This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft File: Zzs6cc93J1Wj34ztXXNRb4ccChE.mft (raw, json) Hash identifier: e/XuJcNddnWJdTj7ictfg160s80OMsnQc6Z23Q2Nyn4= Subject key identifier: 50:32:69:5A:18:04:F9:84:1F:2C:60:73:88:6E:AE:49:68:01:41:EF Authority key identifier: 67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11 Certificate issuer: /CN=673b3a71cf772755a3df8ced5d73516f871c0a11 Certificate serial: 019BF5E403EFAC271E22DA21EC00F4CA8E0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft Manifest number: 17E4 Signing time: Sun 25 Jan 2026 16:01:59 +0000 Manifest this update: Sun 25 Jan 2026 16:01:59 +0000 Manifest next update: Mon 26 Jan 2026 16:01:59 +0000 Files and hashes: 1: 8N34BaOhCoqWV6oqyyGnFC-M71k.roa (hash: iUxBbVztuFkPmYPKyF2deLjAauBd8PuICTkelG44e04=) 2: VUz0tSFCX_BRFTEGFOahzM8Zpf0.roa (hash: Cecy3QpWVDEErZPxgAgQ0Koma/ZxEa66HTh9jYt45cI=) 3: Zzs6cc93J1Wj34ztXXNRb4ccChE.crl (hash: v7s93XSewUwXhLRkvqEvgMu++0lPcitqtugAi/PJuWI=) 4: xIxV3QV0-KrN7rSzr-0HLG1i190.roa (hash: 8Bgn1Ips0oqsProytAnDAz5ffPqB6GHNefvHzifH3aI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e4:03:ef:ac:27:1e:22:da:21:ec:00:f4:ca:8e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673b3a71cf772755a3df8ced5d73516f871c0a11 Validity Not Before: Jan 25 16:01:59 2026 GMT Not After : Jan 26 16:01:59 2026 GMT Subject: CN=5032695a1804f9841f2c6073886eae49680141ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3d:49:53:aa:b9:f1:f0:29:70:b7:ed:64:d5: 94:f7:b2:52:ae:8e:60:b4:35:f6:e5:20:ad:94:aa: 07:e1:10:0e:8b:44:0d:c1:68:da:29:44:97:68:8e: 39:79:98:37:de:c2:d0:5d:43:7f:aa:62:0e:26:3a: 84:b1:4e:cd:6c:9d:53:15:4d:e7:fa:e1:5f:4d:95: a1:2f:f0:22:18:5e:a3:ad:66:6d:ff:78:79:c1:98: d0:aa:3d:42:6c:46:72:27:e3:be:18:15:41:c2:79: 83:83:2f:77:5c:1b:99:e5:53:41:13:40:28:34:ba: 7a:3c:28:c5:a8:7e:68:d7:d5:95:c5:6c:85:ed:ca: 4d:b9:11:61:de:2a:a1:a6:be:7d:01:e4:75:7c:3a: b9:c7:60:19:77:e8:90:1b:80:94:1b:9f:58:ef:15: e0:a7:35:b6:4b:6f:77:ba:e8:21:b0:ee:8e:51:bb: fc:48:bf:00:44:e3:25:74:fd:80:db:84:9a:2f:01: da:a9:6f:2d:de:7e:b7:37:25:4f:ad:c8:8f:94:ba: 27:0b:1b:04:66:73:9e:8e:2a:e7:b1:d6:f4:14:d6: 57:d4:cb:f2:07:45:8f:3b:ee:78:19:cf:0e:a3:bb: 3a:65:eb:05:b1:33:42:27:9e:7e:45:7f:4a:11:d6: 8b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:32:69:5A:18:04:F9:84:1F:2C:60:73:88:6E:AE:49:68:01:41:EF X509v3 Authority Key Identifier: keyid:67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a0:36:d7:0d:69:f3:98:dc:fc:d9:16:96:ee:8b:e8:c8:f2: b4:43:6a:e8:ec:e1:04:76:51:47:6a:3e:10:9c:c2:a2:c3:93: 34:a0:c5:8e:a9:10:8f:89:23:c8:cc:95:5f:12:61:54:71:da: f5:f0:b5:74:dc:a4:4f:d5:48:60:b7:bb:29:6d:c6:d8:a7:63: 6f:a3:ee:ff:8c:7a:82:0e:0b:d3:89:f2:fc:e0:42:58:ab:93: da:04:d5:93:fd:6c:53:08:30:6e:08:d3:f1:bd:d3:38:ff:9f: 71:0d:af:e0:c3:2f:d7:cc:c0:b8:de:29:de:bb:08:c1:aa:78: 13:3b:f1:15:f6:c0:1c:40:b6:96:2f:30:3e:37:8a:68:b0:e6: 16:fa:ca:72:ce:b1:b1:c1:3b:89:f6:34:0c:71:3a:e9:91:11: 35:cf:41:36:41:47:d3:46:f9:01:9c:a8:77:ea:8b:e5:81:b2: 54:6e:78:b1:42:41:93:43:4e:52:b1:4f:2f:3e:3d:c3:34:ab: 2e:73:bd:b0:17:1c:da:c9:f0:20:89:3b:95:8f:84:b4:39:ce: df:42:a9:87:e8:a1:a4:fc:dc:87:ef:90:6b:d8:d7:f0:eb:70: cb:52:0f:c7:fc:44:fa:f8:c8:e9:a8:b2:f3:45:52:d6:f2:76: 28:2e:be:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv15APvrCceItoh7AD0yo4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3M2IzYTcxY2Y3NzI3NTVhM2RmOGNlZDVkNzM1MTZmODcx YzBhMTEwHhcNMjYwMTI1MTYwMTU5WhcNMjYwMTI2MTYwMTU5WjAzMTEwLwYDVQQD Eyg1MDMyNjk1YTE4MDRmOTg0MWYyYzYwNzM4ODZlYWU0OTY4MDE0MWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz1JU6q58fApcLftZNWU97JSro5g tDX25SCtlKoH4RAOi0QNwWjaKUSXaI45eZg33sLQXUN/qmIOJjqEsU7NbJ1TFU3n +uFfTZWhL/AiGF6jrWZt/3h5wZjQqj1CbEZyJ+O+GBVBwnmDgy93XBuZ5VNBE0Ao NLp6PCjFqH5o19WVxWyF7cpNuRFh3iqhpr59AeR1fDq5x2AZd+iQG4CUG59Y7xXg pzW2S293uughsO6OUbv8SL8AROMldP2A24SaLwHaqW8t3n63NyVPrciPlLonCxsE ZnOejirnsdb0FNZX1MvyB0WPO+54Gc8Oo7s6ZesFsTNCJ55+RX9KEdaLMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAyaVoYBPmEHyxgc4hurkloAUHvMB8GA1UdIwQY MBaAFGc7OnHPdydVo9+M7V1zUW+HHAoRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnpzNmNjOTNKMVdqMzR6dFhYTlJiNGNjQ2hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jOTQ4NTUtNWIxYS00Zjk2LWI3YTEt NmZlMWYyOTRlNjI3LzEvWnpzNmNjOTNKMVdqMzR6dFhYTlJiNGNjQ2hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9jOTQ4NTUtNWIxYS00Zjk2LWI3YTEtNmZlMWYyOTRlNjI3 LzEvWnpzNmNjOTNKMVdqMzR6dFhYTlJiNGNjQ2hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmqA21w1p 85jc/NkWlu6L6MjytENq6OzhBHZRR2o+EJzCosOTNKDFjqkQj4kjyMyVXxJhVHHa 9fC1dNykT9VIYLe7KW3G2Kdjb6Pu/4x6gg4L04ny/OBCWKuT2gTVk/1sUwgwbgjT 8b3TOP+fcQ2v4MMv18zAuN4p3rsIwap4EzvxFfbAHEC2li8wPjeKaLDmFvrKcs6x scE7ifY0DHE66ZERNc9BNkFH00b5AZyod+qL5YGyVG54sUJBk0NOUrFPLz49wzSr LnO9sBcc2snwIIk7lY+EtDnO30Kph+ihpPzch++Qa9jX8Otwy1IPx/xE+vjI6aiy 80VS1vJ2KC6+AA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:34 2026 by rpki-client