This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft File: ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json) Hash identifier: vdKVr3dmgBljFKic39R/sRC5t5bF+3Pu56diW2Ec9F4= Subject key identifier: 7B:94:56:CC:C5:7C:57:F6:14:4C:59:4A:6C:DE:AF:3A:4F:06:CB:CF Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0 Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0 Certificate serial: 019BFCC171B06F46AD73B38BAB760885348F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft Manifest number: 17ED Signing time: Tue 27 Jan 2026 00:01:34 +0000 Manifest this update: Tue 27 Jan 2026 00:01:34 +0000 Manifest next update: Wed 28 Jan 2026 00:01:34 +0000 Files and hashes: 1: CTL_XkMdcDz_-dbE2LKujOq_cPw.roa (hash: 0tP2+X0H7fwYa4FCqGt0jobEPqhB1skE7FCeOf0xvAQ=) 2: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: 8f4CYPEEqMewJqIzSZVeWdWfnwJLZ+eaHweWfS8PsrA=) 3: kSbqeBaoQD13o8jWxXoJQPiv5_E.roa (hash: sTOxhOLpsBrW4Ofsjo1P891qLJ55OV1w4sI87BOcc0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:71:b0:6f:46:ad:73:b3:8b:ab:76:08:85:34:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0 Validity Not Before: Jan 27 00:01:34 2026 GMT Not After : Jan 28 00:01:34 2026 GMT Subject: CN=7b9456ccc57c57f6144c594a6cdeaf3a4f06cbcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:15:0e:5a:2f:2d:c5:62:19:74:b1:67:4f: 24:6f:5f:60:2f:5b:b2:8e:5b:b1:e1:94:09:46:ee: 33:c7:2e:a9:0f:0c:62:7a:e4:58:a8:90:0d:10:58: c6:7a:85:ed:69:ad:a2:09:3b:a9:d9:fb:82:5a:67: fb:e3:9f:32:94:06:66:db:44:49:1e:8f:97:54:5f: 0d:79:42:d5:2f:19:2e:ff:89:a9:1e:cf:93:58:cb: 74:05:eb:e4:43:fb:8a:74:11:4b:6a:89:13:4e:2d: 3a:ae:85:4a:26:d9:87:7b:06:bf:39:6b:27:3a:70: 80:ca:f8:76:b2:19:cd:25:cf:15:e4:31:69:15:4b: 48:67:15:6c:53:c5:eb:90:4c:92:d3:2b:a0:83:67: 03:71:2f:f9:e1:6f:19:89:6f:3e:b9:a9:7f:f6:35: 71:bc:ec:5c:2d:ee:d9:25:a4:5f:31:fc:85:af:c6: 45:39:c8:fe:35:bd:a1:c0:82:22:79:da:5a:d0:7e: a7:5a:f4:20:67:05:2a:d8:1a:17:89:13:f5:f4:57: 75:75:d9:44:af:33:a6:34:28:c8:9c:a5:52:9d:34: 47:77:b2:f4:63:34:ba:98:a1:33:3f:f7:b5:56:44: b6:5a:fc:1f:bd:2a:64:c0:b4:1e:75:56:28:a6:25: b0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:94:56:CC:C5:7C:57:F6:14:4C:59:4A:6C:DE:AF:3A:4F:06:CB:CF X509v3 Authority Key Identifier: keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:59:71:48:f7:60:22:a2:cd:46:3e:25:cf:93:57:61:f5:47: 67:99:84:8c:e3:68:b2:aa:90:db:53:2f:b1:8b:0f:27:07:71: 00:7e:64:3d:79:e1:30:da:ca:b5:78:63:d7:69:20:16:fc:cd: 4b:af:93:07:93:0f:33:2e:21:18:47:57:d9:c0:55:05:6d:a9: e7:b9:4f:52:a3:c7:33:85:c7:0e:a8:18:87:2d:c6:94:81:85: 08:f2:aa:d2:7f:09:6b:5e:2d:22:e1:21:66:38:44:14:4e:4d: 76:5b:3a:cb:a0:49:8b:ef:0a:d8:2f:60:3d:f4:09:e6:93:57: de:81:2b:09:3c:c6:f1:b0:b8:c8:5e:45:8e:be:b4:88:88:9a: 2e:ea:48:95:f9:73:a8:0e:db:93:4d:20:4b:dc:d2:b3:b1:4b: 08:9e:63:a6:d8:06:23:f0:4b:25:47:b4:2d:8b:04:e1:31:59: 5d:00:3e:ab:8d:da:3e:49:e1:0b:d6:43:9e:33:6e:f9:c8:10: 9a:67:35:d0:ee:63:a4:2b:b6:c3:7c:e6:a5:c2:e7:f3:83:fb: ab:69:0a:b0:f3:f2:c9:84:ce:76:66:d3:26:8c:ba:34:3e:c8: dd:74:53:ea:34:af:5e:33:63:b7:47:63:15:99:44:f4:ba:d8: 89:36:a2:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wXGwb0atc7OLq3YIhTSPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MDYwOTY2OTVmN2U2NjEwYjE5YjA4ZTFkN2ZkOWM0ZDkx NGE0ZjAwHhcNMjYwMTI3MDAwMTM0WhcNMjYwMTI4MDAwMTM0WjAzMTEwLwYDVQQD Eyg3Yjk0NTZjY2M1N2M1N2Y2MTQ0YzU5NGE2Y2RlYWYzYTRmMDZjYmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw38VDlovLcViGXSxZ08kb19gL1uy jlux4ZQJRu4zxy6pDwxieuRYqJANEFjGeoXtaa2iCTup2fuCWmf7458ylAZm20RJ Ho+XVF8NeULVLxku/4mpHs+TWMt0BevkQ/uKdBFLaokTTi06roVKJtmHewa/OWsn OnCAyvh2shnNJc8V5DFpFUtIZxVsU8XrkEyS0yugg2cDcS/54W8ZiW8+ual/9jVx vOxcLe7ZJaRfMfyFr8ZFOcj+Nb2hwIIiedpa0H6nWvQgZwUq2BoXiRP19Fd1ddlE rzOmNCjInKVSnTRHd7L0YzS6mKEzP/e1VkS2WvwfvSpkwLQedVYopiWwsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuUVszFfFf2FExZSmzerzpPBsvPMB8GA1UdIwQY MBaAFGUGCWaV9+ZhCxmwjh1/2cTZFKTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgt YTQxNTI1NThkMThjLzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgtYTQxNTI1NThkMThj LzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1lxSPdg IqLNRj4lz5NXYfVHZ5mEjONosqqQ21MvsYsPJwdxAH5kPXnhMNrKtXhj12kgFvzN S6+TB5MPMy4hGEdX2cBVBW2p57lPUqPHM4XHDqgYhy3GlIGFCPKq0n8Ja14tIuEh ZjhEFE5Ndls6y6BJi+8K2C9gPfQJ5pNX3oErCTzG8bC4yF5Fjr60iIiaLupIlflz qA7bk00gS9zSs7FLCJ5jptgGI/BLJUe0LYsE4TFZXQA+q43aPknhC9ZDnjNu+cgQ mmc10O5jpCu2w3zmpcLn84P7q2kKsPPyyYTOdmbTJoy6ND7I3XRT6jSvXjNjt0dj FZlE9LrYiTaiKQ== -----END CERTIFICATE-----Generated at Tue Jan 27 03:56:43 2026 by rpki-client