This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft File: zt0NcV6X-5H3jQf-EGltpgFgURU.mft (raw, json) Hash identifier: KSIxunNLLFk5Fo/8xNxHw3gsGLALNgOZcPx4Ku0JhQE= Subject key identifier: 2B:EF:E6:DB:31:4F:C2:BC:75:3D:44:6A:70:52:FA:79:A9:B6:F7:54 Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15 Certificate issuer: /CN=cedd0d715e97fb91f78d07fe10696da601605115 Certificate serial: 019BF5750B056BBFE0F90536B718306A86BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft Manifest number: DD Signing time: Sun 25 Jan 2026 14:00:46 +0000 Manifest this update: Sun 25 Jan 2026 14:00:46 +0000 Manifest next update: Mon 26 Jan 2026 14:00:46 +0000 Files and hashes: 1: 0GQt42msx4vizl7HtWHLfw5qSa8.roa (hash: bzn+j1fcSJdqPe0KcolYkpontbgk+ZiuL92o100Y2DA=) 2: EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa (hash: HEnA/jjUwJsJS9frddwF7zCBLNyDgGbLAaT2mXeeKVM=) 3: zt0NcV6X-5H3jQf-EGltpgFgURU.crl (hash: D5BlZh3sO3uPXSw3TThvNOmeO0CbA9iSGUjlnmqwdWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:0b:05:6b:bf:e0:f9:05:36:b7:18:30:6a:86:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115 Validity Not Before: Jan 25 14:00:46 2026 GMT Not After : Jan 26 14:00:46 2026 GMT Subject: CN=2befe6db314fc2bc753d446a7052fa79a9b6f754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f4:2a:5f:d8:a8:3a:d1:bf:63:0d:7e:73:0a: e7:c1:5b:1d:81:bb:ea:19:1e:e8:07:ac:05:fd:5b: a9:6e:a8:58:6d:7a:23:13:2e:6d:93:dd:3f:b0:41: ae:85:85:26:32:1f:b2:21:25:74:db:4a:48:b0:ba: aa:ad:31:aa:5b:09:ca:67:00:fd:1e:d1:37:ab:4d: a2:31:82:27:11:51:4e:53:db:3e:e9:a3:99:3b:6c: b9:75:34:cb:2f:17:a1:37:03:dd:5d:59:75:7a:94: 13:1b:2e:3d:ab:c0:80:8d:21:e0:26:56:01:2c:7a: 83:97:87:29:70:18:5c:0c:6f:d3:de:d8:02:ae:2b: da:c8:8a:73:58:80:1d:e9:04:70:89:85:52:87:3c: 90:8d:96:98:53:a7:08:7c:20:5d:58:50:7e:cb:c7: ea:bd:80:79:6b:73:10:1a:c0:f1:88:8f:7b:ad:9a: ce:59:6d:f7:af:ae:51:8d:72:8b:af:f0:2c:3f:5f: 70:1e:80:44:83:d7:a1:0b:23:d8:f6:62:d4:94:c8: eb:67:63:0a:e2:6c:49:f6:24:27:db:27:e8:cd:c6: 2c:87:8d:1e:f0:1e:2e:fa:dc:71:03:13:85:0a:88: 94:33:70:29:04:ba:34:32:d8:67:5b:7d:dc:03:60: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EF:E6:DB:31:4F:C2:BC:75:3D:44:6A:70:52:FA:79:A9:B6:F7:54 X509v3 Authority Key Identifier: keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:69:3a:5b:49:a0:27:52:8b:4b:6b:cf:0b:58:ec:7e:92:9d: ac:d1:0d:b5:87:0d:81:c3:06:98:9a:ec:04:c6:53:50:f7:f7: 5c:08:d0:ca:84:b2:99:c5:36:23:df:dc:23:8f:2d:a1:85:8c: c6:54:0e:00:db:e7:e0:a9:f9:0c:36:7c:f2:61:b0:5a:4e:81: 51:dd:30:d6:d3:a7:dc:15:58:93:88:77:93:3e:7f:64:65:dc: 2b:34:ef:a5:c9:2a:f0:46:41:43:98:28:81:2f:65:dd:d3:9f: a5:9a:18:0a:40:62:75:4b:8c:25:78:42:b1:5e:15:50:a1:92: db:7b:92:a6:e1:1a:7b:4d:e0:14:43:fb:f8:72:6a:65:c3:0b: 62:0a:e3:21:d8:5d:c6:3d:6f:4e:1a:19:fd:10:e6:b1:d5:47: e2:4a:80:4c:c1:c4:ab:6a:86:47:e0:2c:d5:4e:fa:03:30:d1: 13:e7:34:22:18:c1:a6:10:ac:51:f8:35:3e:52:2e:b7:86:01: d8:da:9f:5c:e6:22:5d:a3:9a:ad:e8:80:db:07:04:92:b1:bb: 9d:14:91:a5:77:11:4a:54:4e:dd:9a:2a:4a:d8:b6:5b:4b:a3: db:6e:3c:d9:98:a7:34:95:f7:98:50:38:a0:c4:b0:81:e0:65: 3c:43:41:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dQsFa7/g+QU2txgwaoa7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZGQwZDcxNWU5N2ZiOTFmNzhkMDdmZTEwNjk2ZGE2MDE2 MDUxMTUwHhcNMjYwMTI1MTQwMDQ2WhcNMjYwMTI2MTQwMDQ2WjAzMTEwLwYDVQQD EygyYmVmZTZkYjMxNGZjMmJjNzUzZDQ0NmE3MDUyZmE3OWE5YjZmNzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvQqX9ioOtG/Yw1+cwrnwVsdgbvq GR7oB6wF/VupbqhYbXojEy5tk90/sEGuhYUmMh+yISV020pIsLqqrTGqWwnKZwD9 HtE3q02iMYInEVFOU9s+6aOZO2y5dTTLLxehNwPdXVl1epQTGy49q8CAjSHgJlYB LHqDl4cpcBhcDG/T3tgCrivayIpzWIAd6QRwiYVShzyQjZaYU6cIfCBdWFB+y8fq vYB5a3MQGsDxiI97rZrOWW33r65RjXKLr/AsP19wHoBEg9ehCyPY9mLUlMjrZ2MK 4mxJ9iQn2yfozcYsh40e8B4u+txxAxOFCoiUM3ApBLo0MthnW33cA2DGIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvv5tsxT8K8dT1EanBS+nmptvdUMB8GA1UdIwQY MBaAFM7dDXFel/uR940H/hBpbaYBYFEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenQwTmNWNlgtNUgzalFmLUVHbHRwZ0ZnVVJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zM2ExOWQtMmMwMy00NGQwLThjYmMt YWFmMzIxNzFlYWExLzEvenQwTmNWNlgtNUgzalFmLUVHbHRwZ0ZnVVJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8zM2ExOWQtMmMwMy00NGQwLThjYmMtYWFmMzIxNzFlYWEx LzEvenQwTmNWNlgtNUgzalFmLUVHbHRwZ0ZnVVJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWk6W0mg J1KLS2vPC1jsfpKdrNENtYcNgcMGmJrsBMZTUPf3XAjQyoSymcU2I9/cI48toYWM xlQOANvn4Kn5DDZ88mGwWk6BUd0w1tOn3BVYk4h3kz5/ZGXcKzTvpckq8EZBQ5go gS9l3dOfpZoYCkBidUuMJXhCsV4VUKGS23uSpuEae03gFEP7+HJqZcMLYgrjIdhd xj1vThoZ/RDmsdVH4kqATMHEq2qGR+As1U76AzDRE+c0IhjBphCsUfg1PlIut4YB 2NqfXOYiXaOareiA2wcEkrG7nRSRpXcRSlRO3ZoqSti2W0uj22482ZinNJX3mFA4 oMSwgeBlPENBBQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:34:04 2026 by rpki-client