This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json) Hash identifier: QjdpdejAhP++xV4jk8VIinxMpXkaN+rPoxDOxDDJk74= Subject key identifier: 49:FC:BA:06:2F:14:55:F2:4B:C1:66:8D:A7:D4:D8:20:76:CE:6F:04 Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a Certificate serial: 019BCED53C89B90A7EF739FE49207BA97C73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft Manifest number: 083B Signing time: Sun 18 Jan 2026 02:00:39 +0000 Manifest this update: Sun 18 Jan 2026 02:00:39 +0000 Manifest next update: Mon 19 Jan 2026 02:00:39 +0000 Files and hashes: 1: DQYoTEX-x8cjYmvb3bOaTtlqK-o.roa (hash: kvQYDQBkZ3WehVJeMmEkmsNV2/eI8PigHmwQeG9g+Eg=) 2: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: C4IA0OczBz2SXV6dRhKi00KThjdWSgbPi79pSpY8qgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ce:d5:3c:89:b9:0a:7e:f7:39:fe:49:20:7b:a9:7c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a Validity Not Before: Jan 18 02:00:39 2026 GMT Not After : Jan 19 02:00:39 2026 GMT Subject: CN=49fcba062f1455f24bc1668da7d4d82076ce6f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ef:34:d7:af:9b:da:01:7a:a8:37:6e:77:3d: 2d:06:ed:5a:35:46:27:b8:08:a2:f6:8a:41:1f:ae: 2b:e8:99:d1:f6:f4:e3:92:ae:44:a5:64:05:ff:d5: 3b:11:b8:64:28:63:ab:ba:49:30:70:04:81:5f:b7: 95:14:00:22:c0:fb:a8:58:ac:4b:21:ce:1a:a7:67: 45:87:d2:19:23:f9:7c:9b:e7:5b:09:fe:92:4c:51: 03:7d:db:ef:af:dc:1b:0d:bf:f6:92:f8:4f:c3:cb: 75:80:d4:2e:ee:3d:4d:61:24:3a:ab:b1:39:2f:2c: d6:26:26:26:44:45:94:65:68:56:0e:3b:14:d0:8e: 09:64:c3:7a:f5:c1:49:65:cf:33:08:d5:00:22:e5: 45:72:4a:e4:5b:3e:b0:19:a1:3c:a7:1c:d6:ab:ca: 58:1c:70:79:d7:ef:3b:ad:23:fc:fa:72:9e:af:bc: e6:66:aa:a4:45:24:05:bd:f9:70:15:98:6e:98:a9: ff:8e:25:be:ee:df:a2:ce:dc:d3:38:d7:9e:0f:d5: 19:eb:80:63:e1:32:bd:04:cc:77:9d:0a:f4:5d:6a: 7e:6e:6d:81:92:8c:38:7e:66:1e:b2:84:f9:d5:0a: 25:ae:a6:89:e4:21:c3:7a:9c:38:13:2a:9d:d9:f1: a0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FC:BA:06:2F:14:55:F2:4B:C1:66:8D:A7:D4:D8:20:76:CE:6F:04 X509v3 Authority Key Identifier: keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:75:aa:b8:14:58:74:88:8d:50:51:79:bc:bc:2a:98:31:0a: 12:39:27:46:ee:14:a3:8c:18:42:73:72:6f:a1:7a:2a:f1:db: 57:24:db:71:0a:95:20:0b:50:22:30:8b:fa:37:9b:ab:f3:fc: 60:31:d2:bc:b5:72:b8:17:a9:43:e5:84:42:c0:96:d2:1a:4a: 4d:1e:3c:09:1e:37:ca:a3:ba:80:c9:21:a6:58:25:2d:7e:85: f5:78:2d:5b:93:83:67:26:0a:7a:1f:46:91:33:0d:74:b3:33: 16:01:0d:71:ce:58:96:c5:cf:91:f8:c5:e7:6f:77:f2:16:0a: 4e:72:22:75:90:c8:41:93:be:65:34:2c:ca:6b:d4:ae:a5:79: b0:43:6f:9e:d3:bf:ce:c3:86:da:96:bf:2c:be:fe:77:66:35: 06:96:be:f8:1e:7d:08:fe:7e:53:a1:a2:b4:42:fd:1e:47:74: 8b:0f:4f:da:13:77:ef:0a:8e:1e:2d:52:db:56:9a:86:56:52: d0:7f:6e:a7:c5:b4:c3:1e:43:dd:02:bc:83:fa:cc:8b:da:22: 01:1d:f2:c3:73:6b:f7:40:c6:58:09:d6:2d:91:0a:43:d8:6b: b4:82:03:19:c2:c5:ac:c9:fc:d4:d2:95:49:06:9d:bf:de:7d: 63:93:d3:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvO1TyJuQp+9zn+SSB7qXxzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjM2FiNTVkNTc1MDljYmZhZTc5OGJkNzFhYWEyM2IzNDQ0 ZDhlNWEwHhcNMjYwMTE4MDIwMDM5WhcNMjYwMTE5MDIwMDM5WjAzMTEwLwYDVQQD Eyg0OWZjYmEwNjJmMTQ1NWYyNGJjMTY2OGRhN2Q0ZDgyMDc2Y2U2ZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2u8016+b2gF6qDdudz0tBu1aNUYn uAii9opBH64r6JnR9vTjkq5EpWQF/9U7EbhkKGOrukkwcASBX7eVFAAiwPuoWKxL Ic4ap2dFh9IZI/l8m+dbCf6STFEDfdvvr9wbDb/2kvhPw8t1gNQu7j1NYSQ6q7E5 LyzWJiYmREWUZWhWDjsU0I4JZMN69cFJZc8zCNUAIuVFckrkWz6wGaE8pxzWq8pY HHB51+87rSP8+nKer7zmZqqkRSQFvflwFZhumKn/jiW+7t+iztzTONeeD9UZ64Bj 4TK9BMx3nQr0XWp+bm2Bkow4fmYesoT51QolrqaJ5CHDepw4Eyqd2fGgRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEn8ugYvFFXyS8FmjafU2CB2zm8EMB8GA1UdIwQY MBaAFPw6tV1XUJy/rnmL1xqqI7NETY5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYt MGM0NTIxOGU3OTgxLzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYtMGM0NTIxOGU3OTgx LzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdHWquBRY dIiNUFF5vLwqmDEKEjknRu4Uo4wYQnNyb6F6KvHbVyTbcQqVIAtQIjCL+jebq/P8 YDHSvLVyuBepQ+WEQsCW0hpKTR48CR43yqO6gMkhplglLX6F9XgtW5ODZyYKeh9G kTMNdLMzFgENcc5YlsXPkfjF52938hYKTnIidZDIQZO+ZTQsymvUrqV5sENvntO/ zsOG2pa/LL7+d2Y1Bpa++B59CP5+U6GitEL9Hkd0iw9P2hN37wqOHi1S21aahlZS 0H9up8W0wx5D3QK8g/rMi9oiAR3yw3Nr90DGWAnWLZEKQ9hrtIIDGcLFrMn81NKV SQadv959Y5PTsQ== -----END CERTIFICATE-----Generated at Sun Jan 18 10:09:59 2026 by rpki-client