This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft File: ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft (raw, json) Hash identifier: Us6qDY/yDdUxioQJ7uLh55SbhKohoa3wvnXW5cVbPr0= Subject key identifier: 71:E4:5C:82:03:A8:26:79:EE:23:C4:32:87:2E:BF:5A:26:C6:B7:12 Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7 Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7 Certificate serial: 019BFE77F0A78B9728FE540ED1E4D6CB150C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft Manifest number: 17EF Signing time: Tue 27 Jan 2026 08:00:31 +0000 Manifest this update: Tue 27 Jan 2026 08:00:31 +0000 Manifest next update: Wed 28 Jan 2026 08:00:31 +0000 Files and hashes: 1: J17vSIqgoHZS2f6yqb_8iHjCu5I.roa (hash: ZkWmb6GvJuOMu21GNU2YeN23B5AtCQQY8+AStJbeGm0=) 2: XPQJlFedERmTF9acUC88HcZi7Y8.roa (hash: Np32ynKS0t+KcWpS0Dq9Cf6zaeFo8lW4iSnM2fxcrEY=) 3: ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl (hash: LnNzxGYg9Qv+4QCOZoaSa90KUuUAx+UACC3a0okrjEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 08:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:77:f0:a7:8b:97:28:fe:54:0e:d1:e4:d6:cb:15:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7 Validity Not Before: Jan 27 08:00:31 2026 GMT Not After : Jan 28 08:00:31 2026 GMT Subject: CN=71e45c8203a82679ee23c432872ebf5a26c6b712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3e:76:6a:32:47:6c:d0:4e:ff:fa:dd:3b:48: 5a:0d:34:ad:35:39:00:05:dd:61:0b:09:0e:55:d9: 40:45:15:e5:40:01:12:91:60:2a:88:f7:7e:31:a1: 14:d4:a4:46:d6:08:cf:f5:5d:a6:a9:4f:b7:3a:a1: e2:e5:83:fd:52:68:19:b9:f2:ba:a7:28:d0:9f:5d: b9:63:8d:2b:d7:10:89:ba:e2:fe:11:3c:93:3a:79: 94:ae:4d:86:03:51:fc:50:12:f8:20:11:29:9d:4e: 7d:e8:5e:7c:8a:84:43:f5:e9:57:b4:b3:b6:68:68: 71:47:b3:eb:0c:4f:9a:b9:75:ad:5f:20:7c:5c:fe: 7c:b8:3a:82:ba:66:81:b3:a6:3c:fe:1a:3d:29:14: 83:98:6a:e3:1a:16:88:e7:1d:dc:0e:9b:a3:2f:31: 65:32:94:7a:09:99:f8:da:ec:53:40:a2:83:ab:0b: 1a:24:62:cd:e1:87:b3:09:0d:77:0e:10:ad:84:97: 37:c9:4d:80:48:c1:44:ff:c8:16:84:dc:96:dc:f9: d0:c0:55:d0:b1:fd:d0:3b:eb:94:bb:2c:f4:94:b5: 53:5a:19:50:e1:22:f6:d4:e3:72:51:73:99:cd:54: 10:43:3a:b5:38:ed:cb:d2:86:36:b1:bc:86:08:a8: bd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E4:5C:82:03:A8:26:79:EE:23:C4:32:87:2E:BF:5A:26:C6:B7:12 X509v3 Authority Key Identifier: keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:e5:31:a8:85:eb:3b:73:63:c1:75:e5:b7:62:f4:af:77:62: 