This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft File: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json) Hash identifier: w2/ZGbAwRiBXaNlfi3DRSTtHcsERHLBqwhdnhhp9LoE= Subject key identifier: 37:AE:7D:81:34:0A:96:E5:63:FC:0C:08:1B:83:58:9D:87:BC:05:6C Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39 Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39 Certificate serial: 019BFA9C4583BC25775C75FDCCB77E1055D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft Manifest number: 0739 Signing time: Mon 26 Jan 2026 14:01:43 +0000 Manifest this update: Mon 26 Jan 2026 14:01:43 +0000 Manifest next update: Tue 27 Jan 2026 14:01:43 +0000 Files and hashes: 1: 5Vvt0AbvSxWyjAd-ALv69QCsNsk.roa (hash: 5/TeIgyVfAlprXjl0P+4FxuBA+lZL0C59tR8RwJwnQM=) 2: Cr-_Jks4-Nf_6cTAfqEm2bEkrqY.roa (hash: Lfoyt36d2xlYMQKhlmP8HR47UA8DZd6j01qEp/DuwGg=) 3: GElj9icCt-w2mx3YliBHFVCYPPg.roa (hash: PirS1DKcgnSFMhly0KbVf5RAZaqtFd0hZcWS32fEx7s=) 4: RGRGMmzLxpqCQOW-phn3KT39D9s.roa (hash: ZUPL8DNkteQ3PG2vzMcT8okE7rH1FO2YVjvr69odfCY=) 5: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: mlBfkuSth88uL73xd9kRdijIjW6yZpXfGRX2hKCo7mg=) 6: _LFVw1RdLCWt-By3DgXS7TEwY-g.asa (hash: 7sp68pc4lJoudoB6GmnBQDPxVv/dJsT1KjSRKMkEvH8=) 7: gTAiJcqXUVhZkR4ZXv2cVDvzjVw.roa (hash: H8wggrXDtCuk8Xa7cBwaDqzCfoO3HXFepBg70R4642M=) 8: m1QjC3UV2Ny4UxXqYlT4s7dYaFg.roa (hash: 6V+rFBPB+VWm7if/CwhSgG0t42lVGrHbuCda8HK7Mzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9c:45:83:bc:25:77:5c:75:fd:cc:b7:7e:10:55:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65a665b90069bd71850602e7400c529793269e39 Validity Not Before: Jan 26 14:01:43 2026 GMT Not After : Jan 27 14:01:43 2026 GMT Subject: CN=37ae7d81340a96e563fc0c081b83589d87bc056c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:72:5c:c4:ed:13:c5:0b:89:50:e2:74:a9:20: d3:8d:ab:4d:db:44:5b:01:5f:a9:7c:2c:1d:6e:a8: ff:4c:2a:8e:b2:5e:7b:ab:3d:60:64:65:98:5d:6c: 99:ab:c9:36:d0:b4:9c:fd:78:ee:a3:8d:6c:be:34: bf:e0:10:fd:26:9a:b3:a7:03:51:f4:00:55:ee:f5: 05:ec:71:3b:93:a3:21:f7:b7:d3:53:bc:e3:62:be: 11:35:0e:0f:91:0f:e2:f6:be:79:06:f2:c4:45:16: c8:49:93:97:7a:c5:b5:d5:aa:0f:37:51:06:83:a5: 32:db:7f:ae:72:d0:ec:9e:ea:1f:a5:95:e6:52:74: 68:dc:bd:ba:16:f7:49:f1:8e:83:5d:5f:9f:ec:f1: da:92:f1:8e:53:06:d3:bd:fa:b3:e5:6c:6e:a1:fa: 74:df:17:0b:d6:92:7b:62:06:39:92:62:a0:2f:49: 0f:f9:4d:85:1b:b1:69:dc:a0:30:f5:5c:44:bf:1d: e5:43:3b:69:f2:3a:54:bd:3d:03:41:6b:5b:7f:88: 5d:d5:c2:7b:8b:bf:40:16:62:a1:25:f5:e9:64:2a: 5c:64:72:84:9d:36:12:8e:bc:79:78:b4:ba:bf:b7: