This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft File: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json) Hash identifier: ZYp3r+CSuhRrAE2Fh8DBFfXBD7b+mhq14Ze5mvZEZD8= Subject key identifier: 2C:D6:80:CD:67:7D:61:A0:A0:A8:FB:A2:4A:8B:62:A1:1C:C6:E9:D7 Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08 Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08 Certificate serial: 019BF5752AEF0E4803160B2E38293DFF6A36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 14:00:54 +0000 Manifest this update: Sun 25 Jan 2026 14:00:54 +0000 Manifest next update: Mon 26 Jan 2026 14:00:54 +0000 Files and hashes: 1: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: El8w4a3xZQzDsI+Orc/MkssgUu4ZhzyFFmF6Xi/2ENA=) 2: h6wK8goVzqXqo6disZWfZSM1h-0.roa (hash: //0LSaRijgEKQyrnrrd5pf5seu/x01T0Rwf4/noBXTQ=) 3: w7NAr2u_fskJOiH5ZL_DBig50oc.roa (hash: S337FZgQBWH3kGuKNK3U/HNaRNmRFoOB+d+zWxnLtV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:2a:ef:0e:48:03:16:0b:2e:38:29:3d:ff:6a:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08 Validity Not Before: Jan 25 14:00:54 2026 GMT Not After : Jan 26 14:00:54 2026 GMT Subject: CN=2cd680cd677d61a0a0a8fba24a8b62a11cc6e9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:52:46:be:c7:85:20:be:26:e5:a8:20:12:ec: f9:0b:3e:1c:66:a9:b8:44:11:7c:b3:f6:43:8f:f5: 08:4f:13:c6:d7:24:8e:6d:4d:2f:2e:fe:c8:c6:45: da:f3:40:2b:05:19:52:48:24:d2:e8:f4:58:ef:31: f8:cf:21:c7:4b:06:d3:88:be:98:c9:63:c5:2d:57: 8c:8a:00:1c:61:7f:0f:bb:48:63:36:6a:2a:fd:39: f7:40:cb:3b:84:ff:69:a1:97:60:31:ef:ff:be:09: a5:64:01:25:5b:d8:43:35:1b:f1:b3:4c:50:4f:e7: f4:ce:f4:44:9e:b1:2a:d7:f0:1f:d0:73:fe:69:2c: c8:bd:35:e8:70:44:f1:0c:04:45:e4:e9:be:fd:b8: 60:7c:6d:dc:a1:eb:b0:3f:cf:76:6d:68:43:f3:58: f6:1b:c2:c0:c4:c9:42:94:40:6c:01:37:7f:56:17: fd:5b:15:aa:12:aa:79:df:16:60:65:09:8b:67:4c: fc:b8:d9:7d:4b:a7:e1:2e:06:20:b5:22:34:f8:0a: b5:9f:9e:a5:67:88:ff:d3:a7:a7:55:03:46:59:84: 94:ff:9b:15:6a:74:94:6c:16:28:95:92:67:c6:40: 1c:61:a0:b9:94:33:87:e7:b5:b3:0a:ab:d4:d6:99: 1c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D6:80:CD:67:7D:61:A0:A0:A8:FB:A2:4A:8B:62:A1:1C:C6:E9:D7 X509v3 Authority Key Identifier: keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:99:40:af:89:64:93:aa:5a:d2:e2:38:66:f3:dc:d3:b0:8c: ae:3e:72:39:aa:0b:ff:02:fd:1a:76:7e:27:ea:0a:d3:76:87: 4d:08:52:ef:69:11:69:f5:6a:cb:28:a5:1a:cb:d3:e0:95:19: 83:6b:ae:e0:37:48:34:a2:b2:9b:74:71:c1:10:d6:b8:38:50: 86:4b:15:0e:fb:a7:80:7b:74:d2:ab:6e:18:a8:9f:fb:79:b2: 3a:45:fb:1d:8d:d6:45:02:6a:2f:c1:45:c6:8d:ae:f4:85:71: 3d:18:55:5f:98:8b:22:e8:39:32:d5:b3:fc:f3:9d:cf:0b:d6: 6b:db:42:6e:bf:ff:79:72:72:13:42:3f:0e:e3:f5:ef:fd:2a: e2:f3:b3:80:ca:00:d5:b3:cd:f6:7d:62:5e:1c:aa:2b:f7:66: 10:9f:26:92:4e:56:be:b4:ce:a7:2a:d0:b4:1f:92:b8:ec:c9: 8c:04:72:8e:4c:a0:81:c1:1e:c9:cf:5b:f8:85:01:8e:37:b8: 65:52:fc:7b:8e:5c:30:65:ea:58:8c:a6:ee:c2:2f:8a:18:66: 85:e3:f6:f1:83:5e:10:d2:7a:ca:79:b8:fe:b4:1c:37:cd:fd: 6a:b5:b1:62:67:84:2c:4b:8c:f9:ce:b5:5b:fa:ca:2b:b4:77: 1e:0c:cf:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dSrvDkgDFgsuOCk9/2o2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MTIxYzNmOTIwN2EzNzM0NWUzODcwMmM4OWQxNzliZjQ0 NGFhMDgwHhcNMjYwMTI1MTQwMDU0WhcNMjYwMTI2MTQwMDU0WjAzMTEwLwYDVQQD EygyY2Q2ODBjZDY3N2Q2MWEwYTBhOGZiYTI0YThiNjJhMTFjYzZlOWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1JGvseFIL4m5aggEuz5Cz4cZqm4 RBF8s/ZDj/UITxPG1ySObU0vLv7IxkXa80ArBRlSSCTS6PRY7zH4zyHHSwbTiL6Y yWPFLVeMigAcYX8Pu0hjNmoq/Tn3QMs7hP9poZdgMe//vgmlZAElW9hDNRvxs0xQ T+f0zvREnrEq1/Af0HP+aSzIvTXocETxDARF5Om+/bhgfG3coeuwP892bWhD81j2 G8LAxMlClEBsATd/Vhf9WxWqEqp53xZgZQmLZ0z8uNl9S6fhLgYgtSI0+Aq1n56l Z4j/06enVQNGWYSU/5sVanSUbBYolZJnxkAcYaC5lDOH57WzCqvU1pkc+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzWgM1nfWGgoKj7okqLYqEcxunXMB8GA1UdIwQY MBaAFGUSHD+SB6NzReOHAsidF5v0RKoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYt NDhkM2NhMTYxYmIwLzEvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYtNDhkM2NhMTYxYmIw LzEvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5lAr4lk k6pa0uI4ZvPc07CMrj5yOaoL/wL9GnZ+J+oK03aHTQhS72kRafVqyyilGsvT4JUZ g2uu4DdINKKym3RxwRDWuDhQhksVDvungHt00qtuGKif+3myOkX7HY3WRQJqL8FF xo2u9IVxPRhVX5iLIug5MtWz/POdzwvWa9tCbr//eXJyE0I/DuP17/0q4vOzgMoA 1bPN9n1iXhyqK/dmEJ8mkk5WvrTOpyrQtB+SuOzJjARyjkyggcEeyc9b+IUBjje4 ZVL8e45cMGXqWIym7sIvihhmheP28YNeENJ6ynm4/rQcN839arWxYmeELEuM+c61 W/rKK7R3HgzP4Q== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:34 2026 by rpki-client