This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json) Hash identifier: Y/GpJNJ+o7SVFCDoVODulGxDr4869EOXdqt2/M+xeOc= Subject key identifier: CB:25:F7:9E:96:4D:5D:D8:0F:19:A8:D5:F0:86:00:20:6B:8A:14:DD Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06 Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06 Certificate serial: 019BCF7A41F86ECD85B922B839356F263796 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft Manifest number: 17DC Signing time: Sun 18 Jan 2026 05:00:54 +0000 Manifest this update: Sun 18 Jan 2026 05:00:54 +0000 Manifest next update: Mon 19 Jan 2026 05:00:54 +0000 Files and hashes: 1: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: 4yDYtWagUXal4P1fJDLDndt6ji3NRkVms7wR4bFDWSo=) 2: f-oFGYgAScvKIY1myYftcDiH90Y.roa (hash: jXYW4bNPX8ymp0HBTNVmMzodvWsb+eQz9bU87veKdFM=) 3: lBMdn2iQdHUL-cwEEQDm3tFBaok.roa (hash: 92N+I3r+uRw8V9HIiYjj1Tx/aQGHG9DB0so6vrEW//w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cf:7a:41:f8:6e:cd:85:b9:22:b8:39:35:6f:26:37:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06 Validity Not Before: Jan 18 05:00:54 2026 GMT Not After : Jan 19 05:00:54 2026 GMT Subject: CN=cb25f79e964d5dd80f19a8d5f08600206b8a14dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cb:61:5a:51:8c:2a:c3:59:50:f6:48:4b:c8: 9d:80:64:35:8c:89:26:fd:a7:9e:f7:f5:f9:1f:b4: b4:5a:24:5a:34:ca:10:9b:71:ba:d0:eb:df:8a:16: 03:89:eb:b9:3a:10:cf:cd:fe:1b:81:82:4c:bc:ba: 1d:45:a7:23:56:bf:f1:40:8e:c5:c1:1a:ee:64:a4: 84:12:35:cf:30:ff:50:4f:03:3e:01:36:e5:1c:68: ae:da:48:18:d7:e3:eb:01:26:be:0e:0d:c3:1a:6c: 87:47:c1:40:3a:ac:e9:06:a4:ad:95:3f:08:b1:a7: cc:78:3f:26:7c:61:b1:bb:8c:d4:0a:7c:28:17:1d: 6a:b4:cb:de:4e:f6:d4:02:e7:44:f8:42:f2:08:25: e0:70:22:b0:22:34:49:09:2d:6f:01:38:f5:bf:19: e3:ad:63:4f:45:b1:1e:0d:9d:25:a4:9c:2c:7e:5b: a3:2f:8a:8e:37:ac:27:ea:1c:78:a0:d7:e0:ad:1a: 56:e8:63:78:87:c1:2e:d2:80:26:6a:44:6b:a1:56: 29:c7:a5:0d:fa:74:6f:c3:85:56:da:83:fd:01:25: 1d:77:a3:6c:2f:14:4a:8a:a5:21:d5:88:63:9c:10: 0e:70:03:17:01:c3:05:66:bd:2d:48:f1:b2:e7:24: b0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:25:F7:9E:96:4D:5D:D8:0F:19:A8:D5:F0:86:00:20:6B:8A:14:DD X509v3 Authority Key Identifier: keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:1e:b5:84:82:9f:de:4e:53:87:34:62:26:31:3f:48:f0:bd: 19:4e:35:3f:db:13:fe:b4:2e:93:f9:6a:fc:b2:d4:b2:27:c8: 79:e2:2a:6a:a5:cf:1b:cd:b7:c8:9b:a2:cb:38:36:6e:93:c2: 8a:7b:80:09:e5:34:03:b9:67:6a:9a:f9:a8:bf:32:3d:1a:c2: 63:f6:b2:3b:a3:4c:47:d7:cb:87:bc:26:96:28:05:10:1d:6c: b3:59:7e:7f:95:71:ea:80:24:15:89:af:59:d6:c4:2f:3a:fd: 41:37:57:33:2c:90:92:ab:75:ba:36:a6:8b:be:f3:01:77:0b: 6e:eb:25:04:26:d1:03:e3:ab:8a:ca:97:3f:ae:26:58:43:9c: f8:18:8d:50:89:6b:09:78:a3:79:a3:6b:a8:71:41:33:d9:77: 34:af:42:2a:5b:3d:8f:c7:73:c9:d2:d2:7b:c7:f1:ea:22:8f: 87:2a:0a:27:c3:86:5e:5a:3a:65:96:c2:0e:f7:9c:3d:64:7a: 14:7d:01:d2:3e:ef:13:65:8a:1a:b4:0c:11:4d:5b:f3:f8:4d: 99:ec:6e:ad:65:74:fd:34:8a:81:0e:31:1d:db:5d:b2:8e:fa: b1:b9:70:50:50:e1:d6:bf:7e:50:47:25:36:cb:d9:e4:89:ac: 53:92:36:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvPekH4bs2FuSK4OTVvJjeWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YWViYzE1NGE1NmM4MzAyNWNiZDg2NDFhOWFjMzE1Y2I1 NTFjMDYwHhcNMjYwMTE4MDUwMDU0WhcNMjYwMTE5MDUwMDU0WjAzMTEwLwYDVQQD EyhjYjI1Zjc5ZTk2NGQ1ZGQ4MGYxOWE4ZDVmMDg2MDAyMDZiOGExNGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcthWlGMKsNZUPZIS8idgGQ1jIkm /aee9/X5H7S0WiRaNMoQm3G60OvfihYDieu5OhDPzf4bgYJMvLodRacjVr/xQI7F wRruZKSEEjXPMP9QTwM+ATblHGiu2kgY1+PrASa+Dg3DGmyHR8FAOqzpBqStlT8I safMeD8mfGGxu4zUCnwoFx1qtMveTvbUAudE+ELyCCXgcCKwIjRJCS1vATj1vxnj rWNPRbEeDZ0lpJwsflujL4qON6wn6hx4oNfgrRpW6GN4h8Eu0oAmakRroVYpx6UN +nRvw4VW2oP9ASUdd6NsLxRKiqUh1YhjnBAOcAMXAcMFZr0tSPGy5ySwfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsl956WTV3YDxmo1fCGACBrihTdMB8GA1UdIwQY MBaAFHSuvBVKVsgwJcvYZBqawxXLVRwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQt MDdhMWQ2NTU0OGJhLzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQtMDdhMWQ2NTU0OGJh LzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiR61hIKf 3k5ThzRiJjE/SPC9GU41P9sT/rQuk/lq/LLUsifIeeIqaqXPG823yJuiyzg2bpPC inuACeU0A7lnapr5qL8yPRrCY/ayO6NMR9fLh7wmligFEB1ss1l+f5Vx6oAkFYmv WdbELzr9QTdXMyyQkqt1ujami77zAXcLbuslBCbRA+OrisqXP64mWEOc+BiNUIlr CXijeaNrqHFBM9l3NK9CKls9j8dzydLSe8fx6iKPhyoKJ8OGXlo6ZZbCDvecPWR6 FH0B0j7vE2WKGrQMEU1b8/hNmexurWV0/TSKgQ4xHdtdso76sblwUFDh1r9+UEcl NsvZ5ImsU5I2rg== -----END CERTIFICATE-----Generated at Sun Jan 18 10:50:07 2026 by rpki-client