This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: j4MdrY5BeiR0pocxZeL0BbYh+7l2FQwOiLf1S5/ohhA= Subject key identifier: A0:2C:7B:EF:59:6E:0C:44:65:FE:E2:3A:9A:19:CD:7E:4B:22:9D:D0 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 019BFD2EC4143F6F3A1582063DD2872FE9E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 1059 Signing time: Tue 27 Jan 2026 02:00:58 +0000 Manifest this update: Tue 27 Jan 2026 02:00:58 +0000 Manifest next update: Wed 28 Jan 2026 02:00:58 +0000 Files and hashes: 1: 4aHbMfy3j-ECkrD4rvedcCjTB_0.roa (hash: qusttE+9ZpOBhcPrh6x5LDaTogCO5iBos5RhS/oM6AY=) 2: 5-xa1DwYQklowUOFsT1S-uTdWNs.roa (hash: L6ahwy7v3F/eJH7YLdiIkbI0hjgLlbmnqluQBda3pbM=) 3: 9oVvdEoztm2muhkwHTmAIiSboxY.roa (hash: xZjJjhfrzY5FzTi4sci1qrWURSjGM2JBzOOEdQWgB+0=) 4: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: CcfOyLZ4+E/1JdXCaTXimUR5mCACqREnFCK8AkL7LYA=) 5: DqwgEpy8tzQ8MT3YIzSTmMnsaoU.roa (hash: F0Z+Aiea4uLu6qp3gJMuctXX0e3YeSp0/r7/SyVg7oU=) 6: GLlV_QNfxAHgbPbOQuZSom8Go7k.roa (hash: 7Gk5aFbSltujIpc/l7EhPu0VuZTxlAcLmjwbJVWm0p8=) 7: LRsAkvslcwyvjR-GyMdM6597IZA.roa (hash: /5MkBlONah8XkH1G2dWhrVOK6eZR0nrPNy2NU1Yt4so=) 8: UOXbVXyzSsZqFmvvMWlFNgrUDWs.roa (hash: SwMKdG9PQtp/UmBy8238eDwxjrTfaf4LKchtiCe136w=) 9: XhXwZGz_0ot-Yipy5gjWlGapqJg.roa (hash: osMFJv9ESYs8+a8oe5L8opFDI8cvKk+g8mqi6wPX570=) 10: _lIz-ZhP2tOm-0Bb99DULlXTc50.roa (hash: 4dGEG45wVvQueTiwmqRhKVqr9rpL9b9WGKdRjggMgG4=) 11: c1WcScQ-iUvtqaFkrNNSIFe5J6Q.roa (hash: 9taVcBd6UWLT46HKsQQ8HZLq62dEzc2Av1/NrgPYxiw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:c4:14:3f:6f:3a:15:82:06:3d:d2:87:2f:e9:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Jan 27 02:00:58 2026 GMT Not After : Jan 28 02:00:58 2026 GMT Subject: CN=a02c7bef596e0c4465fee23a9a19cd7e4b229dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d2:a6:d9:c7:a0:ac:88:93:82:ae:38:28:3d: bb:b0:50:30:22:06:0b:61:f0:ee:7c:a3:ea:8f:9b: c4:0d:54:c7:09:c6:6c:b4:01:47:bb:f7:ee:e6:f0: 32:81:2f:f7:b4:6e:8a:8c:b8:9e:45:9f:f6:00:46: 44:0c:da:68:86:46:76:61:5b:b8:85:32:08:af:c3: fa:69:9c:66:6c:94:7d:76:9b:6b:e3:26:06:c2:99: e4:fb:d7:e9:24:b3:f2:0b:ed:8e:f5:3f:67:71:32: d5:5b:c7:67:ca:f0:9d:c3:a7:fd:02:1d:19:b9:64: fb:cb:9f:3b:c7:49:ec:d3:d4:a1:c8:2d:3c:8b:14: 36:b4:37:a3:0b:73:a8:1b:9d:8d:30:65:f8:8c:a0: 22:ad:b1:62:8b:c4:88:31:eb:fb:b3:8c:8c:40:4c: 89:09:ed:69:a7:c6:54:f2:21:4c:81:3e:97:ab:4a: 