df:9f:77:70:66:21:63:3e:76:09:98:a2:d1:63:7a: a3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AE:7D:81:34:0A:96:E5:63:FC:0C:08:1B:83:58:9D:87:BC:05:6C X509v3 Authority Key Identifier: keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e5:bf:3c:f2:41:aa:92:39:3b:67:d0:fc:51:89:88:bf:c4: 36:2a:f2:9b:26:fa:af:9c:78:72:9e:d8:08:aa:54:18:6c:d4: 38:3e:8d:d0:03:91:9e:12:42:67:c0:3e:a0:0c:14:46:d5:70: a7:7c:6d:8d:e5:45:41:e8:ed:33:5f:a1:e5:5e:e8:fa:2c:ec: 6f:42:cf:ac:90:cd:f3:0d:cc:d9:55:a6:3d:f1:ac:f8:8b:80: 7f:97:3c:d2:d5:c5:ba:b3:50:4e:a4:a7:7d:73:5c:b6:74:ac: 4d:0c:b3:af:ce:11:6e:b2:72:7d:62:90:f6:e2:7f:c5:06:2e: c9:60:ab:5b:8b:dc:18:9f:3c:84:37:e8:f2:57:5e:68:d0:15: 46:71:d2:88:06:e4:99:1a:42:9c:23:bc:c5:45:bc:91:d7:a4: e9:72:b7:bc:5d:5a:87:e6:d3:c5:ad:47:fe:a6:57:48:d6:44: b2:cb:21:07:92:c3:ba:aa:00:5a:74:b4:40:82:36:83:ef:7c: 25:5f:cd:c5:45:4c:5a:f8:20:8e:b5:58:0b:e4:75:23:41:ac: 1a:48:0b:98:d6:7d:4f:0b:27:7b:a2:2e:70:c9:ea:b5:31:02: 9f:ae:0b:ba:5b:0f:ef:7b:0e:47:8d:1e:55:88:8c:55:18:7b: 77:2f:6b:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6nEWDvCV3XHX9zLd+EFXSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YTY2NWI5MDA2OWJkNzE4NTA2MDJlNzQwMGM1Mjk3OTMy NjllMzkwHhcNMjYwMTI2MTQwMTQzWhcNMjYwMTI3MTQwMTQzWjAzMTEwLwYDVQQD EygzN2FlN2Q4MTM0MGE5NmU1NjNmYzBjMDgxYjgzNTg5ZDg3YmMwNTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3JcxO0TxQuJUOJ0qSDTjatN20Rb AV+pfCwdbqj/TCqOsl57qz1gZGWYXWyZq8k20LSc/Xjuo41svjS/4BD9JpqzpwNR 9ABV7vUF7HE7k6Mh97fTU7zjYr4RNQ4PkQ/i9r55BvLERRbISZOXesW11aoPN1EG g6Uy23+uctDsnuofpZXmUnRo3L26FvdJ8Y6DXV+f7PHakvGOUwbTvfqz5Wxuofp0 3xcL1pJ7YgY5kmKgL0kP+U2FG7Fp3KAw9VxEvx3lQztp8jpUvT0DQWtbf4hd1cJ7 i79AFmKhJfXpZCpcZHKEnTYSjrx5eLS6v7ffn3dwZiFjPnYJmKLRY3qj9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDeufYE0CpblY/wMCBuDWJ2HvAVsMB8GA1UdIwQY MBaAFGWmZbkAab1xhQYC50AMUpeTJp45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lNmQ4ODAtMzkwMy00YTExLWJhMjct Yzk0NTdlYzgxMTUxLzEvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lNmQ4ODAtMzkwMy00YTExLWJhMjctYzk0NTdlYzgxMTUx LzEvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALeW/PPJB qpI5O2fQ/FGJiL/ENirymyb6r5x4cp7YCKpUGGzUOD6N0AORnhJCZ8A+oAwURtVw p3xtjeVFQejtM1+h5V7o+izsb0LPrJDN8w3M2VWmPfGs+IuAf5c80tXFurNQTqSn fXNctnSsTQyzr84RbrJyfWKQ9uJ/xQYuyWCrW4vcGJ88hDfo8ldeaNAVRnHSiAbk mRpCnCO8xUW8kdek6XK3vF1ah+bTxa1H/qZXSNZEssshB5LDuqoAWnS0QII2g+98 JV/NxUVMWvggjrVYC+R1I0GsGkgLmNZ9Twsne6IucMnqtTECn64LulsP73sOR40e VYiMVRh7dy9rsg== -----END CERTIFICATE-----Generated at Tue Jan 27 00:36:47 2026 by rpki-client