This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
File: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft (raw, json)
Hash identifier: x4cSApV7CS9MC5FFwXw74/IdD+C6+iGQ2Zs1tzdKB+M=
Subject key identifier: 60:53:12:86:38:C1:A3:32:64:31:1C:9A:FB:A4:FB:A7:F1:86:87:0E
Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Certificate issuer: /CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Certificate serial: 019BFCC113BE2F329BB34ED4083FE26A27B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
Manifest number: 17F1
Signing time: Tue 27 Jan 2026 00:01:10 +0000
Manifest this update: Tue 27 Jan 2026 00:01:10 +0000
Manifest next update: Wed 28 Jan 2026 00:01:10 +0000
Files and hashes: 1: 5dpJwurmjcNweBL1k9CqEM749HA.roa (hash: TM/ss4Bk5R6W5257quO9m83xy+4qnqaZUXN12oiEFzU=)
2: 7hzhMaHYuL-7BSKPyCuK9LYB9ts.roa (hash: Uix2TsomGcH7KlSyaSm6ItgQxCc3dO2ePCxbE9zpBHQ=)
3: GREeqZaODQe_pjDOkl9K06yc2fM.roa (hash: 9+xjCnaLjGsg7N2WRsPTLMdY0ESrGSWfOEeNfY4jOkE=)
4: Sw71YjaNP_rQ4woPVfkpIKYk-vY.roa (hash: V8sucqvBo1htAnsnFCbVGLqUSg9yHEvrbxQkCxUkXZc=)
5: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl (hash: UhwdEFmuYyMOeKavAvPGa4Zhqu8xjrky59uohcdRlaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fc:c1:13:be:2f:32:9b:b3:4e:d4:08:3f:e2:6a:27:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Validity
Not Before: Jan 27 00:01:10 2026 GMT
Not After : Jan 28 00:01:10 2026 GMT
Subject: CN=6053128638c1a33264311c9afba4fba7f186870e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:cf:67:f2:4d:c2:33:d0:cc:6e:5a:d2:cd:
25:b9:d0:cc:a9:ae:61:93:a7:0b:be:28:f8:4d:94:
ef:d3:99:13:1a:d8:1f:8d:c6:51:7b:d9:d8:36:ea:
00:7e:9c:58:2f:56:a6:8d:07:ea:53:d6:bc:3d:6a:
fc:bf:64:f4:be:ae:6e:4d:18:70:c0:a4:1b:25:31:
62:73:a2:d8:77:a0:a4:c3:7c:d2:0c:ee:33:5b:c3:
37:26:85:fb:92:98:5d:af:ca:e9:a1:f5:1a:50:e2:
bb:f3:a2:52:36:df:d4:c1:e9:45:2e:26:12:14:2d:
47:74:0b:2e:45:41:50:06:cf:41:77:59:56:0e:94:
1c:62:53:2c:75:3b:08:00:10:2a:b4:e9:30:d6:39:
5f:3b:66:a5:00:89:e9:00:8c:a0:4c:60:c9:d0:62:
fc:b9:87:bf:12:0b:f0:97:22:28:63:27:35:68:ee:
e8:56:72:ec:92:d2:1d:38:c7:27:58:59:9f:c0:81:
43:4b:f0:0e:82:0c:c3:50:99:4a:c3:ed:ca:93:ee:
bf:81:20:49:94:f8:df:80:9b:ae:0e:8b:9c:47:45:
78:ee:c4:07:fb:70:00:d0:aa:62:b0:d5:c6:a3:8c:
e2:66:21:fc:a7:a3:4f:28:ad:79:ca:36:ca:80:5d:
47:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:53:12:86:38:C1:A3:32:64:31:1C:9A:FB:A4:FB:A7:F1:86:87:0E
