This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft File: ZtYtu574eixrGodeUq8TKIRpclo.mft (raw, json) Hash identifier: p6FA7gJCb9OqnxR11ztx9l2JZ08dykjtVM7nwy5Amio= Subject key identifier: B8:38:39:08:5E:3E:B4:B6:85:5E:99:F4:AC:C6:3F:24:8B:36:80:94 Authority key identifier: 66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A Certificate issuer: /CN=66d62dbb9ef87a2c6b1a875e52af13288469725a Certificate serial: 019BFE0B210B9827B11CED4D0CEDEA796B2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft Manifest number: 17E7 Signing time: Tue 27 Jan 2026 06:01:40 +0000 Manifest this update: Tue 27 Jan 2026 06:01:40 +0000 Manifest next update: Wed 28 Jan 2026 06:01:40 +0000 Files and hashes: 1: ZtYtu574eixrGodeUq8TKIRpclo.crl (hash: b95vSJbofVhbH6oTyR2FlzWD2BSfz1X6COBRiD/hcIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0b:21:0b:98:27:b1:1c:ed:4d:0c:ed:ea:79:6b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d62dbb9ef87a2c6b1a875e52af13288469725a Validity Not Before: Jan 27 06:01:40 2026 GMT Not After : Jan 28 06:01:40 2026 GMT Subject: CN=b83839085e3eb4b6855e99f4acc63f248b368094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7e:c1:e8:f4:1a:5d:65:cd:29:63:66:82:5c: eb:5c:c1:f0:16:72:cc:99:56:8e:dc:c1:aa:b9:51: dd:21:0b:a7:fd:87:5e:c2:d4:ea:c0:08:c1:2e:5a: 15:62:9d:50:8b:1d:b9:38:6c:a2:c8:45:e0:1b:90: 1c:6c:8d:89:05:ad:cf:74:07:ff:29:12:58:7f:28: 27:a5:af:3b:b6:1d:e5:b4:46:2b:c0:ec:b6:e1:59: db:0f:18:45:61:ac:79:00:28:04:b9:25:54:a1:bd: 4b:6a:80:0d:10:de:45:58:fb:7a:3f:37:84:94:51: ec:bd:85:49:62:35:ab:46:e0:55:0a:6b:bd:0e:80: 72:56:aa:de:34:66:28:96:b1:6e:d9:64:23:34:0e: 1a:26:77:50:d0:1b:ff:ee:11:3a:63:c6:90:e3:30: 78:d5:32:56:dc:6b:0c:20:ec:64:7b:c6:fa:db:60: 90:b1:80:1b:58:b4:1b:08:ec:42:f1:af:61:90:b8: 93:2c:b1:1f:34:93:4b:e9:ae:ed:10:27:d6:ea:75: 65:f4:1d:06:f1:cb:ca:41:6c:8a:86:fe:0b:56:47: 3b:76:df:ae:6d:84:64:fe:d3:c1:46:30:bb:25:83: ab:3a:74:7e:d1:8f:86:47:2f:6d:cf:f0:9e:28:89: 4a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:38:39:08:5E:3E:B4:B6:85:5E:99:F4:AC:C6:3F:24:8B:36:80:94 X509v3 Authority Key Identifier: keyid:66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:5b:ef:78:02:d1:7c:9b:82:79:b6:e9:f0:bf:4a:76:51:fe: fd:d4:21:1c:db:cd:81:dd:a3:93:93:6b:0a:19:67:5b:a7:a4: b9:17:fb:3b:b6:20:87:37:dd:47:1a:7d:01:8c:b2:fd:e0:7c: 