This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft File: ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft (raw, json) Hash identifier: nhj/neYel2JfAlSe/I2ii2J3fvpWpPwXQR7fmb3KvuY= Subject key identifier: DB:30:AD:1A:C7:0E:4C:DF:36:6B:6A:08:4B:C3:AA:E5:AE:86:23:B1 Authority key identifier: CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4 Certificate issuer: /CN=ced410ea6867ef63f959bad6b21b691cadff87d4 Certificate serial: 019B9E8E358861BB0CF0012EBFF1B6BF3C96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft Manifest number: 17BB Signing time: Thu 08 Jan 2026 17:01:18 +0000 Manifest this update: Thu 08 Jan 2026 17:01:18 +0000 Manifest next update: Fri 09 Jan 2026 17:01:18 +0000 Files and hashes: 1: HwU_8edYuJ4rCmR5x6ykFn1t0do.roa (hash: 01KdeA2Gl7MQNNjhhKHuUHDnBDM56k334jcMgundfH4=) 2: ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl (hash: fNZZw2eff9kZpj+EBYdBuxX4r+zKOmf5j2Imc/PWHyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 17:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:8e:35:88:61:bb:0c:f0:01:2e:bf:f1:b6:bf:3c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced410ea6867ef63f959bad6b21b691cadff87d4 Validity Not Before: Jan 8 17:01:18 2026 GMT Not After : Jan 9 17:01:18 2026 GMT Subject: CN=db30ad1ac70e4cdf366b6a084bc3aae5ae8623b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:34:86:12:7a:1b:84:2d:16:7b:70:e3:63:33: 72:24:6b:d1:a1:c9:a9:46:f7:f6:aa:c2:72:3d:82: 89:1c:0e:07:e7:bb:98:52:09:0e:52:3f:6e:f1:4f: 29:82:2f:38:6d:48:26:1c:54:bd:98:e4:94:bd:12: 22:66:0f:1e:aa:04:6d:35:d2:44:cd:31:f8:f5:c5: 13:54:a9:19:32:6f:53:db:37:89:4b:65:7d:ad:bd: 7b:a4:23:ce:a8:d5:fb:fe:12:fb:b3:61:ab:6f:c6: 9e:d1:c1:18:18:0b:94:e9:70:2b:a1:08:81:44:b9: eb:45:9f:79:0e:20:e4:62:23:7d:08:62:82:04:16: 71:63:60:46:a1:42:2b:22:d2:5f:86:70:f3:1e:4b: fe:7d:ad:f3:b4:a3:af:74:40:d5:fd:3b:73:1c:fd: 66:70:43:87:32:5c:91:2e:8f:d0:2b:7b:17:fa:1c: 70:20:08:8c:11:e9:27:89:f2:13:43:df:93:3d:d4: 35:0e:9b:13:65:54:c1:d7:e7:ec:00:10:00:fe:b3: 51:cb:2e:5f:63:d5:a0:60:d5:d8:ea:3a:f1:35:1e: bb:33:09:f8:7b:59:55:c1:8b:65:0f:89:75:c8:8f: e4:cd:c9:2f:23:42:e0:8b:1e:6f:e9:ec:67:1b:b3: 54:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:30:AD:1A:C7:0E:4C:DF:36:6B:6A:08:4B:C3:AA:E5:AE:86:23:B1 X509v3 Authority Key Identifier: keyid:CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:0e:96:b7:73:0d:7b:81:c9:db:a2:6b:cb:c0:71:0d:41:9e: da:2d:e8:ec:ad:38:f7:00:04:db:95:bc:23:3f:a8:37:f3:40: 87:77:e1:7b:e4:4f:80:fd:89:b4:76:36:b2:19:5d:da:5c:31: 23:52:26:b7:9a:85:0d:ec:5c:90:12:0d:ee:67:fb:ba:e5:87: 1d:5e:6f:f0:a4:9f:d1:33:a3:fa:ba:4f:14:9e:b7:1d:25:88: 26:59:c9:e2:7c:6a:78:e8:ca:69:86:48:94:51:0d:cc:fb:e3: da:72:58:05:30:8e:ee:a0:75:d5:ba:bf:0e:b3:17:54:e0:14: 40:a0:f6:91:e7:62:12:85:a9:9b:60:ef:74:64:fe:71:bf:31: 85:2b:1f:d7:b6:6a:d0:9d:7e:c0:db:f1:16:4f:7e:f4:f3:29: 57:b5:40:a0:d9:b7:ce:91:f8:6e:8c:47:68:ab:1c:c4:b6:fc: 98:22:82:11:90:72:c7:91:ad:2b:5c:dd:90:ed:8c:a1:94:5e: 74:a3:a4:0c:9b:7d:63:54:23:de:0a:46:af:82:dd:c0:46:23: 53:72:e7:bc:15:c4:0e:4f:61:30:be:fd:30:52:17:71:82:1b: 74:28:f5:77:36:88:ab:dd:d8:f7:f1:6d:a9:06:d4:76:ff:a3: c4:55:f9:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuejjWIYbsM8AEuv/G2vzyWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDQxMGVhNjg2N2VmNjNmOTU5YmFkNmIyMWI2OTFjYWRm Zjg3ZDQwHhcNMjYwMTA4MTcwMTE4WhcNMjYwMTA5MTcwMTE4WjAzMTEwLwYDVQQD EyhkYjMwYWQxYWM3MGU0Y2RmMzY2YjZhMDg0YmMzYWFlNWFlODYyM2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTSGEnobhC0We3DjYzNyJGvRocmp Rvf2qsJyPYKJHA4H57uYUgkOUj9u8U8pgi84bUgmHFS9mOSUvRIiZg8eqgRtNdJE zTH49cUTVKkZMm9T2zeJS2V9rb17pCPOqNX7/hL7s2Grb8ae0cEYGAuU6XAroQiB RLnrRZ95DiDkYiN9CGKCBBZxY2BGoUIrItJfhnDzHkv+fa3ztKOvdEDV/TtzHP1m cEOHMlyRLo/QK3sX+hxwIAiMEeknifITQ9+TPdQ1DpsTZVTB1+fsABAA/rNRyy5f Y9WgYNXY6jrxNR67Mwn4e1lVwYtlD4l1yI/kzckvI0Lgix5v6exnG7NULwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNswrRrHDkzfNmtqCEvDquWuhiOxMB8GA1UdIwQY MBaAFM7UEOpoZ+9j+Vm61rIbaRyt/4fUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRRUTZtaG43MlA1V2JyV3NodHBISzNfaDlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xMmZjNDEtODlkZC00YTIxLWFhMzQt NzY1MjU4NDFkYzI4LzEvenRRUTZtaG43MlA1V2JyV3NodHBISzNfaDlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8xMmZjNDEtODlkZC00YTIxLWFhMzQtNzY1MjU4NDFkYzI4 LzEvenRRUTZtaG43MlA1V2JyV3NodHBISzNfaDlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABA6Wt3MN e4HJ26Jry8BxDUGe2i3o7K049wAE25W8Iz+oN/NAh3fhe+RPgP2JtHY2shld2lwx I1Imt5qFDexckBIN7mf7uuWHHV5v8KSf0TOj+rpPFJ63HSWIJlnJ4nxqeOjKaYZI lFENzPvj2nJYBTCO7qB11bq/DrMXVOAUQKD2kediEoWpm2DvdGT+cb8xhSsf17Zq 0J1+wNvxFk9+9PMpV7VAoNm3zpH4boxHaKscxLb8mCKCEZByx5GtK1zdkO2MoZRe dKOkDJt9Y1Qj3gpGr4LdwEYjU3LnvBXEDk9hML79MFIXcYIbdCj1dzaIq93Y9/Ft qQbUdv+jxFX5kQ== -----END CERTIFICATE-----Generated at Thu Jan 8 23:12:52 2026 by rpki-client