This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json) Hash identifier: 9ceR1/Coc4hsaGOYXiHSX2qR6xBmrdTQ13lYubwaC1A= Subject key identifier: 32:F0:E5:99:91:B2:0B:BE:04:51:FD:82:57:47:86:B5:A0:B7:77:21 Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af Certificate serial: 019BFB096B8FDBCE3C67828BD6A8A89CEAD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft Manifest number: 17F1 Signing time: Mon 26 Jan 2026 16:00:57 +0000 Manifest this update: Mon 26 Jan 2026 16:00:57 +0000 Manifest next update: Tue 27 Jan 2026 16:00:57 +0000 Files and hashes: 1: CD3PRWosTdH8Ulv5wScytKKOYQc.roa (hash: DEvo9dF1HZV7MXeXGbHtNkQP9R2Rjhzg0DnvAg1eibQ=) 2: CLIoybonm404BMxqfMu0fHHdCn4.roa (hash: Xh/MYJQcCtIDiyyDKrkddv4okZMGRqLr7KLy9iwERKQ=) 3: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: JcOjiHJEKFlqnF1/Y4fcuWifO17h6s1QBvZ4SFGitLY=) 4: EQaCUZIVsXpGeGJub7JeUMDjQ5M.roa (hash: 0qDR8fqSNz6JKdvLNgWWpIOcGmvV7VtLTyHMuKF/8x0=) 5: pG4aRNi_tEglnHI4DZvr_Hj0KjI.roa (hash: 2A2zhBJlJ7gWPMPRjDvIHU22Z6SYQxUGXQxhlbRhuWg=) 6: vu_u7kwt45Cp4hiMkb1Rr3bcJAw.roa (hash: yGtKCejsbEuh4pXZZMT/qR4iqqRGZisKbAnR4Obgl/4=) 7: wAmyACSqLjnSmQEp7cXSGyFoWDM.roa (hash: 97xw7yMr/LKOcqtIasEtRCu3d3Z0Fm14QWb7ZfjVI+s=) 8: xZrWPBW5BgagoG32ZyaRPBaTphw.roa (hash: onQW5dWz2jt0k79UU0nLBPXrjY42Umj7KP17o4I6s9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:6b:8f:db:ce:3c:67:82:8b:d6:a8:a8:9c:ea:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af Validity Not Before: Jan 26 16:00:57 2026 GMT Not After : Jan 27 16:00:57 2026 GMT Subject: CN=32f0e59991b20bbe0451fd82574786b5a0b77721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9c:81:6d:3b:f7:5f:06:24:37:7b:19:d5:83: 40:4f:0b:ef:a4:7c:e5:24:48:64:ad:a8:25:3e:7b: 7b:82:8c:b8:45:bc:31:15:4c:d0:3e:c5:c2:ed:08: 13:d4:5e:d0:1e:3b:05:f1:5b:13:51:7a:9c:ce:44: 22:79:31:e1:dc:7e:ca:89:97:e3:37:ed:90:cd:4d: af:f7:7f:1d:ec:24:0c:bf:f9:51:fc:e6:48:b2:b2: 95:1a:0e:35:c0:63:c3:34:85:ef:d0:f1:97:d0:5b: 4d:c9:54:5f:e2:f6:13:0a:8e:ee:b6:7f:d5:2c:f2: 02:bd:20:0f:c6:e7:ec:d9:34:e2:92:cb:1a:2c:71: 92:bd:33:db:85:cd:a4:27:09:7c:e1:50:15:bd:df: f4:97:6d:f4:da:2a:11:7d:33:e1:cc:99:aa:fa:a1: 6e:5a:25:7d:fe:d9:e5:87:c0:da:67:2e:d9:a8:e3: 5d:8e:3f:4a:6b:39:e0:03:e5:6d:55:fd:1b:62:af: 2a:4b:33:61:27:25:00:ad:b5:07:8f:cc:84:8c:62: d5:35:70:07:76:7c:07:ac:61:a3:5c:6a:9c:c9:01: 79:43:23:1d:7d:96:39:b5:35:76:96:b4:b6:58:a0: 95:b4:41:89:2f:a0:1f:75:c7:99:03:12:60:85:58: 58:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F0:E5:99:91:B2:0B:BE:04:51:FD:82:57:47:86:B5:A0:B7:77:21 X509v3 Authority Key Identifier: keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:be:ff:ee:62:0d:eb:c1:86:99:46:f9:df:8d:04:4a:50:92: ae:41:f2:20:fc:b1:49:1f:e1:23:5b:da:45:4d:24:2b:a9:de: 47:eb:cb:53:74:ce:47:57:ae:7d:45:6c:54:2d:de:f9:b0:02: 56:83:6f:28:b1:ac:9e:54:85:ed:85:2f:0c:52:f0:08:dc:ca: 53:5e:65:09:54:25:15:1c:f4:6f:85:91:3c:07:7d:f8:d5:6e: 4c:1c:bc:be:7a:cc:93:31:0d:b8:ed:10:a7:c6:44:7a:0a:5e: 39:80:9f:10:d7:fa:6f:d3:cf:a2:fc:d3:e3:a7:3a:b2:c6:3d: 5f:66:80:8c:da:3b:19:c5:50:8e:70:f5:c5:0a:8d:f4:55:7e: 8b:3d:20:02:f6:c6:d4:af:6b:a1:f5:60:83:79:41:18:af:1f: c3:c3:7a:33:3b:38:0d:84:4e:17:7c:40:e4:fd:32:3a:28:90: 50:f4:63:ca:5c:da:77:1c:c1:e9:24:4d:a7:3e:f3:8f:2b:dd: 20:6f:a5:f7:e6:4c:fe:b3:06:40:79:60:b7:a5:26:26:68:c8: 48:22:17:85:91:aa:fb:96:01:ea:f7:7c:a1:8a:a5:f7:6b:76: 02:63:d0:d8:d3:2c:92:76:ba:7a:a6:67:cd:84:77:aa:5c:7c: db:ae:9b:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CWuP2848Z4KL1qionOrQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNGVlMTkzYjMwMTY2NWI1NmY2NzgwZjIyNWZkNDRkMTQ0 MDkzYWYwHhcNMjYwMTI2MTYwMDU3WhcNMjYwMTI3MTYwMDU3WjAzMTEwLwYDVQQD EygzMmYwZTU5OTkxYjIwYmJlMDQ1MWZkODI1NzQ3ODZiNWEwYjc3NzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZyBbTv3XwYkN3sZ1YNATwvvpHzl JEhkraglPnt7goy4RbwxFUzQPsXC7QgT1F7QHjsF8VsTUXqczkQieTHh3H7KiZfj N+2QzU2v938d7CQMv/lR/OZIsrKVGg41wGPDNIXv0PGX0FtNyVRf4vYTCo7utn/V LPICvSAPxufs2TTikssaLHGSvTPbhc2kJwl84VAVvd/0l2302ioRfTPhzJmq+qFu WiV9/tnlh8DaZy7ZqONdjj9KazngA+VtVf0bYq8qSzNhJyUArbUHj8yEjGLVNXAH dnwHrGGjXGqcyQF5QyMdfZY5tTV2lrS2WKCVtEGJL6AfdceZAxJghVhYoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLw5ZmRsgu+BFH9gldHhrWgt3chMB8GA1UdIwQY MBaAFA1O4ZOzAWZbVvZ4DyJf1E0UQJOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYt OWY3ZTBmODYyZjFlLzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYtOWY3ZTBmODYyZjFl LzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHb7/7mIN 68GGmUb5340ESlCSrkHyIPyxSR/hI1vaRU0kK6neR+vLU3TOR1eufUVsVC3e+bAC VoNvKLGsnlSF7YUvDFLwCNzKU15lCVQlFRz0b4WRPAd9+NVuTBy8vnrMkzENuO0Q p8ZEegpeOYCfENf6b9PPovzT46c6ssY9X2aAjNo7GcVQjnD1xQqN9FV+iz0gAvbG 1K9rofVgg3lBGK8fw8N6Mzs4DYROF3xA5P0yOiiQUPRjylzadxzB6SRNpz7zjyvd IG+l9+ZM/rMGQHlgt6UmJmjISCIXhZGq+5YB6vd8oYql92t2AmPQ2NMskna6eqZn zYR3qlx8266bZw== -----END CERTIFICATE-----Generated at Tue Jan 27 00:09:50 2026 by rpki-client