This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft File: zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json) Hash identifier: mfozXbhMBSPrY/CHYfShwgzFRMb4kT6M5Y0NAsj503E= Subject key identifier: BC:92:11:3E:81:D0:BA:08:E2:6F:08:CB:8D:65:B8:71:C9:B7:A6:CF Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019BF3507E40327A5719AF11352C7BD1002B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft Manifest number: 17F6 Signing time: Sun 25 Jan 2026 04:01:37 +0000 Manifest this update: Sun 25 Jan 2026 04:01:37 +0000 Manifest next update: Mon 26 Jan 2026 04:01:37 +0000 Files and hashes: 1: 9FhDVq2bIcKPVT4-LNeLhleMtsU.roa (hash: 9KYuP3D+C7cw6iLbwhFcurqEz58uGe5Kg9G2sCqyt6U=) 2: DOxf14855Ag2AnO7jsSUueM5c-o.roa (hash: zgUJGFH5ZEpoQ9vBA8CvM2rtyQHfUvV/kzB3FtSEmYc=) 3: GGlyShlisJFPILLShUxi5K1FZvI.roa (hash: 8pEqvT44UHyALFkAUNaY4Zmjw5paANUkCryLrc0xDp0=) 4: GfgJL-lqR4cMbYOXW8gqE4t7HG4.roa (hash: kNPKoBDHTv7uxrRwNWkfM9yLpH77LlGXaUe+iObPj+0=) 5: GokcGb-P0NB7nLtMvW5A8ngZQgE.roa (hash: ZnAqIOIHh01hnkaJVPAholM5RdM/M+SxoO9A/Xev0yk=) 6: LFRJzkmgIAiGnpUGS9-bXzuIMLs.roa (hash: 46deT7TNnqX9MlHzhsUcZQAr19c/pEqoQrpaQ/72qGo=) 7: Lq44h0G4q1e-UoLFf16nF4HM2xg.roa (hash: 8njI491vVK+Ep2tlJdykehE2iLFit02Dsa4DLuRuC40=) 8: NbGRLoG_Gu4CVHGU2oYeQquSVC4.roa (hash: UI6Whsfm0XLotsIB2pUQkPKCVhCu0FIJUxPDYs/HA7Q=) 9: OhSGFuxiOE6u1yxeHuxozU-P634.roa (hash: 6Mmr2aFRyJOyiCmrE7LHa7GVo3hy9dAsRMv8rAlCtH8=) 10: PvCNmMuHcK2-0lwoP1YXz8fG1-4.roa (hash: ZcKVkYaVisIZB6lNJ9Oj7RdZ3ktv/iO+kT0iuJRn4G8=) 11: S7VSB8bMnzHem9-PYRKs7CJpYpg.roa (hash: Xkmt3ivNtM5U/VoznrjL63MFyqBi5WkWlVP9ktx+/Dc=) 12: SMW63T_0136aeLowZZQWjjrfsXk.roa (hash: 3ilHXV2UYPUXB+nKjinPtba67c0zOMGagZjCJHP3jcE=) 13: SbsNPH1Ntij3qyUVffsCiIKkGeE.roa (hash: hjAPDCld8Xta1vPhgXAeIRi+/mILiMGsU19jsuHqOac=) 14: Tcb9LIMv15mBq9nuN_lyx7EDWvI.roa (hash: AVbi90aopaltK4BW7qKfcZ+tcE+N0R+vLT2QnDiHoBo=) 15: WbuHsYRVEwtxjohFVduo42yY0BA.roa (hash: XRpJ203bgOZcZmoeOkpQMh/toy8YP0Drzt5W89I939s=) 16: bnK4p1zEjjMpHGYBWVHlrBkLh7g.roa (hash: FTLJfN5i2b+RptkaFlN3Il1kzjhjI+oXWg1vZs6H4k0=) 17: cE7jgFPedRUF8ap_cKImzYVddl8.roa (hash: zb4n0pfJOMFHA1alvI9W5X6cLuKCPOK3ES0MN3ZZTkE=) 18: enntkJ9MJgt_xpOfkD8kOLdtBJU.roa (hash: JIM8qg9/iO+d/Qq84yLmkyLF8sGbWGM70xRqLp4QZrk=) 19: fFA6Tc1793n-r3BnGi87lZEg-eE.roa (hash: yKcGEOfvNP+8jvQZLXGNhmpwiIIwq6NoShkHAH7kres=) 20: rXmLdpESy3JXHba6GMZpxFBce7Y.roa (hash: eJTs9WPxSlrRs5HsS9oqFD3SzVRLHXq/UsVoUjviM0A=) 21: rtiE1g00ygxdO1tTtGobMSI8MfQ.roa (hash: 1+qhvfyyWdOjy7p4VdnyDBwRoLGDkk0RvotZmYLEvbM=) 22: sUa1qZfE6YDq3QMgLH1F6vdwxUU.roa (hash: fTQiV/tRslTYxHykfit6SFwjZkI2ltHIm9g/9F6nVW0=) 23: tk19XDIbs2abJC_w7m3eyvCxcz0.roa (hash: NU3TfhMXPP24pf7R4GaRkyWoD5b0T4TNRSVTKMLyWEo=) 24: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: TRmzp0hNOGWrGiMDjS6rmhDPEYaNOEz8ILQie7ykf9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:7e:40:32:7a:57:19:af:11:35:2c:7b:d1:00:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Jan 25 04:01:37 2026 GMT Not After : Jan 26 04:01:37 2026 GMT Subject: CN=bc92113e81d0ba08e26f08cb8d65b871c9b7a6cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ba:f8:62:34:33:e6:13:11:ea:5d:e2:7f:56: ce:42:d5:0d:1c:f5:d1:ef:81:23:72:fe:18:47:85: 44:df:9b:05:b4:8e:80:81:f9:d5:51:3d:bc:a3:6e: 1e:a8:11:ba:30:05:e3:6f:b1:22:63:f4:70:0a:05: 1e:8a:b4:93:8a:98:69:f0:86:36:c8:c7:b7:95:41: 01:31:44:f3:9a:1f:6a:31:cd:69:2f:a7:1a:b8:e3: da:91:56:ec:26:0e:1b:79:b8:ed:05:99:6d:ad:fc: 98:46:c6:7f:2b:eb:9c:94:83:8a:af:6b:e8:b9:66: 66:0c:93:9d:c1:7a:a0:e8:f2:19:f7:23:15:43:ec: c0:27:d5:0d:16:c7:ae:97:f2:2d:f7:65:e1:48:11: 91:8b:e8:af:18:2c:55:09:85:33:a9:bc:51:03:e2: 88:a5:5f:e1:10:17:d6:e2:60:1b:f3:2d:43:40:6e: c5:d8:4f:57:bf:99:42:76:47:8a:1f:49:ad:db:8e: d1:47:0f:a8:49:67:dc:d7:4a:e7:69:bd:3e:50:6c: 6f:34:33:99:1d:15:56:c0:7d:0f:1a:66:f5:34:a1: 37:f2:0f:3e:e9:95:1c:eb:3d:46:1d:eb:47:2e:a6: f2:33:1d:e1:70:dd:3d:8b:6c:11:d5:bb:f1:c2:49: d4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:92:11:3E:81:D0:BA:08:E2:6F:08:CB:8D:65:B8:71:C9:B7:A6:CF X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:70:0e:98:9c:d4:9a:a3:4a:bc:03:41:cc:15:50:28:c2:b8: ab:60:59:55:49:75:79:13:8f:33:a7:0e:c9:af:6e:1d:c8:2e: d8:46:4b:0a:1b:9a:2b:ea:d6:51:a3:29:76:f3:90:04:16:e8: a9:f2:02:0f:d0:3e:92:a9:74:08:61:86:76:0c:af:bf:67:cb: 05:23:60:4e:3f:6e:80:97:d4:30:c9:32:78:43:45:0f:1b:cd: bf:0a:7e:ca:ec:f5:20:76:23:3f:a1:d2:70:91:a1:97:b4:25: ac:78:ca:aa:23:62:ee:a3:41:46:07:54:4e:89:3c:95:f1:33: d4:6b:ab:87:58:15:c3:28:0b:12:7a:34:09:7d:51:23:ed:32: 0a:31:c4:7f:cc:0c:c5:c1:95:17:ae:1f:a1:d9:08:b3:1f:35: d3:75:5b:c5:92:e2:9c:90:36:3b:42:bc:e0:6e:3c:8e:35:01: 80:06:51:f7:cb:17:b2:57:d5:20:04:49:df:75:ec:85:08:0f: 07:a9:0d:c8:86:e8:40:90:20:fc:dc:89:bc:78:b9:65:b1:35: b5:3b:d5:a4:2c:52:44:de:d0:fa:b5:64:ae:b7:88:73:73:f0: b0:a4:1f:34:56:c0:e7:40:89:38:34:7a:2b:92:4f:b4:5c:2e: 2c:79:cf:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUH5AMnpXGa8RNSx70QArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjYwMTI1MDQwMTM3WhcNMjYwMTI2MDQwMTM3WjAzMTEwLwYDVQQD EyhiYzkyMTEzZTgxZDBiYTA4ZTI2ZjA4Y2I4ZDY1Yjg3MWM5YjdhNmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrr4YjQz5hMR6l3if1bOQtUNHPXR 74Ejcv4YR4VE35sFtI6AgfnVUT28o24eqBG6MAXjb7EiY/RwCgUeirSTiphp8IY2 yMe3lUEBMUTzmh9qMc1pL6cauOPakVbsJg4bebjtBZltrfyYRsZ/K+uclIOKr2vo uWZmDJOdwXqg6PIZ9yMVQ+zAJ9UNFseul/It92XhSBGRi+ivGCxVCYUzqbxRA+KI pV/hEBfW4mAb8y1DQG7F2E9Xv5lCdkeKH0mt247RRw+oSWfc10rnab0+UGxvNDOZ HRVWwH0PGmb1NKE38g8+6ZUc6z1GHetHLqbyMx3hcN09i2wR1bvxwknU9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLySET6B0LoI4m8Iy41luHHJt6bPMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3AOmJzU mqNKvANBzBVQKMK4q2BZVUl1eROPM6cOya9uHcgu2EZLChuaK+rWUaMpdvOQBBbo qfICD9A+kql0CGGGdgyvv2fLBSNgTj9ugJfUMMkyeENFDxvNvwp+yuz1IHYjP6HS cJGhl7QlrHjKqiNi7qNBRgdUTok8lfEz1Gurh1gVwygLEno0CX1RI+0yCjHEf8wM xcGVF64fodkIsx8103VbxZLinJA2O0K84G48jjUBgAZR98sXslfVIARJ33XshQgP B6kNyIboQJAg/NyJvHi5ZbE1tTvVpCxSRN7Q+rVkrreIc3PwsKQfNFbA50CJODR6 K5JPtFwuLHnPeQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:35 2026 by rpki-client