This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft File: ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json) Hash identifier: bvjFX70h+FsNfbjKbqo8OBP4LlRWOBdTdi611U/Fx24= Subject key identifier: 5C:67:66:2E:9F:53:D8:16:B8:5A:87:9E:74:FD:EE:0E:AE:A4:30:4B Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 019BD57D76810E4373F2D97D3D8CE69C103A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft Manifest number: 1844 Signing time: Mon 19 Jan 2026 09:02:07 +0000 Manifest this update: Mon 19 Jan 2026 09:02:07 +0000 Manifest next update: Tue 20 Jan 2026 09:02:07 +0000 Files and hashes: 1: 5fUbTKl8FSPc1kSYGwQAsVfb2vQ.roa (hash: PLRtthNs8hk5vDeIh9r/ACQzulJpBpXJunHHwis/BW4=) 2: F8GunSwPNC41R1ZXMQ8PTEnH3RE.roa (hash: hjI7TiPMHB5m+M2D83jxywV8yFZo7hx2pX0uifuf4XI=) 3: JTjLA25EXJGse4vT8BX20j1O8LY.roa (hash: ojiSWq26fAHeHJAB/nBHHSFly0JE9P5HmIbkwqeejf4=) 4: WfYZ1TfImT3yRIrYlNuuVCM96nE.roa (hash: 4hQnLNa6AvcfooEXSYRpCYSRQGf1HFK3GJPOn5OeTYg=) 5: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: DNnICn9pJuO+tUHevSDtjLpOr+YffYWqolqZ1gMpWf0=) 6: oTNGV0Y7SaXlCklNzwFHJ1qEeUI.roa (hash: 1MTRBJjbkgRiCWVR5beZsUo8EaPKlW5X/iPni1dYgA8=) 7: tOjC-880lUvIDXcMv4Td0baNxyA.roa (hash: 9ecFS71NaP3AlhNnMbdDSrsMVob6HFpLwU4ec3vZFPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:7d:76:81:0e:43:73:f2:d9:7d:3d:8c:e6:9c:10:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Jan 19 09:02:07 2026 GMT Not After : Jan 20 09:02:07 2026 GMT Subject: CN=5c67662e9f53d816b85a879e74fdee0eaea4304b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:75:76:d5:8a:2f:f6:88:19:c5:01:58:98:8b: 27:db:a8:b6:5d:54:d0:d1:b1:44:90:10:2d:36:90: 51:fa:21:a5:e5:5e:f1:ac:e9:fc:47:33:c8:67:24: f9:98:d1:3f:6a:48:70:98:8c:16:6a:c9:c5:9f:76: cb:80:d1:b8:41:a0:22:31:41:2f:b9:1e:4c:22:42: 00:c4:17:32:0b:d4:59:c3:e3:73:03:76:a4:bb:2c: ff:f4:3e:09:76:5c:45:11:01:d8:62:a0:6b:06:74: ab:36:7c:91:bd:67:f6:73:65:a9:fc:15:8a:94:2b: 7a:d4:1c:85:38:19:ae:c8:6e:06:9d:79:ef:c8:6e: 7f:7b:d1:d4:64:c6:69:6b:20:30:4e:2c:b8:41:ab: 3c:99:03:de:7a:83:61:28:0d:8d:ab:e8:43:ed:ce: 21:bd:29:9e:63:f1:cf:35:fb:64:0a:5b:92:6f:81: ac:58:2a:80:05:db:a6:3c:a4:54:ea:14:54:59:e4: 44:6a:39:c4:e8:f4:c6:e7:94:33:92:10:da:91:64: 3a:88:19:1a:70:3d:d4:29:86:95:86:44:49:cd:5e: fc:f2:08:e6:a6:84:85:71:c1:e8:b3:b2:c6:20:8d: d1:47:c6:b3:14:7c:2c:72:99:02:72:7d:e6:b8:d8: 76:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:67:66:2E:9F:53:D8:16:B8:5A:87:9E:74:FD:EE:0E:AE:A4:30:4B X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:68:04:da:45:ca:83:fd:70:2d:3b:b0:b1:a1:a0:b6:ec:75: 03:b5:1a:32:77:bf:9e:f0:b6:16:be:69:99:9c:f5:b9:55:66: 95:7e:6a:8c:7c:ed:0b:30:b8:db:23:87:57:9a:41:cc:bf:01: 67:7e:bb:bd:f2:12:7c:c0:6f:e2:30:c3:a0:ac:3c:90:25:81: 51:60:8f:8f:9a:1b:b9:b2:49:3c:39:01:53:15:c1:a3:03:8f: 40:42:2a:2a:96:7e:b0:c0:22:c4:23:02:79:39:44:e2:af:8f: 33:fe:78:d6:82:cb:68:0e:b4:fa:84:bf:2c:5f:43:77:d0:0c: 7a:c7:1f:62:32:ae:a6:83:b3:f5:b9:cd:89:76:1f:ae:06:25: 6b:00:67:c1:77:d3:81:2e:39:4e:83:4c:6b:58:25:c8:28:bc: 8b:3f:80:cd:ad:9d:86:72:15:cf:b0:c7:a9:0d:11:b7:fd:cc: a5:01:b0:77:fb:fd:8c:0d:14:00:7e:8b:a1:97:d6:f0:13:ba: 22:65:83:4a:e8:f6:6a:39:cf:c0:83:97:37:c7:01:8a:8c:9d: 8e:fb:a4:b4:da:9a:c8:7f:ff:fd:3f:24:63:e4:9d:cf:a5:a2: 3b:28:c4:fd:bb:25:14:22:87:f7:8e:c6:03:3a:7e:ce:3c:b8: c8:08:b2:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvVfXaBDkNz8tl9PYzmnBA6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjYwMTE5MDkwMjA3WhcNMjYwMTIwMDkwMjA3WjAzMTEwLwYDVQQD Eyg1YzY3NjYyZTlmNTNkODE2Yjg1YTg3OWU3NGZkZWUwZWFlYTQzMDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnV21Yov9ogZxQFYmIsn26i2XVTQ 0bFEkBAtNpBR+iGl5V7xrOn8RzPIZyT5mNE/akhwmIwWasnFn3bLgNG4QaAiMUEv uR5MIkIAxBcyC9RZw+NzA3akuyz/9D4JdlxFEQHYYqBrBnSrNnyRvWf2c2Wp/BWK lCt61ByFOBmuyG4GnXnvyG5/e9HUZMZpayAwTiy4Qas8mQPeeoNhKA2Nq+hD7c4h vSmeY/HPNftkCluSb4GsWCqABdumPKRU6hRUWeREajnE6PTG55QzkhDakWQ6iBka cD3UKYaVhkRJzV788gjmpoSFccHos7LGII3RR8azFHwscpkCcn3muNh2mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxnZi6fU9gWuFqHnnT97g6upDBLMB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWgE2kXK g/1wLTuwsaGgtux1A7UaMne/nvC2Fr5pmZz1uVVmlX5qjHztCzC42yOHV5pBzL8B Z367vfISfMBv4jDDoKw8kCWBUWCPj5obubJJPDkBUxXBowOPQEIqKpZ+sMAixCMC eTlE4q+PM/541oLLaA60+oS/LF9Dd9AMescfYjKupoOz9bnNiXYfrgYlawBnwXfT gS45ToNMa1glyCi8iz+Aza2dhnIVz7DHqQ0Rt/3MpQGwd/v9jA0UAH6LoZfW8BO6 ImWDSuj2ajnPwIOXN8cBioydjvuktNqayH///T8kY+Sdz6WiOyjE/bslFCKH947G Azp+zjy4yAiy4A== -----END CERTIFICATE-----Generated at Mon Jan 19 13:05:49 2026 by rpki-client