96:bd:8c:6f:a1:28:aa:b6:58:66:a9:9c:5b:90:75: ca:7d:c6:73:75:a1:1f:67:32:9a:69:60:e5:08:ba: 8e:33:8a:4a:e9:04:43:c7:f4:c1:55:aa:49:0e:97: c1:d3:9e:0f:b9:d8:13:b5:51:02:48:a7:a6:85:5b: 64:65:ff:29:f1:1c:dd:7c:b0:84:f2:59:cf:42:f9: b4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2C:7B:EF:59:6E:0C:44:65:FE:E2:3A:9A:19:CD:7E:4B:22:9D:D0 X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c0:13:d2:9f:6f:cc:e2:ac:2e:34:3b:84:da:22:12:ed:dc: 05:d2:2a:ae:30:84:63:ac:3f:20:53:e9:9c:c7:a9:15:d9:b0: 1f:08:5e:4b:9b:a6:0f:04:df:3f:35:3a:16:ca:1e:fc:cb:09: 62:51:45:f5:2c:32:42:bf:2b:6c:a8:00:f4:10:47:5c:8a:90: 1a:47:d0:26:ba:bc:87:9e:7e:1b:38:4e:6b:ec:ee:60:9f:c2: 52:fe:fa:88:aa:19:bc:c6:da:1c:a7:b1:c3:29:93:d5:68:f3: 21:d3:1b:c7:ce:a0:bc:58:a1:fe:e6:11:b3:9f:02:d0:12:4c: 9f:85:06:3a:cc:32:6b:b6:00:fa:a6:6d:d1:5f:31:e0:86:fb: d7:86:34:5d:9b:34:38:42:7d:fa:b4:3c:ee:a5:cb:b0:f0:2f: 20:3f:a8:b4:f0:9c:0e:ec:2e:24:30:95:0f:06:37:50:a8:77: 86:53:87:6f:33:c6:82:80:42:01:f2:44:61:61:f2:a7:d0:31: ce:97:61:d3:11:0c:17:24:f1:fc:e2:9e:5f:4a:a9:3f:53:da: fe:08:e7:bc:be:88:53:b7:0c:d1:b1:dd:bf:25:37:3c:7f:ea: fa:57:60:a2:0a:32:20:09:68:3d:aa:2a:67:2c:e8:df:fa:fd: 28:f1:8c:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LsQUP286FYIGPdKHL+njMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjYwMTI3MDIwMDU4WhcNMjYwMTI4MDIwMDU4WjAzMTEwLwYDVQQD EyhhMDJjN2JlZjU5NmUwYzQ0NjVmZWUyM2E5YTE5Y2Q3ZTRiMjI5ZGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNKm2cegrIiTgq44KD27sFAwIgYL YfDufKPqj5vEDVTHCcZstAFHu/fu5vAygS/3tG6KjLieRZ/2AEZEDNpohkZ2YVu4 hTIIr8P6aZxmbJR9dptr4yYGwpnk+9fpJLPyC+2O9T9ncTLVW8dnyvCdw6f9Ah0Z uWT7y587x0ns09ShyC08ixQ2tDejC3OoG52NMGX4jKAirbFii8SIMev7s4yMQEyJ Ce1pp8ZU8iFMgT6Xq0qWvYxvoSiqtlhmqZxbkHXKfcZzdaEfZzKaaWDlCLqOM4pK 6QRDx/TBVapJDpfB054PudgTtVECSKemhVtkZf8p8RzdfLCE8lnPQvm0EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAse+9ZbgxEZf7iOpoZzX5LIp3QMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8AT0p9v zOKsLjQ7hNoiEu3cBdIqrjCEY6w/IFPpnMepFdmwHwheS5umDwTfPzU6Fsoe/MsJ YlFF9SwyQr8rbKgA9BBHXIqQGkfQJrq8h55+GzhOa+zuYJ/CUv76iKoZvMbaHKex wymT1WjzIdMbx86gvFih/uYRs58C0BJMn4UGOswya7YA+qZt0V8x4Ib714Y0XZs0 OEJ9+rQ87qXLsPAvID+otPCcDuwuJDCVDwY3UKh3hlOHbzPGgoBCAfJEYWHyp9Ax zpdh0xEMFyTx/OKeX0qpP1Pa/gjnvL6IU7cM0bHdvyU3PH/q+ldgogoyIAloPaoq Zyzo3/r9KPGMrw== -----END CERTIFICATE-----Generated at Tue Jan 27 03:58:23 2026 by rpki-client