This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft File: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft (raw, json) Hash identifier: V54dT7yB7FNLmZX9KoVxTOx8vToRPoD3tCAaJn0iOMo= Subject key identifier: 82:5D:B7:BB:9A:DA:1F:33:CB:8F:73:A8:60:98:68:07:5A:B6:9B:C7 Authority key identifier: 65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1 Certificate issuer: /CN=65309ed7221d4d52ae23512a0bea500c677a2ea1 Certificate serial: 019BF7D24054F80E2E6B7D4C0622266DE9AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft Manifest number: 12 Signing time: Mon 26 Jan 2026 01:01:49 +0000 Manifest this update: Mon 26 Jan 2026 01:01:49 +0000 Manifest next update: Tue 27 Jan 2026 01:01:49 +0000 Files and hashes: 1: EdxZYg5OqmQWPMmegu-B52k_ZIY.roa (hash: fcd0uJPxM+GkSq+RnRCi5gTClxrJIshw64cEooNSAkU=) 2: ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl (hash: ERBX884ISRiNEfsgrUyZo4jvQene+HJAI94Y/hdDIEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:40:54:f8:0e:2e:6b:7d:4c:06:22:26:6d:e9:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65309ed7221d4d52ae23512a0bea500c677a2ea1 Validity Not Before: Jan 26 01:01:49 2026 GMT Not After : Jan 27 01:01:49 2026 GMT Subject: CN=825db7bb9ada1f33cb8f73a8609868075ab69bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:23:b8:50:c0:0c:ad:9d:6b:0c:d5:18:56:10: ef:7a:c6:a4:ee:e8:ed:79:73:9d:1d:fb:90:8f:52: 06:ad:c4:5c:b8:4c:d6:04:32:1e:02:e4:a2:42:92: cf:6b:b1:fb:8e:83:f9:95:9c:d4:d1:7e:be:d5:f8: d6:17:e2:f7:09:42:92:ec:df:b8:d4:87:99:b3:57: cc:c2:52:62:d1:42:89:92:ea:8e:58:4b:d1:d3:53: a7:d1:cb:ed:1e:bc:c5:7d:7a:95:d9:4e:67:fe:ca: c5:3d:24:94:ff:a2:15:b6:88:71:7d:ff:7f:01:03: 3d:2e:46:7f:66:30:02:4a:ce:83:5e:aa:a4:7c:8d: f9:1c:23:43:8c:2c:d9:ef:e6:8a:4e:5f:5c:9d:63: 09:4b:cf:41:82:61:19:50:b5:fe:d9:b3:61:d1:b1: 1c:d9:20:91:a9:b3:29:02:69:69:e5:d8:46:28:ba: 38:db:99:fe:8f:10:04:d3:0f:1d:ec:bd:75:48:7f: 16:37:9c:e8:ad:67:87:02:f0:95:79:1b:f5:35:ba: 50:06:f1:9b:3c:88:e9:5d:b8:3e:e2:a0:28:4e:29: c6:d4:b6:4d:ff:db:98:21:6a:6c:a3:70:e9:51:e1: 0e:fb:20:1b:7d:6c:36:1c:d9:63:78:55:7b:18:cb: d4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5D:B7:BB:9A:DA:1F:33:CB:8F:73:A8:60:98:68:07:5A:B6:9B:C7 X509v3 Authority Key Identifier: keyid:65:30:9E:D7:22:1D:4D:52:AE:23:51:2A:0B:EA:50:0C:67:7A:2E:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2c94be-be37-4c76-aa5d-d1d5120cf6ee/1/ZTCe1yIdTVKuI1EqC-pQDGd6LqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:1a:94:27:62:c8:72:93:68:21:56:c2:7c:da:af:91:56:22: 