This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft File: zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft (raw, json) Hash identifier: 7XonNfQ+arWAOYOCgPmho8iS2fLHVV1lnmdc6aeH9VM= Subject key identifier: F2:70:3A:E8:82:5D:5C:2B:0E:90:71:AC:BC:BF:9F:A3:65:FC:AA:87 Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B Certificate issuer: /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b Certificate serial: 019BF386C3F4A0AEBBC80F8C727A15C8D213 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 05:00:54 +0000 Manifest this update: Sun 25 Jan 2026 05:00:54 +0000 Manifest next update: Mon 26 Jan 2026 05:00:54 +0000 Files and hashes: 1: 1-MPmKwveaNevahCbJELRJOmxcEw.roa (hash: SJAbLycNC0JaVjQXy09rkhGA2yxjxemr+0WDUIZ9wv4=) 2: gOiN6DluQXSd3jleMbJxQUVj3SI.roa (hash: GYaC97wnCi+3xBKerwHYFT87pRuyzEPoseArfTTU9ys=) 3: rmssw7RMnHd1ZqcXua4Brefm154.roa (hash: fNpjAb4SqWl1UnQLJ2UF8i8M94XY4XErflTP+LbF0cQ=) 4: t6Cqn8bbFUBARYys1rSXQI-Qv_k.roa (hash: Qp3ObnIfU6K60CvbQfGVhKkJzOZmcYgVUzn5j0R02Vw=) 5: zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl (hash: N+wIv1lgkA79iJeEVghrzDhqgFICadaKcn+b4khVRxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:c3:f4:a0:ae:bb:c8:0f:8c:72:7a:15:c8:d2:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b Validity Not Before: Jan 25 05:00:54 2026 GMT Not After : Jan 26 05:00:54 2026 GMT Subject: CN=f2703ae8825d5c2b0e9071acbcbf9fa365fcaa87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:06:d1:02:85:4b:1f:81:8d:2f:c8:21:53:22: b2:a1:f9:f6:6e:aa:22:32:47:6f:84:ac:ac:ca:61: ee:97:08:5f:1d:37:19:60:f7:85:4e:3e:ae:5d:43: 62:16:0b:55:59:c8:62:ab:c0:85:47:3a:01:c2:de: 5a:70:68:a8:fb:f4:19:2b:93:3e:e6:c3:c0:bc:89: 15:55:56:36:b2:c7:ea:57:d2:30:25:85:71:19:37: c6:e0:06:90:85:2d:52:8f:fc:05:3a:b1:23:47:c6: ec:19:c6:7b:c8:e2:4a:ba:04:ca:35:8e:8a:34:90: e8:d4:c0:2a:78:d6:f7:b0:27:b0:e6:0f:96:65:43: ad:d3:f0:76:b7:e1:30:5b:6e:0d:90:97:a5:b9:0f: ce:e3:e3:10:44:ec:ed:cf:90:46:a1:06:ba:f0:f8: 10:7e:24:11:78:13:55:cb:f4:46:f8:71:e9:b3:50: 29:b3:4d:e7:0a:f4:cb:02:b9:77:88:b5:65:7c:f7: c3:37:67:c1:41:ba:c4:d2:45:b6:b5:48:66:28:48: 97:38:74:9f:4f:0b:fb:00:c4:73:bd:77:f1:ec:28: 7b:2a:c8:1b:fc:e2:3d:43:d5:7d:77:55:b4:ec:9f: f4:6d:ac:1a:94:7c:4e:24:74:ab:ca:d6:91:a7:c3: d6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:70:3A:E8:82:5D:5C:2B:0E:90:71:AC:BC:BF:9F:A3:65:FC:AA:87 