This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft File: Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft (raw, json) Hash identifier: lFKSmEWmUQFev5+aaORqlouAD30mV0IjmFqlx72Y7c4= Subject key identifier: 4F:76:A4:5D:F2:22:33:E7:3F:0F:15:22:AF:9A:64:6E:39:9B:AE:A6 Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9 Certificate issuer: /CN=668da92f99b5407f28a2f36613e849447a93f6b9 Certificate serial: 019BF574F65D0117008D9F47793EECCCD6EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 14:00:41 +0000 Manifest this update: Sun 25 Jan 2026 14:00:41 +0000 Manifest next update: Mon 26 Jan 2026 14:00:41 +0000 Files and hashes: 1: 0R8Nyml_jNijyqA_Jia2Nz1Ew_0.roa (hash: j8m8dgU0c2ttdrUH0oHPxb+CqlN+qsjDTMJ+LPXhKnk=) 2: Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl (hash: tARiR4TsD6edePE6EnCCVoB7Fw0hXbn/T8wZaJuSHzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:f6:5d:01:17:00:8d:9f:47:79:3e:ec:cc:d6:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9 Validity Not Before: Jan 25 14:00:41 2026 GMT Not After : Jan 26 14:00:41 2026 GMT Subject: CN=4f76a45df22233e73f0f1522af9a646e399baea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f8:d1:02:56:22:c1:c3:2a:3d:4c:43:bc:18: 34:f4:fe:7a:9f:30:72:07:80:69:8e:fe:55:ab:9c: 6b:46:fe:69:ef:8e:0b:fe:72:6d:ba:2b:c2:7c:2f: a3:83:2b:7c:f0:a5:7f:8f:a6:b0:50:ab:9c:7f:55: bb:1e:7e:81:1e:45:65:c0:1d:db:d7:7a:9c:66:49: 5f:a1:19:4d:9d:07:8c:4d:f7:83:86:74:11:95:b4: c6:4a:e9:79:1e:8c:e1:a4:5a:6a:3e:31:60:98:e4: b0:0b:c3:84:db:33:3e:60:6a:b0:c5:f2:81:c2:2f: 72:15:fe:6a:a6:45:10:4b:7e:b1:c1:c1:f6:c9:cb: 86:98:5f:d3:97:4c:a8:6a:bb:57:7d:26:f7:48:21: 8e:6f:4a:f4:c2:1e:f4:d0:3d:5f:2e:96:19:30:fa: d7:68:2a:15:61:de:d3:36:18:52:13:d5:1a:27:bf: 9b:22:b7:dd:92:99:78:06:ac:d8:34:b6:d9:eb:cb: b5:ef:48:df:a4:ee:68:a7:63:b0:70:bb:4c:0d:4c: 92:2e:cc:9d:04:5d:a7:52:ae:64:50:81:9d:47:04: ff:cc:19:4b:1a:da:5a:68:9e:59:ad:c9:88:29:38: 39:e4:c3:b6:da:17:bf:71:8a:68:78:5e:56:26:2a: 8a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:76:A4:5D:F2:22:33:E7:3F:0F:15:22:AF:9A:64:6E:39:9B:AE:A6 X509v3 Authority Key Identifier: keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:eb:ba:7b:1e:44:04:1d:c2:16:64:69:f5:cf:42:af:7f:a8: a6:4f:87:f8:ec:a2:79:dd:68:36:a9:a3:a6:ae:94:53:ab:03: 5a:1c:ed:9d:1a:55:8b:64:d7:53:01:32:10:a2:b0:82:15:14: 24:28:be:ad:a2:e4:e5:24:5a:68:89:34:30:f4:cf:a5:b7:14: a1:80:52:6f:8f:40:29:2f:d3:d3:f9:6e:11:ae:57:29:58:cd: 30:1b:92:8e:97:46:37:2b:86:94:16:f4:ae:ab:e0:26:df:73: c6:f7:59:8f:c6:eb:6a:fd:b4:89:24:ea:71:06:02:57:1e:c9: 55:ab:8d:a2:e6:db:e2:04:c5:2b:b7:33:f9:a2:46:08:8f:8a: ce:4d:22:8c:c4:5c:0b:51:11:4b:38:1e:ec:e0:47:ef:a5:74: 8e:66:d9:77:cb:03:a3:4b:61:d1:1b:26:6b:d9:9a:87:d0:83: c7:03:6c:9e:68:2b:e1:82:16:5d:fd:81:d9:79:cf:70:14:49: a3:70:93:3c:e4:da:0b:a9:0b:2a:a9:53:a4:e6:d8:ae:7b:06: 40:24:60:17:e3:90:cd:87:c5:a3:16:a9:85:8d:b0:c1:10:7d: 85:d7:34:33:cf:14:eb:1e:5c:52:36:d7:4c:01:71:19:ae:a0: 53:bb:c2:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dPZdARcAjZ9HeT7szNbsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OGRhOTJmOTliNTQwN2YyOGEyZjM2NjEzZTg0OTQ0N2E5 M2Y2YjkwHhcNMjYwMTI1MTQwMDQxWhcNMjYwMTI2MTQwMDQxWjAzMTEwLwYDVQQD Eyg0Zjc2YTQ1ZGYyMjIzM2U3M2YwZjE1MjJhZjlhNjQ2ZTM5OWJhZWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vjRAlYiwcMqPUxDvBg09P56nzBy B4Bpjv5Vq5xrRv5p744L/nJtuivCfC+jgyt88KV/j6awUKucf1W7Hn6BHkVlwB3b 13qcZklfoRlNnQeMTfeDhnQRlbTGSul5HozhpFpqPjFgmOSwC8OE2zM+YGqwxfKB wi9yFf5qpkUQS36xwcH2ycuGmF/Tl0yoartXfSb3SCGOb0r0wh700D1fLpYZMPrX aCoVYd7TNhhSE9UaJ7+bIrfdkpl4BqzYNLbZ68u170jfpO5op2OwcLtMDUySLsyd BF2nUq5kUIGdRwT/zBlLGtpaaJ5ZrcmIKTg55MO22he/cYpoeF5WJiqKswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE92pF3yIjPnPw8VIq+aZG45m66mMB8GA1UdIwQY MBaAFGaNqS+ZtUB/KKLzZhPoSUR6k/a5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm8ycEw1bTFRSDhvb3ZObUUtaEpSSHFUOXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jNmUwMGUtODFjZC00YzAwLWFmZjEt ZGM4ZTgzZTYyOWYyLzEvWm8ycEw1bTFRSDhvb3ZObUUtaEpSSHFUOXJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9jNmUwMGUtODFjZC00YzAwLWFmZjEtZGM4ZTgzZTYyOWYy LzEvWm8ycEw1bTFRSDhvb3ZObUUtaEpSSHFUOXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+u6ex5E BB3CFmRp9c9Cr3+opk+H+Oyied1oNqmjpq6UU6sDWhztnRpVi2TXUwEyEKKwghUU JCi+raLk5SRaaIk0MPTPpbcUoYBSb49AKS/T0/luEa5XKVjNMBuSjpdGNyuGlBb0 rqvgJt9zxvdZj8brav20iSTqcQYCVx7JVauNoubb4gTFK7cz+aJGCI+Kzk0ijMRc C1ERSzge7OBH76V0jmbZd8sDo0th0Rsma9mah9CDxwNsnmgr4YIWXf2B2XnPcBRJ o3CTPOTaC6kLKqlTpObYrnsGQCRgF+OQzYfFoxaphY2wwRB9hdc0M88U6x5cUjbX TAFxGa6gU7vCbw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:38:03 2026 by rpki-client