This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft File: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft (raw, json) Hash identifier: tSD5z4YYxemBa35z4X2oROTeKr3HMa4Cbdv1huRz2rM= Subject key identifier: 23:D1:EC:A8:E8:26:F7:66:4D:DC:38:92:10:4A:2F:D0:62:68:65:8A Authority key identifier: 67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63 Certificate issuer: /CN=67c25a41f1c5228e10ea941ce7078f43cd909b63 Certificate serial: 019BFA9BF8A3F8E025BF5A0DA6F0191640EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft Manifest number: 16FB Signing time: Mon 26 Jan 2026 14:01:24 +0000 Manifest this update: Mon 26 Jan 2026 14:01:24 +0000 Manifest next update: Tue 27 Jan 2026 14:01:24 +0000 Files and hashes: 1: 11UHbWWyzf12DKqEVtlPbvmvLDo.roa (hash: Dg6T6ROSIHh46iUOhkgkZyjyj5P7h4/p+TTyu04jv1k=) 2: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl (hash: R3dxI0n/V8c72YHDsPHQkcAFp70AgMkpDsyLNJSHrcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:f8:a3:f8:e0:25:bf:5a:0d:a6:f0:19:16:40:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c25a41f1c5228e10ea941ce7078f43cd909b63 Validity Not Before: Jan 26 14:01:24 2026 GMT Not After : Jan 27 14:01:24 2026 GMT Subject: CN=23d1eca8e826f7664ddc3892104a2fd06268658a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5c:d2:58:e9:9d:b6:a3:2c:6b:d6:24:88:ce: 90:0d:c2:6c:0e:d3:3d:99:b9:71:7c:b2:b2:81:1a: 7e:6e:e7:e9:49:e8:d1:73:5c:79:2c:d8:82:f8:2b: 23:4d:59:75:f1:42:f7:77:da:85:da:b4:be:54:32: 02:4d:81:05:e0:d1:78:66:16:f2:f4:70:2f:46:6e: 61:2b:c4:81:87:42:60:ae:a7:50:11:26:c3:8d:8b: 3e:88:7c:2b:43:d2:54:87:d9:08:c7:83:36:de:82: 9d:69:98:dd:bf:c4:83:b4:dc:78:b7:63:0e:cc:6b: 9a:e0:90:60:dc:4b:f4:de:36:40:0b:f2:b2:fd:1d: bd:de:1e:e0:f3:e1:70:2d:6a:e6:3b:ed:ec:8f:79: 4e:6e:e5:8a:5e:7d:48:bb:0d:72:2f:ad:b4:54:69: 43:08:29:50:35:a8:de:22:9c:1f:6a:0f:2e:b7:af: 58:b6:b4:28:95:0e:32:d9:f1:12:e0:3e:b0:a9:1e: d7:6b:d6:15:a8:37:ec:87:ff:86:d9:48:d6:67:50: 62:3b:88:a1:f1:6f:22:cb:be:ec:1e:5e:45:51:79: 3a:17:58:a9:10:54:8c:ca:69:04:f6:ed:7c:a8:7c: 73:3f:05:70:d2:4a:58:7e:f1:d9:cb:e9:47:9c:61: df:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D1:EC:A8:E8:26:F7:66:4D:DC:38:92:10:4A:2F:D0:62:68:65:8A X509v3 Authority Key Identifier: keyid:67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:7e:29:bf:7c:11:02:e0:18:ba:a2:0a:a0:28:eb:fc:6d:18: 