This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json) Hash identifier: fKugSFXLXvgN8qxlWAgJustz8B4lw1Fp/BaPStrZJao= Subject key identifier: 1C:E0:A3:A9:C3:2A:30:F0:DB:C4:6D:A6:30:FE:D8:F3:4B:A7:F3:29 Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11 Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11 Certificate serial: 019BFA9B6DB0F95189BCCA767FD3FC0E8BF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft Manifest number: 0D35 Signing time: Mon 26 Jan 2026 14:00:48 +0000 Manifest this update: Mon 26 Jan 2026 14:00:48 +0000 Manifest next update: Tue 27 Jan 2026 14:00:48 +0000 Files and hashes: 1: L5oncHcGX0JZWhyPpUVkQ2HdCRo.roa (hash: L2Pt1ipLnJmpkz1LbVmvE4yLg/k+xc8UXnr+qSGpbXY=) 2: XfoYwouinwxpmsIiaKSE5Ihe3J8.roa (hash: qt4foYpy013TlPUVpgU1Ocj8R+P8zvuJGdKNUnqndOk=) 3: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: X0m0jxB+DXlGBMDidjD62FuC0pCTzzCs+Xrga76u6h0=) 4: j34AlrWJB9qIiT39tdgx6GORRPE.roa (hash: TLVwr6WxGYUdU6twEr0V8a4U4NI5yriKBDDpZ2ESBfY=) 5: l8pVdQcsPyvAv3HyaaD26uxVYS8.roa (hash: DQA293T0QyMdTSQE50m48vTaLc10PyZBH6Ba9LHMphE=) 6: lmALzp_C2hj8qDy6u9DneABNWCE.roa (hash: 0GPCM3inwnfBar+n/0nv3z67tNfW/VcLGbHgKFaiiwI=) 7: s1N5kDv4-SpOqan5hJxvvqdzfgk.roa (hash: G1JTBs4ptyy7NKoszv8bHZCq/4kKQ4/tpR/BQXAJYC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:6d:b0:f9:51:89:bc:ca:76:7f:d3:fc:0e:8b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11 Validity Not Before: Jan 26 14:00:48 2026 GMT Not After : Jan 27 14:00:48 2026 GMT Subject: CN=1ce0a3a9c32a30f0dbc46da630fed8f34ba7f329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1f:5e:f2:cd:02:7e:96:d2:1b:6a:04:ef:7b: 91:0e:86:2e:55:a1:54:51:bb:d0:48:39:fe:32:5e: 13:f0:1c:72:b4:55:69:0c:1e:7a:1e:eb:80:a0:10: 96:34:e9:74:5c:13:94:63:b2:7e:b6:e8:30:b2:c2: c1:c3:72:b4:b8:6c:6d:0f:45:d1:a1:28:a6:f8:79: 44:e3:64:b8:c4:15:e0:00:57:4d:f3:de:38:c2:3a: bd:db:d4:08:ea:ad:19:74:69:9e:68:54:2a:bc:1c: c1:9e:d9:6f:fe:aa:ee:f5:cb:cb:eb:a0:17:5e:93: 3a:0d:b6:1c:28:cf:9d:d6:ac:0f:71:aa:87:1e:7f: 19:b4:0e:47:09:12:58:fd:b1:88:0d:0c:89:5b:fe: 70:ef:1f:76:b4:24:c4:5b:0a:da:f6:e4:a2:9c:a8: 2a:61:f0:7d:8c:10:1c:85:51:4f:db:ab:d6:f8:ed: 66:6a:83:3d:16:73:58:6b:a2:17:5c:8e:8e:01:18: b0:b3:34:88:16:13:6e:a3:4e:72:16:bf:a4:83:9d: 20:67:09:80:4d:8f:fb:5b:29:57:32:94:06:8b:e5: e9:8d:17:f6:1a:35:73:1a:29:de:0b:7c:0d:21:28: 68:24:48:e1:c3:6b:b8:d1:b1:84:9f:aa:de:53:08: 