This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft File: Dxd9Rq5RS92RniRMevdK337bqNU.mft (raw, json) Hash identifier: 0Iyt52cyAjDIuJ+CEEy1/ZGd2GWYAaxCzxlEaT8lccY= Subject key identifier: F7:C0:C2:09:C8:B4:09:5A:4E:E4:C8:9B:CC:F8:EE:C9:EC:E2:97:65 Authority key identifier: 0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5 Certificate issuer: /CN=0f177d46ae514bdd919e244c7af74adf7edba8d5 Certificate serial: 019BFBAEDEA0FFB57CEAB99FEA32E3CBF0EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft Manifest number: 03 Signing time: Mon 26 Jan 2026 19:01:39 +0000 Manifest this update: Mon 26 Jan 2026 19:01:39 +0000 Manifest next update: Tue 27 Jan 2026 19:01:39 +0000 Files and hashes: 1: 25aFLsrtr-3cg85dYuCtUtJ12DI.roa (hash: Q6BbhiSVhBcdb9sUM5J8K87QWD5MUDWEKTLkdgJwJhY=) 2: Dxd9Rq5RS92RniRMevdK337bqNU.crl (hash: DKExk64bQgOF7/Q7iDdinf2ZUm6OZIHG18NMbKRn+Mo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:de:a0:ff:b5:7c:ea:b9:9f:ea:32:e3:cb:f0:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f177d46ae514bdd919e244c7af74adf7edba8d5 Validity Not Before: Jan 26 19:01:39 2026 GMT Not After : Jan 27 19:01:39 2026 GMT Subject: CN=f7c0c209c8b4095a4ee4c89bccf8eec9ece29765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:88:bd:2d:9b:a2:3b:92:2c:77:41:9a:02:8e: 83:dd:13:6d:3f:10:75:73:f1:a1:2b:8f:d2:b5:c6: 38:94:42:f4:86:9d:64:fe:5c:47:26:98:53:dd:b6: a3:ea:8d:9e:a0:83:61:1d:fc:81:be:7b:4c:b8:16: ae:1b:05:67:ea:b8:4d:10:74:d7:e8:05:5a:a1:9f: cb:00:5c:c0:a3:0d:60:e3:d7:ce:84:16:06:75:aa: 0e:65:e3:60:f3:8c:95:3f:39:07:4d:3f:07:f9:6e: 6b:8d:b2:f0:23:c4:41:4f:08:eb:99:35:2e:d3:de: 85:2c:b1:6e:7d:36:47:38:ca:a7:10:81:15:c8:c5: b9:5e:c6:a5:12:29:4b:cb:32:92:b7:34:e2:c1:69: 8e:0d:ee:22:e9:6a:28:c9:ab:eb:87:86:34:bd:e6: 2e:19:8c:10:0a:be:7a:c0:3e:1a:2e:5d:bf:8b:54: 97:a1:f0:64:f4:de:ab:69:73:87:82:3f:78:37:92: 5e:4c:ac:f7:97:84:bf:91:65:46:c4:4b:00:b4:20: 27:da:54:fb:93:1b:09:68:23:33:6e:78:21:37:81: 0d:fa:8c:f6:36:e8:4a:31:66:00:35:cf:8e:4a:5c: bd:e8:56:60:2b:ce:5a:86:cc:e9:c1:82:b1:88:05: 37:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C0:C2:09:C8:B4:09:5A:4E:E4:C8:9B:CC:F8:EE:C9:EC:E2:97:65 X509v3 Authority Key Identifier: keyid:0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:6c:34:24:46:a1:ea:d7:2b:f1:d2:b4:97:e0:23:fd:5c:a4: c7:0b:77:f5:35:88:fe:d2:89:8b:87:c6:8e:e8:32:0e:c4:e0: 