This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft File: Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json) Hash identifier: XN9NFnYP2n1SiE/WwF8nonvDmTdRLCmAlkB3xQQs0dY= Subject key identifier: 6B:B7:99:42:E2:6D:E7:EA:C3:AF:1E:BF:7B:05:4D:B3:ED:BB:14:45 Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C Certificate issuer: /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c Certificate serial: 019BF5E3334FF86B764CAD4E2D52F6821E5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 16:01:06 +0000 Manifest this update: Sun 25 Jan 2026 16:01:06 +0000 Manifest next update: Mon 26 Jan 2026 16:01:06 +0000 Files and hashes: 1: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: 1BYnto9/kcXXdiAc9bwNjpgBDX/3fvn/AETFRoJBaOo=) 2: cfc8AqxUQpHiP5l_Nwt2RxlR31E.roa (hash: l4uppHG903ldqi9DaDNBYospFemwSrJP6nlFEmmwSgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:33:4f:f8:6b:76:4c:ad:4e:2d:52:f6:82:1e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c Validity Not Before: Jan 25 16:01:06 2026 GMT Not After : Jan 26 16:01:06 2026 GMT Subject: CN=6bb79942e26de7eac3af1ebf7b054db3edbb1445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:da:01:bf:2c:7d:d1:5b:3a:99:55:20:1d:41: cf:bb:5a:e1:9a:ef:cd:96:2b:84:a5:77:62:f2:eb: 65:ed:8e:92:68:6e:e9:b8:e3:06:81:de:22:b4:86: 1b:9e:3e:79:2e:47:05:c3:07:d7:58:1d:9a:52:a7: 00:0a:3c:3b:94:cc:16:f9:a0:b8:fb:f0:77:b1:d0: 74:a8:39:94:73:b6:22:69:6d:09:8d:93:a7:85:c7: a5:a4:52:92:e0:87:75:cc:67:8b:e8:9f:a8:d5:13: 09:1d:97:ad:d8:9d:15:89:ed:1e:e4:fe:b2:5d:1e: e2:3e:7e:9e:cc:40:4f:fb:8c:09:bc:61:f2:2e:24: 47:ed:26:20:51:b6:77:eb:41:f5:58:57:13:6a:6b: e8:a7:38:a4:5b:36:e4:e2:d7:16:da:eb:85:5f:c2: 71:6c:45:2f:56:6b:23:bb:ab:39:9e:a2:7d:e6:d1: c1:9d:4d:8e:55:14:ea:b2:ab:ea:ae:ad:c1:c4:a5: 3f:0f:e0:26:da:d2:8f:72:c9:8e:3b:93:f3:49:4c: db:13:a6:4e:81:4b:5a:d4:0e:52:ee:da:22:fe:f9: 29:8b:8b:ee:6b:b7:f6:20:59:d4:cb:9e:f6:ee:2c: b7:06:3d:08:bc:ff:9d:ab:37:6d:24:a1:8a:23:76: 62:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B7:99:42:E2:6D:E7:EA:C3:AF:1E:BF:7B:05:4D:B3:ED:BB:14:45 X509v3 Authority Key Identifier: keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:33:cf:2d:e4:bc:a8:a1:b1:0f:f1:d6:8a:72:28:0f:6d:d8: 84:2c:16:bc:7f:2b:c7:1f:10:ed:66:08:73:8a:20:58:66:9c: 00:84:32:00:ed:b3:ca:9c:b3:c0:d3:2c:c1:5a:67:69:65:2e: da:f6:6d:17:f8:de:2c:a0:bc:12:ac:6f:04:0a:35:a3:e7:f1: 57:35:f4:27:57:0c:43:0a:70:7d:1b:c1:c9:42:a8:fe:52:22: 59:bc:3d:56:f9:57:ea:ed:a8:66:bf:f7:71:24:0c:64:9d:80: b6:e0:f6:0e:14:e3:4a:d0:3a:8b:22:18:ab:c3:e1:e4:bc:d7: 2b:fc:42:c7:f0:44:12:a9:71:25:67:22:01:0d:a8:49:64:7e: 99:59:5f:5e:c4:17:5b:d6:7b:e9:18:02:ba:45:77:72:75:da: a3:be:18:2a:89:0f:ff:fd:53:e9:5b:3b:e0:f1:b6:11:80:33: 24:20:bc:45:01:5f:3e:50:6b:b9:a3:29:06:69:63:25:aa:df: fa:af:64:10:e2:00:9a:72:4a:61:70:1c:c3:48:01:c8:2a:1d: 20:7b:b7:e9:b3:60:21:7a:28:0a:eb:21:90:6b:8f:d8:ed:71: 38:b1:de:63:13:de:0c:90:14:f4:7f:35:95:28:b5:fd:4e:f3: 4c:fd:52:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14zNP+Gt2TK1OLVL2gh5eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZGYzNzlmYWFmMjEwYTcwMzZkYWMwNWRlNmI1NzcyZGJl NGRkNmMwHhcNMjYwMTI1MTYwMTA2WhcNMjYwMTI2MTYwMTA2WjAzMTEwLwYDVQQD Eyg2YmI3OTk0MmUyNmRlN2VhYzNhZjFlYmY3YjA1NGRiM2VkYmIxNDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstoBvyx90Vs6mVUgHUHPu1rhmu/N liuEpXdi8utl7Y6SaG7puOMGgd4itIYbnj55LkcFwwfXWB2aUqcACjw7lMwW+aC4 +/B3sdB0qDmUc7YiaW0JjZOnhcelpFKS4Id1zGeL6J+o1RMJHZet2J0Vie0e5P6y XR7iPn6ezEBP+4wJvGHyLiRH7SYgUbZ360H1WFcTamvopzikWzbk4tcW2uuFX8Jx bEUvVmsju6s5nqJ95tHBnU2OVRTqsqvqrq3BxKU/D+Am2tKPcsmOO5PzSUzbE6ZO gUta1A5S7toi/vkpi4vua7f2IFnUy5727iy3Bj0IvP+dqzdtJKGKI3ZiKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGu3mULibefqw68ev3sFTbPtuxRFMB8GA1UdIwQY MBaAFGXfN5+q8hCnA22sBd5rV3Lb5N1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgt MDc2Yzg4Yjg4MDJmLzEvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgtMDc2Yzg4Yjg4MDJm LzEvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjPPLeS8 qKGxD/HWinIoD23YhCwWvH8rxx8Q7WYIc4ogWGacAIQyAO2zypyzwNMswVpnaWUu 2vZtF/jeLKC8EqxvBAo1o+fxVzX0J1cMQwpwfRvByUKo/lIiWbw9VvlX6u2oZr/3 cSQMZJ2AtuD2DhTjStA6iyIYq8Ph5LzXK/xCx/BEEqlxJWciAQ2oSWR+mVlfXsQX W9Z76RgCukV3cnXao74YKokP//1T6Vs74PG2EYAzJCC8RQFfPlBruaMpBmljJarf +q9kEOIAmnJKYXAcw0gByCodIHu36bNgIXooCushkGuP2O1xOLHeYxPeDJAU9H81 lSi1/U7zTP1Sww== -----END CERTIFICATE-----Generated at Sun Jan 25 19:06:19 2026 by rpki-client