This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft File: dEXd7t-9ctMT6e6MzuroQDzDQUY.mft (raw, json) Hash identifier: FEmn8ooDVR0RXOzRQ/Zfcy76VfkAYgCzkYEmYLepd3c= Subject key identifier: 19:6B:78:9E:44:37:2F:AF:50:15:D7:4D:D1:02:9A:96:86:A9:04:54 Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46 Certificate issuer: /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146 Certificate serial: 019BA5356A9453172FFFC7319A28CA57A914 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft Manifest number: 17C4 Signing time: Sat 10 Jan 2026 00:01:39 +0000 Manifest this update: Sat 10 Jan 2026 00:01:39 +0000 Manifest next update: Sun 11 Jan 2026 00:01:39 +0000 Files and hashes: 1: J23raJoXXEduKZIZrRPiLi86VnA.roa (hash: v/0bTkNC6NTSIrnkHUjoMjqy5YU4u8PD1ywR+lNsXIw=) 2: M9XPPIauYu8vbc2Ub3NT2ITQt40.roa (hash: cI1UxjgAX2tnU9TBtap9O6a2kSTgffH3bwWkwVoWftk=) 3: QI0m8yxwMxD5ywSxfRkbyb2qPcE.roa (hash: 8djDX4kGY6Wd0AiK2DyOXGmoVTCo33Wju0Bfsfmfzlw=) 4: dEXd7t-9ctMT6e6MzuroQDzDQUY.crl (hash: BqkCaSd7vvDPWfChjgvvAqLgQxyQdTCwNDZQIARk7/o=) 5: nP3EGicDZfiR5ZgckruxBJyoECY.roa (hash: BB5Uj3DY8cxr4Rb47wF34MrssQh6rDw+XyqbJxAmiXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a5:35:6a:94:53:17:2f:ff:c7:31:9a:28:ca:57:a9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146 Validity Not Before: Jan 10 00:01:39 2026 GMT Not After : Jan 11 00:01:39 2026 GMT Subject: CN=196b789e44372faf5015d74dd1029a9686a90454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:33:90:b7:75:56:5d:db:c3:cc:5e:85:1a:81: 0c:f8:25:f2:24:47:71:5b:e7:87:d2:ad:4a:32:98: 91:07:92:09:e7:02:6f:b1:9f:a7:51:ea:f0:d1:db: 31:91:95:9e:27:fa:b6:37:67:34:97:98:36:77:72: 93:05:99:73:91:aa:a4:dc:91:21:87:1b:8f:2c:ff: 4b:df:91:ff:d3:e9:08:7d:68:c5:6b:77:09:c4:c1: 09:91:cc:42:e6:ff:15:60:a6:3d:2f:65:fa:6f:dc: d7:0c:96:74:8a:91:83:64:b7:9f:de:c6:51:fd:7c: f3:36:b8:e4:b1:7f:57:f6:d5:f6:10:0f:c5:80:39: 1e:1b:64:2f:3a:b3:95:ed:92:dc:d9:99:cd:81:54: a3:ef:66:80:6f:98:de:20:c9:39:cc:6f:b0:60:f0: 35:0b:07:d4:65:83:28:44:01:88:c3:97:e0:73:4f: 73:c0:e4:f7:3e:68:89:9c:e1:15:88:83:7d:2a:fd: 66:1b:76:50:d7:73:3c:ca:2a:56:51:3e:69:47:77: 9f:51:f2:23:4c:1b:99:89:1a:60:d2:78:dd:2d:92: 22:d5:85:60:57:32:47:17:ef:4c:ab:3d:21:ec:8e: 57:b3:04:14:31:d6:73:ff:67:da:74:85:1e:a8:37: 52:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:6B:78:9E:44:37:2F:AF:50:15:D7:4D:D1:02:9A:96:86:A9:04:54 