This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft File: ZRHOXi9Tt7uMrI854pTomkWyACk.mft (raw, json) Hash identifier: m7mQUpxs8abyQB/TCzb1knWSZvAvIjoegcj1Jeiw2RQ= Subject key identifier: 56:D7:6E:9B:6B:A7:87:86:2C:44:24:B6:24:06:5B:89:CB:A1:65:E9 Authority key identifier: 65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29 Certificate issuer: /CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029 Certificate serial: 019BFDD3A8BD7353749A921847B54B3D3828 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft Manifest number: 17ED Signing time: Tue 27 Jan 2026 05:01:05 +0000 Manifest this update: Tue 27 Jan 2026 05:01:05 +0000 Manifest next update: Wed 28 Jan 2026 05:01:05 +0000 Files and hashes: 1: 7a3jx1e7OA1EvpScFrXmNMe5y_M.roa (hash: tYNpUtLbZOwbXL/8gGlkXA0JhxkITkZz7z+FpesOG/s=) 2: LO7eXF6OcCBWRqiHSI58WfsNfTc.roa (hash: kS9qCezSVg1pWa1B2LuRlgPBMoX60MqXPWVZsOzHZq8=) 3: ZRHOXi9Tt7uMrI854pTomkWyACk.crl (hash: /0ER0ntETJ7QPM5xI5g3/z9+VyeMBoudh18MfuMAzP4=) 4: osWiuCxFKK7p5wtHqJimdeaWv-0.roa (hash: uNL2gHPQqgqmPM9/9Y5/YfTqQyz7bRjGXXYyc1z5tGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:d3:a8:bd:73:53:74:9a:92:18:47:b5:4b:3d:38:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029 Validity Not Before: Jan 27 05:01:05 2026 GMT Not After : Jan 28 05:01:05 2026 GMT Subject: CN=56d76e9b6ba787862c4424b624065b89cba165e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:85:a8:1b:ca:37:10:95:2d:18:9c:9c:71:6d: 75:d7:06:e8:73:e4:3e:ba:1f:41:bd:66:af:9a:ba: ea:cc:e2:21:d7:74:bc:03:6f:9b:c5:58:44:e5:9c: a4:e5:7a:77:8c:4d:ce:fe:08:73:3f:ad:53:2f:f7: b6:eb:15:78:48:05:4f:3a:d0:df:47:71:6e:2c:62: 10:f7:59:e0:a0:45:4f:4a:c0:d2:3a:7f:48:31:44: d3:99:3a:31:e3:2a:f2:04:ce:3d:01:d9:e9:b2:fa: fe:9e:69:b8:09:8c:e6:39:b7:b2:0e:67:12:0b:8e: 8c:f1:c3:03:4f:9a:46:1b:c4:74:d8:db:6e:20:93: a1:b2:91:3b:97:aa:3b:ca:91:31:a7:0c:f9:f4:5a: 9f:0d:08:f8:c1:4f:92:9e:3d:db:ff:58:60:f8:71: 1b:e6:49:d6:c6:a9:bf:fb:ba:45:98:4b:36:de:3c: 29:86:7e:f3:99:f3:d6:f2:58:3f:53:0f:23:a9:70: 5f:5e:10:ab:c0:4b:9f:33:aa:d9:f0:20:19:a5:d5: 10:48:39:bc:56:15:78:91:a6:43:10:ef:8a:1d:69: fe:79:e0:98:6d:89:a9:9a:26:16:5c:b7:35:b6:13: b5:11:29:4e:fd:c8:09:b8:8b:f1:1a:51:6d:b9:da: 34:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D7:6E:9B:6B:A7:87:86:2C:44:24:B6:24:06:5B:89:CB:A1:65:E9 X509v3 Authority Key Identifier: keyid:65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:33:32:6f:60:b7:db:cc:fa:45:e1:f1:67:b8:ca:cb:39:1e: 