This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json) Hash identifier: qSYlYbXGvcUmgdTOfftpiGCrg1p+gpcWgA6MVffwOfs= Subject key identifier: A7:E3:56:5B:30:78:CB:9F:14:F2:DC:5C:52:73:10:14:EC:0B:5C:F8 Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e Certificate serial: 019BF5E400779FFCD7445EC589E68C757B3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 16:01:58 +0000 Manifest this update: Sun 25 Jan 2026 16:01:58 +0000 Manifest next update: Mon 26 Jan 2026 16:01:58 +0000 Files and hashes: 1: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: Ac/P+R4eJKnVHNFpsmu1uEpZjM9tcjtZZTDKObshFEw=) 2: ftUP8AhWyKSCfDygp2EvHTO8Boo.roa (hash: ewSYxaolal/Z6l87pd6PUdDa+voxm7gfdPqRbZdlcCk=) 3: h7hfu83GdfBNM7Zx2PElKBPYyGY.roa (hash: HsgzFT58UTHg7xZoI81l8ngXvJujr6TYdyM2zeg4nXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e4:00:77:9f:fc:d7:44:5e:c5:89:e6:8c:75:7b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e Validity Not Before: Jan 25 16:01:58 2026 GMT Not After : Jan 26 16:01:58 2026 GMT Subject: CN=a7e3565b3078cb9f14f2dc5c52731014ec0b5cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:40:9a:04:df:e6:ab:94:4f:9c:59:d1:ec:69: 7d:5d:a2:b6:a2:c9:80:e5:85:46:22:ed:c4:f9:20: d5:60:9e:52:5f:2f:e4:c4:4f:5d:c8:ac:58:99:7e: 8e:bf:ef:2e:cd:8f:41:e0:5e:6b:4e:34:a1:ad:7e: 17:32:ed:19:0b:ba:ac:06:f7:e5:98:d0:1f:ac:d0: 26:fa:9d:32:71:72:28:da:47:41:41:08:de:b8:63: 25:06:5d:d2:2d:7c:0d:87:d8:ed:e4:b5:d9:1c:64: 1e:d8:d0:dc:64:0e:f1:3a:8b:10:e1:e4:0e:2e:79: f2:46:ea:ab:fd:3a:fc:8d:90:55:a0:6b:20:b2:e9: 91:fb:63:45:a7:01:87:98:7d:74:a3:ea:e9:87:9e: 09:29:b0:f9:7d:97:c7:1f:cf:d0:e3:ab:d9:17:bb: 2b:c5:a0:12:92:d7:9b:6d:22:71:38:a2:16:66:3a: 3f:2f:68:d6:10:78:31:98:f6:28:0d:a3:9e:a4:03: 44:8b:ef:f3:fc:7e:6d:52:5f:28:ba:ae:bb:35:fe: 21:87:55:95:9f:9d:5f:36:e5:1d:71:68:58:e0:93: 2d:08:a2:e9:76:03:2b:89:ea:78:f6:2e:ea:50:8d: 68:8a:c2:99:59:d8:51:f1:9a:04:02:ce:7f:57:70: 2a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E3:56:5B:30:78:CB:9F:14:F2:DC:5C:52:73:10:14:EC:0B:5C:F8 X509v3 Authority Key Identifier: keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:3c:37:e7:96:c7:ff:f4:20:26:73:99:04:0a:c1:9a:d7:09: a3:f0:d8:27:3e:ab:d6:41:73:dd:1d:d6:a1:be:49:3c:f6:8b: d8:69:ff:d5:37:3f:a1:39:8e:c0:88:88:77:b5:91:b0:20:08: cc:91:d2:c5:4e:9b:95:01:27:48:7a:d3:29:44:e5:2c:22:76: 82:7f:79:62:7d:a9:15:f1:3d:55:30:1b:1a:df:03:be:50:0f: 5a:5f:4e:a4:24:6f:d7:9b:43:c0:41:d3:2d:a1:2b:88:8b:aa: f3:ca:96:f9:da:69:b0:fe:6d:f0:a1:5a:70:85:36:5a:f3:c6: b1:70:25:1d:24:77:50:ca:5d:94:82:63:28:14:13:b8:13:1f: c2:0c:a3:a2:f1:93:7e:0f:c5:26:be:a0:a7:b0:eb:72:38:56: 91:41:82:a9:d8:ce:38:1a:27:bb:00:84:4a:d0:d8:b6:d4:9a: 04:3b:3c:53:d4:bc:30:d9:35:7d:a6:ca:b4:4a:36:ab:98:ce: b7:d5:79:c6:d7:00:c6:08:9e:de:92:e7:62:a2:bc:76:a8:9c: c6:10:db:14:13:42:ec:92:67:f0:e8:a6:6a:a9:67:ce:93:11: a9:d2:e1:03:e8:10:49:17:ef:56:44:75:25:55:61:7d:b7:15: 36:30:c7:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv15AB3n/zXRF7FieaMdXs/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Mzk1ZDZhMWEyODg4ZDljMzU2ZWVkMzI3ODllNjI3ZDIz ZDUxNmUwHhcNMjYwMTI1MTYwMTU4WhcNMjYwMTI2MTYwMTU4WjAzMTEwLwYDVQQD EyhhN2UzNTY1YjMwNzhjYjlmMTRmMmRjNWM1MjczMTAxNGVjMGI1Y2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuECaBN/mq5RPnFnR7Gl9XaK2osmA 5YVGIu3E+SDVYJ5SXy/kxE9dyKxYmX6Ov+8uzY9B4F5rTjShrX4XMu0ZC7qsBvfl mNAfrNAm+p0ycXIo2kdBQQjeuGMlBl3SLXwNh9jt5LXZHGQe2NDcZA7xOosQ4eQO LnnyRuqr/Tr8jZBVoGsgsumR+2NFpwGHmH10o+rph54JKbD5fZfHH8/Q46vZF7sr xaASktebbSJxOKIWZjo/L2jWEHgxmPYoDaOepANEi+/z/H5tUl8ouq67Nf4hh1WV n51fNuUdcWhY4JMtCKLpdgMriep49i7qUI1oisKZWdhR8ZoEAs5/V3AqTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfjVlsweMufFPLcXFJzEBTsC1z4MB8GA1UdIwQY MBaAFGQ5XWoaKIjZw1bu0yeJ5ifSPVFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYt OGQ4MzU5NDhlODc5LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYtOGQ4MzU5NDhlODc5 LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazw355bH //QgJnOZBArBmtcJo/DYJz6r1kFz3R3Wob5JPPaL2Gn/1Tc/oTmOwIiId7WRsCAI zJHSxU6blQEnSHrTKUTlLCJ2gn95Yn2pFfE9VTAbGt8DvlAPWl9OpCRv15tDwEHT LaEriIuq88qW+dppsP5t8KFacIU2WvPGsXAlHSR3UMpdlIJjKBQTuBMfwgyjovGT fg/FJr6gp7DrcjhWkUGCqdjOOBonuwCEStDYttSaBDs8U9S8MNk1fabKtEo2q5jO t9V5xtcAxgie3pLnYqK8dqicxhDbFBNC7JJn8OimaqlnzpMRqdLhA+gQSRfvVkR1 JVVhfbcVNjDHAg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:36:37 2026 by rpki-client