This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json) Hash identifier: QcrYACmaBJiGwXa/hzVWQ7gROEGkLGe7aAocUu/71EY= Subject key identifier: 75:25:CE:2C:F3:51:7B:9C:63:EC:D5:32:4F:D6:A4:90:58:09:6D:A1 Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb Certificate serial: 019BF79A504301763E34EAD85C0175310B07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 00:00:43 +0000 Manifest this update: Mon 26 Jan 2026 00:00:43 +0000 Manifest next update: Tue 27 Jan 2026 00:00:43 +0000 Files and hashes: 1: Y9ARVG_hAm4nIrCTT5R9mNE2Ai8.roa (hash: MI2P4v9i+kU4F9eDStIUnkN/VYUaWV71u0evfwMIhOU=) 2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: +cwOUUv7Ba0zZjHcWvOeOawKDfk09vriV/LsVw2LvlE=) 3: fzcY56XdnFZoFNt0HXida4aSHGU.roa (hash: MqoKni1V8waFiRzOClIF15P78qFKBD2MS62bZfGpfEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:50:43:01:76:3e:34:ea:d8:5c:01:75:31:0b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb Validity Not Before: Jan 26 00:00:43 2026 GMT Not After : Jan 27 00:00:43 2026 GMT Subject: CN=7525ce2cf3517b9c63ecd5324fd6a49058096da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fa:2c:e1:f6:22:52:84:4a:8d:f3:4f:cc:a9: 44:3e:bc:ab:2a:b3:b5:85:a9:2d:29:54:c6:ac:3c: 1b:ca:ae:dd:0e:5f:24:0c:c0:b8:1e:a8:dd:12:87: 39:6d:12:86:fc:c7:7b:42:5b:d3:52:24:8c:10:43: 07:4e:3e:40:77:51:48:3e:53:21:a9:07:fb:95:ad: a5:7b:d1:7a:7f:c3:76:83:18:05:70:84:d6:eb:df: 72:9c:f4:a9:52:6c:13:66:80:f7:c4:f0:5a:96:85: 47:64:7a:bb:18:d1:d3:d0:29:e7:2f:5f:0f:2b:c8: e0:55:0d:81:aa:ce:e7:97:e6:02:21:b4:7c:8a:6f: 0f:33:ff:cc:f9:76:d0:09:d1:b3:08:a6:b9:c7:c6: 6c:79:bc:98:67:c2:5b:93:66:13:be:63:4c:9a:94: 88:67:e7:d3:1d:10:c7:96:5e:3f:f3:ec:52:77:70: 42:87:e1:d6:87:9c:29:f8:39:f9:f6:ad:82:2a:26: e6:fc:dc:85:16:68:4f:00:e4:2a:5e:eb:53:81:10: 2d:57:53:12:e1:ef:68:c8:66:e7:8c:c7:4c:89:5d: 4f:36:c3:3d:6a:fd:6c:fb:e5:ed:5e:84:17:d2:97: fe:94:8b:25:93:67:8a:56:c1:67:41:a3:57:7c:08: 4a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:25:CE:2C:F3:51:7B:9C:63:EC:D5:32:4F:D6:A4:90:58:09:6D:A1 X509v3 Authority Key Identifier: keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:4d:25:35:4e:08:78:3e:d3:04:a0:00:f9:e6:4a:56:b7:8c: 19:4e:28:af:d0:e6:dd:d8:c9:1c:db:3b:d8:b8:ef:ed:7d:f6: 7e:a2:b6:33:05:eb:93:a2:f2:c2:65:4d:6f:d7:f1:ef:9c:23: b5:62:16:04:73:60:d8:94:13:ec:24:28:52:ec:63:b4:1e:d8: 9d:22:9c:59:3a:97:fe:2b:8d:a0:a4:6c:a0:3e:b4:fd:e0:67: da:dc:f7:ae:aa:d5:ee:6f:81:8a:f3:b5:b8:e8:31:2d:92:19: f9:23:ce:a6:bb:46:6b:fc:19:f3:80:d4:7a:82:6d:60:65:fe: 8c:43:4b:16:d2:f5:a4:2a:21:21:c0:19:74:0f:0a:a0:dc:df: d7:af:f4:f3:29:26:d2:c7:c2:8b:aa:32:e6:ee:5f:03:c5:53: 29:0d:89:2e:c1:74:c7:7b:7b:67:09:fa:9a:11:8b:cc:e3:84: c5:52:3c:bf:45:52:d2:36:cd:bd:8d:df:6d:18:52:7d:1d:8a: df:69:75:7e:db:24:0b:42:7d:b8:9c:5d:81:d7:f5:f5:f0:db: c5:47:53:c0:60:8f:00:d4:4d:7e:bb:02:85:95:20:ad:0d:d4: 0f:37:d5:11:92:c8:11:5c:b8:a7:ce:c5:07:ce:2e:29:37:62: 81:c5:32:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mlBDAXY+NOrYXAF1MQsHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZWYzMWFkYWM2NjM4NTViM2RkZDE5MzFjNDRjZjgwNjRk NmE2ZWIwHhcNMjYwMTI2MDAwMDQzWhcNMjYwMTI3MDAwMDQzWjAzMTEwLwYDVQQD Eyg3NTI1Y2UyY2YzNTE3YjljNjNlY2Q1MzI0ZmQ2YTQ5MDU4MDk2ZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfos4fYiUoRKjfNPzKlEPryrKrO1 haktKVTGrDwbyq7dDl8kDMC4HqjdEoc5bRKG/Md7QlvTUiSMEEMHTj5Ad1FIPlMh qQf7la2le9F6f8N2gxgFcITW699ynPSpUmwTZoD3xPBaloVHZHq7GNHT0CnnL18P K8jgVQ2Bqs7nl+YCIbR8im8PM//M+XbQCdGzCKa5x8ZsebyYZ8Jbk2YTvmNMmpSI Z+fTHRDHll4/8+xSd3BCh+HWh5wp+Dn59q2CKibm/NyFFmhPAOQqXutTgRAtV1MS 4e9oyGbnjMdMiV1PNsM9av1s++XtXoQX0pf+lIslk2eKVsFnQaNXfAhK3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUlzizzUXucY+zVMk/WpJBYCW2hMB8GA1UdIwQY MBaAFGbvMa2sZjhVs93RkxxEz4Bk1qbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUt ZGIwZGNjMDhmNDUyLzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUtZGIwZGNjMDhmNDUy LzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdU0lNU4I eD7TBKAA+eZKVreMGU4or9Dm3djJHNs72Ljv7X32fqK2MwXrk6LywmVNb9fx75wj tWIWBHNg2JQT7CQoUuxjtB7YnSKcWTqX/iuNoKRsoD60/eBn2tz3rqrV7m+BivO1 uOgxLZIZ+SPOprtGa/wZ84DUeoJtYGX+jENLFtL1pCohIcAZdA8KoNzf16/08ykm 0sfCi6oy5u5fA8VTKQ2JLsF0x3t7Zwn6mhGLzOOExVI8v0VS0jbNvY3fbRhSfR2K 32l1ftskC0J9uJxdgdf19fDbxUdTwGCPANRNfrsChZUgrQ3UDzfVEZLIEVy4p87F B84uKTdigcUy4A== -----END CERTIFICATE-----Generated at Mon Jan 26 05:12:08 2026 by rpki-client