This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft File: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json) Hash identifier: 8zZkCBb93PLIzuHOmm++qXsFnvWaOgEngTzHYIUAToA= Subject key identifier: 03:27:DA:3B:54:2E:9B:42:25:73:30:A6:BF:DE:FE:3B:20:D0:22:5B Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08 Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08 Certificate serial: 019BFB3FF2F55CDBCF761D783079A7023F0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 17:00:30 +0000 Manifest this update: Mon 26 Jan 2026 17:00:30 +0000 Manifest next update: Tue 27 Jan 2026 17:00:30 +0000 Files and hashes: 1: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: YMfYfuBLqFx2Rw547rkEmQbI3tzIQSsBiLFZH5Dyvlo=) 2: h6wK8goVzqXqo6disZWfZSM1h-0.roa (hash: //0LSaRijgEKQyrnrrd5pf5seu/x01T0Rwf4/noBXTQ=) 3: w7NAr2u_fskJOiH5ZL_DBig50oc.roa (hash: S337FZgQBWH3kGuKNK3U/HNaRNmRFoOB+d+zWxnLtV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:3f:f2:f5:5c:db:cf:76:1d:78:30:79:a7:02:3f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08 Validity Not Before: Jan 26 17:00:30 2026 GMT Not After : Jan 27 17:00:30 2026 GMT Subject: CN=0327da3b542e9b42257330a6bfdefe3b20d0225b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:93:bf:a8:ae:42:5a:7b:b4:a4:77:70:36:e6: 03:68:14:b4:31:68:bb:e1:2f:1b:f1:a0:4d:6b:80: f5:d6:2c:bd:a4:7a:4a:fa:5a:05:98:fa:6b:e1:25: 47:8e:9d:19:73:24:a1:7d:92:af:90:f6:11:24:dd: 85:93:e9:48:73:f6:5c:d9:46:00:eb:5c:fc:c1:d6: 07:8c:06:a5:30:35:13:fb:e9:24:ba:44:ac:2c:c6: f4:bc:12:7e:fb:25:05:59:3d:c8:d6:23:34:d4:2b: af:58:d5:89:c7:c9:88:c9:d4:0d:c3:93:59:6e:6e: 76:d5:59:34:68:ec:45:55:70:e6:9a:9b:c3:ee:e5: 54:8d:6c:30:18:18:97:95:ad:54:70:b7:e5:7b:3e: 6a:c3:fe:2b:28:db:48:c8:aa:2c:1f:ad:18:5e:ed: f4:61:47:e8:2f:ad:cf:ed:45:33:3e:22:03:98:9d: a5:6e:e0:2b:b3:fd:c4:35:67:ce:29:a4:20:57:cb: 7d:72:e1:5e:85:10:0f:83:0f:4f:a0:ca:b2:d0:78: c2:f9:e8:5d:21:6f:46:f7:db:2f:5e:e1:21:12:02: e6:af:36:d9:03:4f:27:04:ef:c7:47:ec:9a:f8:82: aa:05:03:ca:c4:eb:4a:58:ac:f5:5f:e4:58:67:10: 7c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:27:DA:3B:54:2E:9B:42:25:73:30:A6:BF:DE:FE:3B:20:D0:22:5B X509v3 Authority Key Identifier: keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:25:ff:a2:67:19:4d:4e:65:86:11:7d:b9:05:44:32:0f:d1: a8:34:ed:0d:b9:42:02:8f:c2:18:93:44:a7:1c:4f:92:92:64: 98:40:4c:ad:a5:2d:fd:43:e2:a8:f9:10:82:8c:90:0c:4f:1c: 87:ce:14:79:ce:ec:2b:d6:9e:75:03:78:fe:a3:04:fa:83:98: c6:ab:66:77:69:1f:c2:7c:e6:ae:fb:38:bd:d4:1e:56:28:80: c2:16:a5:fe:18:3b:a0:72:c9:20:43:5a:52:29:33:d6:c7:a8: fe:b6:55:e7:e4:b5:cb:4c:18:16:c0:9a:15:e8:4c:75:e8:e8: 82:ae:af:36:62:ae:1a:0f:b4:37:84:65:ed:6b:8b:19:6d:1c: 62:f3:0f:61:3a:de:10:6e:19:13:15:fc:a8:87:17:8e:eb:76: ce:76:0c:23:54:3e:e5:13:1b:d9:84:c6:05:ed:4e:21:49:53: fd:ef:71:c7:ca:e3:e3:1e:e7:79:1b:0c:58:45:6d:a5:02:03: 65:ad:7e:85:56:d5:6e:03:1e:8b:32:d2:f8:23:1a:38:22:b4: bb:d2:27:f1:72:d0:fe:a2:72:df:9c:27:1d:3e:94:d7:ea:f7: d7:46:5e:50:eb:e7:4b:f6:7c:7c:84:3d:71:5c:cf:7d:a1:6e: f4:2b:c5:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7P/L1XNvPdh14MHmnAj8KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MTIxYzNmOTIwN2EzNzM0NWUzODcwMmM4OWQxNzliZjQ0 NGFhMDgwHhcNMjYwMTI2MTcwMDMwWhcNMjYwMTI3MTcwMDMwWjAzMTEwLwYDVQQD EygwMzI3ZGEzYjU0MmU5YjQyMjU3MzMwYTZiZmRlZmUzYjIwZDAyMjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZO/qK5CWnu0pHdwNuYDaBS0MWi7 4S8b8aBNa4D11iy9pHpK+loFmPpr4SVHjp0ZcyShfZKvkPYRJN2Fk+lIc/Zc2UYA 61z8wdYHjAalMDUT++kkukSsLMb0vBJ++yUFWT3I1iM01CuvWNWJx8mIydQNw5NZ bm521Vk0aOxFVXDmmpvD7uVUjWwwGBiXla1UcLflez5qw/4rKNtIyKosH60YXu30 YUfoL63P7UUzPiIDmJ2lbuArs/3ENWfOKaQgV8t9cuFehRAPgw9PoMqy0HjC+ehd IW9G99svXuEhEgLmrzbZA08nBO/HR+ya+IKqBQPKxOtKWKz1X+RYZxB8LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMn2jtULptCJXMwpr/e/jsg0CJbMB8GA1UdIwQY MBaAFGUSHD+SB6NzReOHAsidF5v0RKoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYt NDhkM2NhMTYxYmIwLzEvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYtNDhkM2NhMTYxYmIw LzEvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSX/omcZ TU5lhhF9uQVEMg/RqDTtDblCAo/CGJNEpxxPkpJkmEBMraUt/UPiqPkQgoyQDE8c h84Uec7sK9aedQN4/qME+oOYxqtmd2kfwnzmrvs4vdQeViiAwhal/hg7oHLJIENa Uikz1seo/rZV5+S1y0wYFsCaFehMdejogq6vNmKuGg+0N4Rl7WuLGW0cYvMPYTre EG4ZExX8qIcXjut2znYMI1Q+5RMb2YTGBe1OIUlT/e9xx8rj4x7neRsMWEVtpQID Za1+hVbVbgMeizLS+CMaOCK0u9In8XLQ/qJy35wnHT6U1+r310ZeUOvnS/Z8fIQ9 cVzPfaFu9CvF+w== -----END CERTIFICATE-----Generated at Mon Jan 26 22:31:43 2026 by rpki-client