This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft File: ZdnpJm7sq8D9SmB36wuo-p873ic.mft (raw, json) Hash identifier: 7PuUjIMzANYAWu6pSKeyo/2NLllv7IHqnGTfNLmkF24= Subject key identifier: 1D:81:0A:95:A3:82:E8:A3:4D:F3:5D:93:A5:97:98:58:69:89:27:9A Authority key identifier: 65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27 Certificate issuer: /CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27 Certificate serial: 019BFCF80363FA92E4C26C4FE62AB7CA90D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft Manifest number: 17F0 Signing time: Tue 27 Jan 2026 01:01:10 +0000 Manifest this update: Tue 27 Jan 2026 01:01:10 +0000 Manifest next update: Wed 28 Jan 2026 01:01:10 +0000 Files and hashes: 1: LT7SpeHVHrImIlmvmDypryVJsMA.roa (hash: UY3Bc5Ii8P52rm9NhIsYSUCYO4P4gv1+uleYch2vT5A=) 2: ZdnpJm7sq8D9SmB36wuo-p873ic.crl (hash: 0KRPaEPkeQVHeU8d2kAEbQptm/hWlWwhULdDoItH630=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:03:63:fa:92:e4:c2:6c:4f:e6:2a:b7:ca:90:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27 Validity Not Before: Jan 27 01:01:10 2026 GMT Not After : Jan 28 01:01:10 2026 GMT Subject: CN=1d810a95a382e8a34df35d93a59798586989279a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4b:4e:91:5f:da:c5:bc:2b:81:12:e4:76:fa: ad:7d:2e:4c:22:99:bb:33:a1:1e:ff:ac:dd:7c:57: b4:5c:1a:b4:e0:72:b4:29:4c:08:57:6a:ac:9c:4b: 3d:b9:6d:e0:dd:9e:03:68:e9:fe:2a:95:13:75:a8: f3:23:1c:f4:34:f1:21:eb:f7:44:f8:3f:99:8a:48: 6d:33:18:fd:bc:c5:ce:35:0e:72:3b:3d:f3:a3:42: 91:86:9e:7e:0a:c0:25:e4:97:1f:37:83:5b:99:73: 5d:02:c6:36:7c:a5:d9:2b:e8:38:d0:62:fb:d5:82: 07:9f:0d:f4:91:25:06:08:4b:a7:0c:b3:3f:22:83: 68:88:97:09:8d:5f:02:30:15:90:29:0a:22:59:70: b4:10:ff:e5:ee:8e:b9:c9:14:d4:74:49:cb:d7:7c: 59:43:68:4e:4f:8c:4e:85:d2:db:d1:af:87:ea:57: 6b:04:74:b9:e8:d6:03:72:b3:f5:de:25:a9:41:72: d6:9f:5e:de:80:6d:70:77:15:ac:69:a5:aa:ed:12: 1a:4d:d5:7d:96:26:20:8a:e2:52:77:38:0a:8c:47: 34:40:ba:a4:c7:80:ea:25:a9:5e:09:bd:20:33:27: 26:da:fc:cf:73:01:b3:31:f1:31:85:35:d1:25:97: 68:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:81:0A:95:A3:82:E8:A3:4D:F3:5D:93:A5:97:98:58:69:89:27:9A X509v3 Authority Key Identifier: keyid:65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:82:7f:7e:18:ce:7d:d3:c5:0a:63:87:b4:8f:01:a4:e8:2f: 59:e0:c5:8c:f0:59:23:6f:d4:18:88:6f:aa:79:8f:e8:fd:50: 