This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft File: ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft (raw, json) Hash identifier: 7VTFPcQv1YeHcXHkDsMam0FQs6QWbxGALApsDMM/tTc= Subject key identifier: 3D:14:60:E3:84:04:A3:58:EB:24:B4:89:42:9B:DF:5F:06:97:90:E4 Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20 Certificate issuer: /CN=64f47c98440f103825c8ea5074298b18cc113e20 Certificate serial: 019BF6F598D205CA3C4E8246958BF6C0E927 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 21:00:49 +0000 Manifest this update: Sun 25 Jan 2026 21:00:49 +0000 Manifest next update: Mon 26 Jan 2026 21:00:49 +0000 Files and hashes: 1: 6tdMfiVa3cKe46M4k5y3OEU-0kg.roa (hash: 44GC5xCfFwQMGtqX+b63dvhuM3/qeBXPPvsf+/uIBlU=) 2: HEoJzyQgpbE2dOnYnIQsCFAqMqU.roa (hash: QpTgQ2IqAcbkzWSPs4SEjRf+cwV/9JVPxh15R54dMfM=) 3: RVPSSQ_STAwnjwbhc0ZtFnWXlME.roa (hash: RI/5deS9UCE1pvE5zocvnVN9prAAZK7M1PVQemjzz0o=) 4: ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl (hash: /CR76PJBzoOJozOnzgFcSU3xlQwlCFNi/f0y6D3S0vc=) 5: ZhqdIbRW83p_kVddHzSA0nllaKo.roa (hash: Qcxsup91V7dxCaN8e4ZDLUgf9T3gBRakSNv6xOPFLuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:98:d2:05:ca:3c:4e:82:46:95:8b:f6:c0:e9:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20 Validity Not Before: Jan 25 21:00:49 2026 GMT Not After : Jan 26 21:00:49 2026 GMT Subject: CN=3d1460e38404a358eb24b489429bdf5f069790e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b4:1d:64:1d:89:4c:87:66:4d:c7:bc:49:58: 6d:03:c2:33:f6:6a:30:51:03:e8:18:25:4b:7b:7a: 3a:02:13:58:a4:f3:91:6a:52:7e:21:cf:ee:b9:50: 80:52:25:fa:2e:c4:5b:30:a3:ce:64:e3:5a:19:ff: 16:46:16:71:7b:35:13:81:4e:94:e5:65:dd:a3:6f: 6c:3b:cc:34:5e:b8:25:e8:b6:c6:b3:b3:8e:0e:b7: a5:e3:43:1e:e3:05:9f:1d:ea:f6:2a:dc:52:77:c8: 60:ee:4a:e9:75:04:5a:c6:ce:df:f4:57:58:7d:a3: d2:f2:03:13:64:7c:aa:09:33:a2:59:0d:ce:e0:5a: 4d:f7:56:34:89:04:74:28:3e:2c:9d:6e:51:33:56: b7:3f:22:6e:f6:2d:71:3e:1d:40:76:64:a1:bd:68: c7:c5:bc:b0:39:85:c1:76:a4:fd:d1:09:8e:6c:3b: 73:44:50:be:fd:5b:4d:04:26:f1:91:a4:b4:d8:1e: d2:9e:e0:20:8c:25:01:22:71:51:4f:f6:e9:2f:a3: aa:fe:da:f4:99:c9:da:25:7c:0b:55:03:31:2b:04: 28:22:5a:87:13:34:16:07:b2:5a:85:e3:51:5b:68: 62:3e:a7:1c:ec:a3:54:97:dd:82:b0:e6:59:a9:31: 8c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:14:60:E3:84:04:A3:58:EB:24:B4:89:42:9B:DF:5F:06:97:90:E4 X509v3 Authority Key Identifier: keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:9d:32:61:c4:2b:fb:c0:57:91:86:b6:2b:51:60:48:68:05: 