This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json) Hash identifier: YDK9gLcZ1Uz82+Wh1gsIWZfK8n68WE1PUbo30/xz/h8= Subject key identifier: 6E:AF:17:28:CA:0E:70:AD:42:9D:42:DE:57:47:A9:98:41:0B:C4:EB Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9 Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9 Certificate serial: 019BFBE4F2CD19695621C7D53B87206D01AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft Manifest number: 10B9 Signing time: Mon 26 Jan 2026 20:00:44 +0000 Manifest this update: Mon 26 Jan 2026 20:00:44 +0000 Manifest next update: Tue 27 Jan 2026 20:00:44 +0000 Files and hashes: 1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: DiGUDcs7XzvLGfQrZ85im9C4RvFDhyXu59g7w7f2pUc=) 2: dMOBOhbRksDyPvJ5UK2Dden-Gd4.roa (hash: c+Db8u+3cThFkyTqBbDbUKndGocA25eLe1SEr0z0Tf4=) 3: zL2UmGZYYde1Bv-4zTEB8xIhwJU.roa (hash: fBlVd5hhHmOwo6UAmiinDlZmi08DV56PlEdUEufy9YE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e4:f2:cd:19:69:56:21:c7:d5:3b:87:20:6d:01:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9 Validity Not Before: Jan 26 20:00:44 2026 GMT Not After : Jan 27 20:00:44 2026 GMT Subject: CN=6eaf1728ca0e70ad429d42de5747a998410bc4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7f:e4:2c:e3:7f:5a:74:75:bc:5a:87:50:c0: 05:46:14:1d:f5:e7:4c:0d:ea:b9:0d:8d:76:ea:e1: 78:e0:01:96:d7:51:34:0d:c7:0a:ac:ed:43:98:8f: 05:78:27:0f:5b:d6:6f:37:3b:7a:c2:bf:f2:06:85: 26:85:74:9d:92:24:c6:fd:53:85:07:30:b3:f3:8c: 59:2e:29:40:05:7b:05:15:bd:07:bf:cb:30:13:47: 7d:f9:6b:8f:85:38:17:a5:17:ff:41:c8:2b:b1:55: 32:9f:24:aa:80:9c:e0:0f:47:d4:42:42:3e:1d:ae: 2f:98:95:a5:23:ed:54:fb:c1:31:3a:54:ff:8d:ef: b1:37:31:e4:bb:99:8f:a7:2c:4c:8d:85:bc:45:5d: f6:d4:95:09:8b:53:2a:a2:f8:12:46:6b:dc:c7:f0: 68:64:3d:0e:5d:4e:b1:e7:c6:7c:66:b6:96:ca:c4: 93:19:ba:44:47:9a:cb:c7:88:ff:a0:07:1e:ab:b7: da:20:50:73:f7:6d:b0:a8:67:12:2b:f4:bf:d6:22: e2:08:ca:8f:ff:35:4a:37:d8:7d:ef:cf:41:f5:5b: 16:0a:a2:a0:87:c6:5c:11:a5:3b:3a:8e:01:9e:b8: 65:a6:4a:fb:cf:13:07:53:2b:2d:06:d9:e8:af:13: d5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AF:17:28:CA:0E:70:AD:42:9D:42:DE:57:47:A9:98:41:0B:C4:EB X509v3 Authority Key Identifier: keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:a9:bd:82:aa:da:ee:f7:ed:ad:87:d2:5a:50:9f:fe:58:86: 75:ca:4b:85:6b:8f:3b:87:03:4f:b4:bb:33:e3:d8:67:03:72: 88:03:d7:10:f0:29:80:21:f9:df:e1:38:35:b7:a0:2b:95:00: f9:6c:84:2d:4d:09:e4:f1:ed:8d:a2:92:86:b2:67:cb:4c:bd: 99:f3:fc:b4:cd:c4:d8:bf:a5:4c:7d:d5:86:3d:9e:ea:91:5e: ce:ae:55:dc:45:24:ea:ee:97:eb:88:4c:15:d1:8c:75:07:c6: 17:35:65:e9:e8:e1:b6:3e:97:c2:2a:76:86:f6:cd:a0:61:e7: ca:dd:d0:a8:f9:2e:03:04:9f:cb:93:b4:b4:28:07:a1:e9:ad: df:17:62:71:d6:9a:ce:53:70:4a:dd:c9:e3:e5:dc:25:30:04: 9b:86:6a:0e:1b:6c:2e:6d:99:4c:25:df:63:3b:62:02:2c:a9: 59:1a:b2:82:69:2c:91:b0:ff:a6:97:c8:e1:37:4b:57:1d:b2: 28:eb:50:1d:73:d7:5f:ff:bd:42:e5:d7:e3:5a:e1:fd:30:de: 09:39:18:b7:68:1a:70:17:af:5c:ce:59:34:b2:fc:39:a6:8d: 58:8e:10:0b:96:c9:f6:db:a3:e0:f0:88:dd:25:e0:05:10:9e: a6:33:4a:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75PLNGWlWIcfVO4cgbQGrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YWE0NTFiNzgzZmM5MWEwNGI4MmY4MmYxNTZmMGI0ODk3 MTVkYzkwHhcNMjYwMTI2MjAwMDQ0WhcNMjYwMTI3MjAwMDQ0WjAzMTEwLwYDVQQD Eyg2ZWFmMTcyOGNhMGU3MGFkNDI5ZDQyZGU1NzQ3YTk5ODQxMGJjNGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX/kLON/WnR1vFqHUMAFRhQd9edM Deq5DY126uF44AGW11E0DccKrO1DmI8FeCcPW9ZvNzt6wr/yBoUmhXSdkiTG/VOF BzCz84xZLilABXsFFb0Hv8swE0d9+WuPhTgXpRf/QcgrsVUynySqgJzgD0fUQkI+ Ha4vmJWlI+1U+8ExOlT/je+xNzHku5mPpyxMjYW8RV321JUJi1MqovgSRmvcx/Bo ZD0OXU6x58Z8ZraWysSTGbpER5rLx4j/oAceq7faIFBz922wqGcSK/S/1iLiCMqP /zVKN9h9789B9VsWCqKgh8ZcEaU7Oo4Bnrhlpkr7zxMHUystBtnorxPVVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6vFyjKDnCtQp1C3ldHqZhBC8TrMB8GA1UdIwQY MBaAFGWqRRt4P8kaBLgvgvFW8LSJcV3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWIt M2JjM2RmN2EyOThhLzEvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWItM2JjM2RmN2EyOThh LzEvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqm9gqra 7vftrYfSWlCf/liGdcpLhWuPO4cDT7S7M+PYZwNyiAPXEPApgCH53+E4NbegK5UA +WyELU0J5PHtjaKShrJny0y9mfP8tM3E2L+lTH3Vhj2e6pFezq5V3EUk6u6X64hM FdGMdQfGFzVl6ejhtj6Xwip2hvbNoGHnyt3QqPkuAwSfy5O0tCgHoemt3xdicdaa zlNwSt3J4+XcJTAEm4ZqDhtsLm2ZTCXfYztiAiypWRqygmkskbD/ppfI4TdLVx2y KOtQHXPXX/+9QuXX41rh/TDeCTkYt2gacBevXM5ZNLL8OaaNWI4QC5bJ9tuj4PCI 3SXgBRCepjNKaA== -----END CERTIFICATE-----Generated at Tue Jan 27 01:07:34 2026 by rpki-client