03:68:8f:e0:ad:3e:a3:62:aa:61:1e:55:db:99:8d:52:ac:20: 5a:b2:9e:45:a3:ca:84:4a:2f:17:7f:cb:da:76:3c:b2:cc:52: bb:ed:6d:1d:70:a8:e1:b9:2f:24:22:c6:95:82:54:0f:02:a9: 61:f6:6a:5f:39:bf:7f:b1:85:cf:26:c2:01:76:d2:a9:5f:45: a0:1b:8e:4f:23:57:20:44:bb:e8:86:25:d8:67:26:e3:79:bf: d9:01:75:d7:5f:4f:6c:3d:bf:70:94:87:3b:14:87:0f:0e:c2: 52:17:6c:ab:a5:e7:f7:ae:58:d5:28:a9:dd:51:c3:63:97:75: 9e:f9:db:f2:8e:05:aa:64:30:e7:96:3a:d7:04:6f:b8:4d:53: 0a:d3:66:b5:60:ac:10:33:25:67:2b:db:c1:83:72:e3:c6:a8: 3f:1c:61:af:6e:42:17:7b:cf:cd:4e:66:c4:39:4a:b9:ab:53: 1a:76:55:46:a3:e4:25:1d:ac:ce:11:aa:0f:30:4b:0e:b6:6f: 4c:93:ac:53:9c:68:b8:e2:d0:cb:f5:1e:ea:43:d0:60:0b:8b: 20:68:4a:e1:43:2a:ae:e9:0a:af:11:bd:8b:5f:e6:af:8d:df: fc:ad:19:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+d/Cni5co/lQO0eTWyxUMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ODI4OTBiN2VkMjMzNDc0NzhkNGQ2NWRiMDk0OGMzZGIy M2ViZTcwHhcNMjYwMTI3MDgwMDMxWhcNMjYwMTI4MDgwMDMxWjAzMTEwLwYDVQQD Eyg3MWU0NWM4MjAzYTgyNjc5ZWUyM2M0MzI4NzJlYmY1YTI2YzZiNzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz52ajJHbNBO//rdO0haDTStNTkA Bd1hCwkOVdlARRXlQAESkWAqiPd+MaEU1KRG1gjP9V2mqU+3OqHi5YP9UmgZufK6 pyjQn125Y40r1xCJuuL+ETyTOnmUrk2GA1H8UBL4IBEpnU596F58ioRD9elXtLO2 aGhxR7PrDE+auXWtXyB8XP58uDqCumaBs6Y8/ho9KRSDmGrjGhaI5x3cDpujLzFl MpR6CZn42uxTQKKDqwsaJGLN4YezCQ13DhCthJc3yU2ASMFE/8gWhNyW3PnQwFXQ sf3QO+uUuyz0lLVTWhlQ4SL21ONyUXOZzVQQQzq1OO3L0oY2sbyGCKi9VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHkXIIDqCZ57iPEMocuv1omxrcSMB8GA1UdIwQY MBaAFGaCiQt+0jNHR41NZdsJSMPbI+vnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm9LSkMzN1NNMGRIalUxbDJ3bEl3OXNqNi1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yYTk4MWQtNjdmNS00ODRlLWJlMWIt ZmY2NGE5YmE1OTdjLzEvWm9LSkMzN1NNMGRIalUxbDJ3bEl3OXNqNi1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yYTk4MWQtNjdmNS00ODRlLWJlMWItZmY2NGE5YmE1OTdj LzEvWm9LSkMzN1NNMGRIalUxbDJ3bEl3OXNqNi1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABeUxqIXr O3NjwXXlt2L0r3diA2iP4K0+o2KqYR5V25mNUqwgWrKeRaPKhEovF3/L2nY8ssxS u+1tHXCo4bkvJCLGlYJUDwKpYfZqXzm/f7GFzybCAXbSqV9FoBuOTyNXIES76IYl 2Gcm43m/2QF1119PbD2/cJSHOxSHDw7CUhdsq6Xn965Y1Sip3VHDY5d1nvnb8o4F qmQw55Y61wRvuE1TCtNmtWCsEDMlZyvbwYNy48aoPxxhr25CF3vPzU5mxDlKuatT GnZVRqPkJR2szhGqDzBLDrZvTJOsU5xouOLQy/Ue6kPQYAuLIGhK4UMqrukKrxG9 i1/mr43f/K0Z2A== -----END CERTIFICATE-----Generated at Tue Jan 27 13:23:26 2026 by rpki-client