This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft File: ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json) Hash identifier: nxOks4UwVmTaP2pnLL7qyLRMoS8SQFxY81bFZTfo7oI= Subject key identifier: 12:B3:55:5C:CC:C2:69:B8:A0:FC:5F:79:10:4E:60:0E:F8:6C:E9:4F Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13 Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13 Certificate serial: 019BF499B63F2126594510C260836AF7E0E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 10:01:12 +0000 Manifest this update: Sun 25 Jan 2026 10:01:12 +0000 Manifest next update: Mon 26 Jan 2026 10:01:12 +0000 Files and hashes: 1: LHBo9-BfPy0WupjWW_D2wgfNIpQ.roa (hash: R6iGhIvzCaMr2S8HkE4OHIlhBvwxDbI9I34z0q9RFiE=) 2: SnVvAfcjIMxlHBXXj54NLAer-cU.roa (hash: 602GAj5HXQsqsecSxsKjOsPy02tEc740y7FVgVkvoYc=) 3: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: TMUr2nA9smko4eHic+4DDzyuTckyqIqeiY4825zmgKM=) 4: rTtt56NfQI-lBnNEdQL00IimlXg.roa (hash: elzHYHG1W6pODNLfxqrVQakPGCFbm00DmqEvkVjcxRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:b6:3f:21:26:59:45:10:c2:60:83:6a:f7:e0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13 Validity Not Before: Jan 25 10:01:12 2026 GMT Not After : Jan 26 10:01:12 2026 GMT Subject: CN=12b3555cccc269b8a0fc5f79104e600ef86ce94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a6:f7:cb:7e:0b:b4:2d:95:d0:3d:d7:c0:8d: e0:68:8b:32:de:c8:47:1b:2e:68:d1:59:55:a9:07: 9a:a6:6f:f4:c1:88:f3:35:dd:7e:0e:bd:28:09:32: a9:be:e7:11:37:a8:37:01:e4:ff:96:7c:13:6e:99: 16:4f:33:06:95:91:ef:60:34:f5:ac:23:bf:0d:77: 13:b6:38:e4:e5:18:34:f0:2b:66:7f:b2:33:61:4a: a0:cb:69:17:5d:3b:47:96:e0:a1:c7:b1:a6:6e:97: fb:9d:3d:3b:d9:f6:ff:80:ca:d6:09:b4:3d:a9:8b: 2f:37:e7:41:31:20:c6:e8:4e:38:9e:94:bd:77:a0: c8:1c:ba:03:01:94:a4:cf:07:13:3e:0f:4c:a5:32: 7d:57:ef:18:6a:e5:38:c6:70:db:b9:53:d0:2f:b7: 51:f6:f2:2b:b9:0d:33:8f:0f:fd:31:08:b5:cb:ef: e5:a4:a8:7d:aa:95:85:bb:93:c5:b6:ee:c8:db:15: 46:bc:7f:6f:4d:18:34:b7:6c:0b:bf:40:45:8d:5f: 2b:24:b3:f7:24:9a:28:b3:77:dc:b5:df:7c:67:e4: 45:be:6c:eb:59:60:1c:11:18:64:f1:fc:b2:cd:75: 6a:62:0f:0d:63:84:f5:a3:f0:97:db:6f:0c:c3:14: 83:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B3:55:5C:CC:C2:69:B8:A0:FC:5F:79:10:4E:60:0E:F8:6C:E9:4F X509v3 Authority Key Identifier: keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ea:f8:f2:00:35:93:b0:a4:37:67:ef:09:8a:62:a5:a9:55: 3a:01:04:7b:dd:e5:1e:25:65:0e:02:95:08:88:4f:71:35:16: d4:51:7c:11:1a:8e:53:7e:23:5a:19:19:65:10:74:56:37:ed: fc:37:64:12:8d:ff:94:df:4b:70:75:7e:f3:53:57:db:59:c3: 12:22:e6:da:be:b6:66:57:07:11:8a:6e:d5:b4:2d:ee:05:5e: 91:5c:3d:02:54:10:25:da:82:88:04:8d:cf:41:96:7e:6d:8a: ce:84:c9:30:34:b8:7d:46:0f:dc:45:00:cc:27:ea:96:0b:e5: 25:5a:1d:c6:27:9e:71:f9:da:5b:d0:0f:86:2a:75:4e:68:e4: b1:07:9e:84:bf:e3:a7:de:55:0f:2f:e7:98:6c:21:34:18:93: 27:4a:20:cd:71:ac:33:0a:9d:13:53:5a:7b:c1:68:3d:f1:eb: e9:d6:86:a9:ba:39:2f:60:80:21:1c:8e:d4:23:ae:19:5e:eb: c9:07:ce:25:23:e3:e5:b7:83:5e:bf:97:52:15:23:12:a4:17: 30:a5:b9:21:18:a9:5d:2f:df:03:7a:30:d4:70:2d:ff:ae:b3: c4:41:6e:a7:89:92:c2:57:4c:98:bc:bc:df:f8:15:27:4d:f7: 4d:c2:a2:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mbY/ISZZRRDCYINq9+DgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZjkwZTc1ZGY5OGFmYjQzMDE5Y2U3NTAzNTBlNzY5Yjk5 ZmJjMTMwHhcNMjYwMTI1MTAwMTEyWhcNMjYwMTI2MTAwMTEyWjAzMTEwLwYDVQQD EygxMmIzNTU1Y2NjYzI2OWI4YTBmYzVmNzkxMDRlNjAwZWY4NmNlOTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlab3y34LtC2V0D3XwI3gaIsy3shH Gy5o0VlVqQeapm/0wYjzNd1+Dr0oCTKpvucRN6g3AeT/lnwTbpkWTzMGlZHvYDT1 rCO/DXcTtjjk5Rg08Ctmf7IzYUqgy2kXXTtHluChx7Gmbpf7nT072fb/gMrWCbQ9 qYsvN+dBMSDG6E44npS9d6DIHLoDAZSkzwcTPg9MpTJ9V+8YauU4xnDbuVPQL7dR 9vIruQ0zjw/9MQi1y+/lpKh9qpWFu5PFtu7I2xVGvH9vTRg0t2wLv0BFjV8rJLP3 JJoos3fctd98Z+RFvmzrWWAcERhk8fyyzXVqYg8NY4T1o/CX228MwxSD3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKzVVzMwmm4oPxfeRBOYA74bOlPMB8GA1UdIwQY MBaAFGb5DnXfmK+0MBnOdQNQ52m5n7wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81YTY5OGQtOTk4YS00OGJhLThkYzUt MzMzZjBjOTkyNzllLzEvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS81YTY5OGQtOTk4YS00OGJhLThkYzUtMzMzZjBjOTkyNzll LzEvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROr48gA1 k7CkN2fvCYpipalVOgEEe93lHiVlDgKVCIhPcTUW1FF8ERqOU34jWhkZZRB0Vjft /DdkEo3/lN9LcHV+81NX21nDEiLm2r62ZlcHEYpu1bQt7gVekVw9AlQQJdqCiASN z0GWfm2KzoTJMDS4fUYP3EUAzCfqlgvlJVodxieecfnaW9APhip1TmjksQeehL/j p95VDy/nmGwhNBiTJ0ogzXGsMwqdE1Nae8FoPfHr6daGqbo5L2CAIRyO1COuGV7r yQfOJSPj5beDXr+XUhUjEqQXMKW5IRipXS/fA3ow1HAt/66zxEFup4mSwldMmLy8 3/gVJ033TcKiJw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:47:12 2026 by rpki-client