This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft File: Zdfw_WIq_WvUotbODxy8wHqcQfE.mft (raw, json) Hash identifier: OR8hVKvF4cYycA0Uhn59VmhbiKGG1S66vlr+vZLTqis= Subject key identifier: 63:7B:75:F0:33:9E:A8:0B:1C:36:20:34:AE:6E:35:00:F4:F6:33:03 Authority key identifier: 65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1 Certificate issuer: /CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1 Certificate serial: 019BF53E3B923EF963A6B7F585A790C1E6C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft Manifest number: 14F9 Signing time: Sun 25 Jan 2026 13:00:54 +0000 Manifest this update: Sun 25 Jan 2026 13:00:54 +0000 Manifest next update: Mon 26 Jan 2026 13:00:54 +0000 Files and hashes: 1: C7f6La2RHnovZkVXPsCMvF_ZrpU.roa (hash: vor63A+KF0/+NLo3bRvMmDXK5iRB2pgk/JSZQYxp0os=) 2: Zdfw_WIq_WvUotbODxy8wHqcQfE.crl (hash: EAzlZPrutsV5YDZ0wk+hT7tDwcYxn+VeO+bQRnyhfzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:3b:92:3e:f9:63:a6:b7:f5:85:a7:90:c1:e6:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65d7f0fd622afd6bd4a2d6ce0f1cbcc07a9c41f1 Validity Not Before: Jan 25 13:00:54 2026 GMT Not After : Jan 26 13:00:54 2026 GMT Subject: CN=637b75f0339ea80b1c362034ae6e3500f4f63303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:9f:8c:e5:80:a4:57:23:c8:39:d5:78:e6: 14:c9:5b:8f:1a:4b:5f:a7:d5:f7:a9:42:b7:2c:f3: 24:9d:7d:43:45:84:4a:fb:b4:fb:10:8a:56:fb:15: c8:47:05:35:2e:9a:f4:b5:01:7d:dd:53:fa:b7:3d: e4:e1:e5:1f:ad:bd:54:6c:8d:2b:3a:96:cb:70:3a: 84:ba:eb:41:d6:9f:6e:87:1a:13:44:90:30:9c:3a: 73:ec:69:1b:f0:8b:b4:b7:2b:fe:f6:5b:89:6c:9a: 17:62:5e:d3:01:30:e5:b3:db:f1:36:a6:e8:22:69: 85:13:bf:e6:d9:6e:f4:36:c1:fa:07:00:a0:56:c4: a7:81:03:0a:47:c1:a8:3f:c5:88:51:df:c9:e8:06: f4:b7:d7:70:a6:08:2d:cb:84:98:a0:94:b9:aa:12: 85:d3:c2:97:5e:a7:a9:fd:7d:71:17:24:71:e3:b6: ad:9a:06:45:b9:ba:bf:04:bc:85:41:ab:d7:b1:2d: 6e:f0:04:90:29:c3:04:f0:40:7b:cf:20:71:e9:13: 0a:70:30:fe:b8:b2:d2:36:00:f1:4a:ec:9c:f0:88: 47:ab:9e:f2:f2:27:61:02:4b:b2:cc:42:32:8a:37: 6a:20:12:ea:68:1d:98:f4:13:32:0a:b5:7f:e2:8a: 28:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7B:75:F0:33:9E:A8:0B:1C:36:20:34:AE:6E:35:00:F4:F6:33:03 X509v3 Authority Key Identifier: keyid:65:D7:F0:FD:62:2A:FD:6B:D4:A2:D6:CE:0F:1C:BC:C0:7A:9C:41:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdfw_WIq_WvUotbODxy8wHqcQfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73f36c-f4f7-4065-9d46-8be4ad57773b/1/Zdfw_WIq_WvUotbODxy8wHqcQfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:af:57:0c:e1:f9:a2:8e:dd:c5:05:a3:b9:5d:c1:31:4f:e0: 