This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json) Hash identifier: 9xEjfgDlPh7hV0VXd8iKEc39uIY0blDGwxXvmNr8bqs= Subject key identifier: BF:3F:3C:21:23:1E:B8:4F:85:3E:3F:08:90:67:FC:FF:53:E6:2D:B0 Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b Certificate serial: 019C1BDE62DD9B80E87E0EF6D4FF37104E9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft Manifest number: 180A Signing time: Mon 02 Feb 2026 01:01:24 +0000 Manifest this update: Mon 02 Feb 2026 01:01:24 +0000 Manifest next update: Tue 03 Feb 2026 01:01:24 +0000 Files and hashes: 1: 3NZi3BsWrkxxy4r6KC3-CpZTFCM.asa (hash: VHEBpu1qKct1uQd8w6vYfllQkyWLLkyZVPvuHKR37Tc=) 2: DKRX12LW62Pwhd7lkkBTAIcEFmg.roa (hash: JQDtg/PbgFXKpQJ1cWIs8ZbTBrSDwWrj/eo/b+RXeDU=) 3: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: ETl/kRSahENK89N8UjZspbrUDKo8kLGDHnhy+hT3f7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:de:62:dd:9b:80:e8:7e:0e:f6:d4:ff:37:10:4e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b Validity Not Before: Feb 2 01:01:24 2026 GMT Not After : Feb 3 01:01:24 2026 GMT Subject: CN=bf3f3c21231eb84f853e3f089067fcff53e62db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:59:6f:47:5e:91:8b:13:86:a9:2c:97:07:9a: 33:3b:89:dc:52:40:d7:e5:1d:d9:1c:ae:30:f6:5a: f6:e3:ae:e3:99:90:f6:02:ad:db:28:80:ba:fa:0b: 6e:47:06:43:a4:b8:34:ca:e7:04:3f:98:b8:8c:92: b7:81:b9:64:be:db:46:f0:92:83:07:0a:c8:84:bf: c2:a6:41:ef:35:bd:a9:6c:04:bf:57:1f:f7:3b:0b: 1e:b5:4f:6a:76:0e:37:0f:db:fe:17:cf:55:6d:98: d8:20:cc:a8:08:57:c0:42:c4:36:72:23:1a:9d:6d: 67:a1:be:6d:20:5e:99:bb:93:ef:89:1d:1b:fe:e2: 74:cc:59:1c:90:9d:76:7b:03:8c:95:f3:40:c3:ec: 05:9f:52:76:05:f7:5b:85:00:3d:a8:a1:41:d0:25: fc:f2:3f:26:ca:ff:10:44:2b:76:b1:17:ea:9e:34: 6e:83:b1:72:76:c4:15:ef:a7:52:65:d6:47:a1:8b: 92:fd:1c:e5:74:ff:30:30:40:35:4e:30:14:cd:48: 21:4b:a9:42:45:20:7e:e1:6d:53:03:73:dc:c4:45: 1b:70:2c:d3:1d:18:c8:ab:44:db:6c:52:16:ff:4c: 91:10:df:4a:8a:5c:e5:e3:37:b3:ca:46:21:c3:4d: 27:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3F:3C:21:23:1E:B8:4F:85:3E:3F:08:90:67:FC:FF:53:E6:2D:B0 X509v3 Authority Key Identifier: keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:84:dc:af:c6:18:f8:a1:de:c2:7d:d8:a6:09:ba:e2:1d:8d: 25:49:15:b8:f5:34:9e:c2:8d:ce:75:46:02:42:93:5c:5f:91: 2f:a1:d6:4f:0d:fa:37:2b:a5:cd:3d:9f:16:ed:7c:7b:14:7a: af:9a:4a:02:2e:6e:15:bc:30:b1:4e:84:7b:a1:f8:88:3e:64: a1:c9:42:af:e2:60:af:9a:d8:53:ea:d0:59:d4:08:8f:40:5d: 15:05:5c:3a:ce:1f:59:02:58:89:63:92:7c:29:23:c8:a8:25: 23:8f:51:75:c4:9b:c3:f6:4b:8e:58:a7:65:3a:93:06:57:e8: c8:ed:9e:cd:b6:af:96:bc:f7:86:51:59:69:a8:81:9f:c7:68: 0f:aa:d0:65:87:0a:c6:f7:3a:62:db:b9:1d:9b:b6:a4:1d:e6: 6b:91:80:25:82:1f:ee:ea:67:d9:9e:f2:7a:61:b9:d2:b8:c2: a1:35:2a:61:a3:87:36:d1:e7:99:fe:64:ab:a0:67:24:68:9d: 2f:42:27:fd:46:59:2f:20:e1:57:48:bc:b6:96:7c:5a:d7:e9: 9c:90:da:7b:83:db:78:85:52:29:b7:c1:05:d0:42:11:07:49: 50:e7:13:ae:ba:40:93:1d:3d:d4:ca:32:ba:22:e8:fa:db:e3: 90:e3:33:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwb3mLdm4Dofg721P83EE6bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YTQyNGNlZTJmZGIwMDcyYjU0MTQzOGQ5MTNkMjY2MzZh OWI4OGIwHhcNMjYwMjAyMDEwMTI0WhcNMjYwMjAzMDEwMTI0WjAzMTEwLwYDVQQD EyhiZjNmM2MyMTIzMWViODRmODUzZTNmMDg5MDY3ZmNmZjUzZTYyZGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsllvR16RixOGqSyXB5ozO4ncUkDX 5R3ZHK4w9lr2467jmZD2Aq3bKIC6+gtuRwZDpLg0yucEP5i4jJK3gblkvttG8JKD BwrIhL/CpkHvNb2pbAS/Vx/3OwsetU9qdg43D9v+F89VbZjYIMyoCFfAQsQ2ciMa nW1nob5tIF6Zu5PviR0b/uJ0zFkckJ12ewOMlfNAw+wFn1J2BfdbhQA9qKFB0CX8 8j8myv8QRCt2sRfqnjRug7FydsQV76dSZdZHoYuS/RzldP8wMEA1TjAUzUghS6lC RSB+4W1TA3PcxEUbcCzTHRjIq0TbbFIW/0yREN9Kilzl4zezykYhw00nXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8/PCEjHrhPhT4/CJBn/P9T5i2wMB8GA1UdIwQY MBaAFGWkJM7i/bAHK1QUONkT0mY2qbiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWIt MmI4MDM4MjgzMDE3LzEvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWItMmI4MDM4MjgzMDE3 LzEvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoTcr8YY +KHewn3Ypgm64h2NJUkVuPU0nsKNznVGAkKTXF+RL6HWTw36NyulzT2fFu18exR6 r5pKAi5uFbwwsU6Ee6H4iD5koclCr+Jgr5rYU+rQWdQIj0BdFQVcOs4fWQJYiWOS fCkjyKglI49RdcSbw/ZLjlinZTqTBlfoyO2ezbavlrz3hlFZaaiBn8doD6rQZYcK xvc6Ytu5HZu2pB3ma5GAJYIf7upn2Z7yemG50rjCoTUqYaOHNtHnmf5kq6BnJGid L0In/UZZLyDhV0i8tpZ8WtfpnJDae4PbeIVSKbfBBdBCEQdJUOcTrrpAkx091Moy uiLo+tvjkOMzjg== -----END CERTIFICATE-----Generated at Mon Feb 2 08:14:00 2026 by rpki-client