This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft File: d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json) Hash identifier: t5RaD2AmKw9hIQTOHkxoC+bJ7BNnoZRKUSmHCfuEauU= Subject key identifier: 7D:50:DF:CC:D0:0B:D2:82:EE:54:2F:21:DE:09:CF:35:31:B9:66:E4 Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1 Certificate issuer: /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1 Certificate serial: 019BFC8A93E93C8594EBC0566329CEA803CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft Manifest number: 0ED1 Signing time: Mon 26 Jan 2026 23:01:38 +0000 Manifest this update: Mon 26 Jan 2026 23:01:38 +0000 Manifest next update: Tue 27 Jan 2026 23:01:38 +0000 Files and hashes: 1: 1-x1SQoCge1oAxdF8NH1g432c8v4.roa (hash: gGNG1VzQDUnu5gmTgkEbwFhdDKx8kxbSdmHR7f+ftE8=) 2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: uSddIAB5SY8/pugVvAKVWey3DwZR6Uwn9qqh7NdFxhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:93:e9:3c:85:94:eb:c0:56:63:29:ce:a8:03:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1 Validity Not Before: Jan 26 23:01:38 2026 GMT Not After : Jan 27 23:01:38 2026 GMT Subject: CN=7d50dfccd00bd282ee542f21de09cf3531b966e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:96:f9:9a:86:8e:a3:0c:24:19:c1:7b:93:3f: d7:12:a4:2c:fb:14:df:df:bb:79:2a:65:b6:11:d7: 62:20:10:46:f9:f7:60:16:50:56:83:bb:34:f7:c7: 54:8c:7d:c3:a3:a3:b7:6c:5e:4d:99:1b:5b:60:3f: 89:06:de:c3:fc:45:b5:a9:8d:95:63:c8:de:a5:35: fe:fc:6b:96:73:f3:8c:ec:e4:13:8e:8d:53:8f:cb: a7:94:f3:7e:c4:ac:70:91:8c:b3:45:15:56:f9:44: be:dd:ca:e7:4a:78:31:70:d9:80:3f:39:4c:b6:e5: 93:cf:02:f7:94:5d:d6:a8:c2:28:5c:0a:45:41:22: c3:89:50:1d:c2:1e:45:9f:75:18:53:cb:7b:9e:6b: bb:8e:d9:93:b7:24:c0:f6:47:47:7a:ce:88:8c:e1: 02:62:ec:f9:58:9e:73:d3:43:fe:2b:7c:e3:df:1f: d6:1b:c4:3f:42:6c:19:95:40:f6:e2:53:5a:ae:e1: 41:44:89:89:96:63:2a:18:1c:56:92:75:eb:04:72: 86:98:41:9a:a6:e0:46:ee:c3:54:5d:59:13:89:39: ec:a8:bf:a0:d1:3c:86:3a:e2:9a:c0:35:c4:fd:cc: fd:92:4d:1c:cf:49:fc:37:52:3c:14:3d:3d:ed:fb: 6b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:50:DF:CC:D0:0B:D2:82:EE:54:2F:21:DE:09:CF:35:31:B9:66:E4 X509v3 Authority Key Identifier: keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:77:4c:54:f4:56:a4:45:3e:2d:1b:4d:fe:78:f2:4d:5c:72: b5:15:6a:3d:1d:2b:67:af:9f:b8:52:0a:5a:1a:21:bd:e5:87: 74:fd:17:29:0e:98:3e:a3:01:f9:6d:b4:9f:b1:6f:1e:6a:9b: c6:ca:42:8d:8b:db:2b:16:35:7e:80:62:2b:80:8e:53:e6:2b: 9d:33:b0:25:58:d5:62:e1:98:6d:3e:39:45:71:b8:dd:77:70: a1:78:6a:db:03:3e:c8:17:8b:42:ad:8c:e3:10:c1:22:2f:65: 92:89:91:62:bc:f2:67:dd:65:c8:38:f8:9f:76:80:56:27:32: db:33:84:b3:9e:c9:e2:3b:19:00:10:70:e2:88:ff:d3:26:e9: 93:bd:c3:73:33:c6:6f:55:d8:3a:da:7e:65:c5:97:23:56:c8: 69:e2:8f:b8:08:ed:2e:01:da:77:a0:25:6d:f4:c2:55:de:07: 7d:2b:7f:c2:3a:34:56:d5:9a:68:3b:03:ed:0d:c8:e1:05:25: be:e3:de:1f:f1:cb:40:66:20:d4:30:64:5e:22:e0:41:07:15: 5f:f4:61:e0:ef:94:ec:bf:15:93:56:66:78:2b:57:4f:e1:4a: e5:09:7d:4f:87:8c:c1:27:7e:e9:04:d0:45:d6:9c:1b:63:9b: ca:a0:f9:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ipPpPIWU68BWYynOqAPKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YTM1MGQ5ZmU0ZTlmOTBmZjNlODRlMmY5NjBjYjVkYzNk NmNlZTEwHhcNMjYwMTI2MjMwMTM4WhcNMjYwMTI3MjMwMTM4WjAzMTEwLwYDVQQD Eyg3ZDUwZGZjY2QwMGJkMjgyZWU1NDJmMjFkZTA5Y2YzNTMxYjk2NmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpb5moaOowwkGcF7kz/XEqQs+xTf 37t5KmW2EddiIBBG+fdgFlBWg7s098dUjH3Do6O3bF5NmRtbYD+JBt7D/EW1qY2V Y8jepTX+/GuWc/OM7OQTjo1Tj8unlPN+xKxwkYyzRRVW+US+3crnSngxcNmAPzlM tuWTzwL3lF3WqMIoXApFQSLDiVAdwh5Fn3UYU8t7nmu7jtmTtyTA9kdHes6IjOEC Yuz5WJ5z00P+K3zj3x/WG8Q/QmwZlUD24lNaruFBRImJlmMqGBxWknXrBHKGmEGa puBG7sNUXVkTiTnsqL+g0TyGOuKawDXE/cz9kk0cz0n8N1I8FD097ftr0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1Q38zQC9KC7lQvId4JzzUxuWbkMB8GA1UdIwQY MBaAFHejUNn+Tp+Q/z6E4vlgy13D1s7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84YmM0NGItNWQ1YS00YjU0LWFiOTEt ZGExYzUxNWU1YjI5LzEvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84YmM0NGItNWQ1YS00YjU0LWFiOTEtZGExYzUxNWU1YjI5 LzEvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABndMVPRW pEU+LRtN/njyTVxytRVqPR0rZ6+fuFIKWhohveWHdP0XKQ6YPqMB+W20n7FvHmqb xspCjYvbKxY1foBiK4COU+YrnTOwJVjVYuGYbT45RXG43XdwoXhq2wM+yBeLQq2M 4xDBIi9lkomRYrzyZ91lyDj4n3aAVicy2zOEs57J4jsZABBw4oj/0ybpk73DczPG b1XYOtp+ZcWXI1bIaeKPuAjtLgHad6AlbfTCVd4HfSt/wjo0VtWaaDsD7Q3I4QUl vuPeH/HLQGYg1DBkXiLgQQcVX/Rh4O+U7L8Vk1ZmeCtXT+FK5Ql9T4eMwSd+6QTQ RdacG2ObyqD5HA== -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:20 2026 by rpki-client