This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft File: Zpauprq3nEj13e5KRr9Ktk2GMWA.mft (raw, json) Hash identifier: L4i3lNHyMyYqWEG/RP77VQvxKx62VwbV7ujjEp76EF8= Subject key identifier: B4:88:EC:74:35:D1:A0:17:87:E3:57:4C:21:E9:34:19:F7:6C:6A:BF Authority key identifier: 66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60 Certificate issuer: /CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160 Certificate serial: 019C002FBE088A113DE8FD0BE84E19235D0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft Manifest number: 17FA Signing time: Tue 27 Jan 2026 16:00:54 +0000 Manifest this update: Tue 27 Jan 2026 16:00:54 +0000 Manifest next update: Wed 28 Jan 2026 16:00:54 +0000 Files and hashes: 1: GVE1_6oeRDy2_uMOn6hXFH0Z_XM.roa (hash: vw8nSpzF36MDWeqpnJEEtvdPvfCC/FW1EffqrG7+b7o=) 2: GhcOsk0O2_wZIMiPsKAAT8tcjQk.roa (hash: 0yEQgIWX72p/2MzI904UFD45zO2Zp7N2aljVhqUiKrE=) 3: Zpauprq3nEj13e5KRr9Ktk2GMWA.crl (hash: ez87r0va/wC/nQIdeE4GpkmcYL+7C0LFWGenY2gPBIM=) 4: nGvsubqHJfLRBmLWFj1cB_Id6UI.roa (hash: Atxl75aMvOwAw/Nf75/QEXAOO7v6+K8ATugv/1WaAmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:00:2f:be:08:8a:11:3d:e8:fd:0b:e8:4e:19:23:5d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160 Validity Not Before: Jan 27 16:00:54 2026 GMT Not After : Jan 28 16:00:54 2026 GMT Subject: CN=b488ec7435d1a01787e3574c21e93419f76c6abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0e:70:f0:ad:cd:01:9f:44:d2:69:8e:5f:f6: 94:fe:85:44:25:c5:4f:d2:dc:68:d8:ad:e5:f2:0b: 14:bc:ee:03:9b:e7:9a:a0:29:49:a5:cf:23:67:de: 40:83:f5:ad:65:36:aa:8c:c0:eb:93:18:d4:c2:78: 63:f0:8b:9b:40:a5:2d:76:c8:f3:17:40:f5:a4:43: 41:cf:4d:0a:c3:8f:b4:66:76:0a:ae:2b:86:8a:a9: 66:3b:81:07:9a:1b:de:67:6f:f8:d5:8a:32:0a:66: e5:50:f9:67:66:1a:93:c0:da:9a:57:c4:44:3c:a3: 1a:e1:83:fa:3d:1f:d3:b7:56:8a:90:00:a9:21:12: fb:e0:56:ed:a0:7d:b9:8c:45:13:aa:74:70:19:b9: 3a:64:c5:3d:b5:30:84:2a:52:7e:62:51:c0:3b:0b: e3:4f:6e:67:02:32:4a:72:db:98:8a:3d:f8:34:b7: 4d:ed:57:37:91:14:48:92:74:9b:ce:b9:ec:ba:79: d9:87:26:75:a2:1e:32:36:de:dc:98:a7:44:b9:8c: b5:48:7f:1e:0f:e7:9a:80:84:9a:d0:38:93:bf:bf: bf:76:ae:78:fc:85:c0:e2:4a:30:0c:43:1a:50:69: 70:79:26:5f:37:1f:6b:94:da:67:49:85:35:63:88: d5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:88:EC:74:35:D1:A0:17:87:E3:57:4C:21:E9:34:19:F7:6C:6A:BF X509v3 Authority Key Identifier: keyid:66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:7f:21:30:e3:3a:f1:fd:b7:90:dd:59:92:76:b1:3d:cc:d9: c6:9a:fe:92:5f:ee:86:48:60:28:3c:53:c0:61:24:1d:23:b5: e5:d6:83:29:7b:b2:c2:7e:b0:ff:f8:77:6d:5e:5a:84:f6:79: 9d:01:9f:53:27:51:9d:24:ed:37:2f:bf:61:f2:dd:0b:d0:1c: ff:a0:d6:b9:24:58:a8:a1:bb:b3:f6:21:68:26:a3:7a:00:d2: 8f:54:9f:f0:b3:5e:27:b4:bd:ae:7b:7f:23:0c:ba:2d:3d:ca: 06:d7:1b:94:fd:54:13:6f:cf:5c:9e:d2:2c:60:87:c0:10:bd: 32:b1:6a:71:d1:70:1b:f5:ae:88:79:9a:c5:2c:1c:f9:ad:19: 29:a1:e1:94:3c:68:70:05:82:b0:71:ba:40:e2:d2:43:b0:c5: ee:1a:b7:4b:80:9e:fd:2a:34:cb:84:f6:ae:5c:73:40:27:2c: 5d:ea:b4:ad:f3:3d:91:9e:a2:ff:de:b7:79:fa:66:18:4c:5c: 05:c1:d0:68:ef:85:64:1c:f2:3b:7b:39:9f:b9:b9:23:d9:e9: 0c:15:24:dc:95:47:6d:26:39:0d:3c:35:af:13:99:b6:be:bd: e7:03:54:19:52:e1:97:77:27:29:4e:3f:b2:f0:88:53:3d:b5: 25:18:ad:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwAL74IihE96P0L6E4ZI10LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OTZhZWE2YmFiNzljNDhmNWRkZWU0YTQ2YmY0YWI2NGQ4 NjMxNjAwHhcNMjYwMTI3MTYwMDU0WhcNMjYwMTI4MTYwMDU0WjAzMTEwLwYDVQQD EyhiNDg4ZWM3NDM1ZDFhMDE3ODdlMzU3NGMyMWU5MzQxOWY3NmM2YWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA5w8K3NAZ9E0mmOX/aU/oVEJcVP 0txo2K3l8gsUvO4Dm+eaoClJpc8jZ95Ag/WtZTaqjMDrkxjUwnhj8IubQKUtdsjz F0D1pENBz00Kw4+0ZnYKriuGiqlmO4EHmhveZ2/41YoyCmblUPlnZhqTwNqaV8RE PKMa4YP6PR/Tt1aKkACpIRL74FbtoH25jEUTqnRwGbk6ZMU9tTCEKlJ+YlHAOwvj T25nAjJKctuYij34NLdN7Vc3kRRIknSbzrnsunnZhyZ1oh4yNt7cmKdEuYy1SH8e D+eagISa0DiTv7+/dq54/IXA4kowDEMaUGlweSZfNx9rlNpnSYU1Y4jVlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSI7HQ10aAXh+NXTCHpNBn3bGq/MB8GA1UdIwQY MBaAFGaWrqa6t5xI9d3uSka/SrZNhjFgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnBhdXBycTNuRWoxM2U1S1JyOUt0azJHTVdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80NTJjMmItZjJjZi00YTkyLWExY2Qt ZjAxOThjNmMyNDc0LzEvWnBhdXBycTNuRWoxM2U1S1JyOUt0azJHTVdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My80NTJjMmItZjJjZi00YTkyLWExY2QtZjAxOThjNmMyNDc0 LzEvWnBhdXBycTNuRWoxM2U1S1JyOUt0azJHTVdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhX8hMOM6 8f23kN1ZknaxPczZxpr+kl/uhkhgKDxTwGEkHSO15daDKXuywn6w//h3bV5ahPZ5 nQGfUydRnSTtNy+/YfLdC9Ac/6DWuSRYqKG7s/YhaCajegDSj1Sf8LNeJ7S9rnt/ Iwy6LT3KBtcblP1UE2/PXJ7SLGCHwBC9MrFqcdFwG/WuiHmaxSwc+a0ZKaHhlDxo cAWCsHG6QOLSQ7DF7hq3S4Ce/So0y4T2rlxzQCcsXeq0rfM9kZ6i/963efpmGExc BcHQaO+FZBzyO3s5n7m5I9npDBUk3JVHbSY5DTw1rxOZtr695wNUGVLhl3cnKU4/ svCIUz21JRit8g== -----END CERTIFICATE-----Generated at Wed Jan 28 00:45:12 2026 by rpki-client