This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft File: zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft (raw, json) Hash identifier: Mi99xjHhau+OE5bopquBUIQVC3RjWiNpDkqXMd5SVsE= Subject key identifier: 0D:55:05:C5:B1:1C:1F:40:8B:64:C7:38:1D:0B:DF:97:7A:62:E8:B1 Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019BF952206CA3A231F15AE8F9D2D20F75D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft Manifest number: 0FE0 Signing time: Mon 26 Jan 2026 08:01:07 +0000 Manifest this update: Mon 26 Jan 2026 08:01:07 +0000 Manifest next update: Tue 27 Jan 2026 08:01:07 +0000 Files and hashes: 1: 1-cJPzLFnEqH5HBa7LXTLzTN8Sig.roa (hash: y2pMWhMaLZyGP/h+eP0yeYXn0/ZQODr617glRelxkng=) 2: 1-w_96dZZvAhqknsLDQxMYnFiHlY.roa (hash: Yvy1v6JVhNfglPJmSg7JFYYeASs2BwwOCl6D0ULH7XE=) 3: 5qt9lNybqUHZohfxSPz95g9mX7E.roa (hash: mVHv2PLsBDsXEMy4ovgXLDyhiJ+2KGTM6nPmA9c85LE=) 4: 70_l1y6U6sQdwIpOb6iklVy3oao.roa (hash: VpEU3IVoWQIPh97gn+id38/VbaiStJZ66MLtFsKLfsU=) 5: AEZof4s4jSU43Cjeiy5C6caRCeg.roa (hash: u3Tu4bTb99jlY+qChU7xb5zLmf+nryw4qR+okn3NkQU=) 6: BGMxTE0_-Ky6TibuPNRzmTxUL6k.roa (hash: a0OwK3rrYXMHfxjEnabs1KjSXWbcFZrLT7UxZW9tjc0=) 7: BKPl0VR7xYdXYKg2sB5jhzIUpPM.roa (hash: WLYjBTaaoRkUg9cIZWEhhWlOX7Jh/HdxdA+DXCeO3yM=) 8: CVjpP5fbG6FZ2VuiKyMRFNqdUK8.roa (hash: pUvsaqMuCpZ883OSrkl0sgOmVBTesmRkdym3KHIgbJc=) 9: GGfTyBNbI489PdjBnrpK0_0Pbtw.roa (hash: H+6wl5gGeH6iVyXOVvQsj95iEngE2FRVQ1f4kfsJ1Sc=) 10: HrOHL7N5WVrxCxYAttZq-03pfHc.roa (hash: qifv399whUGIsH7h7aGdUtF3vmpZ1o8CfKVRy9gkfLQ=) 11: JGn2GKoXJ8jNO9rMaZb5j6MBYt8.roa (hash: YJCYbO1tbshnVmgvPqt65xZEpQvUa9LqSd0IYWT7qsg=) 12: KiGFzL7XSLHCsk5kOv5EU6GDjHs.roa (hash: E2MSykUDl/Q4sWoRqwyjpDX7oQ+5JC9Qa55nDLPQgKc=) 13: NAErYGyu2OxGuf_6AEnvFZF3m00.roa (hash: Efn4X5npgxeYg3CAnRT/UiNScy4w0Cb8p/IjBRVN00E=) 14: Q6jWWNwFSQEE3tRsGBlCg_ZVl20.roa (hash: FyqK9jZ27cGkvbDyCDe1OUlIh4FvaJyJ1LPI/ZyMQ0g=) 15: Rh1E5qxMlmiIy0iHzMFcbx-ILCY.roa (hash: l7nvXUR6ZjHVsyeZWx0Ki3Tb8P2diCAcOJlZGejmDxA=) 16: TPflC2tWkm5_6P9IemHAg3jDH38.roa (hash: 7haADyJs1k9uwE2EhKfl4+X3oqT2rg7BL60uh8bbzNo=) 17: XVq3IYAj2pjJVKsPJGpvrfgzYxs.roa (hash: 1m83ro/W3gU5CbeKTbsHPZcXEc5WYBDNa/RLiDPwPnI=) 18: Y7DNK9hcBBTE7Th1kYyVw3RPwWY.roa (hash: