This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft File: DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft (raw, json) Hash identifier: qGq1RTg/g9LqpbJF9ktwa/AzyG9gLs7u5XOuHBmYf/o= Subject key identifier: 72:C8:18:D7:E0:D4:49:7C:E4:3E:79:C3:DB:E8:0B:D0:2D:7D:EF:A5 Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C Certificate issuer: /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c Certificate serial: 019BFFF934392320B2220A02BBF31C2A9808 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft Manifest number: 17F0 Signing time: Tue 27 Jan 2026 15:01:20 +0000 Manifest this update: Tue 27 Jan 2026 15:01:20 +0000 Manifest next update: Wed 28 Jan 2026 15:01:20 +0000 Files and hashes: 1: D32i6_dCWTSsyvln6Op_fVc7ifQ.roa (hash: Al7b3A0tyoRmZ6j5Fdgg5aD1e2Ddf8niF7ufLQSci6A=) 2: DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl (hash: HR21eZzJIrVPyW64uQayaJvxpYGuLON/Prnr4RJ6OwE=) 3: cRdmmZiNILryID4MaoZH-egP0Pc.roa (hash: Tc3P5pw52D848VbuoEwG61qEEaFgbEGdqefrzUmOWZA=) 4: dO_oeTKff3dNZT_GL6N0iMSDLeA.roa (hash: U9kjCpU+QQfnTA2jCeD/iAdC4QIXldj/AsRqVA98Jco=) 5: hKslTlGWTrYnNFRq7nm02w7iSks.roa (hash: hx/Lg8Qct01wevwfLicpLCIZWwNva1xX/icDKHDKOOo=) 6: qsPJeU-C_65tmjEWpGQYQUIEajo.roa (hash: 1cn7hAG7OagxW4P/nzGgq4cV1HKNDko3iBj1s+1Q88U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:f9:34:39:23:20:b2:22:0a:02:bb:f3:1c:2a:98:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c Validity Not Before: Jan 27 15:01:20 2026 GMT Not After : Jan 28 15:01:20 2026 GMT Subject: CN=72c818d7e0d4497ce43e79c3dbe80bd02d7defa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d8:9f:77:61:e2:d3:3c:33:41:13:94:11:bb: 97:01:7f:06:57:df:92:75:c1:71:c6:45:61:ed:14: 2c:19:c9:54:07:06:ae:63:bb:86:b0:93:ba:51:74: 1d:4f:32:5b:38:d6:0e:60:71:20:b4:6d:89:22:a0: 8d:b5:b6:83:f7:c1:d2:fa:65:5d:49:4b:1d:06:4b: 9b:b6:92:b0:3c:8a:2e:29:52:ac:c5:e9:89:8f:d5: 37:91:96:5a:83:71:0d:6b:8d:ce:01:b0:c2:4a:ed: 48:a5:8c:7d:d9:ef:32:2b:4c:a9:e6:e0:fc:91:fa: 66:6e:e7:ea:f6:f4:aa:05:14:9f:63:f7:98:26:b3: e1:3d:d8:1f:cb:df:54:0a:c4:37:b5:d7:0a:9e:cd: ae:53:5b:7b:7a:5a:30:27:7f:2c:3c:7d:e0:14:8a: ba:74:2a:7a:c4:2d:b1:95:c6:c5:b7:bb:33:f3:ee: 35:e4:2c:42:aa:b3:1f:9a:aa:9a:22:57:ae:40:7f: 29:1a:28:b7:21:cc:29:e8:1d:ca:13:9d:bd:85:8a: ab:ad:99:99:02:5c:e3:c1:0a:81:d9:eb:45:5b:c0: 48:63:4a:b6:3c:ec:cb:b9:33:0a:73:8b:4d:b6:f7: 2a:6f:60:87:51:66:b7:ce:b8:1f:d8:0b:37:34:bf: b0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C8:18:D7:E0:D4:49:7C:E4:3E:79:C3:DB:E8:0B:D0:2D:7D:EF:A5 X509v3 Authority Key Identifier: keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a7:75:b4:f9:b2:83:41:a8:a9:41:75:86:99:5f:2f:a8:1e: 38:bc:7f:3a:20:de:8d:c3:6b:49:99:de:20:6b:27:47:3f:7c: 6d:6f:ac:6a:8d:fe:e9:8c:3e:56:97:0d:55:83:d4:45:c8:46: 9d:bd:cd:d4:72:eb:26:2d:36:bf:98:40:8f:b4:7d:a9:27:a8: dc:04:ca:50:8f:1c:29:d2:e8:60:34:2c:1c:9a:2f:3d:52:72: 69:5b:ed:51:ed:6f:3f:36:b9:67:e0:cc:ba:1d:bd:98:da:60: 29:07:77:69:c4:00:49:44:7e:ab:2d:80:ae:33:c3:98:14:b7: 2d:55:39:06:18:a0:fc:f5:f5:23:0c:92:7d:dc:46:ca:ee:67: 92:22:1c:41:be:a0:6e:7a:ab:99:56:a0:d5:37:93:22:fc:cd: f5:87:5e:3c:26:45:8e:02:3b:d5:38:30:6d:9c:cc:24:90:24: f6:aa:22:2d:47:a2:53:39:50:fc:7f:42:73:ad:dd:58:24:5a: 88:a8:30:73:c2:f3:84:e4:91:23:3f:e1:c6:db:83:93:39:ec: 0a:ec:24:04:5d:28:8e:0c:87:40:b3:48:b3:b9:5c:3a:28:c2: a0:1b:49:d1:78:0d:0e:13:99:76:aa:bf:ef:e5:05:f9:ec:0e: 47:e4:d3:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/+TQ5IyCyIgoCu/McKpgIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMGIwZGNiNmFkMGNhODE2ZDJiZDIwNGUxM2YxZWFmMTEw NDI3NGMwHhcNMjYwMTI3MTUwMTIwWhcNMjYwMTI4MTUwMTIwWjAzMTEwLwYDVQQD Eyg3MmM4MThkN2UwZDQ0OTdjZTQzZTc5YzNkYmU4MGJkMDJkN2RlZmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNifd2Hi0zwzQROUEbuXAX8GV9+S dcFxxkVh7RQsGclUBwauY7uGsJO6UXQdTzJbONYOYHEgtG2JIqCNtbaD98HS+mVd SUsdBkubtpKwPIouKVKsxemJj9U3kZZag3ENa43OAbDCSu1IpYx92e8yK0yp5uD8 kfpmbufq9vSqBRSfY/eYJrPhPdgfy99UCsQ3tdcKns2uU1t7elowJ38sPH3gFIq6 dCp6xC2xlcbFt7sz8+415CxCqrMfmqqaIleuQH8pGii3Icwp6B3KE529hYqrrZmZ AlzjwQqB2etFW8BIY0q2POzLuTMKc4tNtvcqb2CHUWa3zrgf2As3NL+wtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLIGNfg1El85D55w9voC9Atfe+lMB8GA1UdIwQY MBaAFA4LDctq0MqBbSvSBOE/Hq8RBCdMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMt N2ZlMzk1MWE3MzViLzEvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMtN2ZlMzk1MWE3MzVi LzEvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6d1tPmy g0GoqUF1hplfL6geOLx/OiDejcNrSZneIGsnRz98bW+sao3+6Yw+VpcNVYPURchG nb3N1HLrJi02v5hAj7R9qSeo3ATKUI8cKdLoYDQsHJovPVJyaVvtUe1vPza5Z+DM uh29mNpgKQd3acQASUR+qy2ArjPDmBS3LVU5Bhig/PX1IwySfdxGyu5nkiIcQb6g bnqrmVag1TeTIvzN9YdePCZFjgI71TgwbZzMJJAk9qoiLUeiUzlQ/H9Cc63dWCRa iKgwc8LzhOSRIz/hxtuDkznsCuwkBF0ojgyHQLNIs7lcOijCoBtJ0XgNDhOZdqq/ 7+UF+ewOR+TTvw== -----END CERTIFICATE-----Generated at Tue Jan 27 17:12:19 2026 by rpki-client