X509v3 Authority Key Identifier: keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:9d:fa:8e:59:a0:89:41:7b:29:d5:ca:fc:72:fd:2b:54:d6: 42:29:65:52:66:ae:6f:07:7d:b8:60:8f:0b:78:d7:73:08:5c: 07:0f:c9:50:93:e0:2b:36:54:d7:54:a3:72:89:1f:f7:88:2a: 5d:e5:0a:9b:6d:4f:74:8a:41:9f:22:67:f1:59:5a:52:22:83: 14:82:4a:09:4e:f1:ec:cc:91:1a:20:a5:46:ca:a8:89:f8:a8: 91:90:2e:f4:78:9e:e4:b0:b5:0a:cd:09:ea:5a:f3:37:95:54: 7d:60:b8:5b:c0:ce:7e:7c:74:db:44:93:35:49:ca:30:d6:ce: d8:5c:72:b2:26:2e:8a:d7:d3:79:ed:88:a2:d2:04:ce:14:38: b6:4d:65:4b:26:1f:b2:33:05:69:1f:6a:0e:a3:90:84:32:ff: dd:52:09:fd:11:d6:d8:10:bd:35:d4:05:0d:e7:38:e7:00:82: 38:5b:a8:ae:47:ed:76:6c:24:e5:97:f0:b5:eb:ad:06:9e:8f: 45:ab:eb:ff:42:5e:71:66:d6:a8:0e:b5:2b:6a:f5:0e:05:1e: 46:ef:40:08:d6:cd:bc:a5:d4:bf:92:ef:c6:a6:83:fb:58:04: f3:61:25:50:f9:d5:7f:dc:50:c6:3f:3c:34:c9:f1:c3:0b:78: f8:3f:a8:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhsP0oK67yA+McnoVyNITMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzNiMzQ3YTIxNmJjNDM3YjBiZDRjZjBiYzhjZGE2NWU4 YzJkM2IwHhcNMjYwMTI1MDUwMDU0WhcNMjYwMTI2MDUwMDU0WjAzMTEwLwYDVQQD EyhmMjcwM2FlODgyNWQ1YzJiMGU5MDcxYWNiY2JmOWZhMzY1ZmNhYTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywbRAoVLH4GNL8ghUyKyofn2bqoi MkdvhKysymHulwhfHTcZYPeFTj6uXUNiFgtVWchiq8CFRzoBwt5acGio+/QZK5M+ 5sPAvIkVVVY2ssfqV9IwJYVxGTfG4AaQhS1Sj/wFOrEjR8bsGcZ7yOJKugTKNY6K NJDo1MAqeNb3sCew5g+WZUOt0/B2t+EwW24NkJeluQ/O4+MQROztz5BGoQa68PgQ fiQReBNVy/RG+HHps1Aps03nCvTLArl3iLVlfPfDN2fBQbrE0kW2tUhmKEiXOHSf Twv7AMRzvXfx7Ch7Ksgb/OI9Q9V9d1W07J/0bawalHxOJHSrytaRp8PWaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJwOuiCXVwrDpBxrLy/n6Nl/KqHMB8GA1UdIwQY MBaAFM7Ds0eiFrxDewvUzwvIzaZejC07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYt MTU1ZmIzZmUyODdlLzEvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYtMTU1ZmIzZmUyODdl LzEvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJ36jlmg iUF7KdXK/HL9K1TWQillUmaubwd9uGCPC3jXcwhcBw/JUJPgKzZU11Sjcokf94gq XeUKm21PdIpBnyJn8VlaUiKDFIJKCU7x7MyRGiClRsqoifiokZAu9Hie5LC1Cs0J 6lrzN5VUfWC4W8DOfnx020STNUnKMNbO2FxysiYuitfTee2IotIEzhQ4tk1lSyYf sjMFaR9qDqOQhDL/3VIJ/RHW2BC9NdQFDec45wCCOFuorkftdmwk5ZfwteutBp6P Ravr/0JecWbWqA61K2r1DgUeRu9ACNbNvKXUv5LvxqaD+1gE82ElUPnVf9xQxj88 NMnxwwt4+D+oKg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:21:36 2026 by rpki-client