This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: e2ITtmKMI6Y9d7h7EwlTCK6Nf9vMH/4bvCsU4q3nXY4= Subject key identifier: A1:C7:B2:78:9E:9E:9F:C3:4C:49:DD:3D:CC:80:36:81:21:E1:22:CC Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019BF462C45D8DB2F0EB5EE90C1A8AA562D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 17F2 Signing time: Sun 25 Jan 2026 09:01:11 +0000 Manifest this update: Sun 25 Jan 2026 09:01:11 +0000 Manifest next update: Mon 26 Jan 2026 09:01:11 +0000 Files and hashes: 1: 7xRPjWRLv-aOK3RWvqXG2c8wv2Q.roa (hash: LEykf9FAgj9CLpBSSjkYwOuUKW3pC3jsUO4x78cVavQ=) 2: Aom3Kxh_ZfDKRkP48Wo8nXkLNo0.roa (hash: KpxhStVMF2wImp1UC0ve4GmaBPQ/XlCf8ect0VpLF0I=) 3: Fgv2pLB1IP6lLeoMxaYjqQ0hVKk.roa (hash: ItGk7pZicra55KKf6s/67/p+3dH+7mzo9kuzCaFglZg=) 4: I-GxtlJhzGYYRg8Wgfp9tQaL5Ag.roa (hash: JBs1U9vJlSB2FdEOWcBpaJo3IbbOgjp9v20dwFHbjXo=) 5: I4kWLJQcJIN4yvOhIUBxDHfcBXY.roa (hash: FOUTe4+/Wcl97bGV2vBsOsKmLc6qFDjUlYthAxSgRb4=) 6: JnUH1sslDBZ7lrgWYQqW6np7d2o.roa (hash: KaaZsj+qH9qEx82FJor1KbhmmMbYUaSEVs/hy4FDH5w=) 7: Ro8LRBlcuDbCiK_y93exT9nN0Eo.roa (hash: QtMlmeOF9Qrugbq+UIrG5kQoEulUbPI2vyELAcoz11Y=) 8: ZM7IXq1aVoF0HyrEjDEjF1ACgTU.roa (hash: e4ID0eKCg4EYXOel0bb4GNxbGHMhnw/HXCfepegWgN4=) 9: iDjssrdC0F5mx4tgjWxfoS4pCmA.roa (hash: YIXLFZ5HUqpRsZLVA3j60nXxyiZGaGAkhiCCJd+/5OE=) 10: kiAttdnigrAzCEAY7KtA_Ptxn70.roa (hash: EUQsR4w7EieqixHcTYy9ql09+zYzH1DmFw+qVviBPa8=) 11: l85mqhkuv7xdnX1yM97W1ykxfdU.roa (hash: btZjRqpdMDGd0trKva0fZ2+uBjhpzizkMnsbZWSCXS8=) 12: wU7UXJTytHy3PiMHcD7sGscj8UU.roa (hash: +SsUnX48TKNad5n7G2zrkmhLQEecIJqG1W5xpOPLtwE=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: Vx+x8hNqTmMYbN4C22oDYNmALvrNeCG/ZWN0LrE5Ov4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:c4:5d:8d:b2:f0:eb:5e:e9:0c:1a:8a:a5:62:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Jan 25 09:01:11 2026 GMT Not After : Jan 26 09:01:11 2026 GMT Subject: CN=a1c7b2789e9e9fc34c49dd3dcc80368121e122cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:48:9e:eb:59:82:b5:fc:7a:8a:b7:96:d8:2a: 40:54:66:3e:82:77:d6:b1:e7:08:39:fc:8d:7c:84: 91:e2:ec:6b:6f:39:e2:27:ed:1a:69:8e:90:77:b2: f3:e2:1f:e5:dd:74:26:7c:ce:23:4d:de:a7:f4:01: 6b:6d:a9:19:f2:fd:44:ad:b0:ba:d8:af:2b:c1:02: c0:4f:4b:20:e9:73:64:f9:30:f5:bc:a9:30:9e:68: ec:67:79:f2:86:b3:87:c4:96:15:95:08:df:eb:aa: 47:28:eb:b2:ed:07:f2:75:18:e7:5f:ea:8a:50:12: aa:ae:3d:0d:51:7c:dd:93:d8:c5:80:cc:43:d6:dc: 19:03:fa:13:bd:44:4b:b7:a0:89:ca:b4:a6:2e:52: 