This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.mft File: Z8-tqx1DTEwmEYyaYp50-p83xGE.mft (raw, json) Hash identifier: tGsXdDBgc4uwC8wR0jARc4Tw/55geicz75AWZr3evTg= Subject key identifier: D6:7B:D1:75:56:C8:9C:C6:CE:DB:9B:95:06:A3:80:68:EA:89:9F:4D Authority key identifier: 67:CF:AD:AB:1D:43:4C:4C:26:11:8C:9A:62:9E:74:FA:9F:37:C4:61 Certificate issuer: /CN=67cfadab1d434c4c26118c9a629e74fa9f37c461 Certificate serial: 019BF1CF037EA76BFFA311640F90496ADE1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8-tqx1DTEwmEYyaYp50-p83xGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.mft Manifest number: B2 Signing time: Sat 24 Jan 2026 21:00:34 +0000 Manifest this update: Sat 24 Jan 2026 21:00:34 +0000 Manifest next update: Sun 25 Jan 2026 21:00:34 +0000 Files and hashes: 1: FlRhYyU5KWqMBFxcsxhHK8JGkgI.roa (hash: LerB+EHbGtYIBcGnSEDKbVb334OwXWnKx/1mjIc2mvE=) 2: Z8-tqx1DTEwmEYyaYp50-p83xGE.crl (hash: Sksicaus9MXR3DGPN9nhJTKAB/EkC0oTErI6qntnTAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8-tqx1DTEwmEYyaYp50-p83xGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:cf:03:7e:a7:6b:ff:a3:11:64:0f:90:49:6a:de:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67cfadab1d434c4c26118c9a629e74fa9f37c461 Validity Not Before: Jan 24 21:00:34 2026 GMT Not After : Jan 25 21:00:34 2026 GMT Subject: CN=d67bd17556c89cc6cedb9b9506a38068ea899f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:af:c3:87:46:ca:96:0b:e5:f2:9f:21:9c:64: 7c:d1:0e:f2:58:96:a9:df:54:b6:0a:25:c4:2b:4f: b1:a1:79:25:b1:a8:14:f6:9d:67:a4:0e:b7:b0:60: 57:5b:c8:69:38:aa:df:25:75:88:88:30:0a:fa:28: 0f:f5:15:a3:1d:fa:a4:d6:ce:3a:4a:07:86:d1:6f: c3:14:26:89:ea:3e:c4:08:70:6f:ad:2b:4d:a5:31: e1:69:80:6e:07:3d:a3:c8:b3:e9:e7:61:c4:7b:f5: b5:54:d6:15:2a:ce:96:f0:9e:12:fb:a7:da:8d:7e: 27:fe:b6:7b:fc:69:7a:5e:a9:2d:28:53:5a:a5:3e: 8e:14:b2:fe:9b:f1:9e:bd:5f:fb:92:3e:62:c8:35: 2e:eb:d0:92:37:5a:bf:71:e8:a3:f8:c8:6a:82:64: 33:62:da:75:1a:c8:77:75:a4:e8:ad:3c:75:c1:be: 4c:fa:bd:7c:48:57:e3:03:f7:78:0d:dd:ec:b8:46: 97:bd:22:70:a5:2f:9f:5a:5b:5a:56:2d:ad:8b:be: e2:ec:78:34:5a:5f:c6:63:3e:a9:e5:01:d8:55:a0: 49:89:f8:ba:93:29:c6:9c:c0:c9:13:37:16:11:57: 19:a2:64:a3:5b:21:8b:d7:7d:79:7e:82:c2:a1:6a: d4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7B:D1:75:56:C8:9C:C6:CE:DB:9B:95:06:A3:80:68:EA:89:9F:4D X509v3 Authority Key Identifier: keyid:67:CF:AD:AB:1D:43:4C:4C:26:11:8C:9A:62:9E:74:FA:9F:37:C4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8-tqx1DTEwmEYyaYp50-p83xGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1e1ec8-dbf4-43e3-bfea-73797d00687f/1/Z8-tqx1DTEwmEYyaYp50-p83xGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:7d:66:ea:ae:f8:f1:2f:1c:50:fd:37:0e:67:13:7a:38:69: c8:0c:4b:11:2f:99:37:f4:e5:c2:fd:a7:6b:dc:55:5e:ff:cc: 62:bb:2a:c3:88:a2:31:e9:03:94:9b:d8:f6:3d:c1:df:d4:2b: 06:07:11:a6:c3:8a:33:4e:0a:12:26:80:93:a6:c3:5f:0c:81: 40:b9:f0:25:53:1b:b7:2f:d3:20:e3:ee:57:af:34:b5:76:1b: 28:ab:49:22:e9:b9:2f:41:8c:1c:64:5b:f2:c5:b1:24:57:45: 9a:e3:b7:39:19:1b:7b:7c:fe:8e:1c:d1:89:7e:48:cc:56:2e: 1e:ed:c6:22:3f:33:b8:9b:ae:32:12:e3:d4:78:81:63:8b:2e: 00:80:3d:c4:99:4f:5a:41:a1:b6:cb:89:fe:98:ed:6f:e3:f4: 71:e2:5a:38:90:8b:c0:b5:e0:00:e4:8d:3d:80:6b:41:0b:e4: 0c:de:3b:e5:8b:f0:46:38:34:c0:e7:22:6a:43:57:4b:6e:ba: 8f:ad:4c:c3:f4:76:b3:52:21:6e:5e:2d:dc:1e:9c:24:d3:57: 2f:78:ab:95:dd:32:97:8f:08:cb:d3:5f:53:2a:e7:8e:b9:19: d9:34:7e:fb:a2:ac:b0:25:8a:a1:b6:85:3a:76:e9:35:46:1b: ac:39:4e:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvxzwN+p2v/oxFkD5BJat4cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2ZhZGFiMWQ0MzRjNGMyNjExOGM5YTYyOWU3NGZhOWYz N2M0NjEwHhcNMjYwMTI0MjEwMDM0WhcNMjYwMTI1MjEwMDM0WjAzMTEwLwYDVQQD EyhkNjdiZDE3NTU2Yzg5Y2M2Y2VkYjliOTUwNmEzODA2OGVhODk5ZjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa/Dh0bKlgvl8p8hnGR80Q7yWJap 31S2CiXEK0+xoXklsagU9p1npA63sGBXW8hpOKrfJXWIiDAK+igP9RWjHfqk1s46 SgeG0W/DFCaJ6j7ECHBvrStNpTHhaYBuBz2jyLPp52HEe/W1VNYVKs6W8J4S+6fa jX4n/rZ7/Gl6XqktKFNapT6OFLL+m/GevV/7kj5iyDUu69CSN1q/ceij+MhqgmQz Ytp1Gsh3daTorTx1wb5M+r18SFfjA/d4Dd3suEaXvSJwpS+fWltaVi2ti77i7Hg0 Wl/GYz6p5QHYVaBJifi6kynGnMDJEzcWEVcZomSjWyGL1315foLCoWrU8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZ70XVWyJzGztublQajgGjqiZ9NMB8GA1UdIwQY MBaAFGfPrasdQ0xMJhGMmmKedPqfN8RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjgtdHF4MURURXdtRVl5YVlwNTAtcDgzeEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xZTFlYzgtZGJmNC00M2UzLWJmZWEt NzM3OTdkMDA2ODdmLzEvWjgtdHF4MURURXdtRVl5YVlwNTAtcDgzeEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8xZTFlYzgtZGJmNC00M2UzLWJmZWEtNzM3OTdkMDA2ODdm LzEvWjgtdHF4MURURXdtRVl5YVlwNTAtcDgzeEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL31m6q74 8S8cUP03DmcTejhpyAxLES+ZN/Tlwv2na9xVXv/MYrsqw4iiMekDlJvY9j3B39Qr BgcRpsOKM04KEiaAk6bDXwyBQLnwJVMbty/TIOPuV680tXYbKKtJIum5L0GMHGRb 8sWxJFdFmuO3ORkbe3z+jhzRiX5IzFYuHu3GIj8zuJuuMhLj1HiBY4suAIA9xJlP WkGhtsuJ/pjtb+P0ceJaOJCLwLXgAOSNPYBrQQvkDN475YvwRjg0wOciakNXS266 j61Mw/R2s1Ihbl4t3B6cJNNXL3irld0yl48Iy9NfUyrnjrkZ2TR++6KssCWKobaF OnbpNUYbrDlO9g== -----END CERTIFICATE-----Generated at Sun Jan 25 05:41:58 2026 by rpki-client