6d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E0:A3:A9:C3:2A:30:F0:DB:C4:6D:A6:30:FE:D8:F3:4B:A7:F3:29 X509v3 Authority Key Identifier: keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:1c:40:40:28:ad:ae:69:71:57:e2:95:b6:6d:db:93:87:31: 02:9e:aa:ec:04:db:c8:2b:50:86:05:81:02:a1:3b:56:42:f4: bb:38:b7:0d:e2:4c:29:53:ad:77:dc:4a:cb:48:d4:76:ab:60: f8:4e:6e:11:5c:7e:5f:d0:e7:6f:58:16:1a:ee:25:d8:d4:3f: be:65:73:ae:53:b2:dc:02:67:79:15:87:55:99:64:31:24:9c: d7:bb:11:b5:35:59:44:69:ad:cd:12:42:6b:11:c4:aa:db:10: 12:79:a1:96:08:2e:6d:4e:cd:4b:a1:8f:50:1e:6b:c0:71:38: 8e:78:f5:31:4a:fe:83:39:7b:84:c2:92:f5:ec:bc:79:d3:a0: 4e:eb:3a:32:33:0d:a3:a4:72:8c:7a:5e:ed:76:91:97:b7:27: ce:d9:c9:b9:f0:1a:83:28:f7:fe:d3:cd:dc:51:54:09:48:4d: 38:56:79:62:4b:5a:c4:7e:00:2b:1f:ae:f5:3f:7d:54:36:10: 54:a4:84:70:04:6c:54:4d:8e:ba:4e:a1:55:31:e5:db:04:3d: 90:26:48:2f:7f:72:6b:92:50:ad:ef:c1:d0:01:ac:5e:ac:7e: 14:1d:33:37:56:2d:f0:40:e3:b1:b2:5c:11:35:3d:38:62:48: 04:03:0e:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m22w+VGJvMp2f9P8Dov4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NGYwMzNmNzgyZWFmMzJhYjA5MDg4Nzc1ZDY0YWM0Yjk0 YjViMTEwHhcNMjYwMTI2MTQwMDQ4WhcNMjYwMTI3MTQwMDQ4WjAzMTEwLwYDVQQD EygxY2UwYTNhOWMzMmEzMGYwZGJjNDZkYTYzMGZlZDhmMzRiYTdmMzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R9e8s0CfpbSG2oE73uRDoYuVaFU UbvQSDn+Ml4T8BxytFVpDB56HuuAoBCWNOl0XBOUY7J+tugwssLBw3K0uGxtD0XR oSim+HlE42S4xBXgAFdN8944wjq929QI6q0ZdGmeaFQqvBzBntlv/qru9cvL66AX XpM6DbYcKM+d1qwPcaqHHn8ZtA5HCRJY/bGIDQyJW/5w7x92tCTEWwra9uSinKgq YfB9jBAchVFP26vW+O1maoM9FnNYa6IXXI6OARiwszSIFhNuo05yFr+kg50gZwmA TY/7WylXMpQGi+XpjRf2GjVzGineC3wNIShoJEjhw2u40bGEn6reUwhtIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzgo6nDKjDw28RtpjD+2PNLp/MpMB8GA1UdIwQY MBaAFGRPAz94Lq8yqwkIh3XWSsS5S1sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMt NDkxNWZlN2Y5MmNlLzEvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMtNDkxNWZlN2Y5MmNl LzEvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxxAQCit rmlxV+KVtm3bk4cxAp6q7ATbyCtQhgWBAqE7VkL0uzi3DeJMKVOtd9xKy0jUdqtg +E5uEVx+X9Dnb1gWGu4l2NQ/vmVzrlOy3AJneRWHVZlkMSSc17sRtTVZRGmtzRJC axHEqtsQEnmhlggubU7NS6GPUB5rwHE4jnj1MUr+gzl7hMKS9ey8edOgTus6MjMN o6RyjHpe7XaRl7cnztnJufAagyj3/tPN3FFUCUhNOFZ5YktaxH4AKx+u9T99VDYQ VKSEcARsVE2Ouk6hVTHl2wQ9kCZIL39ya5JQre/B0AGsXqx+FB0zN1Yt8EDjsbJc ETU9OGJIBAMOtw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:11:59 2026 by rpki-client