This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft File: ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft (raw, json) Hash identifier: RVa1lNkGsMTWPxGpAetoJcB7OC4f7fQ4GbNU4HF3SQ8= Subject key identifier: 96:0A:46:F1:FA:42:7B:32:5D:DC:44:ED:7F:CF:E5:F2:7F:4B:C9:3B Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38 Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538 Certificate serial: 019BF3BDF583381419A58DBEC18DD3368440 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft Manifest number: 0AD9 Signing time: Sun 25 Jan 2026 06:01:11 +0000 Manifest this update: Sun 25 Jan 2026 06:01:11 +0000 Manifest next update: Mon 26 Jan 2026 06:01:11 +0000 Files and hashes: 1: 4Kqssfz45wqKl4Y5usAP2cryF-s.roa (hash: VtsQh8EBUySqJ+8n7XXtvvG+r8GbNYVy0DLEl3LAFic=) 2: PlJpj7jP73E4zbfMxQODYMcp_7s.roa (hash: 6ejhDKH+4IAoIUxzT6kMmGZlbm0mSbrfcniUm7Rso6I=) 3: Ro5FYTNVl_lnAyMdvuGnbsPkpGI.roa (hash: Rrtw6rU9+BgwK1Mhs6SeDqlpBkER/cCVfCVvQJ88CfE=) 4: ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl (hash: /J/OmO/P1kGqlMyjX1GZEKg+27nkYjpYCTLmAQIYAhU=) 5: b1C1K0R4SsuxHJd-26aSi9G1s-s.roa (hash: UdNuNIgIX4vDZ6cHekj/pIxiG7gV3J4SuyTuh3WadyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:f5:83:38:14:19:a5:8d:be:c1:8d:d3:36:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538 Validity Not Before: Jan 25 06:01:11 2026 GMT Not After : Jan 26 06:01:11 2026 GMT Subject: CN=960a46f1fa427b325ddc44ed7fcfe5f27f4bc93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3d:40:45:e0:61:22:cf:8d:2f:ba:1d:e7:bf: d1:1b:73:a3:49:f1:b0:4e:00:46:a4:f6:07:1e:c5: 00:5d:db:82:bc:6c:bc:10:3f:31:98:12:01:4c:19: 5a:f5:57:9f:bc:f5:1f:a0:fc:69:12:46:98:18:b7: da:95:77:b1:b6:65:45:89:63:42:c5:db:70:44:bc: f6:5d:76:26:6a:57:0e:bb:48:ab:df:a4:57:eb:eb: e2:f6:c6:1d:19:75:5f:f1:b2:da:0a:78:d8:f3:ee: 11:cc:9f:87:96:8d:c1:e0:cd:0b:48:e5:3f:73:17: e6:ac:cb:48:f6:ca:88:e3:a5:9a:51:b0:e7:58:a3: da:03:85:9a:78:93:40:ff:47:79:ed:98:ce:7e:5d: 03:5b:d4:b4:c7:ba:21:de:5b:4e:b2:2b:e6:1c:2b: 10:f3:96:7d:8e:56:94:3a:ef:47:83:fb:03:b9:ba: 42:81:08:64:23:06:6e:c0:f6:9b:65:3f:5e:67:6f: a2:d9:b5:20:74:4b:4f:22:d3:68:ff:c1:f7:ed:3e: 17:bc:50:26:3c:7b:80:de:bd:f7:32:f7:17:c9:4b: 3b:7e:71:3b:5e:e0:fd:12:d8:90:0d:c6:7d:01:36: 9c:9b:a9:5b:be:22:ed:8f:ba:a7:d5:f0:0d:97:fc: 17:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0A:46:F1:FA:42:7B:32:5D:DC:44:ED:7F:CF:E5:F2:7F:4B:C9:3B