This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft File: ztLYANxsM7afpHKR4vFbM16jYA8.mft (raw, json) Hash identifier: y4Q97r5Pr5pf4j+26bGBU8aJSqir5oCgGxcrje8BojM= Subject key identifier: 1B:92:FF:74:E3:4A:4C:11:7A:D7:4A:83:E5:51:48:81:AC:1D:2E:37 Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f Certificate serial: 019BF2E2B900A6A684DAB85D336B3ED120AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 02:01:43 +0000 Manifest this update: Sun 25 Jan 2026 02:01:43 +0000 Manifest next update: Mon 26 Jan 2026 02:01:43 +0000 Files and hashes: 1: R9EYWDWbFyIowERkQv1v0JtSffs.roa (hash: UZd3m4a2szallkaOjNZ7VHm5NhVRaDO2lmc6VL9YvRg=) 2: X3fPlEcezz2LtewMmlGePOr2KHg.roa (hash: 5g36Sq2zpkP21Y5qWvGwR57g8qXOqKbe5sby4b2OVKE=) 3: ZDjXb-6sXlkqWM2dj0s_r6ok4IU.roa (hash: 43aIR8uvVvqvIYOmN9YnPWlwLHPz7ywPbdcbAEwBcvs=) 4: uYt3LwvbCynztKYkWZlfCwbeA9U.roa (hash: lkVlyA3OypIzfME9Kh6ROBp1XjLEdpw7ZJP7xjy2Vqw=) 5: ztLYANxsM7afpHKR4vFbM16jYA8.crl (hash: UgOL1YIa+E+2ynkbUyKUhS5+HpRXUdNV6hcGE8PQxxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:b9:00:a6:a6:84:da:b8:5d:33:6b:3e:d1:20:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f Validity Not Before: Jan 25 02:01:43 2026 GMT Not After : Jan 26 02:01:43 2026 GMT Subject: CN=1b92ff74e34a4c117ad74a83e5514881ac1d2e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1c:83:2b:f3:c8:6c:66:ee:92:51:81:83:cc: 1a:08:ca:cf:95:bd:a6:59:e1:44:52:2c:38:70:35: 77:c3:db:f1:6f:dd:fd:ce:16:d3:3b:41:99:aa:a7: 64:40:8f:43:6b:10:6d:39:a3:9c:34:5a:4f:53:f8: e0:2c:ed:3a:02:73:c9:ea:d4:77:f1:f4:8b:00:a4: ef:38:95:19:3e:92:27:de:e4:2d:56:3e:dd:b7:de: ac:fe:72:ca:20:2c:b3:49:2d:5b:07:00:5d:79:4d: b3:f6:a9:8a:93:e9:c5:1e:58:b7:40:d8:e4:b7:25: 71:aa:9c:f5:f3:ce:30:5f:d0:46:6a:5b:c8:96:44: 44:5a:61:3e:c8:b6:d5:5f:a7:b5:7a:0f:bd:57:92: a8:5f:ca:7e:d8:68:24:5d:d0:ac:96:40:f4:2a:8e: 5a:d9:21:a0:c5:e2:58:93:c4:f2:6c:a4:2b:a7:99: a2:f2:ea:e9:e8:58:01:bf:b4:d9:ed:ca:a1:a1:d0: 0f:d3:8c:38:1b:9f:29:67:84:17:2f:cc:41:c1:f2: db:b0:f9:77:2a:88:fc:df:ff:51:77:f7:22:0d:a1: 28:87:d8:a4:85:4e:60:4c:6d:12:eb:fe:01:b3:80: d7:e1:b0:7e:9f:5c:40:22:c5:41:10:8b:26:63:25: e0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:92:FF:74:E3:4A:4C:11:7A:D7:4A:83:E5:51:48:81:AC:1D:2E:37 X509v3 Authority Key Identifier: keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e5:1d:8b:80:2f:17:be:71:1c:db:34:8a:09:59:19:8d:b0: 00:36:1f:42:dd:f0:6d:d8:3e:25:be:2e:29:da:f3:86:e5:9d: 1a:91:b3:60:3d:87:ab:e0:14:98:8f:df:cf:12:4a:84:4e:78: 93:59:51:aa:35:3c:a2:0d:a6:40:6c:b6:45:3b:b2:a1:ca:a2: 74:2f:f5:e1:f8:fc:59:5b:e5:af:ac:7f:97:03:0f:ad:20:3b: df:db:19:9f:81:6d:e8:57:89:37:42:84:6e:a6:27:bc:cd:48: 7f:d8:0e:e4:78:8c:29:21:7d:85:1a:e9:4f:10:1c:1f:3e:98: e5:55:72:3d:d2:56:90:f1:71:d6:4b:9b:b6:62:15:2b:a2:2f: 96:b9:87:50:c6:2e:88:7d:09:fd:ee:9f:42:cf:7f:77:28:cf: 22:1e:d5:41:eb:07:7e:99:e7:e0:07:03:c6:6d:fd:f3:f4:df: 01:24:ca:01:91:a0:54:af:d1:75:b1:1d:92:b4:47:a5:79:de: d2:99:c1:a7:2a:0f:69:07:e3:ee:86:dd:14:d9:49:75:a0:d0: d4:d8:52:bc:f8:d8:80:73:19:e0:c4:48:e0:9c:38:38:6e:78: c6:a1:cf:61:6d:1f:e9:51:79:ca:1d:55:ee:12:97:85:b4:de: f0:8d:37:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4rkApqaE2rhdM2s+0SCuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDJkODAwZGM2YzMzYjY5ZmE0NzI5MWUyZjE1YjMzNWVh MzYwMGYwHhcNMjYwMTI1MDIwMTQzWhcNMjYwMTI2MDIwMTQzWjAzMTEwLwYDVQQD EygxYjkyZmY3NGUzNGE0YzExN2FkNzRhODNlNTUxNDg4MWFjMWQyZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RyDK/PIbGbuklGBg8waCMrPlb2m WeFEUiw4cDV3w9vxb939zhbTO0GZqqdkQI9DaxBtOaOcNFpPU/jgLO06AnPJ6tR3 8fSLAKTvOJUZPpIn3uQtVj7dt96s/nLKICyzSS1bBwBdeU2z9qmKk+nFHli3QNjk tyVxqpz1884wX9BGalvIlkREWmE+yLbVX6e1eg+9V5KoX8p+2GgkXdCslkD0Ko5a 2SGgxeJYk8TybKQrp5mi8urp6FgBv7TZ7cqhodAP04w4G58pZ4QXL8xBwfLbsPl3 Koj83/9Rd/ciDaEoh9ikhU5gTG0S6/4Bs4DX4bB+n1xAIsVBEIsmYyXghQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuS/3TjSkwRetdKg+VRSIGsHS43MB8GA1UdIwQY MBaAFM7S2ADcbDO2n6RykeLxWzNeo2APMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYt ZWQ0ZjA2NDNiZjI1LzEvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYtZWQ0ZjA2NDNiZjI1 LzEvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuUdi4Av F75xHNs0iglZGY2wADYfQt3wbdg+Jb4uKdrzhuWdGpGzYD2Hq+AUmI/fzxJKhE54 k1lRqjU8og2mQGy2RTuyocqidC/14fj8WVvlr6x/lwMPrSA739sZn4Ft6FeJN0KE bqYnvM1If9gO5HiMKSF9hRrpTxAcHz6Y5VVyPdJWkPFx1kubtmIVK6IvlrmHUMYu iH0J/e6fQs9/dyjPIh7VQesHfpnn4AcDxm398/TfASTKAZGgVK/RdbEdkrRHpXne 0pnBpyoPaQfj7obdFNlJdaDQ1NhSvPjYgHMZ4MRI4Jw4OG54xqHPYW0f6VF5yh1V 7hKXhbTe8I03cw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:56:38 2026 by rpki-client