX WMEd61hfQTIvTzdb0e0kW3iASdxWH8loHe781POzp0IrUHP2XR7dFmLo+lmM21vV O02J2ta1E/lZEmT5V8bhGC+i/bNVBebTqALFRzjexD9oDibkDEij49B+g9hY3wqL WpMP5Z7Fo1lM9g== -----END CERTIFICATE-----Generated at Sun Jan 25 17:02:10 2026 by rpki-client