This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json) Hash identifier: 5y4x31hUZuaKjnEZeAJdGDW2FlN/2NDmsAZ3BgKygv8= Subject key identifier: 18:1A:90:99:1C:41:00:32:CB:14:8B:D5:9D:2F:3C:40:F7:64:5C:BF Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44 Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044 Certificate serial: 019BFD656CB9952708529F4DA5DC55E49E46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft Manifest number: 17F0 Signing time: Tue 27 Jan 2026 03:00:41 +0000 Manifest this update: Tue 27 Jan 2026 03:00:41 +0000 Manifest next update: Wed 28 Jan 2026 03:00:41 +0000 Files and hashes: 1: MUOyRWPN46PNKkdduP0g7nQfNok.roa (hash: fGl9qQgDH816kxRklhwGBTJ3WAbYJUjNKNT/W0cEqrc=) 2: YXN8r-rQylSv0290yLBPFVZ4nYk.roa (hash: Dh05gHfbGV1r/sDqJ3IDkiCwAbapfvfrgHbA3nXBY/E=) 3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: raesDA9lE5ATYWm6zg3YMoHXoP4OfqgNL/sSv4ufTJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:6c:b9:95:27:08:52:9f:4d:a5:dc:55:e4:9e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044 Validity Not Before: Jan 27 03:00:41 2026 GMT Not After : Jan 28 03:00:41 2026 GMT Subject: CN=181a90991c410032cb148bd59d2f3c40f7645cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:21:57:56:d8:2b:fa:8a:80:58:27:f7:66:75: 41:ad:cf:38:55:18:f1:9e:f5:9c:dd:3c:18:39:69: 44:39:45:3a:7b:b8:05:c4:9b:f6:b2:34:a7:99:80: 0c:59:fa:e3:9b:15:55:26:42:e0:8b:ea:1a:32:c4: 75:75:e7:74:84:f5:76:c5:fc:50:aa:87:59:2e:d8: 87:02:8f:17:e1:08:48:a0:1c:1c:dd:d2:ed:1f:54: 54:49:36:2d:4a:73:9b:60:0f:bd:71:1e:a2:19:2d: 31:ca:dd:75:31:b7:0c:93:ad:d7:78:68:fd:c7:00: ad:90:9c:bc:22:a9:00:6d:6e:4f:76:11:06:8f:2b: c3:0a:97:d9:44:8e:bc:6b:13:a9:08:b1:ff:60:80: f3:0f:42:c0:03:73:86:49:53:c0:0d:2a:9b:27:ec: 81:17:be:af:63:30:d8:57:c4:ed:a8:03:92:45:c3: 3d:25:f2:a4:d5:4d:ea:f1:c8:2d:6c:4c:b5:ef:92: 2e:da:74:8e:df:2f:b5:46:68:09:4d:09:86:42:c8: 87:b0:7e:6f:b8:7c:96:26:c8:42:88:0a:62:d1:cd: 4e:4f:09:c8:28:c0:00:49:ab:34:38:b2:f6:28:48: f1:56:b7:83:aa:d5:36:28:4f:9b:48:75:6b:15:57: 0d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1A:90:99:1C:41:00:32:CB:14:8B:D5:9D:2F:3C:40:F7:64:5C:BF X509v3 Authority Key Identifier: keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a3:1f:1d:1c:1f:e8:40:18:3a:7a:cd:cb:15:06:6a:77:4b: 33:8d:ab:c3:7e:ab:ab:f0:54:1f:a8:84:7c:15:ed:d7:01:76: 8b:e9:c0:b3:82:f3:d8:ed:86:f5:6e:0e:bd:50:08:ae:58:b1: 06:bf:75:39:7d:ec:ac:da:32:fa:d0:2d:0a:25:d5:31:66:6e: 07:0b:29:39:0d:1a:bc:7d:f4:0b:e7:01:4e:74:d6:4f:36:a0: 8b:3e:2d:d3:4b:d6:93:32:93:79:7c:4f:71:ac:6d:25:e2:00: 30:93:1b:79:d2:c2:ef:e1:67:33:fa:d3:b5:d3:32:17:f8:2f: 19:04:3f:4c:5e:f8:63:30:eb:5c:2e:72:67:c7:47:07:d4:27: 6c:8e:ea:ef:88:08:d3:e5:5d:ef:51:bc:b6:87:4e:98:af:b0: 76:37:cd:7f:15:fc:ce:be:44:99:cd:e3:cf:be:3a:01:32:0f: 95:5a:b0:4b:f5:14:2d:20:3f:d9:f8:76:20:d6:04:a1:d4:51: d3:83:3d:93:7b:13:5e:41:53:c9:93:6f:ff:e6:18:6a:50:61: 30:c2:a0:7e:cd:49:b9:96:82:d3:f2:9e:d6:c8:4a:d5:a3:13: ca:0b:04:65:96:33:67:97:8d:50:67:18:a8:0c:c0:98:a0:76: b2:03:3e:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZWy5lScIUp9NpdxV5J5GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOTRmMDMwNGVlZGQzNjNjNjYyMmZkOTFjNTliMTA4NzFh YTMwNDQwHhcNMjYwMTI3MDMwMDQxWhcNMjYwMTI4MDMwMDQxWjAzMTEwLwYDVQQD EygxODFhOTA5OTFjNDEwMDMyY2IxNDhiZDU5ZDJmM2M0MGY3NjQ1Y2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SFXVtgr+oqAWCf3ZnVBrc84VRjx nvWc3TwYOWlEOUU6e7gFxJv2sjSnmYAMWfrjmxVVJkLgi+oaMsR1ded0hPV2xfxQ qodZLtiHAo8X4QhIoBwc3dLtH1RUSTYtSnObYA+9cR6iGS0xyt11MbcMk63XeGj9 xwCtkJy8IqkAbW5PdhEGjyvDCpfZRI68axOpCLH/YIDzD0LAA3OGSVPADSqbJ+yB F76vYzDYV8TtqAOSRcM9JfKk1U3q8cgtbEy175Iu2nSO3y+1RmgJTQmGQsiHsH5v uHyWJshCiApi0c1OTwnIKMAASas0OLL2KEjxVreDqtU2KE+bSHVrFVcNtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgakJkcQQAyyxSL1Z0vPED3ZFy/MB8GA1UdIwQY MBaAFLGU8DBO7dNjxmIv2RxZsQhxqjBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUt YWZiZGJkYWQ1OGE1LzEvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUtYWZiZGJkYWQ1OGE1 LzEvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKMfHRwf 6EAYOnrNyxUGandLM42rw36rq/BUH6iEfBXt1wF2i+nAs4Lz2O2G9W4OvVAIrlix Br91OX3srNoy+tAtCiXVMWZuBwspOQ0avH30C+cBTnTWTzagiz4t00vWkzKTeXxP caxtJeIAMJMbedLC7+FnM/rTtdMyF/gvGQQ/TF74YzDrXC5yZ8dHB9QnbI7q74gI 0+Vd71G8todOmK+wdjfNfxX8zr5Emc3jz746ATIPlVqwS/UULSA/2fh2INYEodRR 04M9k3sTXkFTyZNv/+YYalBhMMKgfs1JuZaC0/Ke1shK1aMTygsEZZYzZ5eNUGcY qAzAmKB2sgM+Mg== -----END CERTIFICATE-----Generated at Tue Jan 27 08:33:56 2026 by rpki-client