This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json) Hash identifier: PiEEkLc0CpOrZTqOjNiWcWS1PJj7keR6/RNiIziX9IU= Subject key identifier: D7:24:1D:87:60:3F:64:41:E3:89:00:47:7D:65:18:50:1A:29:95:24 Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92 Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992 Certificate serial: 019BF46284711F34FABDD986ED77E7DDA42D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 09:00:55 +0000 Manifest this update: Sun 25 Jan 2026 09:00:55 +0000 Manifest next update: Mon 26 Jan 2026 09:00:55 +0000 Files and hashes: 1: BzyRKVh8G6MxV92pq1WYXw5su3Y.asa (hash: 3hX1G/8KfCcJykl9PaVXJ9wMH1P2QICFRRtGllgYDUo=) 2: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: zSQ8+QBB8K/oTPzOK8rznnYN8N6lOC2zmc1rBJ9/1ag=) 3: yV3n7Of-XfxujJs_oZpOk9T5zxc.roa (hash: RWU+lLoWMG+Uf+PGBYW1EPxQGP3cMIviVCgLyu7si9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:84:71:1f:34:fa:bd:d9:86:ed:77:e7:dd:a4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992 Validity Not Before: Jan 25 09:00:55 2026 GMT Not After : Jan 26 09:00:55 2026 GMT Subject: CN=d7241d87603f6441e38900477d6518501a299524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5c:fb:7c:7b:9e:2d:f3:87:2e:37:7d:b0:3d: e7:9f:1b:12:cf:f7:02:47:33:6d:23:ed:00:ca:d7: 3d:20:0f:9e:20:e8:ea:73:16:14:59:3c:17:cd:3b: 0f:86:99:e9:7e:ee:48:fd:8f:c2:b3:c2:fa:b8:21: 1f:05:dd:fa:3f:ba:70:9e:9c:91:8d:75:17:ae:a7: 1b:ff:c6:a9:20:8b:b9:bf:69:7f:c9:07:c3:e1:5a: a8:a6:5b:89:63:b4:ac:b7:31:55:2f:27:8c:d9:d1: 38:19:c5:4f:cb:9c:fe:6e:2f:61:15:06:f3:37:9d: db:b7:33:37:9d:3a:7e:d1:cf:71:d4:ec:39:3f:8d: 34:05:b5:a0:9e:82:16:21:95:f0:60:e4:e5:fe:3e: eb:39:9c:9a:71:b4:e1:54:e6:51:ee:4d:75:f2:e5: 62:02:83:03:36:ab:89:80:d5:e2:63:b8:42:d2:03: c0:d8:11:66:89:16:23:56:5c:a4:95:e0:38:76:5e: 15:87:c6:a4:ea:6c:86:8f:5f:35:20:d6:fd:aa:77: cf:25:dc:f5:a9:7a:7d:23:d8:d6:ad:f9:01:6a:2c: fe:90:dd:ff:f2:5f:d1:67:b2:df:72:cd:cb:00:26: 9e:1f:f0:0a:7c:a0:f8:fb:13:c1:dc:e4:ec:2d:3e: 3b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:24:1D:87:60:3F:64:41:E3:89:00:47:7D:65:18:50:1A:29:95:24 X509v3 Authority Key Identifier: keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:6b:84:f2:33:bf:97:d0:c4:ab:15:9b:8e:8b:d0:d5:2d:18: a1:67:e6:16:b4:45:43:e2:b4:20:6f:62:b2:5f:16:e4:c4:75: fc:4e:45:c6:30:4d:7b:a6:a3:3f:8a:98:ae:93:68:c0:b8:e4: 5a:85:66:f3:40:14:6e:f0:c5:29:2b:57:8b:5c:ca:94:53:e9: 8e:d2:46:e4:8b:dd:f0:ab:b3:73:49:0a:bf:3b:05:fd:69:ad: 3e:86:0d:7a:7f:55:b5:6c:26:03:78:1e:2e:bc:16:28:43:6a: 79:40:b6:91:d9:f9:0c:83:84:87:3f:9f:07:b4:2d:60:86:b7: 5e:05:df:52:f0:55:94:e1:36:16:32:98:b4:a3:8b:ee:b7:f8: 16:1b:7f:87:a0:a0:12:ac:c7:f7:c8:67:a5:07:ad:4f:c1:9e: 25:ea:37:43:d4:34:c4:a6:8a:56:4f:6f:8d:72:cc:9d:16:ee: f0:be:eb:99:05:b8:a4:c4:0c:36:e4:03:c2:c3:d8:c7:60:fb: 58:a6:11:14:b8:32:e6:87:74:af:99:c4:1b:06:7d:27:41:73: 27:2c:c1:34:6c:c4:d4:29:28:3e:12:e2:07:86:35:0f:df:0b: 38:bf:97:3e:b2:12:ed:8e:a9:fb:9f:32:0e:01:88:6b:38:25: e8:a0:d2:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YoRxHzT6vdmG7Xfn3aQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NTA4MTBmMTNkZjhkOTAxOWYxNTdjMzZmYmQwZjZkYjk4 NjI5OTIwHhcNMjYwMTI1MDkwMDU1WhcNMjYwMTI2MDkwMDU1WjAzMTEwLwYDVQQD EyhkNzI0MWQ4NzYwM2Y2NDQxZTM4OTAwNDc3ZDY1MTg1MDFhMjk5NTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFz7fHueLfOHLjd9sD3nnxsSz/cC RzNtI+0Aytc9IA+eIOjqcxYUWTwXzTsPhpnpfu5I/Y/Cs8L6uCEfBd36P7pwnpyR jXUXrqcb/8apIIu5v2l/yQfD4VqopluJY7SstzFVLyeM2dE4GcVPy5z+bi9hFQbz N53btzM3nTp+0c9x1Ow5P400BbWgnoIWIZXwYOTl/j7rOZyacbThVOZR7k118uVi AoMDNquJgNXiY7hC0gPA2BFmiRYjVlykleA4dl4Vh8ak6myGj181INb9qnfPJdz1 qXp9I9jWrfkBaiz+kN3/8l/RZ7Lfcs3LACaeH/AKfKD4+xPB3OTsLT47mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNckHYdgP2RB44kAR31lGFAaKZUkMB8GA1UdIwQY MBaAFHRQgQ8T342QGfFXw2+9D225himSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUt OGYyMTVjMDlhZTcyLzEvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUtOGYyMTVjMDlhZTcy LzEvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGuE8jO/ l9DEqxWbjovQ1S0YoWfmFrRFQ+K0IG9isl8W5MR1/E5FxjBNe6ajP4qYrpNowLjk WoVm80AUbvDFKStXi1zKlFPpjtJG5Ivd8Kuzc0kKvzsF/WmtPoYNen9VtWwmA3ge LrwWKENqeUC2kdn5DIOEhz+fB7QtYIa3XgXfUvBVlOE2FjKYtKOL7rf4Fht/h6Cg EqzH98hnpQetT8GeJeo3Q9Q0xKaKVk9vjXLMnRbu8L7rmQW4pMQMNuQDwsPYx2D7 WKYRFLgy5od0r5nEGwZ9J0FzJyzBNGzE1CkoPhLiB4Y1D98LOL+XPrIS7Y6p+58y DgGIazgl6KDS5g== -----END CERTIFICATE-----Generated at Sun Jan 25 12:08:30 2026 by rpki-client