This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft File: Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft (raw, json) Hash identifier: 3TE2DT7b1U0X29janWRSjCW/F8MfH/iYS7gUj+R5Uxs= Subject key identifier: B1:1F:64:4E:E7:AB:9D:D3:69:72:9B:9F:AD:B9:24:F1:26:D1:84:BE Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F Certificate issuer: /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f Certificate serial: 019BFCC1296421477AF5BB78B118FFF4DD8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft Manifest number: 177F Signing time: Tue 27 Jan 2026 00:01:16 +0000 Manifest this update: Tue 27 Jan 2026 00:01:16 +0000 Manifest next update: Wed 28 Jan 2026 00:01:16 +0000 Files and hashes: 1: EO1xuq0TyBN7jL2nsBNR6LuDlQo.roa (hash: 0YddX8lcftncrD+VCEJL3eDzYZ6fCFEVTyRED0oHXFA=) 2: Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl (hash: pfoMMV8gdqjo83ZkEcwxIKSwqfX8C3rADHixTOdu4VQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:29:64:21:47:7a:f5:bb:78:b1:18:ff:f4:dd:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f Validity Not Before: Jan 27 00:01:16 2026 GMT Not After : Jan 28 00:01:16 2026 GMT Subject: CN=b11f644ee7ab9dd369729b9fadb924f126d184be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ae:13:9d:13:d8:55:25:19:18:13:17:df:ac: 79:36:47:b7:30:21:3a:d9:ed:59:c4:d0:44:a7:24: 88:71:e7:d5:66:db:31:96:10:fb:69:c0:bc:d1:e5: 30:ce:27:5e:3f:1a:34:f5:ee:e5:2e:7b:ca:49:f4: df:48:11:3a:eb:64:63:67:6b:8c:84:ac:2e:f3:77: 68:ae:6d:dc:79:03:9c:60:40:1b:b3:a6:5e:20:76: 4f:2c:a7:19:13:bb:b9:3a:44:ee:e4:21:6a:e5:f0: 2e:fb:b2:31:3c:67:6a:8e:bc:45:e1:12:29:ab:d8: 03:36:f2:bc:1d:1f:40:c2:62:b5:6b:f8:e7:c9:b8: ad:de:74:06:fa:36:31:92:1b:d8:4f:6a:45:ca:50: a3:c5:a7:0a:3c:be:bb:b9:b6:50:90:65:a0:16:0b: ab:d0:e5:13:52:8e:2a:36:d2:86:71:f1:69:fe:cc: 1e:38:f7:5e:bc:b0:33:33:14:7d:96:f9:56:23:a8: 6b:d9:18:b4:f3:9e:c0:d9:8c:31:26:cd:3e:8d:96: 49:b2:e6:bb:d4:ed:df:b4:02:fb:d5:6e:fa:e8:97: fd:3c:b0:23:d6:8f:e7:db:23:50:38:09:ca:23:b0: 27:da:8a:0f:f5:78:80:d1:be:2c:78:b5:26:0a:ea: 33:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1F:64:4E:E7:AB:9D:D3:69:72:9B:9F:AD:B9:24:F1:26:D1:84:BE X509v3 Authority Key Identifier: keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:94:88:2e:e1:36:2c:7f:dc:46:63:64:79:a1:1f:03:59:74: ea:fb:65:00:9c:9d:24:3a:ba:f3:89:b1:79:4b:d0:7d:c9:40: f3:cf:c8:1b:ac:1d:4d:82:3c:5b:2c:0c:12:d6:fd:b1:a6:bd: a9:6e:49:ca:16:70:0e:1c:b0:95:17:7a:65:c8:71:e3:0e:ce: a1:76:fc:85:4b:a8:66:77:34:d6:c8:68:af:b8:35:4c:1c:f7: 0b:5a:97:55:0d:a6:89:2e:66:03:15:bd:d9:1f:e8:bd:9c:0f: 1e:77:01:77:f8:37:5f:8f:83:32:22:90:1e:d4:9a:0f:66:d2: af:c7:53:e1:2c:2c:5d:45:3a:5f:e3:64:24:b0:ad:da:a3:9f: f2:13:b7:64:19:62:7e:a9:0b:7a:cf:4a:5f:27:37:4b:0e:b0: a4:77:79:b4:25:ab:60:98:bc:e0:d6:86:ea:e1:fd:55:36:da: 0a:c5:ee:8b:51:f6:0d:14:b4:c2:bb:8c:58:1a:90:6c:91:74: 7f:31:b2:23:eb:5c:98:2f:59:97:89:f1:31:8d:7d:48:0c:95: f8:02:ea:91:f9:db:c0:6e:ac:48:44:88:a5:04:ff:63:9b:99: cc:b3:5f:de:38:0c:52:f5:1f:85:86:19:dd:c1:0c:5f:61:f6: 8c:1f:e7:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wSlkIUd69bt4sRj/9N2OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZmQzZTE5ZjU4MzM2MWZlNWQ5MGE0MTJiMTI4MGY3Y2Zm YjgwMWYwHhcNMjYwMTI3MDAwMTE2WhcNMjYwMTI4MDAwMTE2WjAzMTEwLwYDVQQD EyhiMTFmNjQ0ZWU3YWI5ZGQzNjk3MjliOWZhZGI5MjRmMTI2ZDE4NGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9q4TnRPYVSUZGBMX36x5Nke3MCE6 2e1ZxNBEpySIcefVZtsxlhD7acC80eUwzidePxo09e7lLnvKSfTfSBE662RjZ2uM hKwu83dorm3ceQOcYEAbs6ZeIHZPLKcZE7u5OkTu5CFq5fAu+7IxPGdqjrxF4RIp q9gDNvK8HR9AwmK1a/jnybit3nQG+jYxkhvYT2pFylCjxacKPL67ubZQkGWgFgur 0OUTUo4qNtKGcfFp/sweOPdevLAzMxR9lvlWI6hr2Ri0857A2YwxJs0+jZZJsua7 1O3ftAL71W766Jf9PLAj1o/n2yNQOAnKI7An2ooP9XiA0b4seLUmCuozpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEfZE7nq53TaXKbn625JPEm0YS+MB8GA1UdIwQY MBaAFGf9Phn1gzYf5dkKQSsSgPfP+4AfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wODFiODQtNGVjZS00MDA1LWIyOGQt OWYyOTMxNzJiYjZiLzEvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8wODFiODQtNGVjZS00MDA1LWIyOGQtOWYyOTMxNzJiYjZi LzEvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpSILuE2 LH/cRmNkeaEfA1l06vtlAJydJDq684mxeUvQfclA88/IG6wdTYI8WywMEtb9saa9 qW5JyhZwDhywlRd6Zchx4w7OoXb8hUuoZnc01shor7g1TBz3C1qXVQ2miS5mAxW9 2R/ovZwPHncBd/g3X4+DMiKQHtSaD2bSr8dT4SwsXUU6X+NkJLCt2qOf8hO3ZBli fqkLes9KXyc3Sw6wpHd5tCWrYJi84NaG6uH9VTbaCsXui1H2DRS0wruMWBqQbJF0 fzGyI+tcmC9Zl4nxMY19SAyV+ALqkfnbwG6sSESIpQT/Y5uZzLNf3jgMUvUfhYYZ 3cEMX2H2jB/nLg== -----END CERTIFICATE-----Generated at Tue Jan 27 06:41:45 2026 by rpki-client