This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft File: zZGetcIQg2AVXef7TyFqBVrjHwk.mft (raw, json) Hash identifier: WSDzqaf9MHoWEGImrq1pTOC1niHZCxbFHq1kYgXo/Mc= Subject key identifier: C2:4A:6E:A3:17:07:1E:F0:34:6B:CB:27:71:A6:45:69:94:2D:F5:7D Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09 Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09 Certificate serial: 019BFCC14C6B5F145A3F641C905D93D6380F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft Manifest number: 17F4 Signing time: Tue 27 Jan 2026 00:01:25 +0000 Manifest this update: Tue 27 Jan 2026 00:01:25 +0000 Manifest next update: Wed 28 Jan 2026 00:01:25 +0000 Files and hashes: 1: 671jKi5JUsPphm4rFqIXw-Umr0g.roa (hash: FHQRqun3tWbwYxtxq1WsP+rYfcr6KS/CfmESM1vDjfg=) 2: GOSw37CdgLKeIKbJScsqY_9Dr2w.roa (hash: ZvDfQJkz45jdazcjaKmxmDgrWuHDPZ2kpxNBxgEv1Uw=) 3: zZGetcIQg2AVXef7TyFqBVrjHwk.crl (hash: +ThqFpeCUNZpcOsxcE9rhFw/cEoRB/M8TtEd1Cpeqv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:4c:6b:5f:14:5a:3f:64:1c:90:5d:93:d6:38:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09 Validity Not Before: Jan 27 00:01:25 2026 GMT Not After : Jan 28 00:01:25 2026 GMT Subject: CN=c24a6ea317071ef0346bcb2771a64569942df57d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:96:31:47:19:8f:a9:20:e8:56:00:10:58: 8e:94:e7:6a:9d:e4:fa:ca:df:1a:bd:a8:31:10:03: 6b:4f:cf:76:1a:5c:4b:49:48:cb:77:b1:68:cb:c2: b2:cd:5c:c5:35:56:6d:64:f0:47:81:90:9e:fe:54: 42:c1:a4:9e:a0:51:0b:4f:53:8c:e8:a7:c9:7a:59: 5f:c7:ea:b3:42:3e:de:c7:54:02:20:0b:01:da:fe: b9:a9:dc:ba:67:00:96:29:1c:50:10:e7:c5:35:85: 87:65:70:51:db:99:45:ad:c5:25:a5:de:f4:ab:e9: cb:9c:ab:54:da:38:d9:ca:ec:37:63:7c:b3:d9:5d: 71:f1:45:83:83:73:10:c2:65:32:57:85:cd:b4:fd: 67:48:30:1a:b6:86:ac:0d:47:ce:a9:0f:6e:05:42: 53:08:0d:01:5c:80:0e:39:26:68:9a:41:17:79:f9: 5b:fd:c8:cb:f6:84:28:c0:74:36:4b:b1:ed:bc:64: 94:a7:38:fe:00:68:fb:c9:18:79:04:34:94:41:f5: 82:45:e4:8c:3c:86:6b:04:02:0e:28:7d:60:3c:0f: f1:0d:ab:e0:ca:00:04:76:27:76:bb:c7:72:0c:df: 86:e2:fd:e5:1d:96:cc:58:6a:a4:2a:16:64:c7:71: 54:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4A:6E:A3:17:07:1E:F0:34:6B:CB:27:71:A6:45:69:94:2D:F5:7D X509v3 Authority Key Identifier: keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e8:1a:2c:ba:db:e3:eb:6e:26:e2:57:b3:72:a1:73:bc:05: 9e:1e:93:a0:89:74:fa:f8:96:24:23:eb:00:24:77:8b:5e:11: 