This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft File: ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft (raw, json) Hash identifier: qssBXD6y5iWJCL7ydD9r4P8m3rjtKx9Jv0+6PXpmPys= Subject key identifier: D9:85:00:9E:7A:4C:8E:C8:A4:BD:9F:9E:CB:77:94:58:74:79:2E:DF Authority key identifier: 66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93 Certificate issuer: /CN=66306e3acf3eb903cc73973fb62860b663516c93 Certificate serial: 019BF79A656EE0EA678E3D454453884557B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft Manifest number: DA Signing time: Mon 26 Jan 2026 00:00:49 +0000 Manifest this update: Mon 26 Jan 2026 00:00:49 +0000 Manifest next update: Tue 27 Jan 2026 00:00:49 +0000 Files and hashes: 1: Kgh0FblTxG8uuB7s_Tx7oYiHHwQ.roa (hash: 1KEdvoLP6yhjWGPI+w0FZQ+G9oJgjKxPQ04M4Cgw2Vs=) 2: ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl (hash: UR2H7gWYAOD0V3vwr1vmOrb/sk6veckvRdVCRTl6m+s=) 3: hB2BZEp3k3snIXX7WqS-RdwWQys.roa (hash: 8rMtnmtq8bnekYwB36ieFLOQVbfHr0cVP7kSuphbKKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:65:6e:e0:ea:67:8e:3d:45:44:53:88:45:57:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66306e3acf3eb903cc73973fb62860b663516c93 Validity Not Before: Jan 26 00:00:49 2026 GMT Not After : Jan 27 00:00:49 2026 GMT Subject: CN=d985009e7a4c8ec8a4bd9f9ecb77945874792edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:32:7a:6f:89:5e:2f:d7:dd:81:50:f2:10:38: 0d:1d:bf:eb:e4:46:ed:fe:52:a3:27:fe:00:41:3c: cf:0c:2b:b9:5a:c2:33:58:61:8c:61:98:59:23:d5: 15:04:97:e2:ea:5b:3d:4d:52:fd:6f:39:84:3f:97: 02:f8:c1:59:d0:53:1b:ef:9a:6f:02:c3:3d:ed:a6: bf:0d:6b:ac:c4:13:f3:b3:c5:8e:b4:0e:dd:83:c0: 1a:a7:86:f0:b9:02:30:53:f8:a4:7e:c5:52:21:40: f1:e8:a6:78:77:3a:87:14:64:b8:c5:77:74:66:b4: 80:d0:5a:97:74:50:31:3c:2a:1e:96:c0:f9:82:08: b8:b0:2f:27:bb:b9:53:49:fb:84:6b:be:70:88:93: 90:79:0c:9b:2a:4c:31:3f:fb:0a:18:6c:62:0a:64: f0:a4:5e:39:db:8e:26:aa:00:15:6d:6f:e1:46:47: b2:09:3d:4f:b5:fd:e3:f6:f3:1c:b7:74:94:c1:68: 04:e8:19:b5:d2:35:e6:65:b9:fa:77:d0:69:7d:c5: ed:8f:e6:3b:90:1e:ab:7b:a7:2c:e9:90:11:3a:9a: a6:f9:04:52:72:c8:f7:7a:fb:a6:93:2e:fe:ca:28: 03:ea:a3:52:e3:03:d1:e8:82:39:58:57:4a:54:c1: 57:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:85:00:9E:7A:4C:8E:C8:A4:BD:9F:9E:CB:77:94:58:74:79:2E:DF X509v3 Authority Key Identifier: keyid:66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:c9:02:93:aa:16:c9:05:a4:73:dd:23:41:26:75:16:ea:88: 