This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json) Hash identifier: APeq7IhyjIafu8udlip5VEs2aN1COnOIaXpHtSylyVI= Subject key identifier: 28:6C:29:CD:D5:D9:BB:9D:CE:03:80:EF:DD:F2:56:D2:7F:3E:0F:EE Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4 Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4 Certificate serial: 019BDAA37F24D6E374B0AB643CD93EBD29FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft Manifest number: 17DD Signing time: Tue 20 Jan 2026 09:01:46 +0000 Manifest this update: Tue 20 Jan 2026 09:01:46 +0000 Manifest next update: Wed 21 Jan 2026 09:01:46 +0000 Files and hashes: 1: A9LW0Nmgs_7I3BIXtdOaJHYFfAQ.roa (hash: hGqa87j1hJEPJY71+olnlQtsA2Cb1R1Sm325ratdVxY=) 2: N5kOhaXtNzCeBcbrMh56hDQ4o-U.roa (hash: Ry7/KfE6gcp/8mUaVPE02UAFkpNMITvazXOcwXAUcVo=) 3: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: cPYDtXZE0JOcsGMCQQDEwk20Jq+0cHRpdI/Vz9/XZMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 09:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:a3:7f:24:d6:e3:74:b0:ab:64:3c:d9:3e:bd:29:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4 Validity Not Before: Jan 20 09:01:46 2026 GMT Not After : Jan 21 09:01:46 2026 GMT Subject: CN=286c29cdd5d9bb9dce0380efddf256d27f3e0fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f0:94:6e:ca:d9:0f:57:2f:b2:87:04:7d:2b: 8f:aa:b0:f6:de:3f:f3:b7:61:34:56:27:f6:4b:0c: 99:eb:c4:aa:19:8f:cf:42:0e:a2:e0:e5:a6:60:c5: 4b:43:b8:99:e7:43:87:ef:f1:c3:b5:c3:ab:35:a7: 7b:6d:d2:ba:83:d9:64:c7:9f:5a:44:93:35:04:47: c4:3b:f6:04:94:50:db:23:c1:1a:96:b8:62:3d:59: 1f:c3:b8:f4:15:ef:fa:71:ec:f8:48:47:9f:c8:d7: 84:11:18:4a:84:5f:2e:e9:3f:41:ca:b7:e8:2c:c8: 61:b9:6e:f8:df:7a:ec:90:11:87:83:10:ef:49:45: b4:5a:87:7f:f5:50:62:8c:0e:4c:c2:94:99:43:5d: ba:bf:7a:07:9c:25:ae:ca:8d:28:71:a5:09:ff:9f: 00:70:83:6d:7d:ba:0d:5a:3e:ab:85:bc:4d:0d:b6: 0b:d8:3b:3d:30:14:ef:c0:4f:9b:f8:c3:4e:72:ce: f6:53:76:58:f6:9b:b5:5a:17:43:66:83:5e:61:dd: 81:5b:80:a7:1d:64:58:2b:85:34:51:e4:e8:b2:e3: bf:a3:49:c6:f5:66:d5:88:f9:02:6c:ed:28:15:84: 23:e9:23:d0:5b:e5:dd:3a:07:1e:dd:ef:2d:a6:87: dc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6C:29:CD:D5:D9:BB:9D:CE:03:80:EF:DD:F2:56:D2:7F:3E:0F:EE X509v3 Authority Key Identifier: keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:2a:10:d3:9a:e0:77:40:d5:12:fb:5f:d1:39:50:d3:97:dd: 2a:52:da:19:59:f3:fc:61:e7:c0:87:89:d0:0b:69:69:bd:1a: cb:61:ab:ff:aa:4c:18:45:ac:76:32:87:05:24:42:ea:f1:5f: 73:b8:43:72:83:7c:64:94:1a:70:5e:6e:04:6d:92:a2:2b:64: ea:2d:96:bf:5c:7c:a7:90:2a:1c:6f:40:d3:18:9a:e9:ed:2c: e0:9a:34:e4:a0:e6:1a:c5:37:4b:78:60:f1:90:86:59:bc:a4: af:d4:6f:b2:7c:15:51:23:f1:5f:f9:7a:c0:f9:21:f7:e8:83: c0:86:22:a4:91:42:c1:2d:29:c0:70:75:cb:ec:38:45:13:a1: a6:86:01:bb:14:e4:1c:69:05:61:5b:96:07:3a:9d:f7:ce:e5: 71:87:34:6f:74:67:2b:37:10:ef:6b:0a:57:16:e5:bf:4e:44: e7:14:3f:2c:98:ac:b7:d7:41:6f:f6:c1:27:95:ce:5f:de:44: 43:e2:63:7e:84:b6:8a:ee:85:0c:d6:c6:8d:a1:2a:b9:7f:ac: 2a:a1:fe:10:6a:4b:d9:e1:27:20:da:e6:82:c8:0e:0a:bb:1b: 54:06:34:b2:9d:d4:f7:0d:67:2d:6d:98:2b:f9:01:83:91:49: e4:97:28:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvao38k1uN0sKtkPNk+vSn+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDQ3NWJiNTQyZjYxODIxYmUzOWRiYzliNjgyNzVkNmUw MDg3ZDQwHhcNMjYwMTIwMDkwMTQ2WhcNMjYwMTIxMDkwMTQ2WjAzMTEwLwYDVQQD EygyODZjMjljZGQ1ZDliYjlkY2UwMzgwZWZkZGYyNTZkMjdmM2UwZmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPCUbsrZD1cvsocEfSuPqrD23j/z t2E0Vif2SwyZ68SqGY/PQg6i4OWmYMVLQ7iZ50OH7/HDtcOrNad7bdK6g9lkx59a RJM1BEfEO/YElFDbI8EalrhiPVkfw7j0Fe/6cez4SEefyNeEERhKhF8u6T9Byrfo LMhhuW7433rskBGHgxDvSUW0Wod/9VBijA5MwpSZQ126v3oHnCWuyo0ocaUJ/58A cINtfboNWj6rhbxNDbYL2Ds9MBTvwE+b+MNOcs72U3ZY9pu1WhdDZoNeYd2BW4Cn HWRYK4U0UeTosuO/o0nG9WbViPkCbO0oFYQj6SPQW+XdOgce3e8tpofckQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChsKc3V2budzgOA793yVtJ/Pg/uMB8GA1UdIwQY MBaAFGbUdbtUL2GCG+OdvJtoJ11uAIfUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQt ZTVmY2ViZGFhN2YyLzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQtZTVmY2ViZGFhN2Yy LzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtCoQ05rg d0DVEvtf0TlQ05fdKlLaGVnz/GHnwIeJ0Atpab0ay2Gr/6pMGEWsdjKHBSRC6vFf c7hDcoN8ZJQacF5uBG2Soitk6i2Wv1x8p5AqHG9A0xia6e0s4Jo05KDmGsU3S3hg 8ZCGWbykr9RvsnwVUSPxX/l6wPkh9+iDwIYipJFCwS0pwHB1y+w4RROhpoYBuxTk HGkFYVuWBzqd987lcYc0b3RnKzcQ72sKVxblv05E5xQ/LJist9dBb/bBJ5XOX95E Q+JjfoS2iu6FDNbGjaEquX+sKqH+EGpL2eEnINrmgsgOCrsbVAY0sp3U9w1nLW2Y K/kBg5FJ5JcoSQ== -----END CERTIFICATE-----Generated at Tue Jan 20 15:38:35 2026 by rpki-client