This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json) Hash identifier: vYF2ZdxxX5Ma5ikvQR50dSfOAfVZAj9dXlIe7DgJ4UY= Subject key identifier: 6A:3F:56:05:41:E9:CF:17:00:B7:35:54:B6:67:AF:C7:F3:22:8D:36 Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac Certificate serial: 019BAF819FAE52764732CFBB44763818E6B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft Manifest number: 17C3 Signing time: Mon 12 Jan 2026 00:01:06 +0000 Manifest this update: Mon 12 Jan 2026 00:01:06 +0000 Manifest next update: Tue 13 Jan 2026 00:01:06 +0000 Files and hashes: 1: 1-z0ycl8G0c1rEni_Vsqg-AmZtoM.roa (hash: MhYBDQjEGU5d72clowp4LieZVsR3hSZE1uwIFiaaRFU=) 2: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: pQrrzcNPfTcNNXawmaIG1B2TkxONoFJv1qlYvLJDPM8=) 3: KzGAmIcyAKPdwjPVZFF_DeGrYi0.roa (hash: d0nit13az+nF5T9ApCvkfJ3swzvKAkAdbSMfvb/nFGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:81:9f:ae:52:76:47:32:cf:bb:44:76:38:18:e6:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac Validity Not Before: Jan 12 00:01:06 2026 GMT Not After : Jan 13 00:01:06 2026 GMT Subject: CN=6a3f560541e9cf1700b73554b667afc7f3228d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1a:2a:99:b3:2f:0f:49:65:5d:99:e1:0c:2c: 08:a2:b3:9f:50:2a:61:f6:a3:4c:dd:2d:36:91:4b: 52:fa:34:a7:cc:0d:02:89:fe:27:d0:0b:90:c0:a8: 6d:69:bf:72:96:6a:58:80:ed:58:72:19:4f:1a:5a: 61:6f:39:66:d6:69:55:a9:29:93:95:4c:59:30:63: e7:ff:fc:7e:d8:e9:aa:cb:12:a0:c8:54:b9:b4:fd: fc:0e:ff:35:28:2d:40:e3:0e:34:a3:99:53:c4:4c: c2:25:46:02:dd:6f:20:86:9b:cd:7b:28:d9:65:37: ca:a1:24:ac:c5:61:8c:aa:cd:a3:3d:47:15:24:27: ed:ca:22:78:a1:31:f7:18:97:30:87:96:9b:21:4e: 75:97:0b:b1:fb:eb:5b:00:b8:e6:d3:53:a1:56:7d: d8:f4:b4:53:78:15:dd:8a:86:c0:59:a7:50:4f:03: bd:75:96:04:c5:31:92:76:62:ca:e0:47:c2:d6:f4: f0:99:5a:da:dc:2e:a1:ed:1d:10:f9:e8:a5:54:42: 27:ab:96:53:17:ed:46:9b:1d:8b:49:c6:f3:0b:ba: f8:3e:f2:93:cf:15:2a:41:8b:a9:20:02:70:41:90: 25:c0:4e:90:4a:dd:04:b5:20:5c:d3:32:66:75:53: 33:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3F:56:05:41:E9:CF:17:00:B7:35:54:B6:67:AF:C7:F3:22:8D:36 X509v3 Authority Key Identifier: keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:10:f0:2a:88:c5:e5:66:46:0b:21:e9:8d:e4:0e:7d:b6:56: fb:b1:26:92:fd:fc:66:ef:2c:c2:23:db:44:3c:f0:d4:c5:3f: 5b:89:ed:c9:46:3a:de:15:9b:ae:f2:5b:ef:d8:2a:74:34:c2: 51:71:37:7b:3d:93:04:49:f7:9b:8a:f5:04:52:90:a5:e0:ce: eb:6f:84:43:78:10:39:6e:af:4f:bc:70:d3:c6:5a:03:4a:47: 58:b2:f2:ba:86:b8:07:08:d9:59:9f:e7:de:01:dc:47:78:6b: 24:c5:e2:e1:2d:a4:97:4f:d1:6b:a4:4e:29:74:81:bb:33:be: b2:36:cd:fb:04:b9:1e:3b:59:39:c4:29:69:b7:17:f6:9d:c1: ac:7a:39:a2:d8:99:58:fd:bd:66:8b:94:42:8b:e5:42:12:8b: be:c2:5d:db:6d:c2:9b:f8:9e:ae:95:82:3e:10:f0:71:0b:51: 38:35:11:c1:1c:c4:c6:0f:5a:ff:1f:10:3c:28:67:78:98:87: 17:d4:d0:d1:5a:5d:cd:bc:82:1f:84:0c:b0:bf:16:30:1e:22: 34:c3:55:24:d4:3e:c6:8c:e9:47:d1:34:8d:6e:d8:1b:f7:6a: 23:07:52:b2:7f:a2:36:3e:d5:ff:0d:21:b6:46:c9:96:49:f6: 18:8d:35:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvgZ+uUnZHMs+7RHY4GOa3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxOTY1NWI1OWE4NjRjYWQ3M2NjMjk1ZjRmNzhmZjgzY2Fl ODZhYWMwHhcNMjYwMTEyMDAwMTA2WhcNMjYwMTEzMDAwMTA2WjAzMTEwLwYDVQQD Eyg2YTNmNTYwNTQxZTljZjE3MDBiNzM1NTRiNjY3YWZjN2YzMjI4ZDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxoqmbMvD0llXZnhDCwIorOfUCph 9qNM3S02kUtS+jSnzA0Cif4n0AuQwKhtab9ylmpYgO1YchlPGlphbzlm1mlVqSmT lUxZMGPn//x+2OmqyxKgyFS5tP38Dv81KC1A4w40o5lTxEzCJUYC3W8ghpvNeyjZ ZTfKoSSsxWGMqs2jPUcVJCftyiJ4oTH3GJcwh5abIU51lwux++tbALjm01OhVn3Y 9LRTeBXdiobAWadQTwO9dZYExTGSdmLK4EfC1vTwmVra3C6h7R0Q+eilVEInq5ZT F+1Gmx2LScbzC7r4PvKTzxUqQYupIAJwQZAlwE6QSt0EtSBc0zJmdVMzcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGo/VgVB6c8XALc1VLZnr8fzIo02MB8GA1UdIwQY MBaAFPGWVbWahkytc8wpX094/4PK6GqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yYmQxZGMtYWRlMS00NmM5LWI5YzAt MzM5ZWU3MDBhZjZmLzEvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8yYmQxZGMtYWRlMS00NmM5LWI5YzAtMzM5ZWU3MDBhZjZm LzEvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxDwKojF 5WZGCyHpjeQOfbZW+7Emkv38Zu8swiPbRDzw1MU/W4ntyUY63hWbrvJb79gqdDTC UXE3ez2TBEn3m4r1BFKQpeDO62+EQ3gQOW6vT7xw08ZaA0pHWLLyuoa4BwjZWZ/n 3gHcR3hrJMXi4S2kl0/Ra6ROKXSBuzO+sjbN+wS5HjtZOcQpabcX9p3BrHo5otiZ WP29ZouUQovlQhKLvsJd223Cm/ierpWCPhDwcQtRODURwRzExg9a/x8QPChneJiH F9TQ0VpdzbyCH4QMsL8WMB4iNMNVJNQ+xozpR9E0jW7YG/dqIwdSsn+iNj7V/w0h tkbJlkn2GI01RQ== -----END CERTIFICATE-----Generated at Mon Jan 12 02:25:21 2026 by rpki-client