This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft File: ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft (raw, json) Hash identifier: wVXKRDJJaloI2rn8jadtQcKvy1FRnNp0M7e8e29CF58= Subject key identifier: FF:9B:CC:78:70:07:D3:73:64:A3:CD:9F:B3:89:EF:BC:22:C6:D3:EA Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8 Certificate issuer: /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8 Certificate serial: 019BFEE694ABEFEED666BF134A41B298370A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft Manifest number: 17F0 Signing time: Tue 27 Jan 2026 10:01:22 +0000 Manifest this update: Tue 27 Jan 2026 10:01:22 +0000 Manifest next update: Wed 28 Jan 2026 10:01:22 +0000 Files and hashes: 1: 3SjeUFC4YP2hmea4QgynnyCGUKg.roa (hash: eN1xEmiUCaEx82o/WrnNDgoT+UPc2qHAHANZVD640yc=) 2: ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl (hash: ZLMnvCL/ogX8ZHresyRUqTOWvYQkPiMPiJAkUhVG8Gg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 10:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:e6:94:ab:ef:ee:d6:66:bf:13:4a:41:b2:98:37:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8 Validity Not Before: Jan 27 10:01:22 2026 GMT Not After : Jan 28 10:01:22 2026 GMT Subject: CN=ff9bcc787007d37364a3cd9fb389efbc22c6d3ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c8:84:2f:3b:30:a8:dd:4a:e8:7b:40:4b:1b: 86:33:cb:1a:be:15:50:cd:df:72:fa:51:59:48:3b: a4:8e:19:7c:62:07:52:fa:43:dc:b2:5c:50:5b:24: 65:d8:cf:42:09:02:c5:42:5d:24:57:f7:0d:66:32: 6a:ac:5a:87:11:fa:bd:5c:6f:60:af:ac:f0:6f:48: e8:a0:b0:bf:04:ab:14:be:55:55:4a:fb:b8:ee:0e: 56:81:b9:c4:90:2d:d9:6b:27:cb:33:15:9b:61:dc: 29:26:8a:63:69:a4:fb:bf:95:b2:29:61:0a:0b:91: 82:81:a9:bc:d7:45:19:64:88:8d:a9:de:6e:3d:53: 7d:b2:46:21:d0:f6:17:d5:37:d4:6f:9a:57:f5:53: 03:1a:30:4c:35:b0:f9:2a:03:5f:ed:26:0d:91:4b: 23:b5:18:f4:66:62:7b:e4:73:68:30:c1:69:97:d8: 76:b7:13:13:65:ac:eb:ff:96:9a:b8:d8:b3:7a:31: 42:64:4e:6b:0a:43:f1:52:56:25:6b:fb:b6:9e:3f: ba:e2:20:07:e6:f5:1a:f0:79:85:e8:bd:b9:35:e1: 89:0e:9c:01:39:bc:6a:11:60:21:c2:ee:5d:9f:4a: 6d:49:97:50:95:74:8f:b4:61:f5:9c:6b:0f:c8:fd: 20:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9B:CC:78:70:07:D3:73:64:A3:CD:9F:B3:89:EF:BC:22:C6:D3:EA X509v3 Authority Key Identifier: keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a0:05:f1:98:54:7c:36:f5:15:76:96:67:85:dd:98:bf:6e: 88:df:5c:12:e5:c0:4b:ee:9e:4d:d8:bf:9a:d3:1f:51:58:d6: 68:8e:e3:69:1f:13:96:c3:d8:6b:21:c7:d3:05:e4:b9:f8:24: b7:44:aa:f3:b8:ac:e7:4c:ef:3e:96:e1:3a:cd:80:d1:f5:59: c5:74:63:6d:e9:0d:68:36:9b:54:7a:d0:40:a4:b2:5c:3a:fb: 71:f8:74:1d:b2:69:6a:c3:28:64:9e:43:e7:cf:59:cd:f4:d9: d7:bf:2f:ee:88:a7:10:f5:a2:2d:d9:cb:21:50:fe:df:db:a7: 6c:26:9d:34:21:ef:fb:45:5a:02:1a:a5:a0:6b:f3:03:0c:d5: ed:ac:c4:c6:9c:ef:a1:73:8a:79:ad:a6:97:a2:13:4e:1e:61: db:51:8e:05:10:98:14:dd:c4:9a:f9:dc:14:af:3c:bc:d1:57: cf:2e:5c:bf:36:34:94:00:e1:ca:dd:19:39:24:f9:62:c5:16: ab:6d:8c:82:79:65:d0:77:cb:28:b3:b0:e5:ed:08:ce:2b:12: 89:35:16:44:38:1e:d8:44:19:9c:64:dc:d9:95:48:58:6b:4b: b7:44:75:8a:71:10:fa:15:53:48:f2:d4:f1:cf:39:b7:a0:3d: eb:03:48:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+5pSr7+7WZr8TSkGymDcKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MTBjMjZmM2E0ZmFjNzAwYWM3YjBlMzQ5MGI4ZmExNzVm MDhhZDgwHhcNMjYwMTI3MTAwMTIyWhcNMjYwMTI4MTAwMTIyWjAzMTEwLwYDVQQD EyhmZjliY2M3ODcwMDdkMzczNjRhM2NkOWZiMzg5ZWZiYzIyYzZkM2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArciELzswqN1K6HtASxuGM8savhVQ zd9y+lFZSDukjhl8YgdS+kPcslxQWyRl2M9CCQLFQl0kV/cNZjJqrFqHEfq9XG9g r6zwb0jooLC/BKsUvlVVSvu47g5WgbnEkC3ZayfLMxWbYdwpJopjaaT7v5WyKWEK C5GCgam810UZZIiNqd5uPVN9skYh0PYX1TfUb5pX9VMDGjBMNbD5KgNf7SYNkUsj tRj0ZmJ75HNoMMFpl9h2txMTZazr/5aauNizejFCZE5rCkPxUlYla/u2nj+64iAH 5vUa8HmF6L25NeGJDpwBObxqEWAhwu5dn0ptSZdQlXSPtGH1nGsPyP0gXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+bzHhwB9NzZKPNn7OJ77wixtPqMB8GA1UdIwQY MBaAFGUQwm86T6xwCsew40kLj6F18IrYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wMjZlZDgtYWI5Yy00NzUzLTliMjAt MmJhOWQ1MTZmOTQ0LzEvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8wMjZlZDgtYWI5Yy00NzUzLTliMjAtMmJhOWQ1MTZmOTQ0 LzEvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6AF8ZhU fDb1FXaWZ4XdmL9uiN9cEuXAS+6eTdi/mtMfUVjWaI7jaR8TlsPYayHH0wXkufgk t0Sq87is50zvPpbhOs2A0fVZxXRjbekNaDabVHrQQKSyXDr7cfh0HbJpasMoZJ5D 589ZzfTZ178v7oinEPWiLdnLIVD+39unbCadNCHv+0VaAhqloGvzAwzV7azExpzv oXOKea2ml6ITTh5h21GOBRCYFN3EmvncFK88vNFXzy5cvzY0lADhyt0ZOST5YsUW q22Mgnll0HfLKLOw5e0IzisSiTUWRDge2EQZnGTc2ZVIWGtLt0R1inEQ+hVTSPLU 8c85t6A96wNIUQ== -----END CERTIFICATE-----Generated at Tue Jan 27 17:50:16 2026 by rpki-client