This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft File: ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft (raw, json) Hash identifier: lr5rNb0gvTD+7LGbg/+jUP9SS+OaGCADVYhPnfBd0v8= Subject key identifier: 83:1B:F8:B1:73:FE:3D:1D:4D:DD:1A:AA:F6:50:D6:EE:91:D3:18:E4 Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38 Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538 Certificate serial: 019BF79A729DEDFB2971B2A245C0791F681C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft Manifest number: 0ADB Signing time: Mon 26 Jan 2026 00:00:52 +0000 Manifest this update: Mon 26 Jan 2026 00:00:52 +0000 Manifest next update: Tue 27 Jan 2026 00:00:52 +0000 Files and hashes: 1: 4Kqssfz45wqKl4Y5usAP2cryF-s.roa (hash: VtsQh8EBUySqJ+8n7XXtvvG+r8GbNYVy0DLEl3LAFic=) 2: PlJpj7jP73E4zbfMxQODYMcp_7s.roa (hash: 6ejhDKH+4IAoIUxzT6kMmGZlbm0mSbrfcniUm7Rso6I=) 3: Ro5FYTNVl_lnAyMdvuGnbsPkpGI.roa (hash: Rrtw6rU9+BgwK1Mhs6SeDqlpBkER/cCVfCVvQJ88CfE=) 4: ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl (hash: sSObp3wMkwOPjakhrkp0gYscsw5pH7TDwHCNGfhOfdw=) 5: b1C1K0R4SsuxHJd-26aSi9G1s-s.roa (hash: UdNuNIgIX4vDZ6cHekj/pIxiG7gV3J4SuyTuh3WadyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:72:9d:ed:fb:29:71:b2:a2:45:c0:79:1f:68:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538 Validity Not Before: Jan 26 00:00:52 2026 GMT Not After : Jan 27 00:00:52 2026 GMT Subject: CN=831bf8b173fe3d1d4ddd1aaaf650d6ee91d318e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9b:8e:9a:2e:11:89:28:d6:ff:f1:59:bd:09: c1:c1:b6:ad:ee:25:80:f0:2a:cd:8f:2c:ab:27:57: d2:18:89:76:61:8e:38:16:f0:5f:7f:24:95:a0:27: 3b:ce:e7:01:a5:5f:83:cb:7f:ac:9b:f2:c2:0f:bc: 11:55:b7:c0:22:c4:9d:68:21:b7:e8:a7:73:93:2b: 06:cb:87:f2:c1:9c:c2:65:f7:e2:bc:9a:b3:09:dd: ef:60:a4:bd:4d:42:52:05:fb:91:2e:e3:61:a3:32: 3c:fb:09:7a:f0:af:b8:44:e1:90:c0:6e:38:cc:88: 5b:35:28:8d:c6:8c:3c:f6:b0:4f:82:03:2f:69:fc: d7:dc:db:8b:d1:f7:08:6d:4d:08:3b:88:36:09:4d: ee:2e:ea:79:28:cf:cc:39:fe:4b:b8:73:3c:33:b5: 9f:2f:c4:4b:b6:4c:e5:94:81:c8:86:a3:b5:dd:df: 42:c2:3f:c9:fd:e8:95:10:6c:de:94:aa:52:7b:9e: 4d:81:d9:90:bc:c7:57:c3:0e:22:03:9b:63:b3:cf: bb:9a:91:fb:40:6a:55:b3:46:c7:f6:85:ee:40:c3: 56:6f:3d:b9:c0:9c:2c:0c:89:cd:f9:c0:6b:ca:cc: 71:7b:af:19:e2:da:35:f7:d3:10:b0:65:68:e2:5a: ca:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1B:F8:B1:73:FE:3D:1D:4D:DD:1A:AA:F6:50:D6:EE:91:D3:18:E4 