This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft File: M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft (raw, json) Hash identifier: E5koNLbA+tESJFjVoadgt4tfsWgUFwsfStVgr8MVNGQ= Subject key identifier: 2B:70:97:7B:3E:6C:C0:BB:45:D0:53:53:A7:EE:B0:AC:E1:03:36:55 Authority key identifier: 33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93 Certificate issuer: /CN=33f650c0a0f16515a72dea601ce9ca2d4c164993 Certificate serial: 019BF7639293639CAE60011D749168024DC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 23:00:56 +0000 Manifest this update: Sun 25 Jan 2026 23:00:56 +0000 Manifest next update: Mon 26 Jan 2026 23:00:56 +0000 Files and hashes: 1: 9_MYsPE4gd2lbb7TZYORycFaWd0.roa (hash: dw91LpI/SCTexr9LU7pGF2p5zGloMmSS6LWqMDLhx9U=) 2: M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl (hash: CgulLSsX/mugVr2QS+W35V17K4xfeNYThkSG+8Mqd20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:92:93:63:9c:ae:60:01:1d:74:91:68:02:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33f650c0a0f16515a72dea601ce9ca2d4c164993 Validity Not Before: Jan 25 23:00:56 2026 GMT Not After : Jan 26 23:00:56 2026 GMT Subject: CN=2b70977b3e6cc0bb45d05353a7eeb0ace1033655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cc:c2:4a:40:9d:4f:2e:ff:45:f5:0d:f3:ff: ec:9a:a3:ea:fb:ce:99:d1:8f:5b:30:47:43:6c:88: bb:e6:9f:39:e7:ce:b4:da:77:e3:00:92:e8:0e:d1: 69:d7:62:20:a6:cf:83:05:74:5b:03:d3:98:44:df: 7d:9e:cc:3a:be:64:d9:25:29:1b:9b:5b:2b:19:3d: 0f:55:e8:2f:2d:ce:1e:b9:07:48:2f:25:31:e4:be: f8:2a:1b:5a:9a:36:50:42:41:e7:84:ee:0f:f7:4c: 36:15:b7:0c:e9:04:b0:54:9e:15:65:cc:77:59:b9: 3e:35:0a:c0:29:1b:f0:b1:e0:7f:17:65:f3:ed:cf: 05:b9:4a:c2:63:a2:15:8b:87:52:0d:85:6a:18:6d: b5:ad:a4:30:d3:7f:4f:de:75:a7:c8:98:b0:96:03: b4:22:53:77:4b:be:9f:5e:a6:d4:58:44:7c:49:bd: 82:87:16:e5:bc:09:90:50:7f:29:3c:58:21:27:9b: 22:aa:bd:91:22:f9:57:a3:23:e3:17:d3:54:b2:64: de:4f:04:72:6c:56:a7:e4:b7:c9:40:b4:9e:47:51: a8:e4:dc:3c:52:1b:04:d9:cd:05:09:75:e3:0c:6d: cf:38:ba:1f:2b:fc:55:3d:12:d4:ee:0d:96:87:d3: 58:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:70:97:7B:3E:6C:C0:BB:45:D0:53:53:A7:EE:B0:AC:E1:03:36:55 X509v3 Authority Key Identifier: keyid:33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:6c:a9:a4:de:a3:78:6a:d9:ad:a8:0c:c8:aa:a4:5f:27:f7: b6:f2:57:f1:da:b6:6e:7a:65:13:36:21:be:84:72:54:df:3b: 26:63:1b:de:20:1a:86:94:ba:b8:1c:9a:b0:42:c0:28:73:2b: b0:26:d0:4a:13:76:23:c9:4e:d9:28:5b:71:67:d4:ef:54:6a: e8:dd:a0:5d:17:75:7a:cf:4c:a6:9a:82:33:25:57:db:1e:1e: 2f:e2:05:05:32:7b:94:42:b3:6f:97:0c:32:43:82:78:ec:1a: fd:40:76:50:f1:b6:65:cd:3a:d7:4d:08:7d:e9:6c:37:b9:e4: ef:94:09:78:46:69:11:48:b9:d9:ae:78:6e:c4:e2:cd:cd:5e: b7:09:8a:88:d2:79:21:93:c3:68:3d:80:4e:b0:77:68:e7:ca: 10:56:d3:19:c3:fc:85:f0:8c:b3:8e:ee:60:c6:ff:f0:3e:48: 7e:7d:70:57:ab:a9:6a:0d:db:33:7f:35:3e:d7:10:ce:53:2c: 25:f3:7a:44:8f:cf:f7:5d:26:84:fe:82:dc:14:7f:bd:6a:13: 21:cd:f5:a9:36:ec:c0:95:11:46:f6:a7:fe:4c:02:2c:1c:24: 8d:d9:c7:b9:f0:f4:8e:a7:f0:c1:aa:12:4b:80:df:4b:6d:8a: 09:06:64:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y5KTY5yuYAEddJFoAk3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZjY1MGMwYTBmMTY1MTVhNzJkZWE2MDFjZTljYTJkNGMx NjQ5OTMwHhcNMjYwMTI1MjMwMDU2WhcNMjYwMTI2MjMwMDU2WjAzMTEwLwYDVQQD EygyYjcwOTc3YjNlNmNjMGJiNDVkMDUzNTNhN2VlYjBhY2UxMDMzNjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApszCSkCdTy7/RfUN8//smqPq+86Z 0Y9bMEdDbIi75p8558602nfjAJLoDtFp12Igps+DBXRbA9OYRN99nsw6vmTZJSkb m1srGT0PVegvLc4euQdILyUx5L74KhtamjZQQkHnhO4P90w2FbcM6QSwVJ4VZcx3 Wbk+NQrAKRvwseB/F2Xz7c8FuUrCY6IVi4dSDYVqGG21raQw039P3nWnyJiwlgO0 IlN3S76fXqbUWER8Sb2ChxblvAmQUH8pPFghJ5siqr2RIvlXoyPjF9NUsmTeTwRy bFan5LfJQLSeR1Go5Nw8UhsE2c0FCXXjDG3POLofK/xVPRLU7g2Wh9NYHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtwl3s+bMC7RdBTU6fusKzhAzZVMB8GA1UdIwQY MBaAFDP2UMCg8WUVpy3qYBzpyi1MFkmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mZTM0ZDQtNTliOC00MzI0LWFkMjct ODUwNjkxMjVkM2JmLzEvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9mZTM0ZDQtNTliOC00MzI0LWFkMjctODUwNjkxMjVkM2Jm LzEvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGyppN6j eGrZragMyKqkXyf3tvJX8dq2bnplEzYhvoRyVN87JmMb3iAahpS6uByasELAKHMr sCbQShN2I8lO2ShbcWfU71Rq6N2gXRd1es9MppqCMyVX2x4eL+IFBTJ7lEKzb5cM MkOCeOwa/UB2UPG2Zc06100IfelsN7nk75QJeEZpEUi52a54bsTizc1etwmKiNJ5 IZPDaD2ATrB3aOfKEFbTGcP8hfCMs47uYMb/8D5Ifn1wV6upag3bM381PtcQzlMs JfN6RI/P910mhP6C3BR/vWoTIc31qTbswJURRvan/kwCLBwkjdnHufD0jqfwwaoS S4DfS22KCQZkMg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:32:30 2026 by rpki-client