63:23:c8:f3:ae:d2:af:a1:a8:12:54:ca:2e:a8:fa:1a:28:71: 25:3c:c0:20:1b:ca:30:21:70:b0:72:2b:89:2e:2b:96:ee:a5: f4:bf:0e:ed:61:2a:54:fa:c6:51:27:09:20:3e:74:dd:05:19: a1:f5:ae:97:0d:ff:31:59:52:e9:80:a1:23:4f:2e:fe:bc:4b: 32:8d:ae:17:1d:5d:25:73:90:22:4b:91:ea:2d:d1:28:dc:59: 1b:50:ce:d2:a2:a1:a3:3f:c4:47:c2:f6:98:fc:b5:98:fe:36: bc:29:a9:16:db:f8:54:1f:60:2f:22:17:2c:69:11:8f:9a:1d: c2:e4:87:10:76:cc:95:de:ab:84:0b:67:17:51:42:b3:ab:9f: 2f:6d:c4:ef:cb:94:e8:db:ba:eb:e8:8a:07:bf:55:ae:af:c5: 50:24:6a:dc:7a:f5:4e:97:9c:7a:ef:9d:78:38:bb:a3:8f:24: d7:47:24:a0:68:78:cd:18:f8:ac:f3:a3:79:21:2d:23:46:f4: 17:df:23:92:69:3b:e3:51:e6:0a:b7:2e:44:f6:3e:ce:23:9e: 58:ce:05:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+ANj+pLkwmxP5iq3ypDSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZDllOTI2NmVlY2FiYzBmZDRhNjA3N2ViMGJhOGZhOWYz YmRlMjcwHhcNMjYwMTI3MDEwMTEwWhcNMjYwMTI4MDEwMTEwWjAzMTEwLwYDVQQD EygxZDgxMGE5NWEzODJlOGEzNGRmMzVkOTNhNTk3OTg1ODY5ODkyNzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UtOkV/axbwrgRLkdvqtfS5MIpm7 M6Ee/6zdfFe0XBq04HK0KUwIV2qsnEs9uW3g3Z4DaOn+KpUTdajzIxz0NPEh6/dE +D+ZikhtMxj9vMXONQ5yOz3zo0KRhp5+CsAl5JcfN4NbmXNdAsY2fKXZK+g40GL7 1YIHnw30kSUGCEunDLM/IoNoiJcJjV8CMBWQKQoiWXC0EP/l7o65yRTUdEnL13xZ Q2hOT4xOhdLb0a+H6ldrBHS56NYDcrP13iWpQXLWn17egG1wdxWsaaWq7RIaTdV9 liYgiuJSdzgKjEc0QLqkx4DqJaleCb0gMycm2vzPcwGzMfExhTXRJZdoTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2BCpWjguijTfNdk6WXmFhpiSeaMB8GA1UdIwQY MBaAFGXZ6SZu7KvA/Upgd+sLqPqfO94nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmRucEptN3NxOEQ5U21CMzZ3dW8tcDg3M2ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iYTQwMmMtYjAwZS00YTI2LWJmNTMt OGU3NDdlMzRlMTYyLzEvWmRucEptN3NxOEQ5U21CMzZ3dW8tcDg3M2ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iYTQwMmMtYjAwZS00YTI2LWJmNTMtOGU3NDdlMzRlMTYy LzEvWmRucEptN3NxOEQ5U21CMzZ3dW8tcDg3M2ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4J/fhjO fdPFCmOHtI8BpOgvWeDFjPBZI2/UGIhvqnmP6P1QYyPI867Sr6GoElTKLqj6Gihx JTzAIBvKMCFwsHIriS4rlu6l9L8O7WEqVPrGUScJID503QUZofWulw3/MVlS6YCh I08u/rxLMo2uFx1dJXOQIkuR6i3RKNxZG1DO0qKhoz/ER8L2mPy1mP42vCmpFtv4 VB9gLyIXLGkRj5odwuSHEHbMld6rhAtnF1FCs6ufL23E78uU6Nu66+iKB79Vrq/F UCRq3Hr1Tpeceu+deDi7o48k10ckoGh4zRj4rPOjeSEtI0b0F98jkmk741HmCrcu RPY+ziOeWM4FpA== -----END CERTIFICATE-----Generated at Tue Jan 27 07:42:42 2026 by rpki-client