This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft File: zsyfK4Jf2WfpeMQgknlZX88zLFo.mft (raw, json) Hash identifier: fcMZq0tUcA+cB+HQm21x6YOZ0nkIGU7pih1RY1qCCiI= Subject key identifier: BD:E2:8D:8E:C0:E4:DB:1C:08:F9:9A:C7:E7:49:1C:65:D7:C8:6B:04 Authority key identifier: CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A Certificate issuer: /CN=cecc9f2b825fd967e978c4209279595fcf332c5a Certificate serial: 019BFA2DF4D9C73288865CDA768C7DD98EDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft Manifest number: 177D Signing time: Mon 26 Jan 2026 12:01:14 +0000 Manifest this update: Mon 26 Jan 2026 12:01:14 +0000 Manifest next update: Tue 27 Jan 2026 12:01:14 +0000 Files and hashes: 1: WH9MtYAjhnZexRfLWNZUYcRJcYU.roa (hash: KLzTItCMkuqh0f0qD5QoElv/ivKn4xdXzfd7Tf8Ak2s=) 2: zsyfK4Jf2WfpeMQgknlZX88zLFo.crl (hash: 4ouo+Yx4inwZvv4Vm7V8zgWaYxs9xnQnIgBYh6wDJyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:f4:d9:c7:32:88:86:5c:da:76:8c:7d:d9:8e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cecc9f2b825fd967e978c4209279595fcf332c5a Validity Not Before: Jan 26 12:01:14 2026 GMT Not After : Jan 27 12:01:14 2026 GMT Subject: CN=bde28d8ec0e4db1c08f99ac7e7491c65d7c86b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1c:a2:4f:5f:df:29:4a:a5:9b:f5:40:1c:5b: f0:23:a1:b8:44:75:ba:8d:eb:62:0b:94:85:d7:2c: 35:bd:83:b3:61:86:30:ae:27:30:b5:ac:60:f2:ad: 69:60:b3:6c:20:34:42:c0:15:68:a7:63:ea:0f:a3: e3:43:99:3d:b9:36:65:a8:ca:3f:1e:a5:6a:4e:76: 32:f0:ca:5b:94:d6:9b:ee:dc:84:6c:54:10:50:bd: 3a:4e:ea:9f:62:f4:b4:75:88:d0:f4:d0:fd:72:c8: 82:f2:df:b8:25:17:70:29:41:2f:d2:26:f9:db:23: df:30:d3:e3:20:86:4a:a0:77:cd:e7:08:c8:20:5b: 5a:a9:1c:a0:ee:41:b2:78:b9:9e:06:c5:74:b1:c4: 37:17:f7:d4:a0:57:3f:9c:f0:60:39:c4:df:d6:54: 00:53:4f:0a:1b:c9:7a:00:73:e3:79:2e:3e:79:ff: 1d:73:b8:f5:48:4f:5d:39:91:9b:91:5c:82:ca:8d: bf:e9:76:c8:0b:8f:be:c1:f4:d8:aa:5f:ec:a4:73: 0e:97:bb:86:67:10:e5:7f:0e:8b:a3:cc:2f:79:5a: a4:85:e2:33:c8:b9:74:bb:a7:4e:4b:98:57:c8:1b: 1b:25:d4:78:da:38:36:80:cf:e9:27:9a:09:64:c1: 7b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E2:8D:8E:C0:E4:DB:1C:08:F9:9A:C7:E7:49:1C:65:D7:C8:6B:04 X509v3 Authority Key Identifier: keyid:CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:db:50:94:04:1b:cc:27:9d:e5:bd:cb:02:8a:8a:c9:3a:a1: 1f:c1:13:a9:5f:bc:45:3d:3a:7c:81:29:07:ff:2a:37:36:5e: cc:c5:b1:4f:28:ba:15:d8:72:e0:da:1c:c3:e7:d4:04:60:cf: a9:c9:cc:8c:f2:7e:99:1f:6c:da:9b:58:02:1c:23:56:e6:55: ca:a3:c7:71:11:cc:73:f5:b6:8e:aa:3a:eb:20:4c:9b:08:dc: ef:0c:4c:24:0a:a5:f9:9c:20:60:10:87:dd:ac:da:1b:0a:eb: 62:42:37:91:4c:ef:1e:1f:af:f1:d6:fb:a0:32:00:c2:d9:0a: d0:db:4e:ad:d2:2a:45:ef:e2:98:a3:a1:24:48:12:b6:86:8e: 41:5d:f2:5c:6a:22:a9:2f:90:41:48:79:6a:03:eb:b7:9f:97: 09:25:6c:e5:90:27:b9:b1:31:53:bb:8c:82:c2:d0:48:0e:15: ea:89:15:2d:17:1e:06:8b:f4:32:54:cb:a5:bc:da:f9:6c:b9: d2:9d:fc:11:40:79:e5:e7:c2:fc:9c:ef:f4:cd:bb:81:62:53: c4:e7:49:dc:ef:f9:c0:35:7b:d5:9d:72:7c:84:b2:ea:16:75: c1:aa:17:9f:e1:37:b8:65:1d:06:f8:7f:c1:d2:42:07:d0:a8: 5f:70:76:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LfTZxzKIhlzadox92Y7cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlY2M5ZjJiODI1ZmQ5NjdlOTc4YzQyMDkyNzk1OTVmY2Yz MzJjNWEwHhcNMjYwMTI2MTIwMTE0WhcNMjYwMTI3MTIwMTE0WjAzMTEwLwYDVQQD EyhiZGUyOGQ4ZWMwZTRkYjFjMDhmOTlhYzdlNzQ5MWM2NWQ3Yzg2YjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhyiT1/fKUqlm/VAHFvwI6G4RHW6 jetiC5SF1yw1vYOzYYYwricwtaxg8q1pYLNsIDRCwBVop2PqD6PjQ5k9uTZlqMo/ HqVqTnYy8MpblNab7tyEbFQQUL06TuqfYvS0dYjQ9ND9csiC8t+4JRdwKUEv0ib5 2yPfMNPjIIZKoHfN5wjIIFtaqRyg7kGyeLmeBsV0scQ3F/fUoFc/nPBgOcTf1lQA U08KG8l6AHPjeS4+ef8dc7j1SE9dOZGbkVyCyo2/6XbIC4++wfTYql/spHMOl7uG ZxDlfw6Lo8wveVqkheIzyLl0u6dOS5hXyBsbJdR42jg2gM/pJ5oJZMF79QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3ijY7A5NscCPmax+dJHGXXyGsEMB8GA1UdIwQY MBaAFM7MnyuCX9ln6XjEIJJ5WV/PMyxaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenN5Zks0SmYyV2ZwZU1RZ2tubFpYODh6TEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85NmQwZTItMTg0Zi00N2UzLTliZjYt NTVhMDNjYjgzYmY2LzEvenN5Zks0SmYyV2ZwZU1RZ2tubFpYODh6TEZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi85NmQwZTItMTg0Zi00N2UzLTliZjYtNTVhMDNjYjgzYmY2 LzEvenN5Zks0SmYyV2ZwZU1RZ2tubFpYODh6TEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9tQlAQb zCed5b3LAoqKyTqhH8ETqV+8RT06fIEpB/8qNzZezMWxTyi6Fdhy4Nocw+fUBGDP qcnMjPJ+mR9s2ptYAhwjVuZVyqPHcRHMc/W2jqo66yBMmwjc7wxMJAql+ZwgYBCH 3azaGwrrYkI3kUzvHh+v8db7oDIAwtkK0NtOrdIqRe/imKOhJEgStoaOQV3yXGoi qS+QQUh5agPrt5+XCSVs5ZAnubExU7uMgsLQSA4V6okVLRceBov0MlTLpbza+Wy5 0p38EUB55efC/Jzv9M27gWJTxOdJ3O/5wDV71Z1yfISy6hZ1waoXn+E3uGUdBvh/ wdJCB9CoX3B2Yw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:29 2026 by rpki-client