This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: fXrpRcnHn8Muv8RTNeck6a0/zSrgYwyr+iABaLY853k= Subject key identifier: 7C:AC:31:DA:FE:0B:48:80:2F:CE:04:89:30:2C:33:0C:B6:63:C9:F7 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019BFCC12D842FA1D8256C75ADBE5018F0C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 0FD8 Signing time: Tue 27 Jan 2026 00:01:16 +0000 Manifest this update: Tue 27 Jan 2026 00:01:16 +0000 Manifest next update: Wed 28 Jan 2026 00:01:16 +0000 Files and hashes: 1: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 2: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 3: XAbgL3yvZgOKNAQjd1K9TP7pR8E.roa (hash: EjsNK7RSKyP5lQacqZqjj1ZJHHLWHYhMqYQnL5S1TtQ=) 4: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 5: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 6: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: x7rguDbY1rf2OSyh/tUQtlbgNKd9GYx/CXqPEBn0Cnw=) 7: fIT5zl6P_qwVoUuVicIP_N2r_Bg.roa (hash: B4tOow/C6D8tDzDLeNixxR/9H7fxk9DXc6/0ipYY1mI=) 8: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 9: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 10: xWkHq7OIQ8g_-84oE6K5BEv2GC4.roa (hash: Q2y+f16eTdxYLcVJIdtMlh5TQXlgsuWa+aMEDs13J+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:2d:84:2f:a1:d8:25:6c:75:ad:be:50:18:f0:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Jan 27 00:01:16 2026 GMT Not After : Jan 28 00:01:16 2026 GMT Subject: CN=7cac31dafe0b48802fce0489302c330cb663c9f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6a:2f:55:29:57:e3:d5:66:a5:61:00:51:51: b9:6f:05:16:ad:2b:c0:2f:4d:6c:cf:51:9e:78:13: c0:9b:81:1b:31:dd:a0:95:63:18:fe:eb:2a:61:e1: 1f:81:0c:9a:6e:c8:98:89:5e:ae:3e:31:77:25:85: 43:7a:8b:21:0e:d5:b0:f1:e2:12:af:c1:06:84:ee: f2:5e:59:47:7b:63:47:19:75:d4:82:89:e6:90:cb: 88:6c:6f:70:54:31:2b:38:a9:e3:5d:8b:e5:71:ca: fa:cc:b1:22:f6:91:50:cf:12:fd:93:5a:bc:fc:33: f2:57:f6:a0:12:49:bf:52:8c:fb:b7:8a:12:46:31: 37:cd:74:83:0b:63:fb:9c:a4:b3:b6:9b:0e:3c:ce: f4:ef:83:6b:c9:63:56:9f:3b:87:0b:41:bc:3f:fb: 0e:62:ac:78:4d:57:a3:87:9b:b7:62:f4:51:14:60: 28:4b:b7:f3:b2:b4:89:4e:f5:15:d1:37:2f:03:b7: 96:bc:14:36:eb:c5:77:87:9d:e4:26:af:5a:27:41: 1d:27:85:e3:8e:8d:ce:1d:b9:df:e9:51:55:ec:46: 3d:3c:2f:0f:a5:ff:1c:e8:7d:a0:36:ba:95:49:6e: 33:f9:0a:3f:89:0e:12:fa:ac:33:89:60:3c:a6:f6: 1c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AC:31:DA:FE:0B:48:80:2F:CE:04:89:30:2C:33:0C:B6:63:C9:F7 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:30:be:6f:ef:8f:20:13:d7:37:2f:0f:65:cc:19:fe:c3:08: 3f:cf:ba:ed:c0:7d:1c:6c:a3:82:73:04:6e:60:75:45:f0:06: a3:37:c4:e4:50:03:99:c8:40:97:0e:1a:c3:d3:5e:01:18:20: 84:bf:b4:26:cf:0f:0d:d8:d7:9a:b8:c8:23:34:11:68:33:94: 4f:96:a5:6e:e7:03:5f:fe:ef:e4:9b:df:97:f2:a7:2c:9c:e0: ea:a9:1b:ad:b2:36:10:03:51:03:25:1b:15:b4:bd:00:66:34: e9:37:19:fa:32:78:24:02:9e:6e:f0:23:ea:d2:8a:0c:9e:ca: 46:ba:2c:ad:c0:9f:32:18:a8:25:04:3c:9d:d0:5e:80:17:f5: a1:c4:6c:b4:cd:9c:28:3a:36:de:01:64:c0:c1:20:ea:6c:9e: a1:e3:08:16:8c:f0:19:59:0f:70:88:b1:1b:9c:89:c0:90:d2: b4:a3:b2:c3:d1:c6:ac:ac:dc:66:1c:b7:27:e5:07:45:38:f9: 17:52:38:b3:77:ef:6b:07:c1:ba:53:b7:da:57:b6:15:72:dd: 65:c1:5e:7e:b2:b7:cc:a1:4a:42:e1:34:44:b6:9d:ad:8e:d5: e6:5e:2a:53:5c:a4:4a:80:07:d3:d0:40:18:7c:87:6f:f3:29: 53:75:9c:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wS2EL6HYJWx1rb5QGPDCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwMTI3MDAwMTE2WhcNMjYwMTI4MDAwMTE2WjAzMTEwLwYDVQQD Eyg3Y2FjMzFkYWZlMGI0ODgwMmZjZTA0ODkzMDJjMzMwY2I2NjNjOWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmovVSlX49VmpWEAUVG5bwUWrSvA L01sz1GeeBPAm4EbMd2glWMY/usqYeEfgQyabsiYiV6uPjF3JYVDeoshDtWw8eIS r8EGhO7yXllHe2NHGXXUgonmkMuIbG9wVDErOKnjXYvlccr6zLEi9pFQzxL9k1q8 /DPyV/agEkm/Uoz7t4oSRjE3zXSDC2P7nKSztpsOPM7074NryWNWnzuHC0G8P/sO Yqx4TVejh5u3YvRRFGAoS7fzsrSJTvUV0TcvA7eWvBQ268V3h53kJq9aJ0EdJ4Xj jo3OHbnf6VFV7EY9PC8Ppf8c6H2gNrqVSW4z+Qo/iQ4S+qwziWA8pvYcFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHysMdr+C0iAL84EiTAsMwy2Y8n3MB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDC+b++P IBPXNy8PZcwZ/sMIP8+67cB9HGyjgnMEbmB1RfAGozfE5FADmchAlw4aw9NeARgg hL+0Js8PDdjXmrjIIzQRaDOUT5albucDX/7v5Jvfl/KnLJzg6qkbrbI2EANRAyUb FbS9AGY06TcZ+jJ4JAKebvAj6tKKDJ7KRrosrcCfMhioJQQ8ndBegBf1ocRstM2c KDo23gFkwMEg6myeoeMIFozwGVkPcIixG5yJwJDStKOyw9HGrKzcZhy3J+UHRTj5 F1I4s3fvawfBulO32le2FXLdZcFefrK3zKFKQuE0RLadrY7V5l4qU1ykSoAH09BA GHyHb/MpU3Wcpw== -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:15 2026 by rpki-client