This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft File: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json) Hash identifier: r6DHo9iLZvWdFvd1Dn/tXV3SyOUlhhXGNc8QuvcACdI= Subject key identifier: E2:B4:73:68:42:1F:4E:F5:56:AC:A7:56:4E:C2:7E:D2:60:95:81:C2 Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39 Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39 Certificate serial: 019BFC8A5F7E4AB15CDCD6EDFA4A237062D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft Manifest number: 073A Signing time: Mon 26 Jan 2026 23:01:25 +0000 Manifest this update: Mon 26 Jan 2026 23:01:25 +0000 Manifest next update: Tue 27 Jan 2026 23:01:25 +0000 Files and hashes: 1: 5Vvt0AbvSxWyjAd-ALv69QCsNsk.roa (hash: 5/TeIgyVfAlprXjl0P+4FxuBA+lZL0C59tR8RwJwnQM=) 2: Cr-_Jks4-Nf_6cTAfqEm2bEkrqY.roa (hash: Lfoyt36d2xlYMQKhlmP8HR47UA8DZd6j01qEp/DuwGg=) 3: GElj9icCt-w2mx3YliBHFVCYPPg.roa (hash: PirS1DKcgnSFMhly0KbVf5RAZaqtFd0hZcWS32fEx7s=) 4: RGRGMmzLxpqCQOW-phn3KT39D9s.roa (hash: ZUPL8DNkteQ3PG2vzMcT8okE7rH1FO2YVjvr69odfCY=) 5: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: BPaAM81EnjlKznCGxUgE7Dp9B4U7rYtT7LAHJObX98c=) 6: _LFVw1RdLCWt-By3DgXS7TEwY-g.asa (hash: 7sp68pc4lJoudoB6GmnBQDPxVv/dJsT1KjSRKMkEvH8=) 7: gTAiJcqXUVhZkR4ZXv2cVDvzjVw.roa (hash: H8wggrXDtCuk8Xa7cBwaDqzCfoO3HXFepBg70R4642M=) 8: m1QjC3UV2Ny4UxXqYlT4s7dYaFg.roa (hash: 6V+rFBPB+VWm7if/CwhSgG0t42lVGrHbuCda8HK7Mzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:5f:7e:4a:b1:5c:dc:d6:ed:fa:4a:23:70:62:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65a665b90069bd71850602e7400c529793269e39 Validity Not Before: Jan 26 23:01:25 2026 GMT Not After : Jan 27 23:01:25 2026 GMT Subject: CN=e2b47368421f4ef556aca7564ec27ed2609581c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d3:58:d3:c4:c0:93:13:d6:5f:24:b1:f9:f6: 67:0e:bb:1f:4a:ff:aa:e9:2e:06:fd:44:0b:b8:cf: 73:b7:30:24:fd:5c:c1:db:00:a7:9c:70:82:f2:d4: a5:7e:f6:41:aa:37:67:68:ed:68:fb:79:47:2f:0d: e2:4f:e2:5b:a3:ad:33:97:f2:e7:2b:ec:08:e7:a9: ec:e8:54:ef:3a:63:86:86:54:96:d5:ad:3f:3e:2d: b1:96:11:19:6e:09:f7:f6:4c:92:2e:f1:f0:09:38: 26:44:22:28:d0:ff:97:17:6b:cb:3b:b3:b7:73:4c: d3:16:8d:04:76:1d:0c:f9:bb:9c:ca:27:15:7e:2d: 67:05:b3:75:53:ff:e5:d7:42:1e:23:d4:13:8b:43: 4c:d4:fe:e6:77:5c:33:31:f7:1c:86:81:38:67:82: 52:65:06:0b:af:3d:34:6a:53:a9:4e:c2:0d:ab:3c: 8a:8a:1a:84:b3:06:a8:93:21:a1:1f:55:69:da:39: ef:99:61:57:19:36:91:a3:7c:55:cd:35:0e:84:06: 56:ad:74:da:97:7e:dd:dd:dd:bf:88:5a:39:70:9a: a4:8a:6c:e5:7d:7e:04:a2:e3:d2:c0:44:1f:44:e0: ff:52:d5:a9:68:35:89:80:52:a5:87:0a:2f:a5:d7: 8b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B4:73:68:42:1F:4E:F5:56:AC:A7:56:4E:C2:7E:D2:60:95:81:C2 X509v3 Authority Key Identifier: keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:62:93:36:d4:45:88:58:d9:3d:1d:1d:99:e6:93:70:25:d6: 5a:7b:2a:6d:85:93:58:2e:a0:66:3a:57:51:83:e7:ed:b8:7b: 7c:b5:13:94:f9:26:7c:b1:03:36:5e:3a:d7:ad:25:bd:d7:e8: d7:97:9c:28:b8:7e:9d:c4:f9:60:07:ec:a4:97:a5:a0:9d:92: ce:37:12:2c:66:b3:78:5e:dd:11:bc:33:65:1c:da:d9:1e:08: 69:34:24:9d:7c:e0:58:8e:5c:16:8c:d8:b6:f7:1c:de:53:79: fe:9f:db:79:3f:af:d2:3c:fb:53:c6:39:82:11:f4:0f:2c:8d: 2a:e7:56:42:ec:b5:b5:db:0d:07:b6:5f:43:9d:6f:05:5a:68: 1d:b1:85:e8:ae:6c:24:23:63:f7:46:c8:24:fd:43:42:6d:bd: 68:86:0c:68:35:e0:40:08:15:b0:33:22:be:ba:49:d1:d9:9c: d9:3c:87:59:86:90:5c:b1:a0:df:03:01:29:66:11:f3:87:d7: 7b:b7:47:31:24:42:25:9e:1f:03:a8:9b:f4:0f:1d:69:9b:ec: 07:12:03:80:03:04:c4:ea:6d:07:37:00:07:fe:16:79:04:f9: 8a:59:b7:d6:f8:ce:6b:d6:bf:59:c9:e0:0c:fa:0b:60:98:3c: 8b:7e:47:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8il9+SrFc3Nbt+kojcGLRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YTY2NWI5MDA2OWJkNzE4NTA2MDJlNzQwMGM1Mjk3OTMy NjllMzkwHhcNMjYwMTI2MjMwMTI1WhcNMjYwMTI3MjMwMTI1WjAzMTEwLwYDVQQD EyhlMmI0NzM2ODQyMWY0ZWY1NTZhY2E3NTY0ZWMyN2VkMjYwOTU4MWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptNY08TAkxPWXySx+fZnDrsfSv+q 6S4G/UQLuM9ztzAk/VzB2wCnnHCC8tSlfvZBqjdnaO1o+3lHLw3iT+Jbo60zl/Ln K+wI56ns6FTvOmOGhlSW1a0/Pi2xlhEZbgn39kySLvHwCTgmRCIo0P+XF2vLO7O3 c0zTFo0Edh0M+bucyicVfi1nBbN1U//l10IeI9QTi0NM1P7md1wzMfcchoE4Z4JS ZQYLrz00alOpTsINqzyKihqEswaokyGhH1Vp2jnvmWFXGTaRo3xVzTUOhAZWrXTa l37d3d2/iFo5cJqkimzlfX4EouPSwEQfROD/UtWpaDWJgFKlhwovpdeL2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOK0c2hCH071VqynVk7CftJglYHCMB8GA1UdIwQY MBaAFGWmZbkAab1xhQYC50AMUpeTJp45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lNmQ4ODAtMzkwMy00YTExLWJhMjct Yzk0NTdlYzgxMTUxLzEvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lNmQ4ODAtMzkwMy00YTExLWJhMjctYzk0NTdlYzgxMTUx LzEvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWKTNtRF iFjZPR0dmeaTcCXWWnsqbYWTWC6gZjpXUYPn7bh7fLUTlPkmfLEDNl46160lvdfo 15ecKLh+ncT5YAfspJeloJ2SzjcSLGazeF7dEbwzZRza2R4IaTQknXzgWI5cFozY tvcc3lN5/p/beT+v0jz7U8Y5ghH0DyyNKudWQuy1tdsNB7ZfQ51vBVpoHbGF6K5s JCNj90bIJP1DQm29aIYMaDXgQAgVsDMivrpJ0dmc2TyHWYaQXLGg3wMBKWYR84fX e7dHMSRCJZ4fA6ib9A8daZvsBxIDgAMExOptBzcAB/4WeQT5ilm31vjOa9a/Wcng DPoLYJg8i35H8w== -----END CERTIFICATE-----Generated at Tue Jan 27 02:23:13 2026 by rpki-client