This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json) Hash identifier: lB8WpAqGmOn6AIVVToOqntSk1cPcXx16zgv/442S9JQ= Subject key identifier: FB:20:94:99:0E:F5:A8:41:EA:F4:04:FF:BC:06:F4:13:E9:87:73:B6 Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8 Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8 Certificate serial: 019BF5077DBD0A95B662A3F248232E1B889B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft Manifest number: 17F3 Signing time: Sun 25 Jan 2026 12:01:07 +0000 Manifest this update: Sun 25 Jan 2026 12:01:07 +0000 Manifest next update: Mon 26 Jan 2026 12:01:07 +0000 Files and hashes: 1: 0GL7DdIdoFqMUjvFhCRfHpKPMbA.roa (hash: pZia0ALckAxbVwXjSvk9ZitHob5JnbAYRMcyTh/GAHw=) 2: 4CJ3InuHwPxMIYug15LfFjf4TFE.roa (hash: AqjwYTvPMHv8KhwXl422zB5jGiNZqfOiCwgbFsHZ07g=) 3: H6jlQnwQ3aiH-RYU25LA_SCJ8YQ.roa (hash: z0WYajZ68GEteUnmX5OmcBfJ0ynCGdGVIvLSKmVhonU=) 4: VxmBydPNDVkjAwNW0HlCl0mcW2A.roa (hash: 2uX2f6w9d7FkhAQJ79lByeDaz04Av+toag4OFSNYkF8=) 5: X4rKfB3PDI3kjmwak5Qpg6vv3Qo.roa (hash: rE1Gy+5Y3N/6nRhiVvsTgzmZ/j4C83X5X1jx7h+hjs0=) 6: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: Ozu0cnZCloKQxuP9BcX4Kewz0fr+3ERQsJN5azBNNkk=) 7: srwZqD3NLb6Mgfkh0xVjrlQc7p8.roa (hash: WOqlcZKIxr5sVUqyyKJNHMiLfFbk3vNnFX+UsNkt18I=) 8: zPyNAFdQmlJqV2qKRKA-eSuuTJY.roa (hash: WQ7fB4l+y3xXDPGETnFXWLdLLeTLH4yREUZKhvFa6Ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:7d:bd:0a:95:b6:62:a3:f2:48:23:2e:1b:88:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8 Validity Not Before: Jan 25 12:01:07 2026 GMT Not After : Jan 26 12:01:07 2026 GMT Subject: CN=fb2094990ef5a841eaf404ffbc06f413e98773b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1a:aa:e5:13:75:71:7d:6f:3d:6a:d3:0d:54: 70:46:fe:23:1c:4f:1f:79:5c:eb:d6:75:12:6c:38: 5e:2e:dd:e9:7d:e7:d3:aa:22:36:ef:38:9c:ba:23: cc:3c:79:84:9d:6e:52:29:67:7e:a1:6d:95:48:c4: 9b:8d:21:ed:f2:b6:64:61:55:bb:5b:b0:b6:94:a5: f3:97:91:e9:4b:e0:30:4c:57:51:73:8c:cc:ca:51: 56:40:a5:06:9c:a4:3a:54:41:8f:db:76:34:66:ce: 69:d2:ea:6e:01:98:9f:8e:68:50:a3:ce:d6:3a:02: a1:7c:b4:b0:4c:38:9d:cd:0d:d9:d5:05:cb:9b:f6: 94:ef:97:d3:e3:0d:d4:c8:d1:1e:f5:62:59:b4:dd: d0:df:41:d1:d7:22:ed:f8:48:46:dc:32:85:44:23: d7:ea:54:8e:29:ee:7c:5f:fe:ff:d7:1d:55:80:cc: cd:91:ab:6c:d4:53:c7:82:54:7b:59:49:13:78:8d: ee:fa:b2:d1:3c:e0:3c:58:1f:10:f7:e5:e7:a1:e4: 50:f2:5c:88:84:e2:69:44:c9:c9:3a:00:69:b9:f8: 19:35:56:c2:36:2a:59:ad:e4:6c:23:6f:54:1f:2b: 87:3b:8e:f2:94:0e:13:a7:a7:00:e9:73:a2:c4:7f: 71:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:20:94:99:0E:F5:A8:41:EA:F4:04:FF:BC:06:F4:13:E9:87:73:B6 X509v3 Authority Key Identifier: keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:11:23:ba:94:cf:78:4b:0c:43:fc:ed:c5:06:db:51:09:39: 59:70:7e:9a:c5:d2:0b:11:d0:ee:8f:7f:e6:de:f6:1c:ea:c3: bc:1c:eb:1d:4d:b6:39:b4:b7:97:86:22:13:7f:3b:46:26:5b: cd:70:d5:b8:33:1b:1d:67:e0:4c:9d:6f:29:32:cc:6c:cd:4d: 95:e1:1c:42:5f:cf:74:83:2e:ed:46:a4:39:fc:2f:8d:3a:42: 12:9c:b0:a7:da:07:91:a3:a1:32:9c:84:4e:c8:f6:a4:07:d0: fd:d5:78:2a:3b:8e:1c:93:a3:ef:d0:93:f1:49:d1:62:a8:a5: 74:25:34:9d:95:60:5b:3c:dc:dc:1e:a7:8c:8b:e8:a7:77:c4: 30:2e:38:fc:8f:54:f9:b3:be:40:7f:20:f1:1e:7d:21:b8:08: bc:2f:13:79:52:47:f8:92:54:b4:a7:f8:bc:1f:49:5b:47:59: 0f:95:2a:c4:b1:06:bb:d3:aa:e1:14:5e:0d:4f:89:48:56:ad: 6e:ad:ba:8b:5c:bd:fb:68:31:9b:90:c8:e9:21:e5:93:60:af: 8c:87:75:b9:4f:93:75:5b:80:96:64:29:31:ac:71:9c:9d:8c: a8:16:99:34:05:ba:5b:4f:ab:12:1e:5e:9d:05:9a:6f:ed:2a: cc:77:3f:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B329CpW2YqPySCMuG4ibMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1M2Y1NTYyOTEyMWI2MGZiMTljOTdmOTljNzVkZDZmMDE1 ZGQ2ZTgwHhcNMjYwMTI1MTIwMTA3WhcNMjYwMTI2MTIwMTA3WjAzMTEwLwYDVQQD EyhmYjIwOTQ5OTBlZjVhODQxZWFmNDA0ZmZiYzA2ZjQxM2U5ODc3M2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhqq5RN1cX1vPWrTDVRwRv4jHE8f eVzr1nUSbDheLt3pfefTqiI27zicuiPMPHmEnW5SKWd+oW2VSMSbjSHt8rZkYVW7 W7C2lKXzl5HpS+AwTFdRc4zMylFWQKUGnKQ6VEGP23Y0Zs5p0upuAZifjmhQo87W OgKhfLSwTDidzQ3Z1QXLm/aU75fT4w3UyNEe9WJZtN3Q30HR1yLt+EhG3DKFRCPX 6lSOKe58X/7/1x1VgMzNkats1FPHglR7WUkTeI3u+rLRPOA8WB8Q9+XnoeRQ8lyI hOJpRMnJOgBpufgZNVbCNipZreRsI29UHyuHO47ylA4Tp6cA6XOixH9x6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsglJkO9ahB6vQE/7wG9BPph3O2MB8GA1UdIwQY MBaAFGU/VWKRIbYPsZyX+Zx13W8BXdboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NGNmM2ItOWY1Yy00ZjVlLTk2YzQt MjkyNmQyODFiNTE0LzEvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NGNmM2ItOWY1Yy00ZjVlLTk2YzQtMjkyNmQyODFiNTE0 LzEvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBEjupTP eEsMQ/ztxQbbUQk5WXB+msXSCxHQ7o9/5t72HOrDvBzrHU22ObS3l4YiE387RiZb zXDVuDMbHWfgTJ1vKTLMbM1NleEcQl/PdIMu7UakOfwvjTpCEpywp9oHkaOhMpyE Tsj2pAfQ/dV4KjuOHJOj79CT8UnRYqildCU0nZVgWzzc3B6njIvop3fEMC44/I9U +bO+QH8g8R59IbgIvC8TeVJH+JJUtKf4vB9JW0dZD5UqxLEGu9Oq4RReDU+JSFat bq26i1y9+2gxm5DI6SHlk2CvjId1uU+TdVuAlmQpMaxxnJ2MqBaZNAW6W0+rEh5e nQWab+0qzHc/yw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:12:33 2026 by rpki-client