This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft File: ZZprl16v0s5RRocjgUNV9WxVuvs.mft (raw, json) Hash identifier: TONLxrKNeTkdK8XIzEQttUzmmvrLSBlbNkX0cRfXoqg= Subject key identifier: 6F:5A:C2:13:02:E0:77:CF:CF:FF:5C:6E:8C:B9:6F:87:42:C9:AC:0F Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB Certificate issuer: /CN=659a6b975eafd2ce51468723814355f56c55bafb Certificate serial: 019BF574D9A8729CC90CE2B620D277A4A2FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 14:00:34 +0000 Manifest this update: Sun 25 Jan 2026 14:00:34 +0000 Manifest next update: Mon 26 Jan 2026 14:00:34 +0000 Files and hashes: 1: Bge4UQP__-DVB-KXu8QE0dyV_no.roa (hash: empz0X3iGWbWnVRP0ZliKC+Au9jenyd1vXKmWTaIsLA=) 2: Jz_svkdguP3AXC17Oc-v9vpSLo0.roa (hash: nZ1Y4RSNexYF/KVR8IvOZJPdDsAC2m7rxHaUZuQNyXw=) 3: ZZprl16v0s5RRocjgUNV9WxVuvs.crl (hash: lb0RwTFWUrc8FtXlS+n+Y8jQ870Rz1PoGwPpcN65MwM=) 4: k-0ai5LmPbShGWzhq7tl3QEV5xg.roa (hash: lX1a4+6IcJDs034Yg/uu30HJfCoVoIaGwoVAFeOpt4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:d9:a8:72:9c:c9:0c:e2:b6:20:d2:77:a4:a2:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb Validity Not Before: Jan 25 14:00:34 2026 GMT Not After : Jan 26 14:00:34 2026 GMT Subject: CN=6f5ac21302e077cfcfff5c6e8cb96f8742c9ac0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3e:ff:5e:9c:2c:4a:b2:8b:50:58:24:94:ad: 8b:00:b4:b2:e9:32:75:fb:8f:fe:d2:c1:e9:de:89: 90:41:0c:b9:d1:e5:99:9c:62:ec:62:19:26:a8:24: 16:50:f2:4c:c5:64:a1:99:2f:c2:8b:81:4a:cf:a7: d7:e2:9b:f7:12:35:4e:93:0a:ca:b9:b7:eb:85:fd: c8:14:76:77:61:44:3d:02:f3:8c:f7:be:1b:d7:d7: e2:2f:13:2c:e5:f4:1d:76:5d:7b:aa:e4:b5:69:14: 2c:ba:b2:b8:49:3c:eb:f3:7a:41:a4:63:9f:0d:d4: cc:97:9b:30:bc:e4:f7:81:41:df:96:32:a8:27:de: 8c:75:4f:71:88:0a:2d:96:58:51:c3:3b:0a:ae:95: e3:93:f2:26:13:38:41:1b:c0:9a:56:58:3e:d9:5d: 0e:9f:2e:45:de:e3:c7:6f:b2:37:34:63:3c:39:3c: 3b:ad:f5:f8:f5:18:86:cf:d8:9b:7b:56:8e:af:f2: 59:8c:19:55:af:de:33:4e:87:92:22:dc:fd:ed:f8: 5c:18:02:71:96:7e:d5:15:57:44:b5:ee:83:85:05: 6b:3e:ca:dc:c8:65:35:82:33:a4:3d:90:12:a0:5c: 15:18:38:91:c5:c5:ab:a8:35:f8:0c:3b:ef:23:5a: ae:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5A:C2:13:02:E0:77:CF:CF:FF:5C:6E:8C:B9:6F:87:42:C9:AC:0F X509v3 Authority Key Identifier: keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:90:63:7c:6c:ef:10:f1:2b:a3:47:56:a1:6e:b0:23:0d:14: f4:b0:6a:61:09:36:82:a6:a7:83:99:35:5b:9d:59:f6:e1:26: 75:b1:a2:bf:1a:ac:d6:26:bb:24:32:75:8c:07:db:6d:1a:88: 13:28:46:d1:46:64:b1:a1:34:b5:e5:76:30:72:70:ea:01:c3: 5b:b4:8d:0d:6f:f3:5a:15:4d:c6:2f:63:c2:d1:5f:f8:c1:1b: cb:41:12:c9:b0:78:bf:cb:67:35:5a:9f:a3:c7:07:c3:a1:46: 2e:98:04:24:31:9b:02:de:53:38:f7:dd:04:47:4c:4a:0b:6e: fc:34:5e:bf:1c:c2:2a:d4:d4:0a:9f:51:ca:b9:41:1e:45:1a: 57:50:3c:3f:70:9b:16:38:21:98:00:c4:c0:c9:96:de:cf:e3: 93:ef:c9:7c:be:0b:72:b6:26:81:e6:c8:e8:77:16:48:5a:15: e2:ef:cd:36:b9:b6:4b:0c:81:27:fd:45:48:26:aa:a3:32:c0: e8:52:14:59:51:12:6b:d7:75:70:61:d8:95:f7:57:8e:d8:7b: 98:97:73:fc:10:ae:31:bc:86:24:9f:10:dd:0a:32:9a:f2:f8: e4:05:dc:a0:46:75:23:06:fd:85:76:74:4b:2d:a7:d6:e2:81: 06:8d:52:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dNmocpzJDOK2INJ3pKL6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OWE2Yjk3NWVhZmQyY2U1MTQ2ODcyMzgxNDM1NWY1NmM1 NWJhZmIwHhcNMjYwMTI1MTQwMDM0WhcNMjYwMTI2MTQwMDM0WjAzMTEwLwYDVQQD Eyg2ZjVhYzIxMzAyZTA3N2NmY2ZmZjVjNmU4Y2I5NmY4NzQyYzlhYzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz7/XpwsSrKLUFgklK2LALSy6TJ1 +4/+0sHp3omQQQy50eWZnGLsYhkmqCQWUPJMxWShmS/Ci4FKz6fX4pv3EjVOkwrK ubfrhf3IFHZ3YUQ9AvOM974b19fiLxMs5fQddl17quS1aRQsurK4STzr83pBpGOf DdTMl5swvOT3gUHfljKoJ96MdU9xiAotllhRwzsKrpXjk/ImEzhBG8CaVlg+2V0O ny5F3uPHb7I3NGM8OTw7rfX49RiGz9ibe1aOr/JZjBlVr94zToeSItz97fhcGAJx ln7VFVdEte6DhQVrPsrcyGU1gjOkPZASoFwVGDiRxcWrqDX4DDvvI1quZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9awhMC4HfPz/9cboy5b4dCyawPMB8GA1UdIwQY MBaAFGWaa5der9LOUUaHI4FDVfVsVbr7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xNzA0MjItMzlhZC00OTljLWJiZmQt ZWZmM2NkY2JkMDBhLzEvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xNzA0MjItMzlhZC00OTljLWJiZmQtZWZmM2NkY2JkMDBh LzEvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpBjfGzv EPEro0dWoW6wIw0U9LBqYQk2gqang5k1W51Z9uEmdbGivxqs1ia7JDJ1jAfbbRqI EyhG0UZksaE0teV2MHJw6gHDW7SNDW/zWhVNxi9jwtFf+MEby0ESybB4v8tnNVqf o8cHw6FGLpgEJDGbAt5TOPfdBEdMSgtu/DRevxzCKtTUCp9RyrlBHkUaV1A8P3Cb FjghmADEwMmW3s/jk+/JfL4LcrYmgebI6HcWSFoV4u/NNrm2SwyBJ/1FSCaqozLA 6FIUWVESa9d1cGHYlfdXjth7mJdz/BCuMbyGJJ8Q3QoymvL45AXcoEZ1Iwb9hXZ0 Sy2n1uKBBo1SjQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:48 2026 by rpki-client