This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json) Hash identifier: 8TGAsiuIucxQRvk0tSD9NKI3hySQamh3mXiAy7/lw6Q= Subject key identifier: 46:29:81:18:DD:14:9D:BD:58:40:CC:29:80:0F:28:9F:5F:DF:F4:D7 Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb Certificate serial: 019BF3BD8CE2FFB82C8FCA648FA8DE86D11B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 06:00:44 +0000 Manifest this update: Sun 25 Jan 2026 06:00:44 +0000 Manifest next update: Mon 26 Jan 2026 06:00:44 +0000 Files and hashes: 1: Y9ARVG_hAm4nIrCTT5R9mNE2Ai8.roa (hash: MI2P4v9i+kU4F9eDStIUnkN/VYUaWV71u0evfwMIhOU=) 2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: JzQevzLaQ1XGd7C+9lyk2qih/iUgJmWbx+FaSy+sTGY=) 3: fzcY56XdnFZoFNt0HXida4aSHGU.roa (hash: MqoKni1V8waFiRzOClIF15P78qFKBD2MS62bZfGpfEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:8c:e2:ff:b8:2c:8f:ca:64:8f:a8:de:86:d1:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb Validity Not Before: Jan 25 06:00:44 2026 GMT Not After : Jan 26 06:00:44 2026 GMT Subject: CN=46298118dd149dbd5840cc29800f289f5fdff4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:dd:01:da:9e:0a:51:47:1e:f2:25:c7:47: 3f:5f:ec:fd:25:9e:b2:91:34:a3:73:ac:b1:9e:11: b9:92:b1:59:31:26:c5:dc:63:b3:a8:17:8a:51:be: a4:ad:be:f0:99:15:13:85:58:d0:32:80:da:35:76: b7:a9:a7:af:8f:93:67:37:65:f0:31:ca:1c:61:3a: 0a:95:aa:50:d2:e7:02:a4:84:34:ca:c4:d2:8e:d3: ad:c5:3f:d2:01:c8:52:44:d1:6c:22:35:e0:35:c2: d9:db:02:d6:fd:be:46:e3:9f:de:04:65:8e:6a:ed: fe:7f:87:2c:dc:f7:65:bf:e0:df:d0:e0:79:db:88: 23:b6:db:fe:7b:2d:fb:b5:69:67:7d:da:6f:ed:15: b8:62:7b:8f:d6:49:51:16:00:df:3d:3e:5b:bf:6e: 37:e5:b8:80:16:cf:35:8e:78:bb:7c:ef:74:ee:9f: e0:fe:73:32:6f:91:82:5d:e5:0f:10:74:87:db:cd: ae:a7:82:ce:68:cf:7e:f4:96:de:98:0a:97:26:c5: 47:42:f3:79:b9:b9:94:7b:81:ba:18:b8:c1:21:1e: a8:1d:48:a4:26:e1:43:91:05:9c:87:47:f1:97:28: 24:9e:6f:f6:92:71:a8:13:0c:93:32:fd:ac:6f:e4: 5a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:29:81:18:DD:14:9D:BD:58:40:CC:29:80:0F:28:9F:5F:DF:F4:D7 X509v3 Authority Key Identifier: keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:6f:94:5e:f7:13:61:05:ec:77:92:47:ba:d1:d3:7a:58:28: 31:63:1a:45:d3:2c:a1:09:f8:d9:06:47:fa:61:e9:84:31:a7: 38:88:67:03:d7:dc:52:e6:76:31:af:63:19:83:0d:f6:14:09: fd:57:47:50:23:25:99:14:47:ea:0b:0d:ec:38:19:cb:10:1f: ff:80:8d:0b:1b:c8:a0:f4:c3:59:7e:aa:8e:af:74:54:cc:ff: ff:4a:29:2c:0b:22:92:0d:cb:d3:7a:d5:50:66:28:e0:ec:be: e2:3d:1a:c7:82:6c:1f:39:3c:13:8f:b7:d2:28:7d:9b:f0:d3: 7a:d3:91:84:00:79:a7:34:3b:a4:36:58:71:8f:f6:56:bc:b2: 89:b9:02:d3:3e:4d:75:10:a6:9b:f9:1a:47:a4:1e:c7:de:52: 1b:de:c6:02:60:16:ab:40:a1:94:d0:35:49:9c:66:d0:50:98: 47:be:46:bb:c5:c1:7b:41:7b:b5:25:5b:85:5b:27:07:a4:f4: 60:4c:9e:cb:39:93:61:8a:1b:1e:d5:25:0d:4d:50:ee:49:51: 79:22:a4:a3:77:7c:49:c9:4a:dc:6e:cb:85:e3:c6:f0:29:e0: a6:bc:81:79:b9:96:36:c1:87:0f:7e:0d:2e:a0:1b:9e:6d:ce: bb:21:6f:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvYzi/7gsj8pkj6jehtEbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZWYzMWFkYWM2NjM4NTViM2RkZDE5MzFjNDRjZjgwNjRk NmE2ZWIwHhcNMjYwMTI1MDYwMDQ0WhcNMjYwMTI2MDYwMDQ0WjAzMTEwLwYDVQQD Eyg0NjI5ODExOGRkMTQ5ZGJkNTg0MGNjMjk4MDBmMjg5ZjVmZGZmNGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUvdAdqeClFHHvIlx0c/X+z9JZ6y kTSjc6yxnhG5krFZMSbF3GOzqBeKUb6krb7wmRUThVjQMoDaNXa3qaevj5NnN2Xw McocYToKlapQ0ucCpIQ0ysTSjtOtxT/SAchSRNFsIjXgNcLZ2wLW/b5G45/eBGWO au3+f4cs3Pdlv+Df0OB524gjttv+ey37tWlnfdpv7RW4YnuP1klRFgDfPT5bv243 5biAFs81jni7fO907p/g/nMyb5GCXeUPEHSH282up4LOaM9+9JbemAqXJsVHQvN5 ubmUe4G6GLjBIR6oHUikJuFDkQWch0fxlygknm/2knGoEwyTMv2sb+RafQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYpgRjdFJ29WEDMKYAPKJ9f3/TXMB8GA1UdIwQY MBaAFGbvMa2sZjhVs93RkxxEz4Bk1qbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUt ZGIwZGNjMDhmNDUyLzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUtZGIwZGNjMDhmNDUy LzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2+UXvcT YQXsd5JHutHTelgoMWMaRdMsoQn42QZH+mHphDGnOIhnA9fcUuZ2Ma9jGYMN9hQJ /VdHUCMlmRRH6gsN7DgZyxAf/4CNCxvIoPTDWX6qjq90VMz//0opLAsikg3L03rV UGYo4Oy+4j0ax4JsHzk8E4+30ih9m/DTetORhAB5pzQ7pDZYcY/2VryyibkC0z5N dRCmm/kaR6Qex95SG97GAmAWq0ChlNA1SZxm0FCYR75Gu8XBe0F7tSVbhVsnB6T0 YEyeyzmTYYobHtUlDU1Q7klReSKko3d8SclK3G7LhePG8CngpryBebmWNsGHD34N LqAbnm3OuyFvlw== -----END CERTIFICATE-----Generated at Sun Jan 25 15:21:43 2026 by rpki-client