This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft File: ZtioTw6M91UTepaA68xPzNIKNLI.mft (raw, json) Hash identifier: 18MAFpWYon0p8gzy7KiWlB0osIxh88w0ThKLqV3dajA= Subject key identifier: F0:4B:21:F3:58:6B:CA:3D:F1:7B:B3:8B:0E:C7:61:CD:B0:97:B5:E7 Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2 Certificate issuer: /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2 Certificate serial: 019BF8760D0FD4E76809A4B8084A05190CFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 04:00:44 +0000 Manifest this update: Mon 26 Jan 2026 04:00:44 +0000 Manifest next update: Tue 27 Jan 2026 04:00:44 +0000 Files and hashes: 1: ZtioTw6M91UTepaA68xPzNIKNLI.crl (hash: XcOMkX4OzAEQm9UayOp7iIn0AH6qG/kUOe5PaQbxjv8=) 2: b_fQMMIwgcaDVvrW1QJiiKgK99E.roa (hash: 5m44p3jiNkF4BUf5irvaCSsfFFem9Luxqo/TF+/TMP8=) 3: mV9MWpcQWw7tz8nlpuIIL7oc2lc.roa (hash: +lEUUbEYnK/7Zucwaic58QysHSy4TqrPimG1kc7IW2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:0d:0f:d4:e7:68:09:a4:b8:08:4a:05:19:0c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2 Validity Not Before: Jan 26 04:00:44 2026 GMT Not After : Jan 27 04:00:44 2026 GMT Subject: CN=f04b21f3586bca3df17bb38b0ec761cdb097b5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0a:ba:04:f5:a7:d7:db:77:c1:87:c4:8b:23: 19:f7:1e:09:55:96:24:9e:1b:a8:98:07:6c:9b:53: 00:a0:8c:8a:d4:a9:8c:f9:89:af:50:3a:7d:ea:33: e1:ab:6c:4c:6c:52:53:c1:19:b5:1a:93:20:c4:78: cd:a4:86:eb:b1:f6:98:a3:af:35:ec:7c:b7:34:8e: 6a:06:7c:c5:e0:2f:77:ca:db:b0:46:e8:8e:d0:6c: c8:34:b4:e7:2b:ae:9f:b2:61:82:c6:ea:bb:2c:2e: ed:37:8a:b4:bc:53:86:d6:0f:23:9a:41:b4:91:62: 66:61:07:60:b9:41:e8:65:aa:90:71:14:40:17:4e: 65:5c:a8:62:40:79:e4:e3:a4:fd:8b:f8:19:25:49: c4:0d:fe:f5:c4:e4:0b:3c:32:58:cc:38:df:90:88: 8d:09:a7:11:16:fb:9e:ef:d8:23:d1:24:5f:ef:ab: 43:22:bd:ec:5c:16:b9:bb:f1:68:69:70:3f:b9:ee: ff:28:56:89:9f:dd:b2:59:d6:54:78:2b:aa:7c:1c: 6c:fb:bd:61:c5:db:b9:6f:9e:19:7a:fc:8a:54:3f: 3b:51:e3:15:c8:16:52:32:10:d4:69:3f:5d:14:00: d4:f0:cb:3d:42:d5:a7:e8:d8:58:43:05:b2:10:3f: 9e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4B:21:F3:58:6B:CA:3D:F1:7B:B3:8B:0E:C7:61:CD:B0:97:B5:E7 X509v3 Authority Key Identifier: keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:14:14:1a:8a:36:ee:e7:33:b9:5f:04:01:92:75:97:da:97: df:38:63:03:a0:94:85:b3:61:a9:da:44:f1:db:8c:8b:28:ea: 51:3a:d2:49:28:3f:4f:0b:04:ef:d4:2a:2e:5d:73:65:fe:70: 71:da:b3:ed:98:a1:8d:92:4d:8b:62:a0:36:c3:9a:3c:bb:3a: 61:c6:21:15:bb:f3:91:95:28:a7:79:76:7e:25:40:90:14:58: a6:a6:3c:dc:60:ad:78:27:2f:bb:ff:4b:fa:db:bc:05:58:ca: b7:92:9e:a4:f6:cb:9e:e3:4f:3d:cf:b4:22:30:35:49:08:c2: c8:77:75:ef:1b:aa:18:9f:81:0f:f7:08:f0:4a:64:7f:be:5c: ca:38:4b:d3:ca:b4:c6:3c:86:82:7c:f5:d4:55:1f:c5:2f:8b: 79:51:ae:74:33:2d:69:45:7f:16:0f:2f:c9:3f:97:53:db:1d: 63:bd:4d:2a:cf:f3:24:72:1e:92:3a:a4:25:6c:9e:54:c5:11: f2:52:ce:a4:45:90:df:30:21:09:4b:c8:90:fb:dc:71:6f:ef: 8a:8c:e5:fe:8f:c6:38:89:d6:4c:13:09:d7:00:44:30:d6:34: 1f:6f:6a:3b:fa:59:43:08:e6:61:cc:f1:b1:b7:dc:ae:5d:9d: 03:cb:0b:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dg0P1OdoCaS4CEoFGQz8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDhhODRmMGU4Y2Y3NTUxMzdhOTY4MGViY2M0ZmNjZDIw YTM0YjIwHhcNMjYwMTI2MDQwMDQ0WhcNMjYwMTI3MDQwMDQ0WjAzMTEwLwYDVQQD EyhmMDRiMjFmMzU4NmJjYTNkZjE3YmIzOGIwZWM3NjFjZGIwOTdiNWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQq6BPWn19t3wYfEiyMZ9x4JVZYk nhuomAdsm1MAoIyK1KmM+YmvUDp96jPhq2xMbFJTwRm1GpMgxHjNpIbrsfaYo681 7Hy3NI5qBnzF4C93ytuwRuiO0GzINLTnK66fsmGCxuq7LC7tN4q0vFOG1g8jmkG0 kWJmYQdguUHoZaqQcRRAF05lXKhiQHnk46T9i/gZJUnEDf71xOQLPDJYzDjfkIiN CacRFvue79gj0SRf76tDIr3sXBa5u/FoaXA/ue7/KFaJn92yWdZUeCuqfBxs+71h xdu5b54ZevyKVD87UeMVyBZSMhDUaT9dFADU8Ms9QtWn6NhYQwWyED+e9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBLIfNYa8o98Xuziw7HYc2wl7XnMB8GA1UdIwQY MBaAFGbYqE8OjPdVE3qWgOvMT8zSCjSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81ZDVjYzUtOWQ5OC00MTVhLWFiMGUt YWExNDgxZjBjMTNhLzEvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81ZDVjYzUtOWQ5OC00MTVhLWFiMGUtYWExNDgxZjBjMTNh LzEvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxQUGoo2 7uczuV8EAZJ1l9qX3zhjA6CUhbNhqdpE8duMiyjqUTrSSSg/TwsE79QqLl1zZf5w cdqz7ZihjZJNi2KgNsOaPLs6YcYhFbvzkZUop3l2fiVAkBRYpqY83GCteCcvu/9L +tu8BVjKt5KepPbLnuNPPc+0IjA1SQjCyHd17xuqGJ+BD/cI8Epkf75cyjhL08q0 xjyGgnz11FUfxS+LeVGudDMtaUV/Fg8vyT+XU9sdY71NKs/zJHIekjqkJWyeVMUR 8lLOpEWQ3zAhCUvIkPvccW/viozl/o/GOInWTBMJ1wBEMNY0H29qO/pZQwjmYczx sbfcrl2dA8sLXw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:53 2026 by rpki-client