This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft File: zEa__4uQ43SFVboUR_1O3sw0ChM.mft (raw, json) Hash identifier: EBTbH2WWThOLpOxN7Jz5tcO/9LlK2iqwd1LMmxFdy1E= Subject key identifier: B4:CF:9A:95:15:15:04:D3:A0:60:28:30:6E:E9:50:5E:60:1D:B9:8D Authority key identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13 Certificate issuer: /CN=cc46bfff8b90e3748555ba1447fd4edecc340a13 Certificate serial: 019BF65106C1FDE79BF9F6DDD966F29E2E2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 18:01:03 +0000 Manifest this update: Sun 25 Jan 2026 18:01:03 +0000 Manifest next update: Mon 26 Jan 2026 18:01:03 +0000 Files and hashes: 1: PHWKar5TU6h_lZjEkMKqfIp601A.roa (hash: Aeqrve+PhkZPn8LtUxmzS3olY+bvpZRjJnDsa2PZ14U=) 2: zEa__4uQ43SFVboUR_1O3sw0ChM.crl (hash: aheff5Wc1vAN5/NA9tXccsN3o9+k0eaSvgA23FSautA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:06:c1:fd:e7:9b:f9:f6:dd:d9:66:f2:9e:2e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13 Validity Not Before: Jan 25 18:01:03 2026 GMT Not After : Jan 26 18:01:03 2026 GMT Subject: CN=b4cf9a95151504d3a06028306ee9505e601db98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e7:f6:84:36:18:49:45:c5:cc:d2:d4:37:63: 7e:78:97:2d:fd:70:c4:bd:cf:87:cc:2b:dd:70:72: 88:cf:ab:c3:ef:0f:ec:fd:c1:73:4d:02:8a:ed:58: 16:08:09:9c:04:72:f5:41:fe:85:23:e8:11:46:6a: 6b:bb:0e:1a:5e:9e:7e:f0:96:a6:f0:bf:e6:75:ad: df:90:69:55:91:1b:cd:4a:f9:b4:60:d8:fd:8c:15: cd:89:63:a3:27:6b:07:42:37:8f:e0:a0:a1:a3:14: 77:4a:aa:d2:20:61:f0:79:cd:24:59:8b:89:2a:39: 88:f1:98:18:13:77:2b:e1:0b:0d:b9:0e:5c:5f:78: 99:36:d4:8f:c2:86:7e:c6:94:11:26:4f:78:5d:af: ec:a3:46:dc:dd:b2:a7:41:7f:13:9f:1c:57:fa:c2: 3a:76:a4:90:1f:c1:68:e3:a8:e8:a6:4e:18:32:a5: 8f:b1:70:f8:2e:e3:e5:16:18:ec:d7:11:16:70:c0: 0d:81:cd:56:24:7a:9b:08:2d:99:0c:f2:d7:11:0b: 4e:40:52:fd:13:d1:3b:47:95:79:fb:72:0d:b0:8f: f2:93:d0:f7:7b:ae:75:ad:5d:4e:6e:d8:61:ae:a5: 79:07:bf:ac:1d:67:cb:03:16:ea:34:e4:1d:a7:3b: a1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CF:9A:95:15:15:04:D3:A0:60:28:30:6E:E9:50:5E:60:1D:B9:8D X509v3 Authority Key Identifier: keyid:CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b9:c5:ad:b0:da:41:05:87:27:4b:24:84:73:35:93:50:f9: 69:ba:75:70:28:ff:c9:23:4c:75:2e:97:ff:e3:af:59:73:af: bb:7e:88:92:aa:74:41:de:c3:e4:84:77:ff:a3:8f:5f:a0:bd: 