This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json) Hash identifier: XnufNfF1BI9g4YJUg0zQwsYy0Eifb08Esitf6LRnlrQ= Subject key identifier: 64:43:0F:24:C3:44:E0:36:7C:15:03:3E:85:D4:52:63:58:25:93:57 Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92 Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992 Certificate serial: 019C1CF0C6D8D9AD2D0DB295912E9BA9D974 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft Manifest number: 17FE Signing time: Mon 02 Feb 2026 06:01:07 +0000 Manifest this update: Mon 02 Feb 2026 06:01:07 +0000 Manifest next update: Tue 03 Feb 2026 06:01:07 +0000 Files and hashes: 1: BzyRKVh8G6MxV92pq1WYXw5su3Y.asa (hash: 3hX1G/8KfCcJykl9PaVXJ9wMH1P2QICFRRtGllgYDUo=) 2: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: KAP9qvY+ULbrFMDHaE5qEy23xX0TF4cIVdNZAbXQfro=) 3: yV3n7Of-XfxujJs_oZpOk9T5zxc.roa (hash: RWU+lLoWMG+Uf+PGBYW1EPxQGP3cMIviVCgLyu7si9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:f0:c6:d8:d9:ad:2d:0d:b2:95:91:2e:9b:a9:d9:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992 Validity Not Before: Feb 2 06:01:07 2026 GMT Not After : Feb 3 06:01:07 2026 GMT Subject: CN=64430f24c344e0367c15033e85d4526358259357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b5:c7:e1:ca:a5:eb:b7:d0:ca:9d:da:98:a4: ed:cc:be:fb:ca:98:19:c2:5e:46:7c:11:8a:7b:0a: 2b:9a:92:c0:1c:78:c3:cd:f7:01:21:ba:b7:01:7f: 9e:a3:cf:80:f1:d0:96:28:a2:64:50:e7:a5:64:f7: f0:f7:a3:c1:b2:cb:11:a6:ff:05:37:33:a2:04:d4: 5c:6f:d5:f4:dd:a9:70:3f:36:e3:18:38:b5:6d:d8: 14:50:1c:de:1f:31:d9:c0:b6:07:05:50:b2:a5:39: 68:7c:75:f9:a6:3d:2a:70:c7:82:99:e5:da:7a:6f: f7:9a:94:94:fb:de:12:ea:d5:01:d6:8b:0b:6c:67: c3:e5:1c:25:b0:f2:31:8f:ca:b5:0b:28:dc:f7:65: 0e:fb:0e:58:89:cb:24:8d:07:04:94:9e:7d:f4:d3: 64:95:86:65:b0:33:c2:24:ae:73:1e:78:96:89:73: 03:20:ee:da:ee:72:d5:f6:66:2b:29:b8:e1:56:ed: d7:9f:86:11:21:7f:90:cc:47:b0:c6:cf:f5:a7:94: 2d:a2:8d:5f:bb:7a:9b:b1:f4:ca:0d:b8:ee:ec:e1: 02:10:a6:3e:f4:b1:ab:6c:8f:9b:76:9d:69:ef:0f: 2d:71:3f:fb:71:db:db:3e:c7:44:e5:5b:48:29:be: 88:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:43:0F:24:C3:44:E0:36:7C:15:03:3E:85:D4:52:63:58:25:93:57 X509v3 Authority Key Identifier: keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:68:02:4f:8d:ce:74:73:f5:cb:e0:35:33:b5:b3:5e:35:29: 3c:d4:92:13:f2:11:6d:fc:f2:fc:dc:1c:24:04:b8:ec:36:e6: 17:df:c7:df:36:b8:9e:25:f1:fd:f7:fb:09:5e:1b:13:a2:14: 08:d3:82:18:23:97:56:41:88:21:e4:30:06:3b:67:b6:a7:20: 58:b0:9d:d5:76:1d:e1:89:de:3f:d1:44:5d:8c:c9:92:83:05: 7f:29:66:31:0a:ad:b5:71:75:13:76:6d:b5:b4:b5:46:7e:63: bf:22:00:65:d8:ce:57:95:43:a9:06:ac:65:0f:43:3d:c5:69: 8d:a0:06:b6:56:44:c5:ae:60:c0:6d:35:5b:68:e1:85:0b:21: 01:53:82:90:51:0a:c3:81:f2:59:f5:f5:42:d8:b4:27:a6:2e: c6:09:4d:7b:01:33:d3:c2:44:32:bb:36:bf:44:cd:4e:57:84: 72:c5:d4:c5:8d:97:2f:a7:bc:e7:3d:ae:5a:eb:29:e0:7d:5d: a2:85:3b:a7:5f:b1:51:32:02:b9:3d:1f:ed:9a:d1:ee:21:15: 84:d8:da:6a:92:b8:ca:a7:13:f0:44:cc:e2:1e:58:ba:d9:5c: b2:74:ca:fc:71:12:e6:cc:7e:c8:4d:2d:d2:75:33:b6:dd:5e: 8b:a3:87:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwc8MbY2a0tDbKVkS6bqdl0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NTA4MTBmMTNkZjhkOTAxOWYxNTdjMzZmYmQwZjZkYjk4 NjI5OTIwHhcNMjYwMjAyMDYwMTA3WhcNMjYwMjAzMDYwMTA3WjAzMTEwLwYDVQQD Eyg2NDQzMGYyNGMzNDRlMDM2N2MxNTAzM2U4NWQ0NTI2MzU4MjU5MzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7XH4cql67fQyp3amKTtzL77ypgZ wl5GfBGKewormpLAHHjDzfcBIbq3AX+eo8+A8dCWKKJkUOelZPfw96PBsssRpv8F NzOiBNRcb9X03alwPzbjGDi1bdgUUBzeHzHZwLYHBVCypTlofHX5pj0qcMeCmeXa em/3mpSU+94S6tUB1osLbGfD5RwlsPIxj8q1Cyjc92UO+w5YicskjQcElJ599NNk lYZlsDPCJK5zHniWiXMDIO7a7nLV9mYrKbjhVu3Xn4YRIX+QzEewxs/1p5Qtoo1f u3qbsfTKDbju7OECEKY+9LGrbI+bdp1p7w8tcT/7cdvbPsdE5VtIKb6IDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRDDyTDROA2fBUDPoXUUmNYJZNXMB8GA1UdIwQY MBaAFHRQgQ8T342QGfFXw2+9D225himSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUt OGYyMTVjMDlhZTcyLzEvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUtOGYyMTVjMDlhZTcy LzEvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGgCT43O dHP1y+A1M7WzXjUpPNSSE/IRbfzy/NwcJAS47DbmF9/H3za4niXx/ff7CV4bE6IU CNOCGCOXVkGIIeQwBjtntqcgWLCd1XYd4YneP9FEXYzJkoMFfylmMQqttXF1E3Zt tbS1Rn5jvyIAZdjOV5VDqQasZQ9DPcVpjaAGtlZExa5gwG01W2jhhQshAVOCkFEK w4HyWfX1Qti0J6YuxglNewEz08JEMrs2v0TNTleEcsXUxY2XL6e85z2uWusp4H1d ooU7p1+xUTICuT0f7ZrR7iEVhNjaapK4yqcT8ETM4h5YutlcsnTK/HES5sx+yE0t 0nUztt1ei6OHFw== -----END CERTIFICATE-----Generated at Mon Feb 2 09:37:16 2026 by rpki-client