This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft File: dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json) Hash identifier: FZqRBiS6coWC9MgWSthpAZ7rfPlQabtyDS66RIrQA1Q= Subject key identifier: FB:51:F3:A2:36:AD:0F:CC:EB:C6:0F:6F:3A:D1:70:B6:B0:1B:F4:36 Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda Certificate serial: 019BCDF9BB7E36F8327B089457361C7B8029 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft Manifest number: 17D4 Signing time: Sat 17 Jan 2026 22:00:54 +0000 Manifest this update: Sat 17 Jan 2026 22:00:54 +0000 Manifest next update: Sun 18 Jan 2026 22:00:54 +0000 Files and hashes: 1: CN-YBDFfJ_MolBe276I9XevEuB8.roa (hash: GrTaXSgf/YZ10gbgtBsOa25F1Liht2flF1Xb3WbreJM=) 2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: 8/JcBSO8g0cXCKDqiNZOLbvp9Ojw85UF+iD+84fUR24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cd:f9:bb:7e:36:f8:32:7b:08:94:57:36:1c:7b:80:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda Validity Not Before: Jan 17 22:00:54 2026 GMT Not After : Jan 18 22:00:54 2026 GMT Subject: CN=fb51f3a236ad0fccebc60f6f3ad170b6b01bf436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1f:1d:d9:22:fc:da:fc:fe:fe:08:85:3f:31: ac:63:8c:f2:28:e7:eb:c6:91:48:77:33:38:3a:b2: df:72:35:2d:7b:dd:bb:57:e3:ef:50:61:89:bb:7d: 94:53:8b:2d:d1:48:f3:0e:34:fd:2e:d4:a1:a8:9e: a2:08:69:be:08:91:e4:5d:03:76:42:f3:b4:87:95: 25:48:db:f2:5e:fc:0c:4e:d2:79:f1:a6:65:9e:f1: 11:d4:7b:ac:e0:b8:6e:d9:ee:86:c4:d9:7a:40:fa: ea:4d:36:f8:7a:0b:64:50:40:b1:fc:93:50:25:ec: a0:99:3f:3f:9e:d0:c4:89:21:a5:fe:ae:e0:32:82: 81:ca:19:e4:53:7f:43:f2:56:5f:3a:4d:9c:ad:87: d9:1d:71:52:4e:ea:9b:50:a2:4f:8f:ba:c7:df:2d: 94:aa:82:2e:d7:81:7e:3b:f9:73:5f:05:a7:d5:37: 2c:07:bc:37:de:ed:08:8f:dd:b8:bd:2e:0b:14:5a: 85:86:88:a4:c4:f7:b0:20:bf:1b:db:78:c5:d5:fc: 8a:55:7c:80:e5:4e:77:ab:cf:37:b1:6e:21:80:32: 57:14:6b:92:83:d2:c5:4e:7f:80:c1:d3:49:fa:c1: 68:55:a7:e3:8f:97:83:a7:81:1d:83:dc:15:d3:2a: 7f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:51:F3:A2:36:AD:0F:CC:EB:C6:0F:6F:3A:D1:70:B6:B0:1B:F4:36 X509v3 Authority Key Identifier: keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:23:cf:a9:85:03:db:36:c4:6f:ed:c1:25:e0:c7:88:eb:ba: da:d4:90:92:70:80:0b:be:26:97:fc:de:64:a5:48:86:64:c2: b0:e6:6b:c9:f0:20:a6:1e:de:36:30:41:08:62:55:e0:15:4a: bb:62:52:96:98:21:3a:93:1b:d0:cd:9c:7c:8f:77:ee:db:b6: ad:bf:0f:3b:2c:26:60:67:45:b6:e4:a5:78:ee:35:99:65:9a: 73:1c:65:10:60:8a:d7:ea:ea:60:33:33:5f:c1:cb:11:dd:de: 68:aa:b1:ba:b1:86:96:4f:d0:f9:5f:cf:72:fb:cf:92:3e:35: 2b:a3:c5:f5:ab:db:0c:ac:24:66:25:4e:c9:6d:5d:dd:86:80: da:12:eb:85:13:11:15:2e:6b:f7:5c:09:75:30:de:25:db:b0: 30:0c:b9:21:ec:c9:50:1e:80:b2:7d:c0:ec:3d:55:db:30:ec: cb:b8:de:ac:f5:69:ba:65:52:10:cb:68:7a:bb:b6:d0:39:53: 98:81:c2:7c:e8:aa:c7:8a:3b:5d:86:24:1a:ec:07:e7:b4:6b: 2f:54:7e:02:f7:06:1c:19:61:e4:3a:58:4a:61:64:2b:32:66: 45:b4:30:83:e9:11:d9:33:4b:ce:c3:79:c1:8a:da:e2:5c:1d: 67:56:4f:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvN+bt+NvgyewiUVzYce4ApMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3M2JlN2NmMzI1MmE2ODk3NWQ1ZTIyNDU4OThjMDNjNGZi NjBkZGEwHhcNMjYwMTE3MjIwMDU0WhcNMjYwMTE4MjIwMDU0WjAzMTEwLwYDVQQD EyhmYjUxZjNhMjM2YWQwZmNjZWJjNjBmNmYzYWQxNzBiNmIwMWJmNDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh8d2SL82vz+/giFPzGsY4zyKOfr xpFIdzM4OrLfcjUte927V+PvUGGJu32UU4st0UjzDjT9LtShqJ6iCGm+CJHkXQN2 QvO0h5UlSNvyXvwMTtJ58aZlnvER1Hus4Lhu2e6GxNl6QPrqTTb4egtkUECx/JNQ JeygmT8/ntDEiSGl/q7gMoKByhnkU39D8lZfOk2crYfZHXFSTuqbUKJPj7rH3y2U qoIu14F+O/lzXwWn1TcsB7w33u0Ij924vS4LFFqFhoikxPewIL8b23jF1fyKVXyA 5U53q883sW4hgDJXFGuSg9LFTn+AwdNJ+sFoVafjj5eDp4Edg9wV0yp/EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtR86I2rQ/M68YPbzrRcLawG/Q2MB8GA1UdIwQY MBaAFHc7588yUqaJddXiJFiYwDxPtg3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYmEwZDMtNTk0NC00NzQ3LTg4MzUt YmVkMDU2N2VmYTZiLzEvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jYmEwZDMtNTk0NC00NzQ3LTg4MzUtYmVkMDU2N2VmYTZi LzEvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiPPqYUD 2zbEb+3BJeDHiOu62tSQknCAC74ml/zeZKVIhmTCsOZryfAgph7eNjBBCGJV4BVK u2JSlpghOpMb0M2cfI937tu2rb8POywmYGdFtuSleO41mWWacxxlEGCK1+rqYDMz X8HLEd3eaKqxurGGlk/Q+V/PcvvPkj41K6PF9avbDKwkZiVOyW1d3YaA2hLrhRMR FS5r91wJdTDeJduwMAy5IezJUB6Asn3A7D1V2zDsy7jerPVpumVSEMtoeru20DlT mIHCfOiqx4o7XYYkGuwH57RrL1R+AvcGHBlh5DpYSmFkKzJmRbQwg+kR2TNLzsN5 wYra4lwdZ1ZPEg== -----END CERTIFICATE-----Generated at Sun Jan 18 05:25:19 2026 by rpki-client