X509v3 Authority Key Identifier: keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:6a:62:cf:fc:ce:f6:e5:8b:66:3e:c7:9e:3f:32:19:b2:73: 04:65:6d:7c:f3:2d:4a:53:ce:37:c7:31:8b:48:5e:7b:7a:2e: 19:20:aa:8e:c0:b6:54:5e:19:c6:51:92:3f:0e:b0:8a:e2:17: 22:85:f2:b0:2c:e7:1c:68:9e:46:68:3a:d5:d9:ba:91:ce:05: 36:a1:3e:5a:4a:cf:a9:57:b7:9a:57:28:51:ae:a4:7f:87:42: 17:ee:1b:64:b3:d9:88:e3:32:af:12:f3:02:1a:bb:bf:f6:fa: 08:a6:6d:ed:bd:37:75:08:54:ea:c9:1d:f2:df:61:d0:d0:d0: 6d:81:24:1c:3f:0a:ba:90:ab:ef:85:cd:0d:64:f8:34:90:86: 28:09:81:df:ee:26:6b:6c:22:26:d5:91:93:af:1c:f8:ba:b0: c5:9b:bd:c5:f7:9d:52:51:a5:dd:bc:57:35:8d:14:6d:53:bf: fa:6b:b1:f4:a1:e3:ce:d5:c5:75:d5:84:43:8f:fd:aa:e2:0a: e7:cd:59:80:8b:b6:84:23:db:cf:f5:e3:19:d6:5a:90:c1:34: 9d:cf:6f:6b:a9:20:62:4d:d5:e0:9c:5d:0a:cb:40:15:da:d1: 55:a9:0f:8d:23:14:1f:5e:90:a7:f9:b9:8d:24:db:94:a5:b8: f2:f9:6e:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mnKd7fspcbKiRcB5H2gcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDRlODcyMzQ1MGQwYTcxMGMzMmQ5MGZmZWExODUyOTEw NGU1MzgwHhcNMjYwMTI2MDAwMDUyWhcNMjYwMTI3MDAwMDUyWjAzMTEwLwYDVQQD Eyg4MzFiZjhiMTczZmUzZDFkNGRkZDFhYWFmNjUwZDZlZTkxZDMxOGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspuOmi4RiSjW//FZvQnBwbat7iWA 8CrNjyyrJ1fSGIl2YY44FvBffySVoCc7zucBpV+Dy3+sm/LCD7wRVbfAIsSdaCG3 6KdzkysGy4fywZzCZffivJqzCd3vYKS9TUJSBfuRLuNhozI8+wl68K+4ROGQwG44 zIhbNSiNxow89rBPggMvafzX3NuL0fcIbU0IO4g2CU3uLup5KM/MOf5LuHM8M7Wf L8RLtkzllIHIhqO13d9Cwj/J/eiVEGzelKpSe55NgdmQvMdXww4iA5tjs8+7mpH7 QGpVs0bH9oXuQMNWbz25wJwsDInN+cBrysxxe68Z4to199MQsGVo4lrKJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMb+LFz/j0dTd0aqvZQ1u6R0xjkMB8GA1UdIwQY MBaAFGTU6HI0UNCnEMMtkP/qGFKRBOU4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzIt NDIyYWVkM2E3NzAyLzEvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzItNDIyYWVkM2E3NzAy LzEvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWpiz/zO 9uWLZj7Hnj8yGbJzBGVtfPMtSlPON8cxi0hee3ouGSCqjsC2VF4ZxlGSPw6wiuIX IoXysCznHGieRmg61dm6kc4FNqE+WkrPqVe3mlcoUa6kf4dCF+4bZLPZiOMyrxLz Ahq7v/b6CKZt7b03dQhU6skd8t9h0NDQbYEkHD8KupCr74XNDWT4NJCGKAmB3+4m a2wiJtWRk68c+LqwxZu9xfedUlGl3bxXNY0UbVO/+mux9KHjztXFddWEQ4/9quIK 581ZgIu2hCPbz/XjGdZakME0nc9va6kgYk3V4JxdCstAFdrRVakPjSMUH16Qp/m5 jSTblKW48vluUQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:31 2026 by rpki-client