9a:a6:a4:51:e5:4d:e2:f7:17:c1:01:27:e3:4b:63:70:cb:b3: 92:6f:de:44:c3:59:3e:2a:83:1e:44:63:62:e7:44:03:85:65: 92:dc:dc:e7:94:58:2b:0a:62:ac:a7:ce:40:4a:13:0e:7b:09: 2d:c9:10:07:af:74:fa:2e:a8:db:d8:24:29:42:cd:2b:32:9d: 00:76:f4:e6:04:15:09:0a:8c:6d:03:68:c7:9b:ec:b1:5d:f1: 76:b3:67:3d:b9:c9:07:1b:55:cb:58:67:b8:d4:62:57:56:f6: da:50:e7:9e:29:d8:0d:58:02:f6:03:40:3a:42:ec:ed:64:e9: ef:d4:a4:a4:7e:ab:13:23:c9:9d:af:d5:b1:97:9d:87:02:7f: 37:4c:94:8a:86:b8:d5:17:0a:10:ab:61:8c:24:f2:25:e9:04: fe:62:0d:26:3d:14:70:fa:15:f9:82:02:61:ea:03:58:c3:2f: f5:9d:64:de:73:7e:3d:54:4d:fc:d5:40:5c:42:8a:e9:5f:96: 74:47:06:df:4b:de:74:c3:d4:a3:30:a0:5c:07:69:0b:42:22: a2:1e:32:58:6b:47:74:d0:b1:c4:d2:49:ad:fe:a8:5d:2a:81: a4:f4:63:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30kBU+A4ua31MBiImbemvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MzA5ZWQ3MjIxZDRkNTJhZTIzNTEyYTBiZWE1MDBjNjc3 YTJlYTEwHhcNMjYwMTI2MDEwMTQ5WhcNMjYwMTI3MDEwMTQ5WjAzMTEwLwYDVQQD Eyg4MjVkYjdiYjlhZGExZjMzY2I4ZjczYTg2MDk4NjgwNzVhYjY5YmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSO4UMAMrZ1rDNUYVhDvesak7ujt eXOdHfuQj1IGrcRcuEzWBDIeAuSiQpLPa7H7joP5lZzU0X6+1fjWF+L3CUKS7N+4 1IeZs1fMwlJi0UKJkuqOWEvR01On0cvtHrzFfXqV2U5n/srFPSSU/6IVtohxff9/ AQM9LkZ/ZjACSs6DXqqkfI35HCNDjCzZ7+aKTl9cnWMJS89BgmEZULX+2bNh0bEc 2SCRqbMpAmlp5dhGKLo425n+jxAE0w8d7L11SH8WN5zorWeHAvCVeRv1NbpQBvGb PIjpXbg+4qAoTinG1LZN/9uYIWpso3DpUeEO+yAbfWw2HNljeFV7GMvUkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJdt7ua2h8zy49zqGCYaAdatpvHMB8GA1UdIwQY MBaAFGUwntciHU1SriNRKgvqUAxnei6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlRDZTF5SWRUVkt1STFFcUMtcFFER2Q2THFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYzk0YmUtYmUzNy00Yzc2LWFhNWQt ZDFkNTEyMGNmNmVlLzEvWlRDZTF5SWRUVkt1STFFcUMtcFFER2Q2THFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yYzk0YmUtYmUzNy00Yzc2LWFhNWQtZDFkNTEyMGNmNmVl LzEvWlRDZTF5SWRUVkt1STFFcUMtcFFER2Q2THFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRqUJ2LI cpNoIVbCfNqvkVYimqakUeVN4vcXwQEn40tjcMuzkm/eRMNZPiqDHkRjYudEA4Vl ktzc55RYKwpirKfOQEoTDnsJLckQB690+i6o29gkKULNKzKdAHb05gQVCQqMbQNo x5vssV3xdrNnPbnJBxtVy1hnuNRiV1b22lDnninYDVgC9gNAOkLs7WTp79SkpH6r EyPJna/VsZedhwJ/N0yUioa41RcKEKthjCTyJekE/mINJj0UcPoV+YICYeoDWMMv 9Z1k3nN+PVRN/NVAXEKK6V+WdEcG30vedMPUozCgXAdpC0Iioh4yWGtHdNCxxNJJ rf6oXSqBpPRjrQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:15 2026 by rpki-client