This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json) Hash identifier: K9qJPVqLt968IMvXZcydJL3NkNHeuYz6CsyhMSlKgtg= Subject key identifier: 64:AE:8E:E1:B0:4C:9B:1C:9A:11:FD:99:3D:19:6C:EE:59:05:54:A5 Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4 Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4 Certificate serial: 019BF5AC2654BCC89812E8C48394134E79CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 15:00:58 +0000 Manifest this update: Sun 25 Jan 2026 15:00:58 +0000 Manifest next update: Mon 26 Jan 2026 15:00:58 +0000 Files and hashes: 1: A9LW0Nmgs_7I3BIXtdOaJHYFfAQ.roa (hash: hGqa87j1hJEPJY71+olnlQtsA2Cb1R1Sm325ratdVxY=) 2: N5kOhaXtNzCeBcbrMh56hDQ4o-U.roa (hash: Ry7/KfE6gcp/8mUaVPE02UAFkpNMITvazXOcwXAUcVo=) 3: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: hWIScOthzAf+E2iACv2IXSW/DUrBb3bGNnTunzGS790=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:26:54:bc:c8:98:12:e8:c4:83:94:13:4e:79:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4 Validity Not Before: Jan 25 15:00:58 2026 GMT Not After : Jan 26 15:00:58 2026 GMT Subject: CN=64ae8ee1b04c9b1c9a11fd993d196cee590554a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:bb:e6:67:2e:cb:60:6a:20:b6:47:26:09: 03:b9:89:86:54:f2:b9:0c:18:31:d9:a2:bb:fb:1b: 54:9b:cf:1a:73:ec:38:12:7b:15:5d:08:9b:34:8c: 59:5d:77:74:13:c9:e7:d9:46:b9:be:c3:1b:c4:58: ba:a7:f3:e8:48:b9:b9:31:0b:75:03:6e:c9:89:ef: ba:1e:a5:01:bd:f5:01:69:53:56:90:a7:ff:3f:a8: 2c:d4:2d:2d:93:fe:5a:c6:09:54:11:f7:52:58:8e: 64:96:9a:2f:3d:e6:dd:4c:b1:ad:06:1d:e2:6e:c6: 00:2c:e7:cf:a3:62:32:f4:3d:38:9f:63:f4:c7:88: df:c4:2a:85:4b:57:c5:35:90:6a:36:9b:84:90:e0: a5:0b:0f:56:97:f1:67:63:4f:9e:0d:6c:82:0c:09: eb:92:75:f3:69:75:e3:b9:5d:ab:6e:01:7d:03:d7: b8:89:38:c2:60:a1:36:1d:3f:d3:9c:ca:50:e5:aa: 21:c2:fa:7e:e3:9a:d4:57:c9:1c:06:8d:14:29:f1: 84:60:8c:55:a4:5d:5c:c7:5d:f0:ce:85:2f:36:4e: 77:d2:3e:88:b6:b2:c3:8b:0e:89:c0:11:b5:17:dd: 0c:95:4d:64:c3:6e:53:b5:82:b8:32:da:9e:a9:2e: 34:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AE:8E:E1:B0:4C:9B:1C:9A:11:FD:99:3D:19:6C:EE:59:05:54:A5 X509v3 Authority Key Identifier: keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:34:2a:7b:73:a6:ea:af:25:ca:5c:7d:fd:28:ef:9a:be:9c: 6e:7c:72:71:50:e3:03:ef:0d:89:14:13:47:1c:e9:8e:c5:ae: 18:99:d8:7e:3f:18:61:d5:93:51:77:40:00:ec:68:8f:19:13: 26:4f:25:fe:7e:f3:13:a2:91:71:d1:a7:21:a0:5f:dc:c2:42: b8:1d:09:cc:2d:74:f4:9f:87:f4:17:12:19:c6:88:3a:04:1f: d1:03:d1:7c:51:53:c0:40:46:d1:19:87:7d:3a:86:f7:d2:48: a5:38:49:9e:16:7c:cf:1a:f9:91:ba:a0:f3:c7:3e:ca:7c:ed: f6:4e:a4:e1:f7:9e:96:27:85:18:06:37:b6:15:02:84:cd:74: e7:14:82:f9:28:80:25:55:41:df:c5:5d:8c:f7:9f:75:ae:72: e9:c0:e4:95:09:22:fe:27:46:16:8d:c0:57:7b:97:10:73:9c: 64:68:76:d4:dd:e4:18:12:96:d1:a5:4e:84:de:ee:0c:1e:2c: 19:b9:49:9d:43:09:ca:92:df:49:2a:a6:8e:a4:a5:92:c9:f9: 33:8c:fd:ed:c7:b7:f6:57:6a:f7:33:91:da:ed:42:be:48:80: 0a:4a:77:d5:7d:bc:a0:77:df:99:44:fa:cf:91:3a:da:6f:5f: 1d:28:34:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rCZUvMiYEujEg5QTTnnNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDQ3NWJiNTQyZjYxODIxYmUzOWRiYzliNjgyNzVkNmUw MDg3ZDQwHhcNMjYwMTI1MTUwMDU4WhcNMjYwMTI2MTUwMDU4WjAzMTEwLwYDVQQD Eyg2NGFlOGVlMWIwNGM5YjFjOWExMWZkOTkzZDE5NmNlZTU5MDU1NGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN675mcuy2BqILZHJgkDuYmGVPK5 DBgx2aK7+xtUm88ac+w4EnsVXQibNIxZXXd0E8nn2Ua5vsMbxFi6p/PoSLm5MQt1 A27Jie+6HqUBvfUBaVNWkKf/P6gs1C0tk/5axglUEfdSWI5klpovPebdTLGtBh3i bsYALOfPo2Iy9D04n2P0x4jfxCqFS1fFNZBqNpuEkOClCw9Wl/FnY0+eDWyCDAnr knXzaXXjuV2rbgF9A9e4iTjCYKE2HT/TnMpQ5aohwvp+45rUV8kcBo0UKfGEYIxV pF1cx13wzoUvNk530j6ItrLDiw6JwBG1F90MlU1kw25TtYK4MtqeqS402wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSujuGwTJscmhH9mT0ZbO5ZBVSlMB8GA1UdIwQY MBaAFGbUdbtUL2GCG+OdvJtoJ11uAIfUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQt ZTVmY2ViZGFhN2YyLzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQtZTVmY2ViZGFhN2Yy LzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyDQqe3Om 6q8lylx9/Sjvmr6cbnxycVDjA+8NiRQTRxzpjsWuGJnYfj8YYdWTUXdAAOxojxkT Jk8l/n7zE6KRcdGnIaBf3MJCuB0JzC109J+H9BcSGcaIOgQf0QPRfFFTwEBG0RmH fTqG99JIpThJnhZ8zxr5kbqg88c+ynzt9k6k4feelieFGAY3thUChM105xSC+SiA JVVB38VdjPefda5y6cDklQki/idGFo3AV3uXEHOcZGh21N3kGBKW0aVOhN7uDB4s GblJnUMJypLfSSqmjqSlksn5M4z97ce39ldq9zOR2u1CvkiACkp31X28oHffmUT6 z5E62m9fHSg0fA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:46 2026 by rpki-client