This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft File: Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft (raw, json) Hash identifier: EYh9OYuszs+LlnSqI4r+kTjjcjBy026sEOyw/mxO5+I= Subject key identifier: 85:95:A2:3A:1A:1C:5D:B9:8B:1E:45:5B:FF:38:B4:ED:D3:FB:8D:25 Authority key identifier: 66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30 Certificate issuer: /CN=66ec789976d3b584016cac19f34bbede966cd230 Certificate serial: 019BF989310F2CA3B4C512B136E04A2FDBC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 09:01:16 +0000 Manifest this update: Mon 26 Jan 2026 09:01:16 +0000 Manifest next update: Tue 27 Jan 2026 09:01:16 +0000 Files and hashes: 1: 1-bvTtCyxjhCFLcxNhXPNFp9zd4.roa (hash: UqrazJGk86AULwhwwPwABEyPtaaQCEyqIBdZnP4+jJA=) 2: Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl (hash: nnLou2aJJfdg5FExhOrfLe8i+cHmRvkuhPDU/On15wc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:89:31:0f:2c:a3:b4:c5:12:b1:36:e0:4a:2f:db:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ec789976d3b584016cac19f34bbede966cd230 Validity Not Before: Jan 26 09:01:16 2026 GMT Not After : Jan 27 09:01:16 2026 GMT Subject: CN=8595a23a1a1c5db98b1e455bff38b4edd3fb8d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5b:b6:0f:5d:6e:b0:90:f1:79:89:17:43:bd: 93:4a:f8:85:61:c6:31:f8:bb:09:6d:35:9a:10:8b: 09:b2:af:86:7c:0e:9a:e9:9f:0a:f3:95:b7:94:ea: a6:7b:83:cf:f5:c4:dc:0e:d2:11:52:3c:92:35:fc: 51:0b:c1:c4:bc:f3:e8:74:6a:fb:0e:98:e6:1f:fe: db:c5:9b:7e:13:27:94:1b:20:2e:ea:59:9a:25:39: 6a:33:1c:1f:12:6b:ff:6f:65:74:48:bc:99:e2:4e: 2e:6f:d7:0b:5b:cf:88:c4:59:c8:79:26:1d:9a:bc: 9b:9e:7c:f4:fa:93:4a:21:76:c4:4c:42:d4:de:17: ac:f3:68:a3:49:7a:14:80:71:9e:d7:7a:96:93:8d: ed:51:33:c8:fb:e2:76:49:d0:6a:60:86:3b:db:b6: d7:74:ec:b3:af:fb:50:a8:8a:2d:93:50:de:e3:9c: b9:cb:bb:5c:ce:64:62:2d:83:f3:8b:d4:ce:a1:d5: 6c:14:50:42:a2:0d:da:1e:17:74:5f:51:5e:d3:d6: d3:cb:ae:00:a3:31:10:ba:1f:89:47:23:39:fa:07: 62:25:0c:83:92:7f:cb:e1:30:59:07:76:cb:fb:e4: 0d:c5:12:2a:be:dd:11:9c:03:55:f1:bb:ad:42:db: 94:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:95:A2:3A:1A:1C:5D:B9:8B:1E:45:5B:FF:38:B4:ED:D3:FB:8D:25 X509v3 Authority Key Identifier: keyid:66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a9:91:04:ef:85:2b:ca:b3:00:d5:d9:fe:11:84:b8:0f:e8: 9c:ff:3e:f1:df:3e:cf:4c:30:62:1a:2c:17:43:e9:17:88:a3: 