2c:cb:d9:3c:aa:e9:f2:b8:52:55:6a:34:b9:84:94:8e:5b:1c: 54:40:06:28:cd:06:d4:b0:44:18:80:68:1a:76:7a:aa:93:97: cb:96:81:b0:79:e4:9b:65:ee:3c:df:58:6f:31:cf:fb:9c:af: 65:df:12:59:36:4b:50:d7:4f:e7:26:d5:b7:7d:1e:eb:63:3c: 0f:38:7b:8e:1b:bc:8c:b6:6b:a7:8c:21:ee:ad:83:e0:f1:d3: 06:75:42:d1:ed:59:12:fe:d1:fb:45:ae:01:8e:4a:d2:9b:18: 88:77:7a:65:8a:ec:c3:f4:86:9a:2c:09:67:69:59:6b:77:61: b8:bf:1c:1b:96:1f:19:bf:63:26:1c:d7:da:1f:62:63:1f:90: 57:4f:06:af:0c:cd:4c:78:ba:04:f0:fc:f3:95:27:be:e8:fc: c0:91:f6:68:ce:ce:41:68:30:af:e0:84:b8:31:4e:6f:8d:4a: 96:cb:0e:21:8e:6c:82:ac:2d:f4:ac:6b:6e:f3:2f:ea:ba:1b: e5:f3:02:90:c9:b9:63:80:6c:91:b9:eb:86:ba:cd:20:da:64: ae:9b:09:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wUxrXxRaP2QckF2T1jgPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOTE5ZWI1YzIxMDgzNjAxNTVkZTdmYjRmMjE2YTA1NWFl MzFmMDkwHhcNMjYwMTI3MDAwMTI1WhcNMjYwMTI4MDAwMTI1WjAzMTEwLwYDVQQD EyhjMjRhNmVhMzE3MDcxZWYwMzQ2YmNiMjc3MWE2NDU2OTk0MmRmNTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2iWMUcZj6kg6FYAEFiOlOdqneT6 yt8avagxEANrT892GlxLSUjLd7Foy8KyzVzFNVZtZPBHgZCe/lRCwaSeoFELT1OM 6KfJellfx+qzQj7ex1QCIAsB2v65qdy6ZwCWKRxQEOfFNYWHZXBR25lFrcUlpd70 q+nLnKtU2jjZyuw3Y3yz2V1x8UWDg3MQwmUyV4XNtP1nSDAatoasDUfOqQ9uBUJT CA0BXIAOOSZomkEXeflb/cjL9oQowHQ2S7HtvGSUpzj+AGj7yRh5BDSUQfWCReSM PIZrBAIOKH1gPA/xDavgygAEdid2u8dyDN+G4v3lHZbMWGqkKhZkx3FUMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJKbqMXBx7wNGvLJ3GmRWmULfV9MB8GA1UdIwQY MBaAFM2RnrXCEINgFV3n+08hagVa4x8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelpHZXRjSVFnMkFWWGVmN1R5RnFCVnJqSHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80ZmM3ODAtYjI5Ni00MGI3LTk1MDgt OWY4ZTZhMTg0Mzc0LzEvelpHZXRjSVFnMkFWWGVmN1R5RnFCVnJqSHdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny80ZmM3ODAtYjI5Ni00MGI3LTk1MDgtOWY4ZTZhMTg0Mzc0 LzEvelpHZXRjSVFnMkFWWGVmN1R5RnFCVnJqSHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+gaLLrb 4+tuJuJXs3Khc7wFnh6ToIl0+viWJCPrACR3i14RLMvZPKrp8rhSVWo0uYSUjlsc VEAGKM0G1LBEGIBoGnZ6qpOXy5aBsHnkm2XuPN9YbzHP+5yvZd8SWTZLUNdP5ybV t30e62M8Dzh7jhu8jLZrp4wh7q2D4PHTBnVC0e1ZEv7R+0WuAY5K0psYiHd6ZYrs w/SGmiwJZ2lZa3dhuL8cG5YfGb9jJhzX2h9iYx+QV08GrwzNTHi6BPD885Unvuj8 wJH2aM7OQWgwr+CEuDFOb41KlssOIY5sgqwt9KxrbvMv6rob5fMCkMm5Y4Bskbnr hrrNINpkrpsJGA== -----END CERTIFICATE-----Generated at Tue Jan 27 05:02:39 2026 by rpki-client