This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft File: ZUFaF2P-AFsBObAUxuV11fmypQQ.mft (raw, json) Hash identifier: PLRZiTUgqZaZ3xCwfs8aVs5GYF6Qy9DT9PlC6IWiawk= Subject key identifier: DC:7A:45:C4:FD:19:C3:87:EC:5C:2B:7C:E7:B8:67:15:D0:6E:7A:91 Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04 Certificate issuer: /CN=65415a1763fe005b0139b014c6e575d5f9b2a504 Certificate serial: 019BFCC131D35663560756669C2EBCE30CBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft Manifest number: 13E5 Signing time: Tue 27 Jan 2026 00:01:18 +0000 Manifest this update: Tue 27 Jan 2026 00:01:18 +0000 Manifest next update: Wed 28 Jan 2026 00:01:18 +0000 Files and hashes: 1: ZUFaF2P-AFsBObAUxuV11fmypQQ.crl (hash: s8KeeLsPlBoNoVzYXNLxQUngZ+tl/YoOIk7Vn1hcSXc=) 2: aHNCfZJ-9wQZxvNMw3DS1H21hCo.roa (hash: 2DGefUYW6AHzEy+ZIacwyGwUVxEFyzaT1n0vrc2KxWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:31:d3:56:63:56:07:56:66:9c:2e:bc:e3:0c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504 Validity Not Before: Jan 27 00:01:18 2026 GMT Not After : Jan 28 00:01:18 2026 GMT Subject: CN=dc7a45c4fd19c387ec5c2b7ce7b86715d06e7a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fd:a1:a0:85:a8:5b:8b:58:98:57:21:bb:98: e7:e2:6f:c2:ad:4f:8e:de:55:2d:9b:d6:81:e7:e3: f3:6c:22:b3:08:d9:75:4d:d5:5c:0d:39:f4:d9:60: c1:19:9e:96:3c:62:e2:c2:32:b5:c0:78:08:1e:c3: bb:b2:8c:c0:b7:95:42:c4:32:8a:56:c4:98:f5:62: 95:54:fe:04:25:0d:f4:31:1d:70:26:c3:ed:de:21: e4:78:fb:14:12:60:bb:3b:0a:01:a9:a2:c9:83:1d: a5:5f:b0:f6:11:07:37:8b:9c:01:3f:f3:d5:79:2e: f0:49:11:d3:59:3a:e4:f6:55:67:d6:cd:5a:02:88: 02:85:a6:3e:75:8b:66:74:cb:e3:96:c6:25:63:3b: 83:67:77:12:b1:22:ce:f0:bd:77:3a:ca:56:4d:64: 31:bf:0f:25:96:50:d3:9e:ac:85:2a:2c:16:3b:65: 3a:4e:fc:6d:a3:f0:84:89:db:3c:f4:0d:90:17:61: 27:79:09:b3:29:2d:f4:66:7c:d0:18:3e:32:79:04: 64:58:ce:5a:08:4d:ed:ef:f7:aa:92:16:89:d8:7f: c3:42:89:37:f8:e4:f7:83:8b:56:9e:94:98:4c:49: 0c:11:7d:c7:77:86:f2:e5:69:b9:92:ba:35:18:9f: b1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7A:45:C4:FD:19:C3:87:EC:5C:2B:7C:E7:B8:67:15:D0:6E:7A:91 X509v3 Authority Key Identifier: keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:4e:62:9f:94:fe:d4:9f:a9:41:52:37:7d:07:c7:25:57:56: a4:b3:f6:ac:f2:40:4e:ad:c7:22:85:3e:9e:0f:33:5d:10:c5: 18:46:d0:ef:86:f1:91:36:8b:d5:dc:a2:48:02:7b:be:38:de: 49:44:ff:1e:bc:57:ed:19:38:9b:56:11:25:29:dd:e6:36:51: 33:b5:d6:67:b9:0f:7a:2e:b8:59:df:a7:c9:6c:8e:07:74:3c: a0:6c:9b:4e:a1:49:ae:83:80:11:7d:7c:d7:74:12:17:4d:01: fa:9e:f1:b7:c2:81:ca:30:bf:b9:bb:fb:61:89:17:e0:08:f9: 33:b0:e9:02:f6:b2:c4:22:a8:5a:17:05:65:30:8d:2f:2f:49: d9:81:55:ed:48:46:61:07:62:7a:74:8b:9e:8e:fd:e3:ba:4d: a1:97:1e:c9:8b:bc:d0:92:05:95:f6:b1:73:26:8a:59:30:74: 48:18:8e:2e:bf:8c:3c:88:e4:7c:dd:4e:71:55:f7:8f:2c:f6: 5d:0e:84:8c:e2:2a:b9:e1:f2:3a:30:9c:93:7e:05:cc:34:dc: 12:84:ff:e0:83:46:fa:4e:40:03:08:16:63:34:3e:8f:a7:7c: 46:c2:f1:e7:5e:f1:70:8a:3c:76:8a:f7:a8:ab:c5:41:76:50: 37:5d:e1:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wTHTVmNWB1ZmnC684wy8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NDE1YTE3NjNmZTAwNWIwMTM5YjAxNGM2ZTU3NWQ1Zjli MmE1MDQwHhcNMjYwMTI3MDAwMTE4WhcNMjYwMTI4MDAwMTE4WjAzMTEwLwYDVQQD EyhkYzdhNDVjNGZkMTljMzg3ZWM1YzJiN2NlN2I4NjcxNWQwNmU3YTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP2hoIWoW4tYmFchu5jn4m/CrU+O 3lUtm9aB5+PzbCKzCNl1TdVcDTn02WDBGZ6WPGLiwjK1wHgIHsO7sozAt5VCxDKK VsSY9WKVVP4EJQ30MR1wJsPt3iHkePsUEmC7OwoBqaLJgx2lX7D2EQc3i5wBP/PV eS7wSRHTWTrk9lVn1s1aAogChaY+dYtmdMvjlsYlYzuDZ3cSsSLO8L13OspWTWQx vw8lllDTnqyFKiwWO2U6Tvxto/CEids89A2QF2EneQmzKS30ZnzQGD4yeQRkWM5a CE3t7/eqkhaJ2H/DQok3+OT3g4tWnpSYTEkMEX3Hd4by5Wm5kro1GJ+xXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNx6RcT9GcOH7FwrfOe4ZxXQbnqRMB8GA1UdIwQY MBaAFGVBWhdj/gBbATmwFMblddX5sqUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zYWVjNzEtY2ExNy00ZWM1LTg3YTct ZWU3YTIwNTY5YjgzLzEvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8zYWVjNzEtY2ExNy00ZWM1LTg3YTctZWU3YTIwNTY5Yjgz LzEvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF05in5T+ 1J+pQVI3fQfHJVdWpLP2rPJATq3HIoU+ng8zXRDFGEbQ74bxkTaL1dyiSAJ7vjje SUT/HrxX7Rk4m1YRJSnd5jZRM7XWZ7kPei64Wd+nyWyOB3Q8oGybTqFJroOAEX18 13QSF00B+p7xt8KByjC/ubv7YYkX4Aj5M7DpAvayxCKoWhcFZTCNLy9J2YFV7UhG YQdienSLno7947pNoZceyYu80JIFlfaxcyaKWTB0SBiOLr+MPIjkfN1OcVX3jyz2 XQ6EjOIqueHyOjCck34FzDTcEoT/4ING+k5AAwgWYzQ+j6d8RsLx517xcIo8dor3 qKvFQXZQN13hmg== -----END CERTIFICATE-----Generated at Tue Jan 27 05:37:32 2026 by rpki-client