X509v3 Authority Key Identifier: keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:2b:da:4d:0a:cb:28:3d:60:ca:49:56:50:28:18:8e:41:2b: ad:99:44:c1:06:63:96:96:77:87:ec:01:02:d8:c7:20:b4:65: 20:12:15:ca:cc:74:ee:61:c2:1b:1b:8d:60:c1:b8:eb:01:25: 55:a1:ac:2e:54:35:a4:f9:00:61:7a:11:83:a4:82:c5:e2:38: 5a:e3:58:29:0f:48:a0:4d:f8:fa:8a:16:89:9e:f7:c5:9b:2f: 4e:48:99:b7:24:93:9d:81:ec:21:bc:71:7b:88:47:8d:1c:98: 4a:9c:2e:5e:09:c0:28:13:1d:a0:87:f7:cf:3e:82:4f:ff:5d: 43:2e:ce:cc:2a:46:2d:1b:99:a1:ce:01:f4:b7:75:b8:62:f0: 3e:96:02:e3:5c:f7:f3:c5:58:58:29:3a:a9:ab:b6:3c:0d:9c: 17:29:40:12:e2:07:84:37:75:08:04:46:3a:3f:3b:4c:f2:2c: 9b:b9:cb:37:9e:d8:64:94:0d:c5:27:7d:90:f2:a7:86:6d:e2: bf:d0:5e:01:ea:e0:eb:05:3b:94:30:6e:44:07:44:d1:74:75: b7:d1:45:0a:d3:4e:14:9b:16:26:e0:2e:be:bb:1d:ea:77:45: e9:6f:f1:fd:74:b5:49:f0:93:e0:24:ab:16:ea:2d:ff:0b:17: 87:fc:75:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvfWDOBQZpY2+wY3TNoRAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDRlODcyMzQ1MGQwYTcxMGMzMmQ5MGZmZWExODUyOTEw NGU1MzgwHhcNMjYwMTI1MDYwMTExWhcNMjYwMTI2MDYwMTExWjAzMTEwLwYDVQQD Eyg5NjBhNDZmMWZhNDI3YjMyNWRkYzQ0ZWQ3ZmNmZTVmMjdmNGJjOTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD1AReBhIs+NL7od57/RG3OjSfGw TgBGpPYHHsUAXduCvGy8ED8xmBIBTBla9VefvPUfoPxpEkaYGLfalXextmVFiWNC xdtwRLz2XXYmalcOu0ir36RX6+vi9sYdGXVf8bLaCnjY8+4RzJ+Hlo3B4M0LSOU/ cxfmrMtI9sqI46WaUbDnWKPaA4WaeJNA/0d57ZjOfl0DW9S0x7oh3ltOsivmHCsQ 85Z9jlaUOu9Hg/sDubpCgQhkIwZuwPabZT9eZ2+i2bUgdEtPItNo/8H37T4XvFAm PHuA3r33MvcXyUs7fnE7XuD9EtiQDcZ9ATacm6lbviLtj7qn1fANl/wXMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYKRvH6QnsyXdxE7X/P5fJ/S8k7MB8GA1UdIwQY MBaAFGTU6HI0UNCnEMMtkP/qGFKRBOU4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzIt NDIyYWVkM2E3NzAyLzEvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzItNDIyYWVkM2E3NzAy LzEvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSvaTQrL KD1gyklWUCgYjkErrZlEwQZjlpZ3h+wBAtjHILRlIBIVysx07mHCGxuNYMG46wEl VaGsLlQ1pPkAYXoRg6SCxeI4WuNYKQ9IoE34+ooWiZ73xZsvTkiZtySTnYHsIbxx e4hHjRyYSpwuXgnAKBMdoIf3zz6CT/9dQy7OzCpGLRuZoc4B9Ld1uGLwPpYC41z3 88VYWCk6qau2PA2cFylAEuIHhDd1CARGOj87TPIsm7nLN57YZJQNxSd9kPKnhm3i v9BeAerg6wU7lDBuRAdE0XR1t9FFCtNOFJsWJuAuvrsd6ndF6W/x/XS1SfCT4CSr Fuot/wsXh/x1XA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:48:28 2026 by rpki-client