This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json) Hash identifier: b/5xGQIjhnvlxhiWi9EZA5Zk9uJYcAe6ySjYQPoAsik= Subject key identifier: F2:A3:AD:AB:5A:0D:D0:FD:80:D7:9D:DF:D2:74:3F:67:3B:02:34:E1 Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 019BE000C3BD0A8D68E1F5E88EE711CB6E60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft Manifest number: 17F1 Signing time: Wed 21 Jan 2026 10:01:44 +0000 Manifest this update: Wed 21 Jan 2026 10:01:44 +0000 Manifest next update: Thu 22 Jan 2026 10:01:44 +0000 Files and hashes: 1: 0uXHR2UhfdGKOw0-7UVbnfQAkig.roa (hash: Q9NPQXWKGQHVWf1Z/Oo69HPn4r2sOJMpx+RqofXuMKw=) 2: 1-jd9OcIMJ3MRmOrCPnxeklbAz-A.roa (hash: 4BT08aUJAH5XA8v2nUCY0ZzKbtYT4OuVlGjXaC8L51w=) 3: 3Hr9NkohHp-0dQh6eby1rDTTvtg.roa (hash: 31UMAD/tu8ErCfftbrPF1UHKdFAEb8fyigVMsh1vdjY=) 4: 50_RqUM3HM1DTyeXhDBU-vljMns.roa (hash: jLfna8CaKrQXjGhh5I5+7KDotyKYCpxYaW8lSXxCxYI=) 5: 8VffJRIzchhCe8rm2mAWoMqOrUw.roa (hash: ZlMVYfC0qcWAgUxCif3zol/JEVTmk18XMebsrNTaMMw=) 6: FXkLPO07K0oGiHX6N80HucLUmQk.roa (hash: pJpxLX/J3IKaGvymzNo/eP+WscosiFBoX/gscobrkA8=) 7: SviK5uP3P_320woFz7MJ74gfE54.roa (hash: cdu27i/9dSf6ELTxYPRMzucVjIzIdkrFCjEQ+8cX0Hc=) 8: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: tQq648l0IxYpJegNBAuEsUIqxvWSBqK8RMl96Kp/sYY=) 9: _yMstHwq62YtmKZbMo5Nl7N0BSY.roa (hash: fA5EOJqyYeCeRJjBOFQnKbcHaakgxJGZzArfMKvJW7M=) 10: mNIa-kBl--UJ4M4sTdW_ScZtluQ.roa (hash: APBGVJ5X0w1VXGqUTI7O+M7iTb0F7m1Cbhdbmsncrvg=) 11: vUnigMLcxEHFFYzam4W0EFuYfF0.roa (hash: qgrF46htEQCa+s16GhFv54cTmD+21CsD7rkwyl8dr1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:00:c3:bd:0a:8d:68:e1:f5:e8:8e:e7:11:cb:6e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Jan 21 10:01:44 2026 GMT Not After : Jan 22 10:01:44 2026 GMT Subject: CN=f2a3adab5a0dd0fd80d79ddfd2743f673b0234e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:28:3f:71:e8:75:ec:8e:36:a4:4d:45:87:6b: a3:af:38:fa:55:9e:76:55:45:b3:64:29:d2:c0:19: 2b:04:4b:c0:86:08:1d:d5:be:fe:d9:d2:cc:d5:ff: b8:e4:87:95:fd:e5:3e:d9:5c:d9:c0:80:d7:2b:20: 87:93:ab:19:df:cc:8d:72:27:62:87:30:5c:fa:8a: bd:5e:6e:d7:47:58:ef:cd:23:58:69:bf:f3:54:40: 0e:66:a9:73:ef:bc:29:97:3d:f8:e0:45:bf:1e:7d: e1:bf:ea:29:88:00:76:12:80:48:f2:fb:3d:94:d9: e7:21:d2:7c:53:11:50:35:83:ae:05:bb:df:a1:40: 2a:4c:a2:c1:68:e8:4e:71:5f:6c:3a:e9:b7:26:50: c5:0b:3b:4f:3f:ed:54:db:eb:25:47:50:d4:39:0b: bf:cb:16:ef:73:ca:d0:29:96:e8:89:be:e1:8f:61: 