This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft File: dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json) Hash identifier: MrHHEWvOZdI6rIBux+52HYEN2QtKdVLoX/279XkibaU= Subject key identifier: A8:B3:AB:53:93:5B:87:D3:E3:A9:C3:D9:E1:E4:B1:13:9C:58:21:7B Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B Certificate issuer: /CN=769d5c52c3157e5945e663b92ed4402c60616e3b Certificate serial: 019BFA64BEFD17BBFC8430B4299EA3DF6C56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft Manifest number: 04CF Signing time: Mon 26 Jan 2026 13:01:05 +0000 Manifest this update: Mon 26 Jan 2026 13:01:05 +0000 Manifest next update: Tue 27 Jan 2026 13:01:05 +0000 Files and hashes: 1: 3lauIf0YpbUjYSTnhhTVxklgLKk.roa (hash: yggx4J03w1luy3uhGhFmtwjE58TFme6YVBEKV6qwxTo=) 2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: Jv7+gRQmW796TRMJ6jNC1+Ygx3Wobpyanui20GDsZok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:be:fd:17:bb:fc:84:30:b4:29:9e:a3:df:6c:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b Validity Not Before: Jan 26 13:01:05 2026 GMT Not After : Jan 27 13:01:05 2026 GMT Subject: CN=a8b3ab53935b87d3e3a9c3d9e1e4b1139c58217b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:48:e0:53:a7:10:47:0b:bc:d2:b3:ec:c2:f9: 49:8a:ff:8a:d6:71:92:9b:f9:42:72:e2:f0:9f:ed: 3b:5c:97:d0:66:1d:36:47:49:6f:bb:b4:39:af:82: 41:1d:27:fd:dd:4f:62:e6:6e:ee:80:8d:b0:01:19: 8c:23:be:ee:c7:81:05:2c:35:55:cf:fb:bb:3f:a0: c8:bb:36:47:ff:a3:89:2b:55:e2:f4:36:8d:32:c5: 2b:62:8f:e2:43:8c:b0:aa:81:3f:0c:c7:9b:80:7f: 8a:0a:4e:51:ce:d9:7e:c5:5a:dc:89:77:4d:97:35: f5:2d:20:fa:4a:72:82:d5:bd:64:74:30:04:01:2a: 2b:fc:7b:8c:d3:c9:e8:23:a0:21:9b:27:40:7d:38: 16:d5:4f:97:ac:e1:9c:d8:d3:6c:a4:6f:63:f6:8d: 89:20:be:db:e2:7b:f4:df:89:2b:67:8c:5e:39:79: 58:de:25:6a:4f:fe:fc:4b:81:b3:c0:d3:83:85:00: ad:23:28:70:54:3f:a5:82:c0:c3:ca:26:f8:ae:c7: 31:3b:96:7e:88:b4:66:58:fa:a1:27:e5:d3:cb:7e: 2d:88:5e:bd:b9:f4:de:9e:4a:e8:9e:fd:74:bd:eb: 7f:e2:d0:42:5f:d8:3a:53:db:7f:53:fe:d0:75:60: b0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B3:AB:53:93:5B:87:D3:E3:A9:C3:D9:E1:E4:B1:13:9C:58:21:7B X509v3 Authority Key Identifier: keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:67:13:8a:fb:08:a1:6c:03:e4:0e:33:2b:25:7a:7f:bb:79: 04:a2:e2:80:00:a3:f2:a0:04:15:8e:39:47:a0:9f:58:f2:5a: f9:2b:17:97:0f:f1:0d:f6:66:a2:75:39:7b:1a:d7:00:8b:47: 11:34:0d:05:ab:c0:fc:9f:a5:bd:2a:8d:b3:85:3e:4b:a8:cb: bb:34:bc:db:eb:17:8f:42:b1:3f:b8:7e:bd:d6:38:b7:9e:36: 4e:82:eb:ad:19:a1:79:14:78:0e:f9:b8:09:15:c0:7a:80:c5: 26:56:12:02:0f:96:da:4d:32:d2:6c:c9:b2:ef:6f:dd:15:1c: 21:f4:51:89:2f:c8:7f:e0:ee:6e:af:77:91:a0:2c:b3:de:02: 5a:92:54:7c:30:72:06:6b:8d:6f:97:24:a8:b6:0d:55:5f:b5: 94:09:cd:67:73:bb:c3:36:49:d1:b6:2f:e4:8d:7e:58:d7:5c: 3c:e7:5c:03:cf:d4:3c:03:d9:d9:69:89:97:7e:70:87:df:59: 76:78:24:50:98:e3:15:fa:73:97:11:05:1e:15:8b:98:4f:f6: d5:a2:e6:d7:89:ee:8b:a0:05:da:f1:3e:30:56:dc:ca:67:b2: ef:12:56:ba:94:3e:69:7a:55:c7:f5:c4:97:74:74:6f:a6:1b: b3:58:b7:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZL79F7v8hDC0KZ6j32xWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OWQ1YzUyYzMxNTdlNTk0NWU2NjNiOTJlZDQ0MDJjNjA2 MTZlM2IwHhcNMjYwMTI2MTMwMTA1WhcNMjYwMTI3MTMwMTA1WjAzMTEwLwYDVQQD EyhhOGIzYWI1MzkzNWI4N2QzZTNhOWMzZDllMWU0YjExMzljNTgyMTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEjgU6cQRwu80rPswvlJiv+K1nGS m/lCcuLwn+07XJfQZh02R0lvu7Q5r4JBHSf93U9i5m7ugI2wARmMI77ux4EFLDVV z/u7P6DIuzZH/6OJK1Xi9DaNMsUrYo/iQ4ywqoE/DMebgH+KCk5Rztl+xVrciXdN lzX1LSD6SnKC1b1kdDAEASor/HuM08noI6AhmydAfTgW1U+XrOGc2NNspG9j9o2J IL7b4nv034krZ4xeOXlY3iVqT/78S4GzwNODhQCtIyhwVD+lgsDDyib4rscxO5Z+ iLRmWPqhJ+XTy34tiF69ufTenkronv10vet/4tBCX9g6U9t/U/7QdWCw+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKizq1OTW4fT46nD2eHksROcWCF7MB8GA1UdIwQY MBaAFHadXFLDFX5ZReZjuS7UQCxgYW47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jYzY2YjItMTI2Ny00NTE2LWEzOWYt Mzc2YjQ5ZDUyZDdlLzEvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jYzY2YjItMTI2Ny00NTE2LWEzOWYtMzc2YjQ5ZDUyZDdl LzEvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmcTivsI oWwD5A4zKyV6f7t5BKLigACj8qAEFY45R6CfWPJa+SsXlw/xDfZmonU5exrXAItH ETQNBavA/J+lvSqNs4U+S6jLuzS82+sXj0KxP7h+vdY4t542ToLrrRmheRR4Dvm4 CRXAeoDFJlYSAg+W2k0y0mzJsu9v3RUcIfRRiS/If+Dubq93kaAss94CWpJUfDBy BmuNb5ckqLYNVV+1lAnNZ3O7wzZJ0bYv5I1+WNdcPOdcA8/UPAPZ2WmJl35wh99Z dngkUJjjFfpzlxEFHhWLmE/21aLm14nui6AF2vE+MFbcymey7xJWupQ+aXpVx/XE l3R0b6Ybs1i3hA== -----END CERTIFICATE-----Generated at Mon Jan 26 18:47:01 2026 by rpki-client