20:68:a7:1c:d2:fe:29:53:bd:f3:b0:c8:67:ed:a5:33:d6:5b: a2:7f:29:68:bc:08:14:8e:7f:c3:50:65:ca:b4:b0:1b:2c:34: 7e:d3:b2:a6:63:a1:df:5d:31:64:0e:85:f6:f5:db:d0:18:67: 73:e6:61:e0:6a:3d:0c:31:ed:8d:2f:bb:be:30:d9:57:74:b1: 23:ba:53:8c:10:19:72:ab:f2:80:d1:be:fc:6f:13:de:0f:5f: cc:c8:f9:a0:53:e4:5b:25:4d:ff:1f:79:f0:bb:23:c3:d3:a4: 9d:d6:c3:41:c7:43:e8:7a:a4:4b:20:07:2d:3d:a2:c4:58:8c: 42:d7:82:36:c9:1b:65:ee:d1:a7:6f:08:3f:ad:08:9b:4e:a7: e8:0e:b1:a9:57:01:fc:2f:43:7f:e3:03:19:32:98:62:a0:71: b6:c4:c6:60:89:b4:58:7b:ba:ed:9b:d1:7b:bf:06:87:25:b6: 8e:9c:58:b1:40:29:22:c5:04:ee:84:c0:85:94:9c:bf:03:d8: 13:45:6d:d8:e3:55:6f:3e:c3:13:01:90:c2:87:d0:81:13:2b: 42:bd:d5:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iTEPLKO0xRKxNuBKL9vFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZWM3ODk5NzZkM2I1ODQwMTZjYWMxOWYzNGJiZWRlOTY2 Y2QyMzAwHhcNMjYwMTI2MDkwMTE2WhcNMjYwMTI3MDkwMTE2WjAzMTEwLwYDVQQD Eyg4NTk1YTIzYTFhMWM1ZGI5OGIxZTQ1NWJmZjM4YjRlZGQzZmI4ZDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Vu2D11usJDxeYkXQ72TSviFYcYx +LsJbTWaEIsJsq+GfA6a6Z8K85W3lOqme4PP9cTcDtIRUjySNfxRC8HEvPPodGr7 DpjmH/7bxZt+EyeUGyAu6lmaJTlqMxwfEmv/b2V0SLyZ4k4ub9cLW8+IxFnIeSYd mrybnnz0+pNKIXbETELU3hes82ijSXoUgHGe13qWk43tUTPI++J2SdBqYIY727bX dOyzr/tQqIotk1De45y5y7tczmRiLYPzi9TOodVsFFBCog3aHhd0X1Fe09bTy64A ozEQuh+JRyM5+gdiJQyDkn/L4TBZB3bL++QNxRIqvt0RnANV8butQtuUuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWVojoaHF25ix5FW/84tO3T+40lMB8GA1UdIwQY MBaAFGbseJl207WEAWysGfNLvt6WbNIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnV4NG1YYlR0WVFCYkt3WjgwdS0zcFpzMGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wN2JmNWItMDM0MC00MzRlLWE0NDQt ZjA3NjFlMjllNmM0LzEvWnV4NG1YYlR0WVFCYkt3WjgwdS0zcFpzMGpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8wN2JmNWItMDM0MC00MzRlLWE0NDQtZjA3NjFlMjllNmM0 LzEvWnV4NG1YYlR0WVFCYkt3WjgwdS0zcFpzMGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqmRBO+F K8qzANXZ/hGEuA/onP8+8d8+z0wwYhosF0PpF4ijIGinHNL+KVO987DIZ+2lM9Zb on8paLwIFI5/w1BlyrSwGyw0ftOypmOh310xZA6F9vXb0Bhnc+Zh4Go9DDHtjS+7 vjDZV3SxI7pTjBAZcqvygNG+/G8T3g9fzMj5oFPkWyVN/x958Lsjw9OkndbDQcdD 6HqkSyAHLT2ixFiMQteCNskbZe7Rp28IP60Im06n6A6xqVcB/C9Df+MDGTKYYqBx tsTGYIm0WHu67ZvRe78GhyW2jpxYsUApIsUE7oTAhZScvwPYE0Vt2ONVbz7DEwGQ wofQgRMrQr3VLA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:42 2026 by rpki-client