04:49:b1:94:1a:4f:a4:71:83:36:f9:0f:19:40:70: 3b:b4:86:9d:90:18:64:ac:86:8e:17:3d:08:a5:c8: c2:42:3a:36:a4:fc:ea:57:48:88:f9:7b:35:af:e6: 05:f7:a5:b4:b3:7d:43:78:67:ad:b7:74:2b:c1:39: 5b:97:b5:da:16:03:2d:30:bf:44:37:ea:0c:3d:f6: af:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A3:AD:AB:5A:0D:D0:FD:80:D7:9D:DF:D2:74:3F:67:3B:02:34:E1 X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f1:ff:e3:a0:99:ad:12:db:39:60:de:f1:a6:5e:9d:4c:29: a8:63:2a:88:2a:50:39:c6:94:08:f6:6f:36:1a:ff:b5:ba:7a: 7d:3f:46:bf:ab:33:ab:db:12:bb:c9:c8:d7:70:6f:6b:24:18: 5f:5b:c4:f6:3f:02:2e:f8:98:9f:d5:f4:39:7c:98:a6:4e:e6: 66:83:05:44:36:4e:0f:36:b1:6a:63:87:06:7a:4e:6a:8e:c6: 35:44:6c:86:49:8c:1f:9f:1d:17:3d:78:59:17:5c:da:e1:36: a1:51:e9:17:87:63:20:00:c1:c9:eb:ae:77:68:8e:37:89:57: ca:03:bb:77:9e:8d:7e:0a:ed:47:a9:85:b1:ae:89:a0:67:09: e4:6d:fc:b2:b2:db:07:e3:8f:e3:77:b9:8b:f4:b6:09:7b:20: 83:c5:cd:3a:e0:ad:f3:37:3b:47:68:b4:d5:c9:d3:01:30:35: 1d:11:8c:ba:36:b7:2f:b0:9a:d3:8a:65:8b:4e:b4:a8:6c:28: 47:21:2b:44:5b:65:f1:06:cb:bb:75:b9:98:fd:57:6f:67:06: fb:47:09:3a:21:b9:4c:6e:89:3b:e4:2f:2c:39:07:ff:fe:66: 13:a1:84:fd:0c:4d:cd:86:8c:09:d7:77:0a:e9:de:eb:7c:e8: 02:48:21:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgAMO9Co1o4fXojucRy25gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjYwMTIxMTAwMTQ0WhcNMjYwMTIyMTAwMTQ0WjAzMTEwLwYDVQQD EyhmMmEzYWRhYjVhMGRkMGZkODBkNzlkZGZkMjc0M2Y2NzNiMDIzNGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSg/ceh17I42pE1Fh2ujrzj6VZ52 VUWzZCnSwBkrBEvAhggd1b7+2dLM1f+45IeV/eU+2VzZwIDXKyCHk6sZ38yNcidi hzBc+oq9Xm7XR1jvzSNYab/zVEAOZqlz77wplz344EW/Hn3hv+opiAB2EoBI8vs9 lNnnIdJ8UxFQNYOuBbvfoUAqTKLBaOhOcV9sOum3JlDFCztPP+1U2+slR1DUOQu/ yxbvc8rQKZboib7hj2EESbGUGk+kcYM2+Q8ZQHA7tIadkBhkrIaOFz0IpcjCQjo2 pPzqV0iI+Xs1r+YF96W0s31DeGett3QrwTlbl7XaFgMtML9EN+oMPfavPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKjrataDdD9gNed39J0P2c7AjThMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/H/46CZ rRLbOWDe8aZenUwpqGMqiCpQOcaUCPZvNhr/tbp6fT9Gv6szq9sSu8nI13BvayQY X1vE9j8CLviYn9X0OXyYpk7mZoMFRDZODzaxamOHBnpOao7GNURshkmMH58dFz14 WRdc2uE2oVHpF4djIADByeuud2iON4lXygO7d56NfgrtR6mFsa6JoGcJ5G38srLb B+OP43e5i/S2CXsgg8XNOuCt8zc7R2i01cnTATA1HRGMuja3L7Ca04pli060qGwo RyErRFtl8QbLu3W5mP1Xb2cG+0cJOiG5TG6JO+QvLDkH//5mE6GE/QxNzYaMCdd3 Cune63zoAkghrA== -----END CERTIFICATE-----Generated at Wed Jan 21 17:35:55 2026 by rpki-client