This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json) Hash identifier: b9vrGaI45AX4D11196qVsun4REGSOOllhc8qMh++Cew= Subject key identifier: 39:D8:4A:DD:F1:05:0C:98:66:0F:B1:9C:BF:7C:11:3F:98:35:31:5F Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 019BF3507A06DAAFD42932241DF4DF05089C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft Manifest number: 17FB Signing time: Sun 25 Jan 2026 04:01:36 +0000 Manifest this update: Sun 25 Jan 2026 04:01:36 +0000 Manifest next update: Mon 26 Jan 2026 04:01:36 +0000 Files and hashes: 1: 0uXHR2UhfdGKOw0-7UVbnfQAkig.roa (hash: Q9NPQXWKGQHVWf1Z/Oo69HPn4r2sOJMpx+RqofXuMKw=) 2: 1-jd9OcIMJ3MRmOrCPnxeklbAz-A.roa (hash: 4BT08aUJAH5XA8v2nUCY0ZzKbtYT4OuVlGjXaC8L51w=) 3: 3Hr9NkohHp-0dQh6eby1rDTTvtg.roa (hash: 31UMAD/tu8ErCfftbrPF1UHKdFAEb8fyigVMsh1vdjY=) 4: 50_RqUM3HM1DTyeXhDBU-vljMns.roa (hash: jLfna8CaKrQXjGhh5I5+7KDotyKYCpxYaW8lSXxCxYI=) 5: 8VffJRIzchhCe8rm2mAWoMqOrUw.roa (hash: ZlMVYfC0qcWAgUxCif3zol/JEVTmk18XMebsrNTaMMw=) 6: FXkLPO07K0oGiHX6N80HucLUmQk.roa (hash: pJpxLX/J3IKaGvymzNo/eP+WscosiFBoX/gscobrkA8=) 7: SviK5uP3P_320woFz7MJ74gfE54.roa (hash: cdu27i/9dSf6ELTxYPRMzucVjIzIdkrFCjEQ+8cX0Hc=) 8: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: M1qDSCKSDPr6XXsPza8kKyj1FLCYO6QkQx9D2Mg/nkY=) 9: _yMstHwq62YtmKZbMo5Nl7N0BSY.roa (hash: fA5EOJqyYeCeRJjBOFQnKbcHaakgxJGZzArfMKvJW7M=) 10: mNIa-kBl--UJ4M4sTdW_ScZtluQ.roa (hash: APBGVJ5X0w1VXGqUTI7O+M7iTb0F7m1Cbhdbmsncrvg=) 11: vUnigMLcxEHFFYzam4W0EFuYfF0.roa (hash: qgrF46htEQCa+s16GhFv54cTmD+21CsD7rkwyl8dr1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:7a:06:da:af:d4:29:32:24:1d:f4:df:05:08:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Jan 25 04:01:36 2026 GMT Not After : Jan 26 04:01:36 2026 GMT Subject: CN=39d84addf1050c98660fb19cbf7c113f9835315f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:eb:b8:31:c0:39:63:63:15:55:dd:f3:f2:e5: 88:d0:b7:fc:c8:7e:83:6e:c5:88:e9:4b:8e:ac:7b: 11:0a:a7:f4:74:37:dd:6a:34:b5:f2:92:f4:e7:51: 7d:6e:45:46:bb:8f:4d:ff:79:13:7a:95:a4:17:6c: 3f:db:1b:84:1d:a6:fb:f5:9f:c7:e0:4d:f7:c3:e2: 1a:76:94:a7:d5:33:d0:2e:d1:9e:fb:b4:8f:ea:8b: f2:19:1f:6d:d1:a3:fa:a0:f8:a9:b4:11:46:44:90: 95:15:a2:e7:c9:b3:ba:72:20:49:e0:b6:2c:6b:f3: 31:78:4c:11:a3:db:68:f1:36:90:f8:5b:7a:71:bf: 65:7c:24:81:36:60:80:86:01:48:5f:ff:34:3b:bd: cb:13:ac:f1:61:d9:a1:4c:9c:a0:97:99:0b:6e:32: 28:85:3d:89:33:ab:d0:3b:de:25:18:ec:39:c9:9e: 