This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json) Hash identifier: uK2nz/0gxMcnbwxygtUAiHw/iTFaVyyFpASY4ypYmzM= Subject key identifier: 4E:A9:4A:96:85:A2:57:6C:B3:3F:F9:7C:29:D9:B1:9A:72:39:6E:15 Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96 Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496 Certificate serial: 019BD1327A4BEB8D26E49421A657AD12A6AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft Manifest number: 17D8 Signing time: Sun 18 Jan 2026 13:01:44 +0000 Manifest this update: Sun 18 Jan 2026 13:01:44 +0000 Manifest next update: Mon 19 Jan 2026 13:01:44 +0000 Files and hashes: 1: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: o8ATN8mEXDUdKLv8U44SFJoCcq+RuaXvnutCjX8sK3g=) 2: qMa40C2bwbsuAhlKHVj7zBev3Sk.roa (hash: Q1yI4h86YGsQR3DwWZlfSBoYmM0cIR/AXm0wW8+aF5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 13:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d1:32:7a:4b:eb:8d:26:e4:94:21:a6:57:ad:12:a6:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496 Validity Not Before: Jan 18 13:01:44 2026 GMT Not After : Jan 19 13:01:44 2026 GMT Subject: CN=4ea94a9685a2576cb33ff97c29d9b19a72396e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d1:cc:06:c2:4c:03:92:17:f1:de:bf:10:66: 75:12:85:9c:1c:e9:97:e1:a5:4f:d0:ea:62:ff:53: 3c:ad:32:3b:33:38:56:cd:1b:a1:c8:86:d4:07:09: b0:32:1f:28:c0:2e:3d:84:a1:bf:b3:80:67:2f:34: 6a:2c:b5:86:41:47:48:b6:62:02:36:0d:f4:b3:08: 92:8d:34:ac:6c:e3:e1:3e:57:af:d4:3c:3a:84:e6: 81:41:23:e8:82:c9:4f:7d:c8:ab:57:f5:61:dd:6f: 65:d3:a2:48:06:49:01:3f:2f:75:81:bd:c6:48:0a: 2a:82:b5:05:86:26:28:06:bd:18:8b:63:75:77:dc: 82:fc:ba:f7:98:d7:52:9a:28:6c:01:2b:ef:4f:01: 9d:91:79:89:49:11:fe:a1:60:f2:3e:5e:a8:e1:fc: 95:bd:fd:72:49:4f:d2:0e:2e:ba:76:5e:90:e9:0e: 91:e3:af:d4:06:91:13:a3:80:19:7c:1a:08:6b:e3: 3a:ec:27:e1:f7:d7:e3:c5:88:7f:1a:29:c6:81:4e: f4:5d:af:02:33:d0:28:1a:20:19:93:40:cb:36:e5: 5a:90:38:ca:70:f1:06:34:46:2a:d0:81:4e:3a:6f: 2b:ad:d4:88:8d:ac:9f:aa:43:73:1d:19:ba:99:66: 3f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A9:4A:96:85:A2:57:6C:B3:3F:F9:7C:29:D9:B1:9A:72:39:6E:15 X509v3 Authority Key Identifier: keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:74:3b:48:38:81:57:32:71:65:80:74:86:d0:48:84:06:15: d3:e2:b6:a9:5e:63:28:c4:80:f1:04:99:ea:2a:73:9b:16:d1: 25:b3:aa:74:9e:59:f7:5e:4f:34:37:98:79:19:14:54:af:60: 3b:d3:58:ea:6f:c4:57:d7:d9:0f:d9:ab:af:f1:d7:2c:a9:4f: 39:0a:f8:91:02:35:53:7c:07:8e:39:23:41:98:0f:8c:98:3d: 99:8b:f9:57:66:38:85:2f:3c:d1:52:d3:82:7f:20:ad:4a:1b: bb:0e:fd:59:7a:04:06:0a:7c:41:d6:50:03:24:c6:4a:61:74: c6:8f:a9:e4:a9:83:42:9e:5d:e9:8a:54:df:dd:23:32:5a:71: 73:91:45:96:11:e4:b2:e0:a5:33:a1:3f:7e:23:08:84:8e:a7: 16:cd:19:13:a8:a8:b8:7b:e0:93:9f:88:d2:90:29:f7:e2:68: a5:0b:fa:37:53:d0:d3:7a:01:ac:a5:7d:15:aa:63:d9:3f:05: 7f:30:19:a2:4d:65:a1:4a:ef:42:6a:84:bd:37:5d:82:63:9f: ed:f5:38:d2:b2:d5:cb:62:6c:c6:ce:44:21:c3:9d:bb:25:b9: 16:65:9d:25:51:ab:77:45:39:8d:14:88:9a:56:53:1e:f7:2b: f5:27:a3:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvRMnpL640m5JQhpletEqarMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MTA3MjkyMGQ4YzlhMmI0MGViM2EwNDVmMWYyYTZlMzM0 YTQ0OTYwHhcNMjYwMTE4MTMwMTQ0WhcNMjYwMTE5MTMwMTQ0WjAzMTEwLwYDVQQD Eyg0ZWE5NGE5Njg1YTI1NzZjYjMzZmY5N2MyOWQ5YjE5YTcyMzk2ZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9HMBsJMA5IX8d6/EGZ1EoWcHOmX 4aVP0Opi/1M8rTI7MzhWzRuhyIbUBwmwMh8owC49hKG/s4BnLzRqLLWGQUdItmIC Ng30swiSjTSsbOPhPlev1Dw6hOaBQSPogslPfcirV/Vh3W9l06JIBkkBPy91gb3G SAoqgrUFhiYoBr0Yi2N1d9yC/Lr3mNdSmihsASvvTwGdkXmJSRH+oWDyPl6o4fyV vf1ySU/SDi66dl6Q6Q6R46/UBpETo4AZfBoIa+M67Cfh99fjxYh/GinGgU70Xa8C M9AoGiAZk0DLNuVakDjKcPEGNEYq0IFOOm8rrdSIjayfqkNzHRm6mWY/vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6pSpaFoldssz/5fCnZsZpyOW4VMB8GA1UdIwQY MBaAFHcQcpINjJorQOs6BF8fKm4zSkSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHhCeWtnMk1taXRBNnpvRVh4OHFiak5LUkpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC85ZWMxMzQtZjA0Zi00NDIzLThiZTUt N2Y1ZTE3NTlmODRlLzEvZHhCeWtnMk1taXRBNnpvRVh4OHFiak5LUkpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC85ZWMxMzQtZjA0Zi00NDIzLThiZTUtN2Y1ZTE3NTlmODRl LzEvZHhCeWtnMk1taXRBNnpvRVh4OHFiak5LUkpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3Q7SDiB VzJxZYB0htBIhAYV0+K2qV5jKMSA8QSZ6ipzmxbRJbOqdJ5Z915PNDeYeRkUVK9g O9NY6m/EV9fZD9mrr/HXLKlPOQr4kQI1U3wHjjkjQZgPjJg9mYv5V2Y4hS880VLT gn8grUobuw79WXoEBgp8QdZQAyTGSmF0xo+p5KmDQp5d6YpU390jMlpxc5FFlhHk suClM6E/fiMIhI6nFs0ZE6iouHvgk5+I0pAp9+JopQv6N1PQ03oBrKV9Fapj2T8F fzAZok1loUrvQmqEvTddgmOf7fU40rLVy2Jsxs5EIcOduyW5FmWdJVGrd0U5jRSI mlZTHvcr9Sej9Q== -----END CERTIFICATE-----Generated at Sun Jan 18 16:44:42 2026 by rpki-client