99:a8:f7:c6:d4:d4:d1:19:b1:b3:11:4d:6a:2a:42:96:c5:f9: 62:ff:62:cf:a9:97:d1:0e:48:a0:fc:cf:1b:f4:af:bc:45:81: 69:62:05:74:e2:ec:57:4d:69:6b:e9:e8:9d:80:cc:b2:33:c1: f5:8f:0d:e5:10:67:30:d8:fe:1c:66:20:34:39:01:05:f9:7e: e9:73:6b:2b:ba:18:39:f9:c0:e5:e3:45:7a:de:5b:81:c8:47: f7:c7:f5:51:b8:09:18:2e:7b:a2:22:05:93:05:30:29:dc:7a: 0b:09:26:81:c9:5b:f8:66:3d:38:3c:ac:39:67:78:b2:92:c3: 14:08:83:d6:a3:d2:63:ce:dd:0f:ce:3c:24:7d:e5:1a:37:ad: aa:ac:a5:7d:1d:a1:77:70:34:8d:c9:5e:30:ca:d8:c5:8f:8d: a3:1c:4c:c1:8d:91:27:69:02:a5:fb:c0:d7:90:29:19:ad:41: c3:0f:8f:df:5d:5b:0a:a6:12:19:d2:b2:cc:81:8a:aa:c3:9f: fa:5a:3f:20:e2:5a:dd:51:14:3b:2a:42:c8:b2:26:e5:d4:d9: d4:56:4b:19:b2:0e:1e:62:0c:bd:fd:2a:68:8c:a3:4f:e7:a7: 80:fd:fc:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PjuSPvljprf1haeQwebEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZDdmMGZkNjIyYWZkNmJkNGEyZDZjZTBmMWNiY2MwN2E5 YzQxZjEwHhcNMjYwMTI1MTMwMDU0WhcNMjYwMTI2MTMwMDU0WjAzMTEwLwYDVQQD Eyg2MzdiNzVmMDMzOWVhODBiMWMzNjIwMzRhZTZlMzUwMGY0ZjYzMzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+qfjOWApFcjyDnVeOYUyVuPGktf p9X3qUK3LPMknX1DRYRK+7T7EIpW+xXIRwU1Lpr0tQF93VP6tz3k4eUfrb1UbI0r OpbLcDqEuutB1p9uhxoTRJAwnDpz7Gkb8Iu0tyv+9luJbJoXYl7TATDls9vxNqbo ImmFE7/m2W70NsH6BwCgVsSngQMKR8GoP8WIUd/J6Ab0t9dwpggty4SYoJS5qhKF 08KXXqep/X1xFyRx47atmgZFubq/BLyFQavXsS1u8ASQKcME8EB7zyBx6RMKcDD+ uLLSNgDxSuyc8IhHq57y8idhAkuyzEIyijdqIBLqaB2Y9BMyCrV/4ooocQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGN7dfAznqgLHDYgNK5uNQD09jMDMB8GA1UdIwQY MBaAFGXX8P1iKv1r1KLWzg8cvMB6nEHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmRmd19XSXFfV3ZVb3RiT0R4eTh3SHFjUWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83M2YzNmMtZjRmNy00MDY1LTlkNDYt OGJlNGFkNTc3NzNiLzEvWmRmd19XSXFfV3ZVb3RiT0R4eTh3SHFjUWZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83M2YzNmMtZjRmNy00MDY1LTlkNDYtOGJlNGFkNTc3NzNi LzEvWmRmd19XSXFfV3ZVb3RiT0R4eTh3SHFjUWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB69XDOH5 oo7dxQWjuV3BMU/gmaj3xtTU0RmxsxFNaipClsX5Yv9iz6mX0Q5IoPzPG/SvvEWB aWIFdOLsV01pa+nonYDMsjPB9Y8N5RBnMNj+HGYgNDkBBfl+6XNrK7oYOfnA5eNF et5bgchH98f1UbgJGC57oiIFkwUwKdx6Cwkmgclb+GY9ODysOWd4spLDFAiD1qPS Y87dD848JH3lGjetqqylfR2hd3A0jcleMMrYxY+NoxxMwY2RJ2kCpfvA15ApGa1B ww+P311bCqYSGdKyzIGKqsOf+lo/IOJa3VEUOypCyLIm5dTZ1FZLGbIOHmIMvf0q aIyjT+engP38Hg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:53 2026 by rpki-client