This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft File: ZZbw3BZbfNIJAispZINMRedNISw.mft (raw, json) Hash identifier: qdO1kCtCHOcN+ad0y0u+TUbTXGpEDGeAFKrlUv7xKOs= Subject key identifier: 42:9D:09:76:88:A9:99:DD:AE:0D:DB:7C:E9:72:7C:D2:92:03:86:0A Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C Certificate issuer: /CN=6596f0dc165b7cd209022b2964834c45e74d212c Certificate serial: 019BF507A4D4C18EB155423DB05C1068561F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 12:01:17 +0000 Manifest this update: Sun 25 Jan 2026 12:01:17 +0000 Manifest next update: Mon 26 Jan 2026 12:01:17 +0000 Files and hashes: 1: 1-RWTcjebB00EEPXrCQe14UhdpaU.roa (hash: xcBiWpi6+uT5sbN5EOtc0NeFtZPbsGISgJTOn56/et0=) 2: 43BDuYzZKT6GuNcPCdD6yFXu9KU.roa (hash: BR04tqYW3l6HUM2rcLyj1VGl9Tid3trcvH2fcQ2YbBo=) 3: 8auuTFL6tParorXPR_FX7n5-sMo.roa (hash: EPBMa3bgDg4K8XqsoSkRoxiHXy+VyA8XAgJy5cRLejw=) 4: ZZbw3BZbfNIJAispZINMRedNISw.crl (hash: lmCb7zlk4EIYWYQxr1iGezt+Q8SW6IeDwlV+K5xDSvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:a4:d4:c1:8e:b1:55:42:3d:b0:5c:10:68:56:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c Validity Not Before: Jan 25 12:01:17 2026 GMT Not After : Jan 26 12:01:17 2026 GMT Subject: CN=429d097688a999ddae0ddb7ce9727cd29203860a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:85:f4:aa:3b:1b:46:f2:38:b6:ba:f2:57:ee: c1:ff:7d:34:58:60:ed:73:05:d7:34:8c:f1:56:48: 40:e5:a8:b2:1a:01:37:45:c9:6d:e6:08:72:d7:40: 1d:e6:29:62:38:a3:f9:82:96:18:33:23:a1:ff:8d: c0:4d:a3:26:dd:93:c6:21:99:64:19:1f:ac:f3:d6: 1c:6f:d4:f1:44:81:01:d6:25:ed:de:04:e9:b9:d8: 0c:39:10:31:9b:6e:07:07:2b:51:59:2a:63:6f:39: 48:66:f4:2e:d3:ea:6f:09:c1:1b:a8:1b:05:a8:6b: 4c:97:35:ee:ff:db:e2:9c:bc:c4:00:21:41:d4:79: 51:ad:81:38:6a:90:0b:4d:ea:84:06:7b:ff:6e:cb: be:22:90:36:79:0b:30:57:2b:d6:0f:cf:77:8b:3b: 89:0b:fd:f1:05:0f:9b:f7:54:12:47:ba:ea:2c:f7: 2e:9b:06:50:b9:55:9b:d3:e2:4b:1f:1f:df:f9:fa: 38:2a:32:02:c6:92:6f:e9:bb:cc:bf:ac:bf:9e:3d: 29:48:d1:de:09:76:1b:44:a7:72:20:bf:d0:cf:1f: 54:51:85:fc:c8:2d:4f:a4:89:ec:64:e2:4f:17:f1: 50:fb:49:34:27:36:b1:24:6c:e3:f1:bb:5f:04:23: e6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9D:09:76:88:A9:99:DD:AE:0D:DB:7C:E9:72:7C:D2:92:03:86:0A X509v3 Authority Key Identifier: keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:50:32:33:07:5f:54:0d:94:db:e5:2c:8f:8b:ba:42:89:99: 