This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft File: Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft (raw, json) Hash identifier: PIuYRpZcgqtqlwwTtUpVTm4IMtWQlREUfO/Fq3PHhU8= Subject key identifier: 81:52:F7:AF:A9:E0:A7:6B:66:C0:40:71:2A:89:47:6C:08:E7:54:B2 Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08 Certificate issuer: /CN=66fb7727d64a518c7cd485e4823ee78a9e291008 Certificate serial: 019BF6F5A53FF5C92BB204287F7342FC4ECC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft Manifest number: 10C2 Signing time: Sun 25 Jan 2026 21:00:52 +0000 Manifest this update: Sun 25 Jan 2026 21:00:52 +0000 Manifest next update: Mon 26 Jan 2026 21:00:52 +0000 Files and hashes: 1: ZhJ5L5BrKwHCfAkrdgSHGKVEGLQ.roa (hash: LrOGWQlYoODl2o5Zz7qsJzTT29X+TmzrpsnPFdEc10c=) 2: Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl (hash: IHesn4ut4buMZGzTVWvP6aIKlAVab1na1u8n7Nq7XMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:a5:3f:f5:c9:2b:b2:04:28:7f:73:42:fc:4e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008 Validity Not Before: Jan 25 21:00:52 2026 GMT Not After : Jan 26 21:00:52 2026 GMT Subject: CN=8152f7afa9e0a76b66c040712a89476c08e754b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0b:86:98:c8:13:3e:2e:c9:c7:74:e4:80:e3: 23:ce:3e:03:37:b1:14:fb:b0:bc:b8:c1:f3:37:c5: 65:c8:e7:97:2d:31:39:ae:56:c0:fa:22:fc:3d:a6: c3:41:9c:2e:7a:ef:03:19:41:02:66:23:22:87:cd: 8c:7a:76:73:61:5a:2c:ff:14:5f:a2:25:93:f7:3f: f8:c2:3a:37:8e:4c:20:f3:93:9b:14:ce:35:99:bb: 8e:4d:df:1b:9b:af:e0:16:bf:48:3d:f5:27:21:45: 14:a4:02:78:17:9c:b4:a2:5f:63:96:84:52:eb:ec: 0d:ef:e7:dc:3b:74:b5:7b:df:83:51:84:7b:00:7e: b8:1b:54:95:ae:d2:cc:51:72:87:72:34:4f:c5:da: 2f:7f:be:d7:63:7b:38:22:9f:54:86:f5:19:dc:87: 25:49:88:a6:8b:ff:f5:2e:63:3f:7e:f3:3f:0e:28: b4:ce:35:01:fc:8c:d2:c8:0f:ee:7c:f6:07:73:2e: 24:23:33:ed:9b:ca:03:d7:ee:97:1b:13:2d:a7:77: 5a:61:aa:ca:a2:3b:26:19:25:96:64:13:1d:d2:51: 33:1d:b1:a1:a3:95:e1:fd:2e:70:ba:66:4d:2c:e7: 3f:2a:d7:95:2d:5b:fd:66:e4:94:d5:6f:59:fd:71: 34:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:52:F7:AF:A9:E0:A7:6B:66:C0:40:71:2A:89:47:6C:08:E7:54:B2 X509v3 Authority Key Identifier: keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a5:21:04:f7:3f:ce:59:5c:5b:6e:ca:c1:0f:c5:d4:5a:d8: 3e:35:b6:36:99:7b:16:2d:f8:67:f2:ca:37:91:14:dc:5b:59: e3:25:97:1b:88:67:5c:83:b5:32:e6:47:cd:5f:b9:d0:ca:67: 19:80:52:3e:6d:1c:5f:5c:96:0e:d6:55:2f:9d:d2:58:f4:c5: a3:35:d1:cd:10:40:8d:05:08:41:b6:9b:e2:eb:d1:03:95:d8: 52:d1:64:5f:20:18:dc:77:62:1a:3b:9c:78:c1:e3:04:4d:1f: 12:5f:40:f4:72:6a:f5:b6:39:ba:fb:b6:f4:8e:e5:8b:1a:a0: ec:08:27:30:31:69:a5:ef:25:15:e0:33:8f:ed:6f:6a:b0:8a: 7b:73:8c:ee:e6:ae:d4:24:43:97:7a:1a:e4:f0:87:68:36:5e: c4:13:6f:07:c8:8f:d4:e4:87:38:f1:60:9c:9d:f0:3a:4e:28: 9c:a5:77:f3:29:ea:2a:71:26:0f:3f:77:4f:54:a0:7b:a3:e8: 6a:64:59:63:da:c7:a4:dc:01:12:3a:a6:17:32:32:de:13:96: 76:97:35:e3:89:9c:b8:c6:33:15:53:17:fe:8a:32:51:bd:14: 95:46:39:68:16:9f:78:c9:94:2a:24:2a:27:0c:1b:f5:6f:d1: b2:06:b4:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29aU/9ckrsgQof3NC/E7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZmI3NzI3ZDY0YTUxOGM3Y2Q0ODVlNDgyM2VlNzhhOWUy OTEwMDgwHhcNMjYwMTI1MjEwMDUyWhcNMjYwMTI2MjEwMDUyWjAzMTEwLwYDVQQD Eyg4MTUyZjdhZmE5ZTBhNzZiNjZjMDQwNzEyYTg5NDc2YzA4ZTc1NGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wuGmMgTPi7Jx3TkgOMjzj4DN7EU +7C8uMHzN8VlyOeXLTE5rlbA+iL8PabDQZwueu8DGUECZiMih82MenZzYVos/xRf oiWT9z/4wjo3jkwg85ObFM41mbuOTd8bm6/gFr9IPfUnIUUUpAJ4F5y0ol9jloRS 6+wN7+fcO3S1e9+DUYR7AH64G1SVrtLMUXKHcjRPxdovf77XY3s4Ip9UhvUZ3Icl SYimi//1LmM/fvM/Dii0zjUB/IzSyA/ufPYHcy4kIzPtm8oD1+6XGxMtp3daYarK ojsmGSWWZBMd0lEzHbGho5Xh/S5wumZNLOc/KteVLVv9ZuSU1W9Z/XE0GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFS96+p4KdrZsBAcSqJR2wI51SyMB8GA1UdIwQY MBaAFGb7dyfWSlGMfNSF5II+54qeKRAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZ0M0o5WktVWXg4MUlYa2dqN25pcDRwRUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85OTU0NDktYTkwNS00ZTA2LWI4Mzkt N2MzYmRkYzI5NzhhLzEvWnZ0M0o5WktVWXg4MUlYa2dqN25pcDRwRUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS85OTU0NDktYTkwNS00ZTA2LWI4MzktN2MzYmRkYzI5Nzhh LzEvWnZ0M0o5WktVWXg4MUlYa2dqN25pcDRwRUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqUhBPc/ zllcW27KwQ/F1FrYPjW2Npl7Fi34Z/LKN5EU3FtZ4yWXG4hnXIO1MuZHzV+50Mpn GYBSPm0cX1yWDtZVL53SWPTFozXRzRBAjQUIQbab4uvRA5XYUtFkXyAY3HdiGjuc eMHjBE0fEl9A9HJq9bY5uvu29I7lixqg7AgnMDFppe8lFeAzj+1varCKe3OM7uau 1CRDl3oa5PCHaDZexBNvB8iP1OSHOPFgnJ3wOk4onKV38ynqKnEmDz93T1Sge6Po amRZY9rHpNwBEjqmFzIy3hOWdpc144mcuMYzFVMX/ooyUb0UlUY5aBafeMmUKiQq Jwwb9W/Rsga0Zg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:13:23 2026 by rpki-client