HI8YgFsMuVg4hk5qijfjNGh2VIu0QcRdphqK5LhPNyc=) 19: _JDLOHBdrBVnKNE-CkwafjX4Upw.roa (hash: 7xZENWzKb48fOsZF0FWLYlI8o3hnSoZOH464Nb3NFoo=) 20: aq4mHriPC_Od7XgUBZpEqq5gcHk.roa (hash: yiecnEtPgQHrRACDcmP4fFBJvqjTl0FnO0eslGPKhWc=) 21: cRhh2a8DyS-BnqcPTrEQH0ZbDoA.roa (hash: IqlFBWiZvX+DZXZZbfb7qN9FDJR9IKeDzLOuL+Y7oLQ=) 22: kopgSW14D0aMxVGgeQmEGmsYFAQ.roa (hash: emFzXwVeUl6yg/bnrgocFfxZY+cFQwEF3lD8I6fBmX0=) 23: ksVJIBjGvwL4s1PtRRQoRC2eUSM.roa (hash: Ga4kbKkw40NTNAmZazaZ3aVIVvGOSEfaNiqjZ2JqONY=) 24: m8rYr_2iytyxaBvpY5bmVT_GPA4.roa (hash: JdvL9p4h+mSTLc+2jMP4AS3ujI2r7wbx0jXR1EyHp+g=) 25: mJ0j47UwFivW9zAPZ7Wpb6242sQ.roa (hash: ovh6+isWS+HgWIGH47x4leRVJSZT91OgjJW9sbvcdqA=) 26: pJ62jL1_CaC6LVWNYtByFrcLuDM.roa (hash: ouNLsKMv0CYovkFAKO8v3kQl+SqC8Bd31AIWBDyAwC4=) 27: pfHQoQuY3aQ1KMskVy6elrET6o0.roa (hash: 2B0UR9R1NQKR59jfjcXzQuYHh64T7KqpxoLNPjc77ks=) 28: t9G_1LZtK2mabZqjl3XjkAvpMkQ.roa (hash: dvgQDwtsUk39Ao+BrG34yvxtiJYryUNCUxCkBcW8cSE=) 29: w1p9YqCZmBafcgTm9UvFxf_0dG0.roa (hash: FOuH5kfe8qsQZTv/hD7teSHzc0NJLVkSv0+KWq6KBBo=) 30: zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl (hash: K/2PVxr90zstAS0R4LaLNul1X8+8lmRO7PFzHchw+6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:52:20:6c:a3:a2:31:f1:5a:e8:f9:d2:d2:0f:75:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jan 26 08:01:07 2026 GMT Not After : Jan 27 08:01:07 2026 GMT Subject: CN=0d5505c5b11c1f408b64c7381d0bdf977a62e8b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1b:bb:63:b9:ee:32:fa:91:35:91:49:dd:59: 9d:0f:5e:a4:2b:39:b6:40:2d:21:ef:2f:9d:f8:79: 69:b8:5d:d1:94:76:b3:bc:ff:e3:ca:53:80:74:88: c6:7d:d4:80:60:d2:90:d1:2b:50:05:b0:57:c5:43: 0d:4e:1e:2b:4d:eb:f4:5a:ea:d5:73:90:fb:3e:bf: 78:93:34:5d:8d:c5:c0:e0:12:79:5b:f3:ce:d5:a1: 26:e0:7f:25:88:9b:cd:87:1b:a3:ee:38:62:b4:42: 9c:ca:90:95:00:6f:8a:96:0c:33:2c:9f:e7:40:78: 4f:89:6c:ff:75:a3:fa:1d:23:54:23:35:78:fe:06: 9a:6e:dd:6b:77:99:31:b4:6a:1e:81:97:1e:00:1b: be:b6:11:dc:5a:7b:b0:81:ff:c8:2f:89:f1:00:f8: e8:17:7f:6f:4e:b9:98:ed:40:a3:0d:90:a1:72:7e: 6c:95:66:fb:90:e3:f3:b3:9f:66:7b:9c:bc:6a:36: fc:5a:69:19:95:49:a0:39:b7:24:5a:bc:ce:a8:1c: fe:f5:ef:ed:5a:5b:c4:cd:dd:fa:df:0b:f8:be:1b: 2c:dc:fd:00:64:55:ce:0b:e4:67:6f:5c:77:25:9d: ac:1e:4a:7c:27:68:69:ce:04:cc:07:4c:17:d2:21: f4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:55:05:C5:B1:1C:1F:40:8B:64:C7:38:1D:0B:DF:97:7A:62:E8:B1 X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:c2:fe:13:c3:a7:7b:39:d1:3a:e9:5c:b7:56:4c:d8:83:7f: 93:51:00:97:08:a8:6b:5b:7f:14:d4:eb:46:a7:34:da:bd:75: 04:d2:15:8e:48:91:85:7d:95:14:47:85:92:cb:18:62:ba:3a: a5:21:5e:30:c3:e5:f6:38:e3:a3:53:a1:88:45:8a:0e:59:d6: 2b:0a:f6:f7:a3:95:78:50:b3:72:84:2b:58:7e:da:36:37:7a: 78:53:b7:04:49:3e:1b:f0:cc:56:15:bf:c3:19:ff:4d:c4:2d: 49:d8:2c:22:c6:45:5c:b7:17:ed:9c:49:99:dd:87:0c:c2:75: 46:2b:7b:6a:7c:0c:50:6a:48:45:af:9c:1a:b3:f7:15:6a:9e: 95:dc:92:4f:c5:30:96:a9:4d:3d:f1:6c:e7:c6:7d:d7:1e:b9: 0b:3b:1c:95:76:77:64:40:b6:2e:ae:3e:41:f0:8b:18:9e:2a: 9a:b9:63:32:ab:ff:d6:52:27:46:4f:2f:f4:5e:aa:85:76:af: 3b:f4:5a:c7:cc:02:6c:a1:1d:35:df:a3:3b:d7:60:92:a2:3d: a7:e7:69:5f:e3:84:4b:04:a5:d8:7b:db:50:10:88:4f:3d:f4: d1:28:b7:e3:33:47:3e:f1:14:33:f0:a4:89:76:57:54:dc:16: ce:49:66:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UiBso6Ix8Vro+dLSD3XUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMTI2MDgwMTA3WhcNMjYwMTI3MDgwMTA3WjAzMTEwLwYDVQQD EygwZDU1MDVjNWIxMWMxZjQwOGI2NGM3MzgxZDBiZGY5NzdhNjJlOGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhu7Y7nuMvqRNZFJ3VmdD16kKzm2 QC0h7y+d+HlpuF3RlHazvP/jylOAdIjGfdSAYNKQ0StQBbBXxUMNTh4rTev0WurV c5D7Pr94kzRdjcXA4BJ5W/PO1aEm4H8liJvNhxuj7jhitEKcypCVAG+KlgwzLJ/n QHhPiWz/daP6HSNUIzV4/gaabt1rd5kxtGoegZceABu+thHcWnuwgf/IL4nxAPjo F39vTrmY7UCjDZChcn5slWb7kOPzs59me5y8ajb8WmkZlUmgObckWrzOqBz+9e/t WlvEzd363wv4vhss3P0AZFXOC+Rnb1x3JZ2sHkp8J2hpzgTMB0wX0iH00QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1VBcWxHB9Ai2THOB0L35d6YuixMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZML+E8On eznROulct1ZM2IN/k1EAlwioa1t/FNTrRqc02r11BNIVjkiRhX2VFEeFkssYYro6 pSFeMMPl9jjjo1OhiEWKDlnWKwr296OVeFCzcoQrWH7aNjd6eFO3BEk+G/DMVhW/ wxn/TcQtSdgsIsZFXLcX7ZxJmd2HDMJ1Rit7anwMUGpIRa+cGrP3FWqeldyST8Uw lqlNPfFs58Z91x65CzsclXZ3ZEC2Lq4+QfCLGJ4qmrljMqv/1lInRk8v9F6qhXav O/Rax8wCbKEdNd+jO9dgkqI9p+dpX+OESwSl2HvbUBCITz300Si34zNHPvEUM/Ck iXZXVNwWzklmnw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:58:11 2026 by rpki-client