02:c5:c5:50:48:c6:4f:4d:96:31:0f:28:55:44:b7:4f:3d:a3: e2:ff:70:a9:a7:02:3d:56:c2:9e:cf:2d:9a:16:3c:5c:0a:40: 8e:09:92:0d:26:d7:49:eb:d9:db:93:56:45:a6:81:b0:22:d4: e6:2e:53:c8:b8:1f:7d:75:2c:d0:6c:93:0a:1f:ee:09:9e:50: a9:b5:a2:fc:3a:da:39:c5:05:3d:c7:c7:e5:2b:4e:9e:80:2a: 98:b2:d9:a5:64:7d:ba:5c:84:a1:cd:7b:62:7b:f8:eb:8a:ea: f0:ff:1b:7b:1a:be:ef:1f:7f:42:1d:70:90:27:d5:ec:4f:8f: f5:88:cf:69:cf:d6:b4:8f:35:06:07:84:bd:a8:d3:dd:08:fb: 84:6d:d8:3c:4e:90:d8:60:d3:cb:4a:15:42:80:32:95:7c:2d: f9:22:85:b2:8d:4e:a6:6b:4c:fc:f3:1a:38:d2:b5:33:78:22: ed:52:b8:17:e0:51:ef:cc:d7:96:7f:61:ab:3c:c9:3d:40:8f: 58:bd:4d:24:7a:31:5b:ed:25:01:ea:69:be:18:4f:d9:f5:da: 89:0d:e0:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rt6g/7V86rmf6jLjy/DvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTc3ZDQ2YWU1MTRiZGQ5MTllMjQ0YzdhZjc0YWRmN2Vk YmE4ZDUwHhcNMjYwMTI2MTkwMTM5WhcNMjYwMTI3MTkwMTM5WjAzMTEwLwYDVQQD EyhmN2MwYzIwOWM4YjQwOTVhNGVlNGM4OWJjY2Y4ZWVjOWVjZTI5NzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14i9LZuiO5Isd0GaAo6D3RNtPxB1 c/GhK4/StcY4lEL0hp1k/lxHJphT3baj6o2eoINhHfyBvntMuBauGwVn6rhNEHTX 6AVaoZ/LAFzAow1g49fOhBYGdaoOZeNg84yVPzkHTT8H+W5rjbLwI8RBTwjrmTUu 096FLLFufTZHOMqnEIEVyMW5XsalEilLyzKStzTiwWmODe4i6Wooyavrh4Y0veYu GYwQCr56wD4aLl2/i1SXofBk9N6raXOHgj94N5JeTKz3l4S/kWVGxEsAtCAn2lT7 kxsJaCMzbnghN4EN+oz2NuhKMWYANc+OSly96FZgK85ahszpwYKxiAU3+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfAwgnItAlaTuTIm8z47sns4pdlMB8GA1UdIwQY MBaAFA8XfUauUUvdkZ4kTHr3St9+26jVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhkOVJxNVJTOTJSbmlSTWV2ZEszMzdicU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS84OGYxZmMtMjA0ZC00M2JlLWE3YjQt Yjc2ZTgyYzIzMmI3LzEvRHhkOVJxNVJTOTJSbmlSTWV2ZEszMzdicU5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS84OGYxZmMtMjA0ZC00M2JlLWE3YjQtYjc2ZTgyYzIzMmI3 LzEvRHhkOVJxNVJTOTJSbmlSTWV2ZEszMzdicU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2w0JEah 6tcr8dK0l+Aj/Vykxwt39TWI/tKJi4fGjugyDsTgAsXFUEjGT02WMQ8oVUS3Tz2j 4v9wqacCPVbCns8tmhY8XApAjgmSDSbXSevZ25NWRaaBsCLU5i5TyLgffXUs0GyT Ch/uCZ5QqbWi/DraOcUFPcfH5StOnoAqmLLZpWR9ulyEoc17Ynv464rq8P8bexq+ 7x9/Qh1wkCfV7E+P9YjPac/WtI81BgeEvajT3Qj7hG3YPE6Q2GDTy0oVQoAylXwt +SKFso1OpmtM/PMaONK1M3gi7VK4F+BR78zXln9hqzzJPUCPWL1NJHoxW+0lAepp vhhP2fXaiQ3g8Q== -----END CERTIFICATE-----Generated at Mon Jan 26 22:58:23 2026 by rpki-client