This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json) Hash identifier: 9sjFoJCYZ9s1ldiM3hBYObiGLUILtmB/BdbXz97pfPw= Subject key identifier: 4E:5F:9C:69:1A:CC:74:D2:E2:75:55:52:1E:33:F2:3D:9D:B9:4C:2B Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2 Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2 Certificate serial: 019BF6512EAB33E9D1C3B9196E2A11322010 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 18:01:14 +0000 Manifest this update: Sun 25 Jan 2026 18:01:14 +0000 Manifest next update: Mon 26 Jan 2026 18:01:14 +0000 Files and hashes: 1: Utsq8tMmY3izY1fN7UB7ffBp7M0.roa (hash: kD7h2+kSGCGsnzgnalUMgkhy9wvQ1pxuWkQeWsMBxuE=) 2: qm3Y1xRAyMug1o4ZkPIWA5TQn1A.roa (hash: ah0q5b8U5QR+bHmaVCJCImjUhbJsUIFGC+OnAqXZW1w=) 3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: 13gcxESCjZAvM+DzKDlgqo/FVneQn3/mgN/AFDsK2b8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:2e:ab:33:e9:d1:c3:b9:19:6e:2a:11:32:20:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2 Validity Not Before: Jan 25 18:01:14 2026 GMT Not After : Jan 26 18:01:14 2026 GMT Subject: CN=4e5f9c691acc74d2e27555521e33f23d9db94c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bf:78:0f:fa:4a:d8:d2:d3:b8:a2:59:74:9b: c5:8d:b9:40:06:e0:3d:11:1c:0f:b1:8f:b1:85:38: 70:10:c1:de:50:ba:d3:52:51:9c:65:cd:69:6e:a7: 87:22:bb:e6:45:26:59:45:6b:e1:4b:9c:e5:cc:9f: 4b:45:a0:04:93:3b:c8:a9:0e:3b:2a:b1:3a:88:b0: 21:d7:fe:31:a4:c0:8a:4d:ac:0c:77:54:70:22:38: 2a:cc:c5:9b:a1:d0:b3:57:51:11:0a:6b:27:56:89: 45:a5:f7:3e:f7:c7:be:b0:46:30:be:11:df:f0:41: 5a:22:d9:2b:c8:8b:d5:4d:46:28:b7:a0:d3:9e:c2: ce:9e:25:93:20:d0:99:be:fe:dd:e2:92:f6:0d:9a: 8b:c3:2c:62:bc:8e:52:0f:fe:4d:6d:de:cf:71:fc: 86:d6:ef:77:41:88:ae:fc:21:d6:ec:b3:24:f8:52: e7:67:9e:97:dc:ae:e0:72:62:34:ac:3f:b7:e4:7b: c2:1a:00:68:90:e2:bd:e6:83:f2:64:ac:2c:08:41: 10:0b:ed:41:38:11:f2:ad:b1:58:b5:7e:19:0d:59: 51:03:32:1d:c0:b2:c4:8e:32:a4:56:56:56:40:af: 76:99:47:ed:61:15:3a:b3:53:ca:11:8f:5e:f9:73: 11:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5F:9C:69:1A:CC:74:D2:E2:75:55:52:1E:33:F2:3D:9D:B9:4C:2B X509v3 Authority Key Identifier: keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:cc:3d:71:73:df:48:02:a2:5b:4c:da:d2:cd:a6:05:38:b3: 04:5c:68:4d:c9:81:ca:5a:b1:7a:ac:58:60:9e:be:fc:50:f6: 91:ad:9f:b7:70:35:87:9d:e1:93:2b:45:a1:ed:71:18:8e:05: 