X509v3 Authority Key Identifier:
keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:49:aa:3f:25:55:85:67:29:d7:3d:02:b9:90:8c:25:da:26:
e6:ea:b7:ae:29:56:94:90:fc:12:09:ee:16:65:ef:73:1d:39:
32:04:e4:ed:13:ae:68:b4:c1:4c:2a:f2:3d:ff:a3:e9:76:5a:
45:69:79:a2:8a:6f:95:5a:15:af:be:f2:2d:9a:dc:52:03:df:
a0:d5:db:a9:39:50:6b:e5:e5:a6:0d:e9:46:55:65:ca:24:df:
27:c7:7b:4c:8a:65:23:87:85:e7:06:9d:fe:ae:2e:57:4f:36:
0f:85:01:e1:de:41:5a:87:61:e1:09:1e:7b:1c:7b:16:d1:50:
0a:16:3b:18:a4:6f:cf:19:65:80:d2:98:62:4c:a2:57:7a:bd:
11:2d:14:27:95:fd:f2:35:fe:f9:08:04:45:62:55:7e:0d:b3:
02:60:9b:fc:6d:7c:ba:0d:65:bb:66:f3:ef:6d:28:b0:0b:8a:
13:b7:72:3c:81:bf:b4:34:2a:d8:be:8a:42:d1:dc:e1:84:92:
64:d2:4f:54:06:93:13:33:00:90:c9:60:9b:b3:7a:4d:e3:7f:
48:1a:a6:ad:fa:55:35:17:aa:e3:e4:ec:dc:fe:e7:43:45:cc:
5a:8b:1e:37:de:8c:b6:96:58:1f:ac:7a:1f:00:bf:5b:a4:6b:
be:82:9e:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv8wRO+LzKbs07UCD/iaiewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NjVkZDk3NjY1YTIzYjFiMTgzZTIyMzgyMmI2NmI1YWU1
MzZhMmYwHhcNMjYwMTI3MDAwMTEwWhcNMjYwMTI4MDAwMTEwWjAzMTEwLwYDVQQD
Eyg2MDUzMTI4NjM4YzFhMzMyNjQzMTFjOWFmYmE0ZmJhN2YxODY4NzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc/PZ/JNwjPQzG5a0s0ludDMqa5h
k6cLvij4TZTv05kTGtgfjcZRe9nYNuoAfpxYL1amjQfqU9a8PWr8v2T0vq5uTRhw
wKQbJTFic6LYd6Ckw3zSDO4zW8M3JoX7kphdr8rpofUaUOK786JSNt/UwelFLiYS
FC1HdAsuRUFQBs9Bd1lWDpQcYlMsdTsIABAqtOkw1jlfO2alAInpAIygTGDJ0GL8
uYe/EgvwlyIoYyc1aO7oVnLsktIdOMcnWFmfwIFDS/AOggzDUJlKw+3Kk+6/gSBJ
lPjfgJuuDoucR0V47sQH+3AA0KpisNXGo4ziZiH8p6NPKK15yjbKgF1HhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBTEoY4waMyZDEcmvuk+6fxhocOMB8GA1UdIwQY
MBaAFGZl3ZdmWiOxsYPiI4IrZrWuU2ovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWIt
ZThkNzA3MTdmZjhhLzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWItZThkNzA3MTdmZjhh
LzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0mqPyVV
hWcp1z0CuZCMJdom5uq3rilWlJD8EgnuFmXvcx05MgTk7ROuaLTBTCryPf+j6XZa
RWl5oopvlVoVr77yLZrcUgPfoNXbqTlQa+Xlpg3pRlVlyiTfJ8d7TIplI4eF5wad
/q4uV082D4UB4d5BWodh4Qkeexx7FtFQChY7GKRvzxllgNKYYkyiV3q9ES0UJ5X9
8jX++QgERWJVfg2zAmCb/G18ug1lu2bz720osAuKE7dyPIG/tDQq2L6KQtHc4YSS
ZNJPVAaTEzMAkMlgm7N6TeN/SBqmrfpVNReq4+Ts3P7nQ0XMWoseN96MtpZYH6x6
HwC/W6RrvoKe6g==
-----END CERTIFICATE-----
Generated at Tue Jan 27 07:40:24 2026 by rpki-client