1b:5d:1b:81:1d:b6:7e:8a:fe:24:b3:d7:34:31:10:4b:5d:91: b9:f0:a6:c6:7f:ce:5a:e4:ce:90:fb:ec:e5:13:36:32:16:df: e5:fa:67:5a:d5:6c:5a:63:dc:9f:32:1d:ee:76:49:1a:71:f8: 10:bb:95:75:b5:80:8e:ce:d7:c6:1a:56:8b:07:1a:d8:a7:26: 5e:62:bb:83:23:cc:d0:d8:ce:41:8e:49:57:c7:c2:53:d6:b0: 78:9b:71:ad:03:4e:54:4e:f5:91:8e:98:ac:80:c2:d7:15:3f: 6e:7e:af:1b:0d:82:44:b0:e1:08:27:b1:2e:51:a8:36:c8:63: b0:77:93:d6:82:57:ef:56:9a:bc:26:6c:23:94:96:eb:7a:60: 95:75:5c:cd:f4:88:fb:ee:f5:6e:85:6c:fa:fb:66:e6:dd:f9: ff:75:d5:59:df:70:c0:6c:e4:d2:74:b1:4d:0d:53:76:e4:47: 3b:9f:73:6a:83:e5:59:2d:f3:95:33:88:fd:f6:ba:9f:52:26: 01:24:aa:ab:01:7b:71:ec:25:9b:cd:05:7c:16:bb:05:92:b7: c8:b1:3b:d1:9b:e6:a8:81:8c:c8:24:b1:b2:12:ea:69:de:5c: ab:c3:27:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29ZjSBco8ToJGlYv2wOknMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZjQ3Yzk4NDQwZjEwMzgyNWM4ZWE1MDc0Mjk4YjE4Y2Mx MTNlMjAwHhcNMjYwMTI1MjEwMDQ5WhcNMjYwMTI2MjEwMDQ5WjAzMTEwLwYDVQQD EygzZDE0NjBlMzg0MDRhMzU4ZWIyNGI0ODk0MjliZGY1ZjA2OTc5MGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37QdZB2JTIdmTce8SVhtA8Iz9mow UQPoGCVLe3o6AhNYpPORalJ+Ic/uuVCAUiX6LsRbMKPOZONaGf8WRhZxezUTgU6U 5WXdo29sO8w0Xrgl6LbGs7OODrel40Me4wWfHer2KtxSd8hg7krpdQRaxs7f9FdY faPS8gMTZHyqCTOiWQ3O4FpN91Y0iQR0KD4snW5RM1a3PyJu9i1xPh1AdmShvWjH xbywOYXBdqT90QmObDtzRFC+/VtNBCbxkaS02B7SnuAgjCUBInFRT/bpL6Oq/tr0 mcnaJXwLVQMxKwQoIlqHEzQWB7JaheNRW2hiPqcc7KNUl92CsOZZqTGM0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0UYOOEBKNY6yS0iUKb318Gl5DkMB8GA1UdIwQY MBaAFGT0fJhEDxA4JcjqUHQpixjMET4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBSOG1FUVBFRGdseU9wUWRDbUxHTXdSUGlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTlhZWItYzcxMy00MmY4LTkxZDYt Mzg0NDc4NTVkNjY5LzEvWlBSOG1FUVBFRGdseU9wUWRDbUxHTXdSUGlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTlhZWItYzcxMy00MmY4LTkxZDYtMzg0NDc4NTVkNjY5 LzEvWlBSOG1FUVBFRGdseU9wUWRDbUxHTXdSUGlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhp0yYcQr +8BXkYa2K1FgSGgFG10bgR22for+JLPXNDEQS12RufCmxn/OWuTOkPvs5RM2Mhbf 5fpnWtVsWmPcnzId7nZJGnH4ELuVdbWAjs7XxhpWiwca2KcmXmK7gyPM0NjOQY5J V8fCU9aweJtxrQNOVE71kY6YrIDC1xU/bn6vGw2CRLDhCCexLlGoNshjsHeT1oJX 71aavCZsI5SW63pglXVczfSI++71boVs+vtm5t35/3XVWd9wwGzk0nSxTQ1TduRH O59zaoPlWS3zlTOI/fa6n1ImASSqqwF7cewlm80FfBa7BZK3yLE70ZvmqIGMyCSx shLqad5cq8Mn9w== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:28 2026 by rpki-client