This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft File: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json) Hash identifier: xV1cOwl9KjqJHYXGpfxKWLlchA6bqOpea1UIsEwSrM8= Subject key identifier: 8D:E0:B4:E6:96:05:CA:3F:56:CE:B3:BC:F2:ED:F7:09:E2:46:5E:68 Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06 Certificate issuer: /CN=66d0580e1725f45de106b97f77d9cd76bc4df806 Certificate serial: 019BF619B775CB2780FDDC61703C93C6F5F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 17:00:38 +0000 Manifest this update: Sun 25 Jan 2026 17:00:38 +0000 Manifest next update: Mon 26 Jan 2026 17:00:38 +0000 Files and hashes: 1: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: 37tHKJ8zHoSDI/i5S0SLNytOCp92nmqD1qtb1nKqv5c=) 2: x4lZLHx409i9ASlNHPyjDZiZaGI.roa (hash: 4B5GMEiwywVOE0OWSZpjZtJiJ2JFSDQmiE9yfVRIDfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:b7:75:cb:27:80:fd:dc:61:70:3c:93:c6:f5:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806 Validity Not Before: Jan 25 17:00:38 2026 GMT Not After : Jan 26 17:00:38 2026 GMT Subject: CN=8de0b4e69605ca3f56ceb3bcf2edf709e2465e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:84:b5:7d:b1:3e:8e:fd:43:8d:5b:e0:91:b3: fb:b3:84:7d:e6:ce:8d:94:ab:3e:66:80:c9:84:0b: 3c:90:a2:5a:1a:bc:8d:22:6c:25:51:85:8e:c2:b8: 66:00:9f:c1:b3:79:3d:01:a3:b8:8c:45:4b:b9:17: 55:a6:ec:96:63:83:cb:cd:75:c9:1a:42:75:be:ef: 64:c6:f3:41:b9:42:ff:17:df:d1:54:64:79:98:c7: df:ef:9e:b2:b6:0f:df:c0:de:4e:e6:9b:1d:3b:45: 5a:4f:cd:72:62:44:bc:7a:2e:e9:31:9e:99:f5:6d: 4e:32:bc:92:52:5f:87:f1:51:c9:e8:18:51:fc:75: 1f:70:81:f7:35:80:15:e2:e5:5f:82:ac:60:87:c2: 7e:f9:fb:9c:3b:9d:7b:18:02:64:f8:40:39:62:7d: a0:18:3d:c6:ff:be:d2:88:2f:a7:d1:b0:37:06:70: 1b:bd:6c:c4:b0:d7:ce:91:c8:b3:ed:7e:07:8e:fd: 7f:a9:77:e2:d0:41:4c:bc:97:a5:dd:1e:38:bf:35: a7:07:7b:f4:33:b9:fa:0d:2a:93:ba:47:69:5a:4f: c1:f1:83:06:3d:26:2e:b2:3d:8b:77:b3:1a:11:5d: e7:58:17:21:df:87:b4:48:b8:73:ca:40:f3:1f:b8: 37:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E0:B4:E6:96:05:CA:3F:56:CE:B3:BC:F2:ED:F7:09:E2:46:5E:68 X509v3 Authority Key Identifier: keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a7:bb:3d:ef:bb:0c:69:a5:48:54:fe:1f:c8:32:90:c0:fa: e9:3d:10:d8:b1:c4:9d:d4:a1:71:3d:f8:89:1d:1b:ef:57:40: 3d:bf:15:70:8a:f4:e8:36:4d:c9:f1:cb:b2:26:cf:aa:d4:e2: 9a:a8:25:ac:2c:d3:e7:18:27:9f:5b:86:20:1c:f7:1c:43:00: cb:75:d4:fe:04:5d:4d:e1:07:62:77:36:9b:ca:36:bb:2b:1f: 36:95:4c:5a:e7:7e:01:73:90:8e:fd:84:b1:32:81:10:fc:8d: f4:a7:78:49:a9:44:a1:ee:91:b3:ff:9a:12:31:74:05:e5:dc: f8:49:5e:8d:65:cd:3a:80:f2:4a:14:4c:88:54:bb:dc:c4:bf: 38:4e:a7:4e:17:7c:11:4f:2a:5a:a7:90:59:fa:f7:e9:41:29: 8e:ea:4a:e3:41:ba:4c:4e:9c:f8:fb:8e:d6:e2:06:f0:a8:bc: 91:a9:2b:86:fe:a1:86:c2:fe:37:eb:9a:22:04:c8:f7:b1:ea: 52:80:82:ab:04:c7:0e:31:f1:b6:29:a5:5e:32:3d:a2:a5:6b: 42:d8:4d:54:5e:ce:0f:65:ad:f7:89:0d:76:91:3d:ac:d2:53: e8:7d:ff:64:25:af:1d:ec:a5:4e:56:b0:ef:a5:26:0a:60:4a: 5d:3d:a3:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gbd1yyeA/dxhcDyTxvX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDA1ODBlMTcyNWY0NWRlMTA2Yjk3Zjc3ZDljZDc2YmM0 ZGY4MDYwHhcNMjYwMTI1MTcwMDM4WhcNMjYwMTI2MTcwMDM4WjAzMTEwLwYDVQQD Eyg4ZGUwYjRlNjk2MDVjYTNmNTZjZWIzYmNmMmVkZjcwOWUyNDY1ZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oS1fbE+jv1DjVvgkbP7s4R95s6N lKs+ZoDJhAs8kKJaGryNImwlUYWOwrhmAJ/Bs3k9AaO4jEVLuRdVpuyWY4PLzXXJ GkJ1vu9kxvNBuUL/F9/RVGR5mMff756ytg/fwN5O5psdO0VaT81yYkS8ei7pMZ6Z 9W1OMrySUl+H8VHJ6BhR/HUfcIH3NYAV4uVfgqxgh8J++fucO517GAJk+EA5Yn2g GD3G/77SiC+n0bA3BnAbvWzEsNfOkciz7X4Hjv1/qXfi0EFMvJel3R44vzWnB3v0 M7n6DSqTukdpWk/B8YMGPSYusj2Ld7MaEV3nWBch34e0SLhzykDzH7g3fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3gtOaWBco/Vs6zvPLt9wniRl5oMB8GA1UdIwQY MBaAFGbQWA4XJfRd4Qa5f3fZzXa8TfgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS82ZTljMDctMzNlZC00ZWU0LTgzZWMt OTVkOTVhY2U4MjgxLzEvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS82ZTljMDctMzNlZC00ZWU0LTgzZWMtOTVkOTVhY2U4Mjgx LzEvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkae7Pe+7 DGmlSFT+H8gykMD66T0Q2LHEndShcT34iR0b71dAPb8VcIr06DZNyfHLsibPqtTi mqglrCzT5xgnn1uGIBz3HEMAy3XU/gRdTeEHYnc2m8o2uysfNpVMWud+AXOQjv2E sTKBEPyN9Kd4SalEoe6Rs/+aEjF0BeXc+ElejWXNOoDyShRMiFS73MS/OE6nThd8 EU8qWqeQWfr36UEpjupK40G6TE6c+PuO1uIG8Ki8kakrhv6hhsL+N+uaIgTI97Hq UoCCqwTHDjHxtimlXjI9oqVrQthNVF7OD2Wt94kNdpE9rNJT6H3/ZCWvHeylTlaw 76UmCmBKXT2jqg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:35:45 2026 by rpki-client