70:b2:95:1e:c6:b4:97:6e:94:f4:8d:74:e9:96:44: 72:ee:e4:cb:8c:62:79:ed:fc:88:9e:b3:51:13:54: 9c:a3:1a:bf:9a:7f:d8:2d:34:9c:6d:66:97:a6:73: 0a:80:9f:8d:64:46:d7:a7:d2:4b:4a:b5:3d:2c:f3: 9e:00:a2:0d:ce:30:f2:f9:35:83:6f:0c:f9:d0:8a: ab:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D8:4A:DD:F1:05:0C:98:66:0F:B1:9C:BF:7C:11:3F:98:35:31:5F X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:11:a0:13:9a:d6:c6:58:bd:42:c5:90:0c:77:cf:b0:58:a5: 8e:c5:7b:f6:23:5f:ef:d7:54:75:a2:ec:81:1e:27:72:f5:8f: ea:7d:91:09:d1:df:81:21:ec:51:31:f6:35:b6:f4:d8:24:59: f8:89:f2:31:6f:0b:ce:68:2c:bd:5c:78:6c:5e:78:71:df:a9: d1:36:06:68:0a:92:c3:fd:d7:06:2e:b1:af:e3:89:8f:74:93: 40:12:f3:fa:83:1b:a3:b6:7e:0b:0d:55:0c:18:5f:ac:fd:89: fa:09:fe:e2:c1:72:07:b0:f1:4b:c0:79:27:61:2c:a5:03:34: df:43:41:d8:15:dc:84:23:22:a5:d0:1c:07:2a:06:81:3d:b1: ea:99:6a:c8:ec:ed:48:79:b2:ea:66:5b:c8:ca:37:c7:30:c9: ae:13:8b:63:f7:cb:40:5b:15:bd:d2:40:2b:8c:5c:e8:9d:3f: ea:db:75:77:5c:d0:4d:4f:66:df:1a:a2:6b:53:1b:6f:74:ec: fd:4b:16:2d:c8:37:2e:cf:78:65:59:47:b3:b0:22:49:50:61: 1f:b0:b8:dd:2f:b3:12:31:1a:ee:0f:9e:2d:14:ae:1a:17:a0: 97:65:f9:8a:c0:66:21:a6:ec:02:55:20:b1:e1:40:e5:95:4f: 48:7a:c4:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUHoG2q/UKTIkHfTfBQicMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjYwMTI1MDQwMTM2WhcNMjYwMTI2MDQwMTM2WjAzMTEwLwYDVQQD EygzOWQ4NGFkZGYxMDUwYzk4NjYwZmIxOWNiZjdjMTEzZjk4MzUzMTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOu4McA5Y2MVVd3z8uWI0Lf8yH6D bsWI6UuOrHsRCqf0dDfdajS18pL051F9bkVGu49N/3kTepWkF2w/2xuEHab79Z/H 4E33w+IadpSn1TPQLtGe+7SP6ovyGR9t0aP6oPiptBFGRJCVFaLnybO6ciBJ4LYs a/MxeEwRo9to8TaQ+Ft6cb9lfCSBNmCAhgFIX/80O73LE6zxYdmhTJygl5kLbjIo hT2JM6vQO94lGOw5yZ5wspUexrSXbpT0jXTplkRy7uTLjGJ57fyInrNRE1Scoxq/ mn/YLTScbWaXpnMKgJ+NZEbXp9JLSrU9LPOeAKINzjDy+TWDbwz50Iqr2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDnYSt3xBQyYZg+xnL98ET+YNTFfMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYBGgE5rW xli9QsWQDHfPsFiljsV79iNf79dUdaLsgR4ncvWP6n2RCdHfgSHsUTH2Nbb02CRZ +InyMW8LzmgsvVx4bF54cd+p0TYGaAqSw/3XBi6xr+OJj3STQBLz+oMbo7Z+Cw1V DBhfrP2J+gn+4sFyB7DxS8B5J2EspQM030NB2BXchCMipdAcByoGgT2x6plqyOzt SHmy6mZbyMo3xzDJrhOLY/fLQFsVvdJAK4xc6J0/6tt1d1zQTU9m3xqia1Mbb3Ts /UsWLcg3Ls94ZVlHs7AiSVBhH7C43S+zEjEa7g+eLRSuGhegl2X5isBmIabsAlUg seFA5ZVPSHrEWA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:44 2026 by rpki-client