This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft File: zWXuI7_0LM9nnXN3_k2mldNBrvA.mft (raw, json) Hash identifier: cGDEDMlC7Ylu1p//4exqpNwQPr4TBU+rr+G8al7gCYs= Subject key identifier: 81:7A:23:0F:94:8B:C1:EE:EC:E9:3F:4F:51:E0:17:D9:47:C0:B4:1B Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0 Certificate issuer: /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0 Certificate serial: 019BF988F97D8CBEC3C074AC9BD737B8718D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft Manifest number: 17F2 Signing time: Mon 26 Jan 2026 09:01:02 +0000 Manifest this update: Mon 26 Jan 2026 09:01:02 +0000 Manifest next update: Tue 27 Jan 2026 09:01:02 +0000 Files and hashes: 1: LyD-byAqHkCId2X413D2X1Z2qHU.roa (hash: X3jzbRpGbv2O4J/HEOEG5KsHYAnqovf/BVNCZIBzGEc=) 2: NciFosUTZQjh8wuLeV_tqda00bY.roa (hash: zOA4Wef7GnD51/XhXMPfbgxKu5akVCbUSUyI9R7xcbI=) 3: Y8fFR3SR2JFo5SN-QHUy1g5AXnQ.roa (hash: rcBm3Sru1/9gzs1C6m5Kf+QWRSXdM9HmkBd/Rq/ayVk=) 4: gYgOrpy-NbLVYDOt6ciQXmu5vB4.roa (hash: HeuNS/isx5Ir7rrhD9rHIdV2SzMR1qCm5KBXOXdXtqU=) 5: np_2_SKmGfgCwircPk4_KpAxetI.roa (hash: EXS4ryAU66idTchghJIvxISW9h87H73QFGZzRNJ0+zI=) 6: uKzr6b65vtzDdcB3SEbQ_eXsURQ.roa (hash: xSRJcjd0eLR5MNbT/qQW4MnOH8NKSKy8VGBBsMm1Rj4=) 7: zWXuI7_0LM9nnXN3_k2mldNBrvA.crl (hash: NwoqetyBgOtgmvW2bj86JCavc9qCw0CFzzVzvEGlbmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:88:f9:7d:8c:be:c3:c0:74:ac:9b:d7:37:b8:71:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0 Validity Not Before: Jan 26 09:01:02 2026 GMT Not After : Jan 27 09:01:02 2026 GMT Subject: CN=817a230f948bc1eeece93f4f51e017d947c0b41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d5:2a:29:f3:d3:99:8e:f8:fa:e9:3d:0b:2c: 86:1e:3e:59:0f:0e:5c:fe:0e:ef:53:50:58:a1:4b: a6:0b:87:ea:dd:76:d2:4a:e0:4d:2b:78:d9:d8:4b: 50:97:8f:38:97:13:48:a9:82:87:e4:92:d6:e4:ec: dd:e7:3c:f5:98:07:e4:d3:3d:8e:b8:94:e2:da:c1: b0:dc:a4:2a:71:33:21:86:a1:fc:03:98:08:07:fd: cd:d5:7b:47:94:16:7a:e6:47:22:40:8e:10:38:34: b8:5c:f6:95:07:e6:37:46:1f:06:37:f4:f5:5c:89: 2b:1f:9f:be:45:fe:57:22:e5:f8:9d:58:c0:e7:51: 82:af:5b:0a:63:38:ee:e5:f5:c8:8d:01:48:35:9c: c9:97:1c:4b:d3:d3:c6:dc:be:cc:70:61:56:f6:dc: 7c:f9:c9:5d:ff:ca:89:0f:cf:3a:9d:aa:28:b1:d3: ce:72:d8:67:13:de:fe:a7:42:1a:b8:03:35:90:e0: 9a:69:ee:1c:3d:88:a6:e7:75:e1:9e:e0:9f:df:b6: 9e:1d:9f:8a:ed:02:2f:f2:02:53:88:64:f1:54:c4: 57:79:10:77:6a:20:a0:37:30:0e:38:76:be:b6:b7: 6e:b9:dc:58:ff:cc:17:07:fa:50:54:f9:97:c2:48: 62:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7A:23:0F:94:8B:C1:EE:EC:E9:3F:4F:51:E0:17:D9:47:C0:B4:1B X509v3 Authority Key Identifier: keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:0a:5b:2e:d1:4d:00:e4:78:18:14:0e:db:8f:67:40:4a:64: 3a:14:ba:e2:4f:5d:37:90:98:34:06:c6:39:e4:11:f0:3b:7e: 23:ad:f8:75:c4:fd:1a:f1:91:f3:cd:4a:8b:46:5e:ca:2d:90: 1c:7c:d5:82:b7:d3:32:6b:42:b3:b3:6d:02:89:c7:49:ef:47: 1c:7f:bb:45:81:2d:7f:25:4f:08:f4:40:a8:25:cf:0b:f9:c2: 93:5c:b2:be:dc:f2:de:80:2e:94:d4:c7:48:a1:55:6d:7c:f9: 2f:39:39:42:ed:79:41:44:51:dc:37:4f:8a:2b:ea:1e:a7:32: da:11:f7:d7:a9:71:b1:1b:66:4f:bc:b5:af:41:0e:b6:87:23: b0:07:d6:b4:a3:20:cf:a5:3c:e5:0e:98:42:5e:9f:ea:00:89: cf:1f:07:fd:af:9b:5a:8c:95:25:e1:7c:8b:3d:d1:3a:fc:61: ba:af:d5:2d:cb:36:e5:04:19:fe:e9:48:e9:f4:ed:4e:18:a3: a4:20:4a:8b:b4:9e:f2:94:f7:4a:35:10:ab:8a:7b:0f:c0:a2: 27:86:ec:e8:37:30:cc:86:c6:ac:74:8c:28:a3:f7:2d:47:14: ce:6e:d4:06:e5:28:2b:2a:81:3c:59:33:42:f5:46:ac:d8:48: f6:54:ff:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iPl9jL7DwHSsm9c3uHGNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNjVlZTIzYmZmNDJjY2Y2NzlkNzM3N2ZlNGRhNjk1ZDM0 MWFlZjAwHhcNMjYwMTI2MDkwMTAyWhcNMjYwMTI3MDkwMTAyWjAzMTEwLwYDVQQD Eyg4MTdhMjMwZjk0OGJjMWVlZWNlOTNmNGY1MWUwMTdkOTQ3YzBiNDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtUqKfPTmY74+uk9CyyGHj5ZDw5c /g7vU1BYoUumC4fq3XbSSuBNK3jZ2EtQl484lxNIqYKH5JLW5Ozd5zz1mAfk0z2O uJTi2sGw3KQqcTMhhqH8A5gIB/3N1XtHlBZ65kciQI4QODS4XPaVB+Y3Rh8GN/T1 XIkrH5++Rf5XIuX4nVjA51GCr1sKYzju5fXIjQFINZzJlxxL09PG3L7McGFW9tx8 +cld/8qJD886naoosdPOcthnE97+p0IauAM1kOCaae4cPYim53XhnuCf37aeHZ+K 7QIv8gJTiGTxVMRXeRB3aiCgNzAOOHa+trduudxY/8wXB/pQVPmXwkhiOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIF6Iw+Ui8Hu7Ok/T1HgF9lHwLQbMB8GA1UdIwQY MBaAFM1l7iO/9CzPZ51zd/5NppXTQa7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMDZkNDMtM2RiZi00Y2Y4LTgxNWQt NWRjMmZhNmEzNTAzLzEveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMDZkNDMtM2RiZi00Y2Y4LTgxNWQtNWRjMmZhNmEzNTAz LzEveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACApbLtFN AOR4GBQO249nQEpkOhS64k9dN5CYNAbGOeQR8Dt+I634dcT9GvGR881Ki0Zeyi2Q HHzVgrfTMmtCs7NtAonHSe9HHH+7RYEtfyVPCPRAqCXPC/nCk1yyvtzy3oAulNTH SKFVbXz5Lzk5Qu15QURR3DdPiivqHqcy2hH316lxsRtmT7y1r0EOtocjsAfWtKMg z6U85Q6YQl6f6gCJzx8H/a+bWoyVJeF8iz3ROvxhuq/VLcs25QQZ/ulI6fTtThij pCBKi7Se8pT3SjUQq4p7D8CiJ4bs6DcwzIbGrHSMKKP3LUcUzm7UBuUoKyqBPFkz QvVGrNhI9lT/fQ== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:28 2026 by rpki-client