This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft File: ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json) Hash identifier: OAyIMiQZxFOapBnqZAsYFzg7ZzAl+YjI2Fd293hhQvc= Subject key identifier: 09:91:38:FA:C9:EC:9B:60:84:F5:DF:50:01:78:55:81:91:3B:74:61 Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50 Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50 Certificate serial: 019BEB5F2E13F14B700C3AC006D02E5BF749 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft Manifest number: 17E1 Signing time: Fri 23 Jan 2026 15:00:42 +0000 Manifest this update: Fri 23 Jan 2026 15:00:42 +0000 Manifest next update: Sat 24 Jan 2026 15:00:42 +0000 Files and hashes: 1: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: zXbY/LK5rYjHmtpNvIqQsdPvt8frMJjevUurJ/VJRUg=) 2: jq3mq-50R-JOu-sxSGPaEm55e08.roa (hash: taGtXrf0l3O9eeA97Wyzm9CoWyPxNXpqgCP99+lV8Hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:5f:2e:13:f1:4b:70:0c:3a:c0:06:d0:2e:5b:f7:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50 Validity Not Before: Jan 23 15:00:42 2026 GMT Not After : Jan 24 15:00:42 2026 GMT Subject: CN=099138fac9ec9b6084f5df5001785581913b7461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:70:e6:19:93:f0:26:5f:df:46:86:8d:d3: 11:cc:a2:30:dd:d3:ed:37:c0:51:1b:84:f4:53:d6: 59:bf:61:49:43:df:88:02:37:93:21:37:91:34:32: 97:05:3b:7f:1d:e2:db:5a:8d:4f:06:f9:02:30:82: 8a:20:5e:82:e6:7a:8e:f1:44:18:ef:6d:b9:9a:ef: f8:34:b9:a1:52:a2:0e:a9:6a:bc:a2:c1:2f:56:73: e5:d9:5c:b0:9d:19:38:fc:70:fc:f2:f2:52:0d:e4: fe:73:42:fc:7d:9d:59:72:70:06:e2:ac:4e:82:f2: 65:f5:0a:4d:78:f3:e5:a8:21:22:c9:c5:72:a2:f2: bb:8d:11:fb:3e:2f:33:19:5b:f3:58:c0:a4:ff:50: 17:0b:e7:e2:ae:d6:b4:42:90:1d:a8:63:b2:68:1f: 7d:89:71:d8:f2:31:04:bc:84:c2:94:ce:03:ab:42: 1b:1d:a4:a4:e3:c2:7b:2d:7a:32:af:a5:3b:72:bc: 7f:49:18:16:03:8a:86:e0:d7:9d:0b:0c:29:18:ca: d9:f3:10:d8:84:2a:56:dc:83:f3:ee:8a:84:9f:5d: 77:f3:6d:42:f1:43:c4:c9:f5:67:5c:ed:4b:f4:8c: bd:76:53:d2:3c:98:c4:fe:8b:0f:d3:0c:ff:58:a1: df:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:91:38:FA:C9:EC:9B:60:84:F5:DF:50:01:78:55:81:91:3B:74:61 X509v3 Authority Key Identifier: keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:34:7b:ef:73:98:e3:78:e1:28:f8:07:60:45:7b:38:98:df: 7d:06:96:43:47:d5:51:26:cb:59:15:60:7a:c7:ca:ff:19:25: 4f:25:bd:34:d2:06:b5:20:79:6d:82:56:8e:7e:ab:50:e4:9b: 84:d3:78:4f:ab:00:10:42:30:24:70:8b:e9:9d:e3:28:11:76: f1:50:96:62:1a:35:18:6e:a2:1c:bb:14:ad:43:23:81:7b:aa: 29:62:ed:ca:12:83:b2:46:b0:60:74:a4:12:4f:52:df:49:db: a9:ad:19:05:3c:ba:97:c2:38:e0:27:cb:58:62:1f:fa:03:c9: fa:fc:41:72:25:22:c1:68:11:6f:f3:ee:44:9a:f6:0b:5f:d1: 14:d0:85:09:f0:85:b3:4f:51:ce:4d:e9:13:18:95:6a:6e:c0: 29:00:ce:33:29:89:d3:f1:bf:bf:ca:14:c3:64:ed:8b:b0:1e: 91:ca:77:82:c6:8d:c5:1b:a6:4e:9a:bb:36:4f:49:50:b6:65: f3:0c:0f:07:94:e4:ac:c3:aa:0a:fe:2a:fb:72:ad:9d:88:9c: f4:83:6d:b0:62:03:36:7e:d2:30:29:66:08:bb:78:fc:76:70: 68:1b:5a:72:e5:1a:c6:c6:e2:5a:2d:4a:a6:c7:84:7b:ba:37: ce:c8:bf:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvrXy4T8UtwDDrABtAuW/dJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0OTlmNzFlMTVjMGYzOGNlYmEyNTdkMzAzMDRlZDQ0YmVh ODdjNTAwHhcNMjYwMTIzMTUwMDQyWhcNMjYwMTI0MTUwMDQyWjAzMTEwLwYDVQQD EygwOTkxMzhmYWM5ZWM5YjYwODRmNWRmNTAwMTc4NTU4MTkxM2I3NDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn65w5hmT8CZf30aGjdMRzKIw3dPt N8BRG4T0U9ZZv2FJQ9+IAjeTITeRNDKXBTt/HeLbWo1PBvkCMIKKIF6C5nqO8UQY 7225mu/4NLmhUqIOqWq8osEvVnPl2VywnRk4/HD88vJSDeT+c0L8fZ1ZcnAG4qxO gvJl9QpNePPlqCEiycVyovK7jRH7Pi8zGVvzWMCk/1AXC+firta0QpAdqGOyaB99 iXHY8jEEvITClM4Dq0IbHaSk48J7LXoyr6U7crx/SRgWA4qG4NedCwwpGMrZ8xDY hCpW3IPz7oqEn113821C8UPEyfVnXO1L9Iy9dlPSPJjE/osP0wz/WKHfUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmROPrJ7JtghPXfUAF4VYGRO3RhMB8GA1UdIwQY MBaAFGSZ9x4VwPOM66JX0wME7US+qHxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkpuM0hoWEE4NHpyb2xmVEF3VHRSTDZvZkZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi80ZjUxZWYtYWRjNi00YTFjLTgyZDct NTc4NWIxNTczYTY5LzEvWkpuM0hoWEE4NHpyb2xmVEF3VHRSTDZvZkZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi80ZjUxZWYtYWRjNi00YTFjLTgyZDctNTc4NWIxNTczYTY5 LzEvWkpuM0hoWEE4NHpyb2xmVEF3VHRSTDZvZkZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDR773OY 43jhKPgHYEV7OJjffQaWQ0fVUSbLWRVgesfK/xklTyW9NNIGtSB5bYJWjn6rUOSb hNN4T6sAEEIwJHCL6Z3jKBF28VCWYho1GG6iHLsUrUMjgXuqKWLtyhKDskawYHSk Ek9S30nbqa0ZBTy6l8I44CfLWGIf+gPJ+vxBciUiwWgRb/PuRJr2C1/RFNCFCfCF s09Rzk3pExiVam7AKQDOMymJ0/G/v8oUw2Tti7Aekcp3gsaNxRumTpq7Nk9JULZl 8wwPB5TkrMOqCv4q+3KtnYic9INtsGIDNn7SMClmCLt4/HZwaBtacuUaxsbiWi1K pseEe7o3zsi/pQ== -----END CERTIFICATE-----Generated at Fri Jan 23 23:04:40 2026 by rpki-client