77:ee:dd:6c:49:e6:79:76:25:3e:cc:8c:d3:06:e0:ee:2a:f5: ac:3c:23:47:4b:e0:c1:dd:bf:2f:33:ce:ae:1b:bc:5a:c0:81: ed:3a:b7:5f:a4:6f:e5:6f:de:6a:27:1f:13:b4:2c:6b:01:a4: e5:6e:db:68:8d:0c:59:94:05:d1:6e:8a:ad:69:2b:a1:e5:71: 26:05:43:1b:33:33:67:3c:32:73:03:59:11:2d:1a:6f:a0:cf: 62:f0:79:bf:aa:dd:4e:14:62:d7:b6:de:b8:aa:4f:cc:21:73: 22:ea:35:bf:6f:b1:99:0c:24:c8:66:bc:04:be:c7:d2:a5:0b: ee:8e:f4:65:c2:48:85:f4:4e:82:e5:97:b6:ec:86:7a:5c:0f: 19:fd:8e:ad:77:cb:d2:1c:79:06:3e:e2:ce:26:37:c3:5f:fa: 61:a9:35:b6:e2:bb:0f:90:9d:37:d3:9c:70:13:37:f1:f8:27: bc:c7:27:65:cb:2f:4f:67:bc:e8:1e:a9:42:73:d9:fc:2e:6c: 49:e1:12:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2US6rM+nRw7kZbioRMiAQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZjlhNmQyZjZjZDU4OGE3N2Y0MjM2MjJlNmI4ZDFjNjU0 YmNkZjIwHhcNMjYwMTI1MTgwMTE0WhcNMjYwMTI2MTgwMTE0WjAzMTEwLwYDVQQD Eyg0ZTVmOWM2OTFhY2M3NGQyZTI3NTU1NTIxZTMzZjIzZDlkYjk0YzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr94D/pK2NLTuKJZdJvFjblABuA9 ERwPsY+xhThwEMHeULrTUlGcZc1pbqeHIrvmRSZZRWvhS5zlzJ9LRaAEkzvIqQ47 KrE6iLAh1/4xpMCKTawMd1RwIjgqzMWbodCzV1ERCmsnVolFpfc+98e+sEYwvhHf 8EFaItkryIvVTUYot6DTnsLOniWTINCZvv7d4pL2DZqLwyxivI5SD/5Nbd7PcfyG 1u93QYiu/CHW7LMk+FLnZ56X3K7gcmI0rD+35HvCGgBokOK95oPyZKwsCEEQC+1B OBHyrbFYtX4ZDVlRAzIdwLLEjjKkVlZWQK92mUftYRU6s1PKEY9e+XMRUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5fnGkazHTS4nVVUh4z8j2duUwrMB8GA1UdIwQY MBaAFMz5ptL2zViKd/QjYi5rjRxlS83yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelBtbTB2Yk5XSXAzOUNOaUxtdU5IR1ZMemZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80MjFlNDAtZWRmNi00N2FhLTlhYmUt MWIwZjI1NGRlNjE5LzEvelBtbTB2Yk5XSXAzOUNOaUxtdU5IR1ZMemZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS80MjFlNDAtZWRmNi00N2FhLTlhYmUtMWIwZjI1NGRlNjE5 LzEvelBtbTB2Yk5XSXAzOUNOaUxtdU5IR1ZMemZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8w9cXPf SAKiW0za0s2mBTizBFxoTcmBylqxeqxYYJ6+/FD2ka2ft3A1h53hkytFoe1xGI4F d+7dbEnmeXYlPsyM0wbg7ir1rDwjR0vgwd2/LzPOrhu8WsCB7Tq3X6Rv5W/eaicf E7QsawGk5W7baI0MWZQF0W6KrWkroeVxJgVDGzMzZzwycwNZES0ab6DPYvB5v6rd ThRi17beuKpPzCFzIuo1v2+xmQwkyGa8BL7H0qUL7o70ZcJIhfROguWXtuyGelwP Gf2OrXfL0hx5Bj7iziY3w1/6Yak1tuK7D5CdN9OccBM38fgnvMcnZcsvT2e86B6p QnPZ/C5sSeESrA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:32:59 2026 by rpki-client