6e:63:b6:3e:cb:25:d4:4d:d9:ac:b0:33:d6:59:13:80:56:44: 7f:37:cf:8c:ae:43:4c:55:7b:48:eb:89:fc:94:78:8d:44:64: 31:26:37:f6:09:3d:11:db:68:16:24:dd:7c:f5:db:48:18:22: da:20:3d:d3:af:91:07:02:06:97:3d:de:a8:df:ba:5c:b9:f8: 7c:6d:65:7c:c4:0c:18:6d:8d:54:47:52:73:e7:2d:e3:48:e4: 97:61:8d:72:2e:42:fc:26:4c:56:ce:a3:18:d3:ce:82:db:4a: 16:88:de:2e:77:2d:84:c5:64:99:f8:a3:37:cd:e3:d8:0d:65: 86:e6:25:51:8d:da:25:38:49:4d:3b:a2:e7:7c:a1:0a:1b:1f: d3:9f:8e:ce:a8:3c:20:ae:b1:d7:53:fb:7a:df:f1:af:8e:3d: 5d:b2:ac:16:2b:80:eb:7d:73:06:0b:8b:b1:0a:73:a3:06:bc: bd:92:40:6c:a4:47:cb:3b:31:f7:75:1b:20:12:9a:75:0a:5d: 53:28:0f:4a:f1:04:7b:6f:f8:9a:98:65:ac:df:74:78:de:a7: 71:e6:0b:f9:04:e6:33:68:87:5c:e7:8b:f8:4d:c0:60:15:e0: 90:5a:00:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B6TUwY6xVUI9sFwQaFYfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OTZmMGRjMTY1YjdjZDIwOTAyMmIyOTY0ODM0YzQ1ZTc0 ZDIxMmMwHhcNMjYwMTI1MTIwMTE3WhcNMjYwMTI2MTIwMTE3WjAzMTEwLwYDVQQD Eyg0MjlkMDk3Njg4YTk5OWRkYWUwZGRiN2NlOTcyN2NkMjkyMDM4NjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4X0qjsbRvI4trryV+7B/300WGDt cwXXNIzxVkhA5aiyGgE3Rclt5ghy10Ad5iliOKP5gpYYMyOh/43ATaMm3ZPGIZlk GR+s89Ycb9TxRIEB1iXt3gTpudgMORAxm24HBytRWSpjbzlIZvQu0+pvCcEbqBsF qGtMlzXu/9vinLzEACFB1HlRrYE4apALTeqEBnv/bsu+IpA2eQswVyvWD893izuJ C/3xBQ+b91QSR7rqLPcumwZQuVWb0+JLHx/f+fo4KjICxpJv6bvMv6y/nj0pSNHe CXYbRKdyIL/Qzx9UUYX8yC1PpInsZOJPF/FQ+0k0JzaxJGzj8btfBCPmewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKdCXaIqZndrg3bfOlyfNKSA4YKMB8GA1UdIwQY MBaAFGWW8NwWW3zSCQIrKWSDTEXnTSEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlpidzNCWmJmTklKQWlzcFpJTk1SZWROSVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85OTA0YjMtOGNhMC00OTQ2LTg3NjYt MmQxM2NmOWI0NWMwLzEvWlpidzNCWmJmTklKQWlzcFpJTk1SZWROSVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85OTA0YjMtOGNhMC00OTQ2LTg3NjYtMmQxM2NmOWI0NWMw LzEvWlpidzNCWmJmTklKQWlzcFpJTk1SZWROSVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdlAyMwdf VA2U2+Usj4u6QomZbmO2Pssl1E3ZrLAz1lkTgFZEfzfPjK5DTFV7SOuJ/JR4jURk MSY39gk9EdtoFiTdfPXbSBgi2iA906+RBwIGlz3eqN+6XLn4fG1lfMQMGG2NVEdS c+ct40jkl2GNci5C/CZMVs6jGNPOgttKFojeLncthMVkmfijN83j2A1lhuYlUY3a JThJTTui53yhChsf05+Ozqg8IK6x11P7et/xr449XbKsFiuA631zBguLsQpzowa8 vZJAbKRHyzsx93UbIBKadQpdUygPSvEEe2/4mphlrN90eN6nceYL+QTmM2iHXOeL +E3AYBXgkFoAZQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:56 2026 by rpki-client