This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json) Hash identifier: drlCm5V1Gbxn8NX5HWvQ5M8lnUnfhwe4jItU3H2ER+E= Subject key identifier: E5:86:4C:86:E8:4D:DD:86:15:D4:C1:AD:13:96:1E:9F:A5:28:DC:2C Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5 Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5 Certificate serial: 019BD27BCF318001379524791F7123A041A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft Manifest number: 17D7 Signing time: Sun 18 Jan 2026 19:01:27 +0000 Manifest this update: Sun 18 Jan 2026 19:01:27 +0000 Manifest next update: Mon 19 Jan 2026 19:01:27 +0000 Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: 7RFCZB3t4HOgbBrG9Ob45N/hifDDCDFzwkHaD0KXDgw=) 2: Wdq9UIvFzgDqiYju4znORuRnk4A.roa (hash: eltS6TqFGo2PicugCL3Z+e5ML3gTGzg3RZI9Plv8FIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 15:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d2:7b:cf:31:80:01:37:95:24:79:1f:71:23:a0:41:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5 Validity Not Before: Jan 18 19:01:27 2026 GMT Not After : Jan 19 19:01:27 2026 GMT Subject: CN=e5864c86e84ddd8615d4c1ad13961e9fa528dc2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0c:b9:cd:c7:e1:05:a6:e4:d7:62:73:de:85: 6d:81:ed:90:5a:c5:11:13:54:5e:a1:92:78:0b:d1: 19:57:02:9e:75:57:46:bf:6b:d4:a9:7a:45:67:0b: 5d:ce:20:3c:fd:bf:7f:6e:f0:25:28:86:4c:7b:92: 60:1f:48:56:b5:d5:5c:4f:c0:2f:d2:20:ef:02:19: 27:91:4f:9b:85:fe:9b:05:30:19:9a:d5:ec:a8:bd: fd:a9:2b:93:d8:b8:c6:fc:ff:77:29:0d:ce:f5:ec: 97:84:56:1b:65:c0:75:ab:7a:76:7c:62:32:b1:0f: 85:36:55:b5:ab:d0:6a:68:4f:05:7f:8c:fe:cd:bd: f4:b1:fd:78:6d:41:df:78:26:b2:65:f6:d9:98:a9: 8b:75:fb:39:eb:67:87:f1:54:a0:6a:fa:c3:9a:dc: 4a:99:ff:0c:2d:91:8d:7f:74:1d:aa:c3:b4:f7:b2: e5:69:5b:4e:43:1b:8d:9c:13:13:21:16:0a:92:cb: 86:34:6c:e0:f5:d8:5f:e6:b3:67:ac:da:75:07:04: c2:ad:f2:15:f1:68:13:0e:ed:e9:6a:8d:8d:f7:0d: 67:11:c1:f1:39:74:d6:57:7e:d4:fc:b5:8c:7c:8d: f3:82:8e:6c:32:f4:99:0d:24:5e:05:4a:a0:44:59: dd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:86:4C:86:E8:4D:DD:86:15:D4:C1:AD:13:96:1E:9F:A5:28:DC:2C X509v3 Authority Key Identifier: keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:d5:bf:1c:3d:c5:55:8f:6d:dc:32:66:1b:c4:a7:11:11:af: db:75:49:a4:61:69:a2:00:fc:27:fc:a3:de:f3:68:ae:cd:27: 21:dc:f1:f4:20:52:73:62:4b:5a:ba:63:c8:7d:2a:85:c5:4e: b7:31:35:9f:e7:aa:70:5b:ec:e9:9a:e1:22:29:cb:94:f8:cd: 22:c0:ad:37:26:84:52:a0:82:85:2c:1a:52:1f:42:79:fe:8d: 6a:c2:28:56:82:25:5f:2c:1d:47:5f:3d:57:a9:7d:43:b5:58: cb:84:40:b6:9b:29:d6:c6:55:18:c7:18:72:36:c6:4b:41:de: bf:1c:43:df:91:7e:9b:aa:50:d5:3c:97:d6:33:ef:69:7e:47: 59:1d:dd:07:01:ee:1d:53:2e:6f:95:50:5f:6e:42:3f:6c:9d: 0f:76:ff:ce:32:fd:1f:4d:2e:18:ca:cf:85:43:bd:6f:f3:8c: dc:0e:50:e8:40:dd:6a:26:c1:53:b4:07:52:6a:b9:ed:9a:68: c5:1f:52:16:86:76:97:e7:56:77:87:3a:1d:14:7c:e9:71:c3: ab:97:f8:fc:20:41:91:f2:ec:ef:6c:f3:14:8c:db:2b:c0:ed: 4c:b1:d4:b7:71:62:94:b8:2c:1a:53:a9:09:61:06:3f:2c:a7: f3:71:74:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvSe88xgAE3lSR5H3EjoEGkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OTRjYWNkZDkzNWU0NWNmNzFjNjE2NzgwYTFiMWQ0YWE2 OGM3YjUwHhcNMjYwMTE4MTkwMTI3WhcNMjYwMTE5MTkwMTI3WjAzMTEwLwYDVQQD EyhlNTg2NGM4NmU4NGRkZDg2MTVkNGMxYWQxMzk2MWU5ZmE1MjhkYzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAy5zcfhBabk12Jz3oVtge2QWsUR E1ReoZJ4C9EZVwKedVdGv2vUqXpFZwtdziA8/b9/bvAlKIZMe5JgH0hWtdVcT8Av 0iDvAhknkU+bhf6bBTAZmtXsqL39qSuT2LjG/P93KQ3O9eyXhFYbZcB1q3p2fGIy sQ+FNlW1q9BqaE8Ff4z+zb30sf14bUHfeCayZfbZmKmLdfs562eH8VSgavrDmtxK mf8MLZGNf3QdqsO097LlaVtOQxuNnBMTIRYKksuGNGzg9dhf5rNnrNp1BwTCrfIV 8WgTDu3pao2N9w1nEcHxOXTWV37U/LWMfI3zgo5sMvSZDSReBUqgRFndKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWGTIboTd2GFdTBrROWHp+lKNwsMB8GA1UdIwQY MBaAFDWUys3ZNeRc9xxhZ4ChsdSqaMe1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjIt NGFiZGMyYmI5ZmEzLzEvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjItNGFiZGMyYmI5ZmEz LzEvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNW/HD3F VY9t3DJmG8SnERGv23VJpGFpogD8J/yj3vNors0nIdzx9CBSc2JLWrpjyH0qhcVO tzE1n+eqcFvs6ZrhIinLlPjNIsCtNyaEUqCChSwaUh9Cef6NasIoVoIlXywdR189 V6l9Q7VYy4RAtpsp1sZVGMcYcjbGS0HevxxD35F+m6pQ1TyX1jPvaX5HWR3dBwHu HVMub5VQX25CP2ydD3b/zjL9H00uGMrPhUO9b/OM3A5Q6EDdaibBU7QHUmq57Zpo xR9SFoZ2l+dWd4c6HRR86XHDq5f4/CBBkfLs72zzFIzbK8DtTLHUt3FilLgsGlOp CWEGPyyn83F07g== -----END CERTIFICATE-----Generated at Sun Jan 18 22:17:47 2026 by rpki-client