X509v3 Authority Key Identifier: keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:eb:cd:1c:a3:6d:8c:f4:13:21:bd:a0:f6:0b:48:4f:49:91: b3:ab:35:5c:d4:aa:aa:52:0f:3c:4c:71:42:1f:da:10:7b:0e: 7b:d9:c0:f1:56:20:fe:24:a7:b2:d2:f0:94:ec:75:5e:3a:51: b9:f4:73:da:21:6b:0a:b5:c7:9d:24:a8:ec:b1:a3:50:68:95: d4:9e:49:b7:35:96:86:eb:f5:9d:9d:03:cb:8b:65:c7:c5:a5: 2b:c3:24:04:01:90:ac:d9:68:cf:20:bd:41:41:b9:60:fe:ef: d9:81:63:84:24:80:37:a1:74:a0:af:46:60:3a:d2:25:c5:75: 99:26:75:b5:f4:89:d7:c5:e4:73:ab:0f:0e:27:40:a3:c0:9d: 7d:2d:f5:15:e3:ce:e7:d5:85:63:5c:9d:c1:44:50:f9:a9:d6: 4d:c5:84:2a:50:d4:9a:c0:06:fd:5d:c7:8e:5d:6a:b4:35:65: e5:81:7d:c1:4b:dc:c9:b1:27:a2:43:d1:ba:82:2d:a3:2d:53: 4e:63:88:46:9a:cf:63:f9:d3:b7:97:9b:21:0a:f1:74:aa:9b: 10:93:1a:80:25:e4:b6:b4:06:40:98:b4:d5:6c:84:9b:f3:f0: 96:fa:db:5a:ad:dc:2b:2c:09:ba:d6:f3:2d:60:19:89:f8:7d: 01:09:f9:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZulNWqUUxcv/8cxmijKV6kUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NDVkZGVlZGZiZDcyZDMxM2U5ZWU4Y2NlZWFlODQwM2Nj MzQxNDYwHhcNMjYwMTEwMDAwMTM5WhcNMjYwMTExMDAwMTM5WjAzMTEwLwYDVQQD EygxOTZiNzg5ZTQ0MzcyZmFmNTAxNWQ3NGRkMTAyOWE5Njg2YTkwNDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijOQt3VWXdvDzF6FGoEM+CXyJEdx W+eH0q1KMpiRB5IJ5wJvsZ+nUerw0dsxkZWeJ/q2N2c0l5g2d3KTBZlzkaqk3JEh hxuPLP9L35H/0+kIfWjFa3cJxMEJkcxC5v8VYKY9L2X6b9zXDJZ0ipGDZLef3sZR /XzzNrjksX9X9tX2EA/FgDkeG2QvOrOV7ZLc2ZnNgVSj72aAb5jeIMk5zG+wYPA1 CwfUZYMoRAGIw5fgc09zwOT3PmiJnOEViIN9Kv1mG3ZQ13M8yipWUT5pR3efUfIj TBuZiRpg0njdLZIi1YVgVzJHF+9Mqz0h7I5XswQUMdZz/2fadIUeqDdSSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlreJ5ENy+vUBXXTdECmpaGqQRUMB8GA1UdIwQY MBaAFHRF3e7fvXLTE+nujM7q6EA8w0FGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMt NmNhMzQwZmE3NDkzLzEvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMtNmNhMzQwZmE3NDkz LzEvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuvNHKNt jPQTIb2g9gtIT0mRs6s1XNSqqlIPPExxQh/aEHsOe9nA8VYg/iSnstLwlOx1XjpR ufRz2iFrCrXHnSSo7LGjUGiV1J5JtzWWhuv1nZ0Dy4tlx8WlK8MkBAGQrNlozyC9 QUG5YP7v2YFjhCSAN6F0oK9GYDrSJcV1mSZ1tfSJ18Xkc6sPDidAo8CdfS31FePO 59WFY1ydwURQ+anWTcWEKlDUmsAG/V3Hjl1qtDVl5YF9wUvcybEnokPRuoItoy1T TmOIRprPY/nTt5ebIQrxdKqbEJMagCXktrQGQJi01WyEm/PwlvrbWq3cKywJutbz LWAZifh9AQn5KQ== -----END CERTIFICATE-----Generated at Sat Jan 10 08:56:09 2026 by rpki-client