This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json) Hash identifier: zK2KsgmmSagehC/3ga7O6vFgsy/Xb5HjglndYR5KYyc= Subject key identifier: 65:9F:5E:E5:4C:46:22:C2:DC:90:1B:88:38:BD:26:62:2D:D5:D7:E1 Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb Certificate serial: 019BF462A98C46F67E3CE7EC91BD40A55096 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft Manifest number: 1504 Signing time: Sun 25 Jan 2026 09:01:05 +0000 Manifest this update: Sun 25 Jan 2026 09:01:05 +0000 Manifest next update: Mon 26 Jan 2026 09:01:05 +0000 Files and hashes: 1: 3dDFlJIiwev5JNzj0uspF-q-hAM.roa (hash: 2MPQXp2XuzXpOvR5MvmUSNMeQLpCxYJhhEk2RjVnZhI=) 2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: uPHV3ZdM+lndypICDjecKqyWUhvxRY6g0K3SyA6HdmU=) 3: tXb-ZOETTYTckpb9Qysc1kmvy6I.roa (hash: ecwsDlNutKSR5EQe4HHz/G8gZ+2PHPrWaHUQyPF5OHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:a9:8c:46:f6:7e:3c:e7:ec:91:bd:40:a5:50:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb Validity Not Before: Jan 25 09:01:05 2026 GMT Not After : Jan 26 09:01:05 2026 GMT Subject: CN=659f5ee54c4622c2dc901b8838bd26622dd5d7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7d:83:37:be:01:6a:62:1c:46:23:e5:b4:55: 72:49:43:1d:9a:7b:63:ca:b8:ae:af:d3:a5:44:f6: ba:3f:5b:74:ad:f4:69:33:63:5c:92:ac:6a:d9:5f: cc:a0:60:c9:ae:37:4d:f5:e4:5c:be:04:de:a3:f3: 1b:4a:85:ee:ff:89:f3:b8:e8:e6:3a:ed:91:7d:57: c4:16:5b:d8:39:e5:05:86:77:d2:db:e0:c5:19:1a: a6:c0:46:c3:62:73:53:94:42:cf:53:e1:0e:76:e7: fc:36:4d:21:2d:a4:a5:58:c7:c3:5b:da:89:88:a2: 80:a1:3e:cc:b4:4a:f2:a3:ac:9c:35:6c:36:f4:ab: 45:b5:0e:06:9b:25:d4:01:0b:c6:d6:71:d5:79:4a: c2:e6:63:b5:b4:3b:ba:fb:ba:3b:5f:99:db:29:75: be:55:10:88:94:02:cc:04:e8:01:fd:a3:9e:99:76: a4:35:24:c1:c7:0c:5a:4f:74:0b:0a:29:12:62:be: 89:33:e7:21:1e:ac:fc:dd:b2:df:6c:9f:87:59:64: c6:0e:d0:31:41:41:ae:a4:7c:e6:e6:78:a8:0e:33: c1:72:cc:f4:53:03:78:78:be:a6:ba:f2:1d:20:92: 28:1f:f0:9d:d8:39:0a:81:6a:20:f9:8b:7b:5b:b4: 7d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9F:5E:E5:4C:46:22:C2:DC:90:1B:88:38:BD:26:62:2D:D5:D7:E1 X509v3 Authority Key Identifier: keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:be:e3:13:44:f6:79:ca:f7:da:4d:b2:c4:14:a8:98:ea:10: 83:16:a4:0b:49:d2:08:0d:60:ee:6e:93:b4:3a:12:36:0f:cc: fc:37:b5:a4:2a:93:26:df:a8:c1:1a:22:96:aa:ff:1a:00:7c: 62:57:58:4b:0f:d9:39:fe:47:f3:bd:72:97:10:05:21:ed:02: 5e:8e:9b:d3:44:50:f9:96:2b:25:f1:94:fe:11:98:5b:47:f3: 79:66:7b:93:b1:ad:33:5e:ca:80:92:61:ca:62:9c:08:87:ce: 32:79:a7:37:f5:71:04:cd:b8:0d:84:97:f5:2c:f7:12:98:76: a0:85:4a:37:ca:b6:e7:6b:bb:79:7b:02:99:a2:04:54:90:97: 89:27:b1:f6:cd:85:f5:8f:37:6e:fc:69:3e:8f:28:a5:03:39: b3:6c:cb:b1:27:09:1b:b0:42:a7:73:ee:a5:eb:0e:48:47:6d: 04:c0:5d:fa:fb:50:d7:7f:a2:95:14:bb:55:e7:6a:cd:04:e0: a4:11:e9:4a:83:27:f3:a9:dd:3c:90:2a:62:f0:53:fe:f9:2b: 12:b0:2e:40:be:73:2d:69:d8:a3:9a:2b:9d:37:a9:c1:17:b7: af:be:ea:7f:49:61:4e:df:d7:3b:94:1f:78:05:88:1e:9e:ef: 51:1e:d6:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YqmMRvZ+POfskb1ApVCWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NWU0ZDdlYThhMzQ3MGM5NzAzZWU3NTUxNDgxYzM2Zjc3 NGZlYmIwHhcNMjYwMTI1MDkwMTA1WhcNMjYwMTI2MDkwMTA1WjAzMTEwLwYDVQQD Eyg2NTlmNWVlNTRjNDYyMmMyZGM5MDFiODgzOGJkMjY2MjJkZDVkN2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH2DN74BamIcRiPltFVySUMdmntj yriur9OlRPa6P1t0rfRpM2Nckqxq2V/MoGDJrjdN9eRcvgTeo/MbSoXu/4nzuOjm Ou2RfVfEFlvYOeUFhnfS2+DFGRqmwEbDYnNTlELPU+EOduf8Nk0hLaSlWMfDW9qJ iKKAoT7MtEryo6ycNWw29KtFtQ4GmyXUAQvG1nHVeUrC5mO1tDu6+7o7X5nbKXW+ VRCIlALMBOgB/aOemXakNSTBxwxaT3QLCikSYr6JM+chHqz83bLfbJ+HWWTGDtAx QUGupHzm5nioDjPBcsz0UwN4eL6muvIdIJIoH/Cd2DkKgWog+Yt7W7R9gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWfXuVMRiLC3JAbiDi9JmIt1dfhMB8GA1UdIwQY MBaAFGZeTX6oo0cMlwPudVFIHDb3dP67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xNGRkZDEtZGVhYy00MWZmLWJhNmIt MTYyZWQ2MjRlMjgyLzEvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xNGRkZDEtZGVhYy00MWZmLWJhNmItMTYyZWQ2MjRlMjgy LzEvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKL7jE0T2 ecr32k2yxBSomOoQgxakC0nSCA1g7m6TtDoSNg/M/De1pCqTJt+owRoilqr/GgB8 YldYSw/ZOf5H871ylxAFIe0CXo6b00RQ+ZYrJfGU/hGYW0fzeWZ7k7GtM17KgJJh ymKcCIfOMnmnN/VxBM24DYSX9Sz3Eph2oIVKN8q252u7eXsCmaIEVJCXiSex9s2F 9Y83bvxpPo8opQM5s2zLsScJG7BCp3PupesOSEdtBMBd+vtQ13+ilRS7VedqzQTg pBHpSoMn86ndPJAqYvBT/vkrErAuQL5zLWnYo5ornTepwRe3r77qf0lhTt/XO5Qf eAWIHp7vUR7W6w== -----END CERTIFICATE-----Generated at Sun Jan 25 19:28:17 2026 by rpki-client