This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft File: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft (raw, json) Hash identifier: nosW8vLuV7ZyvB5ean66DLi0DB1Qgr8o0OvSVMrgX6A= Subject key identifier: D4:FF:96:D8:EA:28:F0:B0:74:B8:D5:B2:8B:EA:48:32:F0:D6:33:DC Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4 Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4 Certificate serial: 019BFEAFCD3DAEBD5F170C1284E30B07E00F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft Manifest number: 17EE Signing time: Tue 27 Jan 2026 09:01:32 +0000 Manifest this update: Tue 27 Jan 2026 09:01:32 +0000 Manifest next update: Wed 28 Jan 2026 09:01:32 +0000 Files and hashes: 1: 0Nhd8HDX6sg6Ga0qO0frLY4tJgo.roa (hash: SiLri2/+BqWzCqbvv2/gkd1DlEwX13aVYQvZZuSlTWA=) 2: ujsDjvc8O_UMPKpybYL3m05dxkQ.roa (hash: l2pAahFC+BLRkn5FZkCd0AQgZA8lDYBz+/BDHXLPl0o=) 3: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl (hash: fVyJ09u7VfHuCEKptIAWxqp4z7fX3b+a+cvKMCWifKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:af:cd:3d:ae:bd:5f:17:0c:12:84:e3:0b:07:e0:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4 Validity Not Before: Jan 27 09:01:32 2026 GMT Not After : Jan 28 09:01:32 2026 GMT Subject: CN=d4ff96d8ea28f0b074b8d5b28bea4832f0d633dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:82:a9:16:ac:cc:d0:a7:92:79:59:37:6e:83: cd:07:0c:55:37:58:94:c4:89:f1:b2:19:ba:84:9a: cc:b2:0d:99:81:ea:68:75:3a:1d:17:1e:80:3b:93: ba:3c:ce:5d:8c:55:bc:04:52:e9:c4:83:4a:32:80: df:a1:4c:cc:8a:07:72:cb:e3:58:4e:1f:dd:ba:1e: ea:d1:05:60:3c:bd:d9:c2:09:23:68:7b:d5:30:d3: 60:b7:f0:32:98:2f:a9:04:39:af:7d:4d:47:b5:c1: f0:21:7c:e9:4f:ba:23:3c:59:61:96:96:73:16:dd: 92:e7:02:4f:e3:25:fa:bc:74:b7:98:f6:ab:fa:8c: 18:42:ab:56:bf:a3:ac:16:88:da:25:ca:fb:56:71: 29:41:21:d0:f9:bb:94:7a:3c:27:cb:38:16:55:7b: 73:d3:85:14:cc:f2:9f:3b:2e:89:fb:25:c1:11:68: 25:29:71:e8:54:4a:52:e4:fa:02:36:ae:d0:5b:bd: 4e:f7:3d:4b:12:7b:95:78:ad:a4:67:c0:83:1e:e4: 78:c7:49:8d:73:39:c5:a7:46:65:71:3c:40:27:57: d6:d0:d6:ce:73:89:ce:da:a4:2c:d4:c0:b3:62:18: 85:67:e0:f4:39:10:82:de:00:21:d9:e7:29:00:10: 7a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FF:96:D8:EA:28:F0:B0:74:B8:D5:B2:8B:EA:48:32:F0:D6:33:DC X509v3 Authority Key Identifier: keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:1c:02:e1:a1:38:69:e9:87:c2:47:c7:50:d4:c5:67:6c:ff: 90:6c:56:ff:b2:15:15:16:39:50:b3:13:da:42:c1:0e:29:75: a2:3e:78:76:7b:02:04:77:d7:87:0b:ef:0d:00:e2:d7:8b:92: a6:98:52:0a:92:be:8c:f0:96:a5:73:13:14:ec:8d:dc:a7:86: 36:c5:45:05:c4:36:aa:ce:93:29:e0:08:fd:4d:a2:1d:5c:89: 3a:8d:3f:9e:39:ca:96:bf:3f:40:d0:85:16:c4:8f:11:17:15: 87:a5:fb:8d:81:09:39:d1:b1:2b:ad:48:3e:09:07:45:c2:bd: de:aa:ba:f9:08:f0:66:93:b7:95:37:d4:1b:65:03:b9:a5:4d: 94:28:d3:23:d1:37:08:bc:02:83:d6:ec:d4:ef:69:70:03:e1: 3d:e8:b0:c9:9d:80:5d:8b:09:a6:9f:b5:f6:f0:f7:c5:09:16: 22:89:1c:81:f9:0c:2a:fa:dd:a0:ca:fb:34:2e:01:b6:4c:6b: 8e:5e:cd:e1:18:1f:db:3d:cc:5c:a6:fe:81:83:23:96:43:b6: 55:74:94:d0:37:35:1b:37:f1:d2:75:1d:89:70:a1:a8:62:dc: ef:4b:d0:a6:17:69:7b:80:2a:eb:85:06:9e:60:97:d9:6d:20: be:15:e0:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+r809rr1fFwwShOMLB+APMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkN2Y4Nzg5NDkwMTA3MDk3YjIwY2ZhNmUzZDQ1OWYxMzYy NzRiYTQwHhcNMjYwMTI3MDkwMTMyWhcNMjYwMTI4MDkwMTMyWjAzMTEwLwYDVQQD EyhkNGZmOTZkOGVhMjhmMGIwNzRiOGQ1YjI4YmVhNDgzMmYwZDYzM2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oKpFqzM0KeSeVk3boPNBwxVN1iU xInxshm6hJrMsg2ZgepodTodFx6AO5O6PM5djFW8BFLpxINKMoDfoUzMigdyy+NY Th/duh7q0QVgPL3ZwgkjaHvVMNNgt/AymC+pBDmvfU1HtcHwIXzpT7ojPFlhlpZz Ft2S5wJP4yX6vHS3mPar+owYQqtWv6OsFojaJcr7VnEpQSHQ+buUejwnyzgWVXtz 04UUzPKfOy6J+yXBEWglKXHoVEpS5PoCNq7QW71O9z1LEnuVeK2kZ8CDHuR4x0mN cznFp0ZlcTxAJ1fW0NbOc4nO2qQs1MCzYhiFZ+D0ORCC3gAh2ecpABB6HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNT/ltjqKPCwdLjVsovqSDLw1jPcMB8GA1UdIwQY MBaAFM1/h4lJAQcJeyDPpuPUWfE2J0ukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMt NDk4MGZjYThkMjc3LzEvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMtNDk4MGZjYThkMjc3 LzEvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhwC4aE4 aemHwkfHUNTFZ2z/kGxW/7IVFRY5ULMT2kLBDil1oj54dnsCBHfXhwvvDQDi14uS pphSCpK+jPCWpXMTFOyN3KeGNsVFBcQ2qs6TKeAI/U2iHVyJOo0/njnKlr8/QNCF FsSPERcVh6X7jYEJOdGxK61IPgkHRcK93qq6+QjwZpO3lTfUG2UDuaVNlCjTI9E3 CLwCg9bs1O9pcAPhPeiwyZ2AXYsJpp+19vD3xQkWIokcgfkMKvrdoMr7NC4Btkxr jl7N4Rgf2z3MXKb+gYMjlkO2VXSU0Dc1Gzfx0nUdiXChqGLc70vQphdpe4Aq64UG nmCX2W0gvhXgBQ== -----END CERTIFICATE-----Generated at Tue Jan 27 16:21:10 2026 by rpki-client