6b:dd:d8:68:90:b5:58:37:ce:1b:fd:ef:8b:c7:86:ef:68:b3: 2c:06:8c:82:e7:53:60:9f:8c:b0:4a:49:8a:de:85:0e:76:a2: 91:9c:5d:e8:06:42:a6:d7:86:19:a8:61:d6:ba:2a:88:5c:0c: 37:c2:87:b0:59:bb:ea:86:c7:82:73:88:b2:05:2d:dc:71:bb: 64:b9:e6:f9:17:14:46:49:f0:59:da:30:8d:ea:e8:13:8a:b8: bf:e6:23:c8:35:d3:c8:5c:85:8c:98:a9:70:80:0b:82:a0:91: 4e:04:c1:d9:55:f0:cb:62:65:a8:b9:8d:10:8f:97:15:72:55: 91:f8:43:b5:fe:32:25:0c:99:a3:ed:00:13:4a:c9:0e:ca:b3: 09:9b:d6:29:a5:17:37:60:55:32:33:27:42:95:fe:de:93:00: a5:0e:8b:70:4a:68:f9:5e:d7:aa:98:60:e6:79:a1:ac:1a:90: 7b:ed:e5:ec:9c:f4:0b:60:7b:1b:31:e3:06:b8:86:82:03:0c: de:50:3c:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+CyELmCexHO1NDO3qeWssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDYyZGJiOWVmODdhMmM2YjFhODc1ZTUyYWYxMzI4ODQ2 OTcyNWEwHhcNMjYwMTI3MDYwMTQwWhcNMjYwMTI4MDYwMTQwWjAzMTEwLwYDVQQD EyhiODM4MzkwODVlM2ViNGI2ODU1ZTk5ZjRhY2M2M2YyNDhiMzY4MDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu37B6PQaXWXNKWNmglzrXMHwFnLM mVaO3MGquVHdIQun/YdewtTqwAjBLloVYp1Qix25OGyiyEXgG5AcbI2JBa3PdAf/ KRJYfygnpa87th3ltEYrwOy24VnbDxhFYax5ACgEuSVUob1LaoANEN5FWPt6PzeE lFHsvYVJYjWrRuBVCmu9DoByVqreNGYolrFu2WQjNA4aJndQ0Bv/7hE6Y8aQ4zB4 1TJW3GsMIOxke8b622CQsYAbWLQbCOxC8a9hkLiTLLEfNJNL6a7tECfW6nVl9B0G 8cvKQWyKhv4LVkc7dt+ubYRk/tPBRjC7JYOrOnR+0Y+GRy9tz/CeKIlKBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLg4OQhePrS2hV6Z9KzGPySLNoCUMB8GA1UdIwQY MBaAFGbWLbue+HosaxqHXlKvEyiEaXJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRZdHU1NzRlaXhyR29kZVVxOFRLSVJwY2xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMTQ3N2EtM2E5NS00NTUyLWI1Y2It OWY0MWNhY2U1MGFhLzEvWnRZdHU1NzRlaXhyR29kZVVxOFRLSVJwY2xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8zMTQ3N2EtM2E5NS00NTUyLWI1Y2ItOWY0MWNhY2U1MGFh LzEvWnRZdHU1NzRlaXhyR29kZVVxOFRLSVJwY2xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxVvveALR fJuCebbp8L9KdlH+/dQhHNvNgd2jk5NrChlnW6ekuRf7O7YghzfdRxp9AYyy/eB8 a93YaJC1WDfOG/3vi8eG72izLAaMgudTYJ+MsEpJit6FDnaikZxd6AZCpteGGahh 1roqiFwMN8KHsFm76obHgnOIsgUt3HG7ZLnm+RcURknwWdowjeroE4q4v+YjyDXT yFyFjJipcIALgqCRTgTB2VXwy2JlqLmNEI+XFXJVkfhDtf4yJQyZo+0AE0rJDsqz CZvWKaUXN2BVMjMnQpX+3pMApQ6LcEpo+V7Xqphg5nmhrBqQe+3l7Jz0C2B7GzHj BriGggMM3lA8dQ== -----END CERTIFICATE-----Generated at Tue Jan 27 07:46:48 2026 by rpki-client