67:bb:40:0c:c4:b1:19:d4:d0:77:08:78:ea:5e:d2:37:af:de: 6a:46:e3:67:a0:d0:9b:4f:0e:79:10:45:35:72:8e:bc:ee:56: db:1c:85:c7:16:e1:69:83:33:19:cc:54:29:ba:67:af:36:6c: 6b:71:e9:66:52:f2:0c:09:7e:23:4f:23:0b:d1:c7:6f:df:07: 1d:ae:78:48:a6:88:f0:1a:38:ea:06:0d:ab:c9:0a:2e:8d:c1: 61:6c:a8:14:26:62:67:05:81:00:5f:54:53:a8:89:fe:63:83: b6:90:e2:0d:94:41:ed:13:81:b0:ba:87:9b:84:0d:26:99:c0: 5a:c9:43:e4:fc:10:de:ef:45:fc:b5:19:91:b6:a7:37:fc:a8: d3:60:75:f8:68:d0:3e:c7:9b:2a:bb:1b:70:c5:07:90:85:4c: b0:50:0e:ee:80:e7:87:9d:68:c8:b0:19:2a:cc:8e:80:8d:2d: ca:e0:e7:64:75:c1:74:d8:05:49:77:82:02:d3:de:52:1a:08: 9b:cb:3d:04:6d:e8:72:31:4e:06:9b:c9:3e:78:e4:ba:f8:28: 60:d6:12:b3:7c:73:2c:c2:c5:a0:57:d0:ed:27:78:da:c6:eb: df:bd:c2:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mmVu4Opnjj1FRFOIRVexMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MzA2ZTNhY2YzZWI5MDNjYzczOTczZmI2Mjg2MGI2NjM1 MTZjOTMwHhcNMjYwMTI2MDAwMDQ5WhcNMjYwMTI3MDAwMDQ5WjAzMTEwLwYDVQQD EyhkOTg1MDA5ZTdhNGM4ZWM4YTRiZDlmOWVjYjc3OTQ1ODc0NzkyZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDJ6b4leL9fdgVDyEDgNHb/r5Ebt /lKjJ/4AQTzPDCu5WsIzWGGMYZhZI9UVBJfi6ls9TVL9bzmEP5cC+MFZ0FMb75pv AsM97aa/DWusxBPzs8WOtA7dg8Aap4bwuQIwU/ikfsVSIUDx6KZ4dzqHFGS4xXd0 ZrSA0FqXdFAxPCoelsD5ggi4sC8nu7lTSfuEa75wiJOQeQybKkwxP/sKGGxiCmTw pF45244mqgAVbW/hRkeyCT1Ptf3j9vMct3SUwWgE6Bm10jXmZbn6d9BpfcXtj+Y7 kB6re6cs6ZAROpqm+QRScsj3evumky7+yigD6qNS4wPR6II5WFdKVMFXowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmFAJ56TI7IpL2fnst3lFh0eS7fMB8GA1UdIwQY MBaAFGYwbjrPPrkDzHOXP7YoYLZjUWyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmpCdU9zOC11UVBNYzVjX3RpaGd0bU5SYkpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82NGRhYmItN2EwMS00MGQ1LWE1ODct ZWUyN2NiY2E3NDdlLzEvWmpCdU9zOC11UVBNYzVjX3RpaGd0bU5SYkpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82NGRhYmItN2EwMS00MGQ1LWE1ODctZWUyN2NiY2E3NDdl LzEvWmpCdU9zOC11UVBNYzVjX3RpaGd0bU5SYkpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdckCk6oW yQWkc90jQSZ1FuqIZ7tADMSxGdTQdwh46l7SN6/eakbjZ6DQm08OeRBFNXKOvO5W 2xyFxxbhaYMzGcxUKbpnrzZsa3HpZlLyDAl+I08jC9HHb98HHa54SKaI8Bo46gYN q8kKLo3BYWyoFCZiZwWBAF9UU6iJ/mODtpDiDZRB7ROBsLqHm4QNJpnAWslD5PwQ 3u9F/LUZkbanN/yo02B1+GjQPsebKrsbcMUHkIVMsFAO7oDnh51oyLAZKsyOgI0t yuDnZHXBdNgFSXeCAtPeUhoIm8s9BG3ocjFOBpvJPnjkuvgoYNYSs3xzLMLFoFfQ 7Sd42sbr373CCQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:46 2026 by rpki-client