13:27:06:44:af:e8:20:4c:4f:b4:1f:38:32:01:f4:9c:e8:ac: e6:77:34:9e:e2:12:bc:6e:84:57:f1:98:89:a9:45:05:e1:3b: 6c:a3:8a:42:e9:77:65:4f:7a:10:0b:81:25:3e:4a:be:02:97: 3b:36:e3:88:0e:ef:3c:d3:19:bb:d4:e3:57:a1:b8:19:e0:01: ec:a6:42:83:1a:59:db:bc:d7:6f:f9:48:a6:77:0e:eb:02:f6: 03:9a:c2:c4:f0:d3:0e:fe:64:c3:5c:99:46:1a:97:3d:c6:cf: e1:47:6b:06:c9:0c:31:9c:cd:d2:71:62:88:93:06:1e:d4:cf: 6f:37:ca:85:65:0d:3b:df:a6:41:2f:87:4e:21:3a:d8:9d:2a: 49:5d:d3:48:a3:8a:ed:f1:52:10:82:8b:c4:5c:81:53:35:b6: 23:e0:23:f4:d2:19:95:53:20:97:8f:1c:a7:c2:b0:6a:6b:af: 89:57:a8:3a:07:38:97:3b:09:05:2c:c3:42:42:a6:ec:b8:22: f9:3c:b5:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UQbB/eeb+fbd2Wbyni4uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNDZiZmZmOGI5MGUzNzQ4NTU1YmExNDQ3ZmQ0ZWRlY2Mz NDBhMTMwHhcNMjYwMTI1MTgwMTAzWhcNMjYwMTI2MTgwMTAzWjAzMTEwLwYDVQQD EyhiNGNmOWE5NTE1MTUwNGQzYTA2MDI4MzA2ZWU5NTA1ZTYwMWRiOThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAref2hDYYSUXFzNLUN2N+eJct/XDE vc+HzCvdcHKIz6vD7w/s/cFzTQKK7VgWCAmcBHL1Qf6FI+gRRmpruw4aXp5+8Jam 8L/mda3fkGlVkRvNSvm0YNj9jBXNiWOjJ2sHQjeP4KChoxR3SqrSIGHwec0kWYuJ KjmI8ZgYE3cr4QsNuQ5cX3iZNtSPwoZ+xpQRJk94Xa/so0bc3bKnQX8TnxxX+sI6 dqSQH8Fo46jopk4YMqWPsXD4LuPlFhjs1xEWcMANgc1WJHqbCC2ZDPLXEQtOQFL9 E9E7R5V5+3INsI/yk9D3e651rV1ObthhrqV5B7+sHWfLAxbqNOQdpzuh3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTPmpUVFQTToGAoMG7pUF5gHbmNMB8GA1UdIwQY MBaAFMxGv/+LkON0hVW6FEf9Tt7MNAoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekVhX180dVE0M1NGVmJvVVJfMU8zc3cwQ2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84NGQ0OWMtMGM4NC00NTZhLWI2NDAt NGRjOWJmNjQyZGQyLzEvekVhX180dVE0M1NGVmJvVVJfMU8zc3cwQ2hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS84NGQ0OWMtMGM4NC00NTZhLWI2NDAtNGRjOWJmNjQyZGQy LzEvekVhX180dVE0M1NGVmJvVVJfMU8zc3cwQ2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7nFrbDa QQWHJ0skhHM1k1D5abp1cCj/ySNMdS6X/+OvWXOvu36Ikqp0Qd7D5IR3/6OPX6C9 EycGRK/oIExPtB84MgH0nOis5nc0nuISvG6EV/GYialFBeE7bKOKQul3ZU96EAuB JT5KvgKXOzbjiA7vPNMZu9TjV6G4GeAB7KZCgxpZ27zXb/lIpncO6wL2A5rCxPDT Dv5kw1yZRhqXPcbP4UdrBskMMZzN0nFiiJMGHtTPbzfKhWUNO9+mQS+HTiE62J0q SV3TSKOK7fFSEIKLxFyBUzW2I+Aj9NIZlVMgl48cp8KwamuviVeoOgc4lzsJBSzD QkKm7Lgi+Ty1HQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:49 2026 by rpki-client