This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft File: ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft (raw, json) Hash identifier: hZVCZmBk5ICRwrY+Svs6Y0QsVTI4dRZcS6TQM+Rz1Pw= Subject key identifier: 4E:CC:70:79:44:E1:84:EE:ED:61:88:E1:54:F4:75:6B:40:D7:8D:5A Authority key identifier: 66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C Certificate issuer: /CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c Certificate serial: 019BF8401DF97C31410BE5286DF8328429B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft Manifest number: 0E37 Signing time: Mon 26 Jan 2026 03:01:50 +0000 Manifest this update: Mon 26 Jan 2026 03:01:50 +0000 Manifest next update: Tue 27 Jan 2026 03:01:50 +0000 Files and hashes: 1: ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl (hash: H1/VA1xE7FvSzQqR93Jd6J6jDOh8allcJFFqgVlvRtQ=) 2: lL_8oe9yDIiLRfrdt08QXqwSDgI.roa (hash: mGmiDsommMvkvURrhIoo2stvYxOoFvSbhP9bGr4bphU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:40:1d:f9:7c:31:41:0b:e5:28:6d:f8:32:84:29:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c Validity Not Before: Jan 26 03:01:50 2026 GMT Not After : Jan 27 03:01:50 2026 GMT Subject: CN=4ecc707944e184eeed6188e154f4756b40d78d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:39:22:9c:73:f7:e4:fe:66:ec:be:d1:98:19: 6e:2a:00:cb:4b:0c:cc:bd:5a:b3:37:2b:14:51:a8: db:3d:e0:96:88:02:16:8e:9d:f4:76:38:00:d4:a0: fb:a7:2f:3f:9d:3c:36:ef:57:aa:21:10:de:38:24: 7e:fe:37:cd:62:a1:4f:c5:96:af:ec:f5:b2:bf:05: b5:59:df:14:9b:0b:ab:0a:0a:92:18:f9:a7:a1:6b: ce:8c:b1:24:86:25:ec:d5:dd:42:ad:f7:a2:d7:fc: 18:b1:3c:5b:33:bc:1f:f6:2a:7d:c9:af:57:74:e6: 4a:6d:fb:f9:d5:34:0f:a3:50:f4:a5:c2:53:0e:97: ad:eb:50:19:6e:bb:65:c8:01:3e:cc:ac:16:ce:a9: 2f:d5:21:40:4f:98:a7:ae:6a:e7:0b:b6:23:f2:1f: 92:6e:6b:cb:db:d8:c8:ff:50:ad:59:e1:52:36:37: fb:6f:63:50:3d:d9:3d:95:3c:e7:33:e7:1d:70:da: 45:cd:8b:92:5f:32:f6:82:39:cd:9a:9b:d2:31:e5: df:d8:c3:99:37:98:41:bc:96:48:bb:85:fe:4b:40: ca:a8:d0:17:06:1d:3e:5f:0e:4e:47:ff:d3:63:13: 83:fc:f6:ef:1a:45:89:69:a7:46:50:c2:e2:7d:9d: b8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CC:70:79:44:E1:84:EE:ED:61:88:E1:54:F4:75:6B:40:D7:8D:5A X509v3 Authority Key Identifier: keyid:66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ad:59:c7:9a:f8:fd:66:3b:2c:4c:ad:98:a7:8d:86:22:1b: f4:2c:a7:5f:2f:a7:43:60:f8:d8:6c:60:d4:46:8a:a3:99:0f: e8:ad:ea:c4:a4:65:f9:f1:db:05:11:1e:5e:9a:23:5c:a9:87: d4:a3:e2:2b:cb:c9:39:70:98:ee:3c:07:43:05:e7:af:61:98: 28:cd:a7:cd:4e:fd:c8:35:fb:82:d4:20:95:85:17:28:b6:cb: 35:39:91:5d:04:76:bc:19:c5:c2:1a:8b:e2:13:06:51:1a:80: 0e:be:b8:45:4b:c8:2a:e1:ac:e3:af:7b:34:47:3b:39:02:32: 8c:f8:82:8a:a4:d6:e0:31:2f:05:50:d6:d7:0c:b6:94:a7:1a: 18:8d:55:9e:c8:7c:dc:fc:35:83:61:ef:6d:6a:49:18:3c:ef: 31:3a:ef:57:91:c5:ce:7f:69:fb:7c:20:fc:7b:85:b0:f1:11: a4:21:4f:2f:3e:49:d8:8b:a2:17:f7:3e:36:3b:91:ef:8d:66: 34:5d:0b:e5:d8:7e:45:a2:57:d9:8e:94:e6:01:85:49:5b:29: 7d:52:8e:c0:3a:83:81:a6:0a:ec:0d:01:88:2f:f5:f1:9d:c9: 7b:22:c8:8c:2f:93:00:1f:64:4e:89:92:16:ac:b6:94:46:8e: d4:24:0b:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4QB35fDFBC+UobfgyhCmzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDFmOGZiNmFkZDI3MmI0NmM0MDZiMTg4NWM5MzI5NWIx ZjRiOGMwHhcNMjYwMTI2MDMwMTUwWhcNMjYwMTI3MDMwMTUwWjAzMTEwLwYDVQQD Eyg0ZWNjNzA3OTQ0ZTE4NGVlZWQ2MTg4ZTE1NGY0NzU2YjQwZDc4ZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jkinHP35P5m7L7RmBluKgDLSwzM vVqzNysUUajbPeCWiAIWjp30djgA1KD7py8/nTw271eqIRDeOCR+/jfNYqFPxZav 7PWyvwW1Wd8UmwurCgqSGPmnoWvOjLEkhiXs1d1Crfei1/wYsTxbM7wf9ip9ya9X dOZKbfv51TQPo1D0pcJTDpet61AZbrtlyAE+zKwWzqkv1SFAT5inrmrnC7Yj8h+S bmvL29jI/1CtWeFSNjf7b2NQPdk9lTznM+cdcNpFzYuSXzL2gjnNmpvSMeXf2MOZ N5hBvJZIu4X+S0DKqNAXBh0+Xw5OR//TYxOD/PbvGkWJaadGUMLifZ24CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7McHlE4YTu7WGI4VT0dWtA141aMB8GA1UdIwQY MBaAFGbR+Ptq3ScrRsQGsYhckylbH0uMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRINC0ycmRKeXRHeEFheGlGeVRLVnNmUzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNTJmNmYtMTRmOC00MTljLTk5ZDkt YTU5ZDEzNTBkZWVjLzEvWnRINC0ycmRKeXRHeEFheGlGeVRLVnNmUzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hNTJmNmYtMTRmOC00MTljLTk5ZDktYTU5ZDEzNTBkZWVj LzEvWnRINC0ycmRKeXRHeEFheGlGeVRLVnNmUzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfK1Zx5r4 /WY7LEytmKeNhiIb9CynXy+nQ2D42Gxg1EaKo5kP6K3qxKRl+fHbBREeXpojXKmH 1KPiK8vJOXCY7jwHQwXnr2GYKM2nzU79yDX7gtQglYUXKLbLNTmRXQR2vBnFwhqL 4hMGURqADr64RUvIKuGs4697NEc7OQIyjPiCiqTW4DEvBVDW1wy2lKcaGI1Vnsh8 3Pw1g2HvbWpJGDzvMTrvV5HFzn9p+3wg/HuFsPERpCFPLz5J2IuiF/c+NjuR741m NF0L5dh+RaJX2Y6U5gGFSVspfVKOwDqDgaYK7A0BiC/18Z3JeyLIjC+TAB9kTomS Fqy2lEaO1CQLdg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:04 2026 by rpki-client