This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft File: Z5IEIPci99fzxLJagOF9cpAXEYA.mft (raw, json) Hash identifier: IAzClFCSQEVYkfZRGX3s/oB1UEc1U7t/0PXmL+QRmnc= Subject key identifier: 14:B7:33:1B:26:0A:A6:41:1C:61:F7:F0:1F:4F:DC:31:02:17:2A:20 Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80 Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180 Certificate serial: 019BF619ACAA45BECA19786AB112DFBD0CFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft Manifest number: 17EE Signing time: Sun 25 Jan 2026 17:00:36 +0000 Manifest this update: Sun 25 Jan 2026 17:00:36 +0000 Manifest next update: Mon 26 Jan 2026 17:00:36 +0000 Files and hashes: 1: WKDKLv-tt62b9C91OCyzPhQ_OcQ.roa (hash: R8pPn24trqZL7l8MMCrinetEIJyyN4dGs9r8jTjJKfw=) 2: Z5IEIPci99fzxLJagOF9cpAXEYA.crl (hash: tvwFiZ9KWW862Ln1PLxbyOIc51NBpZ6oLu6bc9IgOmg=) 3: zmOplfT1YKhLKnx8WielhvBrOFw.roa (hash: eaJL0aLY76J5n+3Hq2EQSn+31eGw4xT4GWelS0Nf5Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:ac:aa:45:be:ca:19:78:6a:b1:12:df:bd:0c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180 Validity Not Before: Jan 25 17:00:36 2026 GMT Not After : Jan 26 17:00:36 2026 GMT Subject: CN=14b7331b260aa6411c61f7f01f4fdc3102172a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d9:3a:ff:f3:de:60:53:d2:3d:67:ac:39:5f: 1e:16:35:bc:6d:0e:31:ea:e6:78:e2:89:29:e0:ea: 5b:96:de:b2:ef:af:43:b5:14:2c:e9:68:1d:75:f0: 22:d9:3b:50:f2:f6:a7:73:9a:08:7b:66:19:bb:18: 86:46:fc:9c:77:f2:05:fc:e2:77:75:e3:6e:e7:5a: 21:5f:fb:49:62:0d:80:f6:95:12:4b:ed:15:ce:35: 3e:b4:2b:6a:ff:38:c5:61:dd:d4:bf:0e:cd:d7:b3: ed:74:d9:5d:16:d6:06:3b:fc:b3:d9:b9:da:e1:f9: 41:68:66:48:d6:a8:90:24:5e:27:d6:19:9b:1a:a6: 28:b6:a8:fa:7d:6d:da:47:66:a8:27:67:67:cb:e1: 4b:aa:49:60:ce:af:04:25:8c:2a:87:6a:c9:72:7d: b8:3e:17:71:b5:b0:94:63:cd:45:8d:ae:25:b1:04: f9:00:0b:49:a1:4e:88:bc:22:13:9b:6a:67:df:00: 4b:9f:73:f6:09:b6:27:19:91:f8:17:6a:84:61:8d: 7d:e7:0e:fe:5a:b1:5e:fa:21:16:8f:f3:09:06:52: c3:17:6f:4f:41:6d:76:4d:a7:32:54:d7:6f:3f:d5: f0:0e:ab:00:ef:4b:99:d8:dd:cd:fe:e4:7b:80:98: fe:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B7:33:1B:26:0A:A6:41:1C:61:F7:F0:1F:4F:DC:31:02:17:2A:20 X509v3 Authority Key Identifier: keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:11:8d:ea:fb:bb:09:33:43:40:ca:f6:f8:65:b3:4b:44:6e: 55:f1:e8:5e:48:e8:b4:74:5a:28:85:76:48:7c:f6:84:03:c8: b5:c4:c7:a0:11:b8:13:c2:98:09:c4:ae:3a:64:6a:f2:d6:3d: 15:dd:a4:8c:62:79:f2:16:12:1d:63:2e:35:03:24:7f:b6:92: 76:2b:45:f6:60:76:88:19:32:42:40:ef:b5:4b:cf:fb:f1:7a: 40:63:5c:21:e2:ce:2d:77:9c:f3:62:d0:bc:58:11:54:8e:e1: bd:8b:45:cf:da:4b:89:63:e4:27:a6:42:c8:84:de:f6:6d:61: 55:c4:11:d7:a8:3a:f9:66:b7:8b:b5:03:52:f9:f7:ff:0a:3d: cf:4e:d3:b8:1f:8a:56:1c:f9:7f:2c:69:61:5b:eb:7d:10:ab: bd:25:90:c7:04:69:ba:06:cc:48:19:29:bc:b1:11:2c:70:bf: 65:0f:c7:46:f2:2e:dc:d3:18:3b:97:ce:d5:d0:39:6e:60:db: 49:c0:77:eb:5c:52:53:62:13:45:d0:1f:1c:5b:dd:fc:bc:d4: 74:0f:ab:12:39:84:8e:40:a4:57:43:10:aa:bb:e8:1a:86:ea: 42:b0:3f:6a:ba:47:0a:47:94:ab:7e:2d:3a:eb:fd:5b:8d:0a: e3:e0:ca:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GayqRb7KGXhqsRLfvQz9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTIwNDIwZjcyMmY3ZDdmM2M0YjI1YTgwZTE3ZDcyOTAx NzExODAwHhcNMjYwMTI1MTcwMDM2WhcNMjYwMTI2MTcwMDM2WjAzMTEwLwYDVQQD EygxNGI3MzMxYjI2MGFhNjQxMWM2MWY3ZjAxZjRmZGMzMTAyMTcyYTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dk6//PeYFPSPWesOV8eFjW8bQ4x 6uZ44okp4Opblt6y769DtRQs6WgddfAi2TtQ8vanc5oIe2YZuxiGRvycd/IF/OJ3 deNu51ohX/tJYg2A9pUSS+0VzjU+tCtq/zjFYd3Uvw7N17PtdNldFtYGO/yz2bna 4flBaGZI1qiQJF4n1hmbGqYotqj6fW3aR2aoJ2dny+FLqklgzq8EJYwqh2rJcn24 PhdxtbCUY81Fja4lsQT5AAtJoU6IvCITm2pn3wBLn3P2CbYnGZH4F2qEYY195w7+ WrFe+iEWj/MJBlLDF29PQW12TacyVNdvP9XwDqsA70uZ2N3N/uR7gJj+vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBS3MxsmCqZBHGH38B9P3DECFyogMB8GA1UdIwQY MBaAFGeSBCD3IvfX88SyWoDhfXKQFxGAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVJRUlQY2k5OWZ6eExKYWdPRjljcEFYRVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yN2NhMTYtZjQ2Yi00ZjhlLWI5MmUt NWVkMDg5YzFhZmVkLzEvWjVJRUlQY2k5OWZ6eExKYWdPRjljcEFYRVlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yN2NhMTYtZjQ2Yi00ZjhlLWI5MmUtNWVkMDg5YzFhZmVk LzEvWjVJRUlQY2k5OWZ6eExKYWdPRjljcEFYRVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxGN6vu7 CTNDQMr2+GWzS0RuVfHoXkjotHRaKIV2SHz2hAPItcTHoBG4E8KYCcSuOmRq8tY9 Fd2kjGJ58hYSHWMuNQMkf7aSditF9mB2iBkyQkDvtUvP+/F6QGNcIeLOLXec82LQ vFgRVI7hvYtFz9pLiWPkJ6ZCyITe9m1hVcQR16g6+Wa3i7UDUvn3/wo9z07TuB+K Vhz5fyxpYVvrfRCrvSWQxwRpugbMSBkpvLERLHC/ZQ/HRvIu3NMYO5fO1dA5bmDb ScB361xSU2ITRdAfHFvd/LzUdA+rEjmEjkCkV0MQqrvoGobqQrA/arpHCkeUq34t Ouv9W40K4+DKhg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:15 2026 by rpki-client