This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft File: 29fJUTSL0uCcyvdvV7g4XxXfROQ.mft (raw, json) Hash identifier: 8S6lkR+FXcKAppyKNWI0o95Ptr8Nt71Jnz3aO4OIp2A= Subject key identifier: F5:9B:40:E3:06:E4:9F:BC:57:ED:3D:21:93:BE:56:10:DF:79:9F:F0 Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4 Certificate issuer: /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4 Certificate serial: 019BFD65CD04CA3FAB49FFF89880D296FA89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft Manifest number: 17F1 Signing time: Tue 27 Jan 2026 03:01:05 +0000 Manifest this update: Tue 27 Jan 2026 03:01:05 +0000 Manifest next update: Wed 28 Jan 2026 03:01:05 +0000 Files and hashes: 1: 29fJUTSL0uCcyvdvV7g4XxXfROQ.crl (hash: ccyHyz8LyttKmaw2rNU2OV4C5s6KG1eY6S9G6T55hWo=) 2: IPrRSq2gSatbbHi6fEa8RlmwLy4.roa (hash: RM5/PHoNGaX7XlREXjG/og78083kPTzGlX0ZOlSLFII=) 3: mVkogJ-xnAweLAL7bsWjhT8Cpqw.roa (hash: B0ZHTRT8wUE+jzJV8TMgxREJDsonVac0/VpJ6Sd0ekg=) 4: ngezMG7cjg7kdta93owuwynmRkU.roa (hash: AWPdd4TuywUrgEAGlpfA8F/3L75UudUwvDZHYHDHNyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:cd:04:ca:3f:ab:49:ff:f8:98:80:d2:96:fa:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4 Validity Not Before: Jan 27 03:01:05 2026 GMT Not After : Jan 28 03:01:05 2026 GMT Subject: CN=f59b40e306e49fbc57ed3d2193be5610df799ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:51:5b:d4:ea:54:a9:d2:a3:59:a2:4b:16:eb: ba:8f:d9:e1:0d:e3:5a:49:f6:30:38:a6:45:5c:d6: c2:37:44:bd:dc:39:3f:27:46:55:fa:23:f3:4a:90: 55:97:f8:98:bf:33:72:cc:3b:b4:2a:0f:4f:da:7d: 73:76:b1:9c:95:13:e3:66:54:64:da:a7:10:e6:34: 94:90:08:ac:d2:21:bb:20:8d:1e:11:fc:bb:43:44: ab:f8:2f:2c:b3:c3:27:2e:63:69:42:37:45:99:a9: 8f:3d:ef:bb:19:56:ae:20:75:a8:f1:d6:72:dc:d6: f5:a6:f4:d1:95:4c:bd:38:91:7f:5a:30:3e:9d:87: b2:8f:02:a8:86:eb:51:02:b4:40:88:7d:9b:25:6e: d4:d5:f7:f4:56:68:0c:b9:92:58:95:4f:5e:7a:d5: d5:8f:33:1d:cb:4b:e4:8d:29:fb:b0:44:02:67:58: 18:6d:8b:f5:b8:40:48:dc:93:b5:98:f2:06:fa:28: 8d:32:93:c5:e3:5a:df:4a:c1:53:87:a8:0a:40:a2: 90:12:eb:5f:49:d1:5a:94:7a:9e:43:01:c1:18:1c: 54:44:d6:b8:23:34:14:2c:91:af:aa:39:f5:56:4b: 5a:ff:b7:dd:71:60:c0:06:9a:7b:39:3d:a9:8e:2a: 56:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9B:40:E3:06:E4:9F:BC:57:ED:3D:21:93:BE:56:10:DF:79:9F:F0 X509v3 Authority Key Identifier: keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:2c:61:18:9a:b7:0c:6b:76:d1:d8:7a:12:a8:a8:17:84:06: 1d:38:09:b9:d7:8b:08:4d:4e:64:09:21:73:57:7f:20:31:df: f0:e2:eb:d0:37:a4:64:3b:ca:2f:91:cc:5b:e3:e5:2a:23:c5: 2d:f3:ad:f2:a5:a8:a3:0b:d8:72:3e:33:49:f3:f2:91:5a:b7: ab:84:d2:8e:58:22:28:31:ff:6b:77:41:55:a6:e0:be:1f:b4: 37:ab:af:1d:8a:9e:6a:71:e8:0f:f8:a9:eb:d8:44:85:3a:66: c3:28:4b:49:a0:e2:64:06:1d:3c:f9:10:ba:95:df:cc:0a:1b: 63:41:58:63:31:32:28:3e:59:38:c6:5e:66:3d:37:f9:20:ca: 4e:ac:85:e1:aa:62:aa:98:64:89:7d:4e:fe:e5:ae:30:a4:b3: cb:3e:3a:46:67:26:81:48:b1:7f:3c:3c:4f:9a:60:b5:56:6f: ed:47:e9:07:a8:ea:37:83:54:10:80:2e:66:f3:2d:f9:99:95: 15:0b:8d:6d:71:71:bc:ee:60:9e:f6:66:fe:32:c5:48:86:fc: 54:3d:62:04:c5:6d:db:1d:24:95:16:b2:df:b1:18:91:2e:64: 7d:bc:87:c7:f2:f0:9c:bd:8e:33:fe:d4:7a:0c:1d:8b:95:31: dd:a9:a6:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9Zc0Eyj+rSf/4mIDSlvqJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZDdjOTUxMzQ4YmQyZTA5Y2NhZjc2ZjU3YjgzODVmMTVk ZjQ0ZTQwHhcNMjYwMTI3MDMwMTA1WhcNMjYwMTI4MDMwMTA1WjAzMTEwLwYDVQQD EyhmNTliNDBlMzA2ZTQ5ZmJjNTdlZDNkMjE5M2JlNTYxMGRmNzk5ZmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVFb1OpUqdKjWaJLFuu6j9nhDeNa SfYwOKZFXNbCN0S93Dk/J0ZV+iPzSpBVl/iYvzNyzDu0Kg9P2n1zdrGclRPjZlRk 2qcQ5jSUkAis0iG7II0eEfy7Q0Sr+C8ss8MnLmNpQjdFmamPPe+7GVauIHWo8dZy 3Nb1pvTRlUy9OJF/WjA+nYeyjwKohutRArRAiH2bJW7U1ff0VmgMuZJYlU9eetXV jzMdy0vkjSn7sEQCZ1gYbYv1uEBI3JO1mPIG+iiNMpPF41rfSsFTh6gKQKKQEutf SdFalHqeQwHBGBxURNa4IzQULJGvqjn1Vkta/7fdcWDABpp7OT2pjipWpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWbQOMG5J+8V+09IZO+VhDfeZ/wMB8GA1UdIwQY MBaAFNvXyVE0i9LgnMr3b1e4OF8V30TkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84NTNjNzYtYTM5OC00MzVhLWJlNDEt N2QwYWM1MjgxNWE2LzEvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84NTNjNzYtYTM5OC00MzVhLWJlNDEtN2QwYWM1MjgxNWE2 LzEvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCxhGJq3 DGt20dh6EqioF4QGHTgJudeLCE1OZAkhc1d/IDHf8OLr0DekZDvKL5HMW+PlKiPF LfOt8qWoowvYcj4zSfPykVq3q4TSjlgiKDH/a3dBVabgvh+0N6uvHYqeanHoD/ip 69hEhTpmwyhLSaDiZAYdPPkQupXfzAobY0FYYzEyKD5ZOMZeZj03+SDKTqyF4api qphkiX1O/uWuMKSzyz46RmcmgUixfzw8T5pgtVZv7UfpB6jqN4NUEIAuZvMt+ZmV FQuNbXFxvO5gnvZm/jLFSIb8VD1iBMVt2x0klRay37EYkS5kfbyHx/LwnL2OM/7U egwdi5Ux3ammUQ== -----END CERTIFICATE-----Generated at Tue Jan 27 07:46:47 2026 by rpki-client