34:55:d3:94:01:d6:28:3d:e4:e5:d7:ba:1e:15:77:2e:76:aa: ca:4c:db:d6:62:fe:a0:13:95:c2:ab:02:9d:85:23:e4:58:6a: ae:20:d4:a5:8f:57:f2:bd:b7:6c:37:0d:00:62:d8:f5:8a:6c: f3:0c:6b:ef:45:1d:a5:5a:82:bb:30:55:db:2c:c4:cc:4b:bd: b9:42:39:32:08:ff:a4:a6:6d:8c:d3:c8:6c:6f:6e:88:6f:f1: f1:cc:db:2f:06:f7:53:d3:ca:32:a4:a5:72:e3:62:0c:cd:06: 36:4e:c7:f7:d0:da:87:a0:90:30:55:f9:ef:08:b9:38:6e:16: 0b:90:0c:f7:4d:40:60:b5:1c:92:6d:5c:3d:33:74:d1:6a:13: aa:0e:fe:33:fc:92:b0:68:28:c4:ad:d8:9d:0b:b5:03:45:36: ab:4a:aa:25:af:ec:2d:c6:f4:21:34:5c:a4:ef:a5:f9:b9:6c: 24:e2:5f:c1:fc:f6:08:11:1b:15:2e:eb:e0:fe:ad:c4:33:72: 19:72:12:fe:db:e8:cc:c0:60:e1:79:3c:c2:8a:b5:62:ca:7f: 6a:21:49:33:bb:70:9a:d9:85:a2:38:5a:04:d6:71:41:41:6d: 77:e8:04:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv906i9c1N0mpIYR7VLPTgoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MTFjZTVlMmY1M2I3YmI4Y2FjOGYzOWUyOTRlODlhNDVi MjAwMjkwHhcNMjYwMTI3MDUwMTA1WhcNMjYwMTI4MDUwMTA1WjAzMTEwLwYDVQQD Eyg1NmQ3NmU5YjZiYTc4Nzg2MmM0NDI0YjYyNDA2NWI4OWNiYTE2NWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34WoG8o3EJUtGJyccW111wboc+Q+ uh9BvWavmrrqzOIh13S8A2+bxVhE5Zyk5Xp3jE3O/ghzP61TL/e26xV4SAVPOtDf R3FuLGIQ91ngoEVPSsDSOn9IMUTTmTox4yryBM49Adnpsvr+nmm4CYzmObeyDmcS C46M8cMDT5pGG8R02NtuIJOhspE7l6o7ypExpwz59FqfDQj4wU+Snj3b/1hg+HEb 5knWxqm/+7pFmEs23jwphn7zmfPW8lg/Uw8jqXBfXhCrwEufM6rZ8CAZpdUQSDm8 VhV4kaZDEO+KHWn+eeCYbYmpmiYWXLc1thO1ESlO/cgJuIvxGlFtudo0owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbXbptrp4eGLEQktiQGW4nLoWXpMB8GA1UdIwQY MBaAFGURzl4vU7e7jKyPOeKU6JpFsgApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJIT1hpOVR0N3VNckk4NTRwVG9ta1d5QUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85MWIwOTMtYWNiNy00Y2I3LWJmOGYt NWNiOTM0YTU1YjBkLzEvWlJIT1hpOVR0N3VNckk4NTRwVG9ta1d5QUNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS85MWIwOTMtYWNiNy00Y2I3LWJmOGYtNWNiOTM0YTU1YjBk LzEvWlJIT1hpOVR0N3VNckk4NTRwVG9ta1d5QUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzMyb2C3 28z6ReHxZ7jKyzkeNFXTlAHWKD3k5de6HhV3Lnaqykzb1mL+oBOVwqsCnYUj5Fhq riDUpY9X8r23bDcNAGLY9Yps8wxr70UdpVqCuzBV2yzEzEu9uUI5Mgj/pKZtjNPI bG9uiG/x8czbLwb3U9PKMqSlcuNiDM0GNk7H99Dah6CQMFX57wi5OG4WC5AM901A YLUckm1cPTN00WoTqg7+M/ySsGgoxK3YnQu1A0U2q0qqJa/sLcb0ITRcpO+l+bls JOJfwfz2CBEbFS7r4P6txDNyGXIS/tvozMBg4Xk8woq1Ysp/aiFJM7twmtmFojha BNZxQUFtd+gEiQ== -----END CERTIFICATE-----Generated at Tue Jan 27 06:24:33 2026 by rpki-client