50:86:ad:2f:07:9c:c0:8b:b2:82:5f:53:76:26:e7: a8:9e:8e:dc:e1:18:87:39:40:78:1e:e2:c1:65:be: 21:e0:e8:ad:95:c7:35:51:6e:14:cf:e9:65:34:d4: 74:f0:56:c8:c6:1e:10:c1:a2:05:71:c2:ab:91:84: e3:f7:47:6a:e1:15:9d:4c:ec:27:53:85:d0:27:cb: 06:63:4b:22:26:d7:65:c4:98:7b:f3:2c:56:12:11: f7:00:04:d9:9a:dc:35:97:7d:12:29:ad:83:ae:52: cf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C7:B2:78:9E:9E:9F:C3:4C:49:DD:3D:CC:80:36:81:21:E1:22:CC X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:8d:f4:8d:d5:60:b3:9f:a1:31:81:9b:a3:bb:94:3e:34:f7: 5f:70:c9:fa:bf:71:d6:38:26:57:99:33:3b:e9:6c:07:4b:5d: 0f:5f:16:cd:07:ab:d9:87:01:40:18:5b:30:3c:21:bd:03:2f: 04:e3:f5:c9:49:92:8c:1e:63:09:66:13:9e:ad:fb:8c:f0:6b: e4:d8:10:8b:bd:58:05:40:90:76:87:c5:52:7c:56:a2:4b:67: 5e:08:57:f1:21:ba:2d:51:26:24:7e:5a:dd:49:c0:89:b4:d2: d8:9d:03:6f:8d:b5:71:99:35:2a:85:e0:ec:20:8d:4a:8c:8d: 6a:db:51:c1:06:a2:10:5c:a5:e0:72:28:7c:68:3e:46:6f:ba: d8:d7:91:1d:66:97:5d:c9:96:92:d0:16:c2:b4:d0:bc:31:17: 46:f5:d1:37:b0:3e:4b:14:15:07:2b:c8:76:1b:7f:7e:a6:68: d8:54:09:bc:92:31:81:06:43:a0:46:c3:ad:1b:f6:87:0a:42: 40:ef:f6:f3:58:b7:af:ff:55:18:1b:a6:8d:df:df:61:47:21: dd:2c:fe:b1:08:9b:01:9e:66:e8:6e:88:6a:ec:8f:f8:50:c4: e4:af:b5:2b:1b:b8:6d:b1:4c:52:dc:cd:fb:0e:5d:89:f8:3c: 55:2b:bd:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YsRdjbLw617pDBqKpWLWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjYwMTI1MDkwMTExWhcNMjYwMTI2MDkwMTExWjAzMTEwLwYDVQQD EyhhMWM3YjI3ODllOWU5ZmMzNGM0OWRkM2RjYzgwMzY4MTIxZTEyMmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkie61mCtfx6ireW2CpAVGY+gnfW secIOfyNfISR4uxrbzniJ+0aaY6Qd7Lz4h/l3XQmfM4jTd6n9AFrbakZ8v1ErbC6 2K8rwQLAT0sg6XNk+TD1vKkwnmjsZ3nyhrOHxJYVlQjf66pHKOuy7QfydRjnX+qK UBKqrj0NUXzdk9jFgMxD1twZA/oTvURLt6CJyrSmLlJQhq0vB5zAi7KCX1N2Jueo no7c4RiHOUB4HuLBZb4h4Oitlcc1UW4Uz+llNNR08FbIxh4QwaIFccKrkYTj90dq 4RWdTOwnU4XQJ8sGY0siJtdlxJh78yxWEhH3AATZmtw1l30SKa2DrlLPvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHHsnienp/DTEndPcyANoEh4SLMMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE430jdVg s5+hMYGbo7uUPjT3X3DJ+r9x1jgmV5kzO+lsB0tdD18WzQer2YcBQBhbMDwhvQMv BOP1yUmSjB5jCWYTnq37jPBr5NgQi71YBUCQdofFUnxWoktnXghX8SG6LVEmJH5a 3UnAibTS2J0Db421cZk1KoXg7CCNSoyNattRwQaiEFyl4HIofGg+Rm+62NeRHWaX XcmWktAWwrTQvDEXRvXRN7A+SxQVByvIdht/fqZo2FQJvJIxgQZDoEbDrRv2hwpC QO/281i3r/9VGBumjd/fYUch3Sz+sQibAZ5m6G6IauyP+FDE5K+1Kxu4bbFMUtzN +w5difg8VSu9nA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:15:35 2026 by rpki-client