42:54:99:54:ee:1f:01:a2:6f:29:80:0a:ae:38:cd:aa:67:4a: a9:8f:c5:13:c4:12:cb:ea:75:b7:be:8e:40:73:74:b1:13:dd: dd:da:fa:56:16:7b:15:e9:a3:3f:92:91:d1:b0:04:ec:0a:c2: a2:59:d5:6e:29:03:29:a8:f3:d4:4a:38:64:49:c5:a4:d0:78: 06:43:52:32:82:a6:8e:6b:f9:44:11:13:7e:15:2b:1c:aa:7a: ec:95:56:57:94:e5:12:7c:89:9f:ac:a7:f6:52:1e:f2:91:27: ff:88:80:57:a7:37:12:b5:16:57:59:7b:4e:ba:3a:c5:5a:ca: e1:8b:98:c1:f2:8e:8e:7a:ff:f5:26:18:60:ff:34:b2:9e:58: e3:ff:8b:83:11:bd:49:b6:bb:9f:f7:5d:c0:11:0c:8b:77:e2: ca:95:41:7a:5e:5f:ec:4a:cd:06:c2:28:c1:c8:6b:6c:d1:b0: 30:c7:bf:e3:8e:0c:d8:a2:86:9c:58:fd:8f:ae:73:4c:0b:99: 51:10:eb:a5:72:3a:c4:33:01:d9:32:f4:5f:62:a3:72:0d:e7: 63:e2:17:45:d8:93:4d:98:50:23:5f:79:b6:ca:c1:f0:a7:44: 75:62:c6:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m/ij+OAlv1oNpvAZFkDsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YzI1YTQxZjFjNTIyOGUxMGVhOTQxY2U3MDc4ZjQzY2Q5 MDliNjMwHhcNMjYwMTI2MTQwMTI0WhcNMjYwMTI3MTQwMTI0WjAzMTEwLwYDVQQD EygyM2QxZWNhOGU4MjZmNzY2NGRkYzM4OTIxMDRhMmZkMDYyNjg2NThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlzSWOmdtqMsa9YkiM6QDcJsDtM9 mblxfLKygRp+bufpSejRc1x5LNiC+CsjTVl18UL3d9qF2rS+VDICTYEF4NF4Zhby 9HAvRm5hK8SBh0JgrqdQESbDjYs+iHwrQ9JUh9kIx4M23oKdaZjdv8SDtNx4t2MO zGua4JBg3Ev03jZAC/Ky/R293h7g8+FwLWrmO+3sj3lObuWKXn1Iuw1yL620VGlD CClQNajeIpwfag8ut69YtrQolQ4y2fES4D6wqR7Xa9YVqDfsh/+G2UjWZ1BiO4ih 8W8iy77sHl5FUXk6F1ipEFSMymkE9u18qHxzPwVw0kpYfvHZy+lHnGHfbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPR7KjoJvdmTdw4khBKL9BiaGWKMB8GA1UdIwQY MBaAFGfCWkHxxSKOEOqUHOcHj0PNkJtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjhKYVFmSEZJbzRRNnBRYzV3ZVBRODJRbTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hMWE2YzItZDdjMS00MmU4LWEzOGYt ZmM5MTBjMGIxOWFlLzEvWjhKYVFmSEZJbzRRNnBRYzV3ZVBRODJRbTJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9hMWE2YzItZDdjMS00MmU4LWEzOGYtZmM5MTBjMGIxOWFl LzEvWjhKYVFmSEZJbzRRNnBRYzV3ZVBRODJRbTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW34pv3wR AuAYuqIKoCjr/G0YQlSZVO4fAaJvKYAKrjjNqmdKqY/FE8QSy+p1t76OQHN0sRPd 3dr6VhZ7FemjP5KR0bAE7ArColnVbikDKajz1Eo4ZEnFpNB4BkNSMoKmjmv5RBET fhUrHKp67JVWV5TlEnyJn6yn9lIe8pEn/4iAV6c3ErUWV1l7Tro6xVrK4YuYwfKO jnr/9SYYYP80sp5Y4/+LgxG9Sba7n/ddwBEMi3fiypVBel5f7ErNBsIowchrbNGw MMe/444M2KKGnFj9j65zTAuZURDrpXI6xDMB2TL0X2Kjcg3nY+IXRdiTTZhQI195 tsrB8KdEdWLGlA== -----END CERTIFICATE-----Generated at Mon Jan 26 20:50:39 2026 by rpki-client