This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json) Hash identifier: o7yzpl5+GLkeycurtngu/aa8mh3kMLf/4faBvJecq8o= Subject key identifier: 67:39:47:3A:9E:90:F1:99:A1:D6:08:51:F6:0A:1F:95:C7:73:56:EE Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38 Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838 Certificate serial: 019BFCF850D3B13A41B36819ED05B36F39B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft Manifest number: 0982 Signing time: Tue 27 Jan 2026 01:01:30 +0000 Manifest this update: Tue 27 Jan 2026 01:01:30 +0000 Manifest next update: Wed 28 Jan 2026 01:01:30 +0000 Files and hashes: 1: Caiwf_QYVrjuMQk3SKwJbOdkL1I.roa (hash: 5fx/cD2u1bFDALyIAFqy2QpBhB4xdpPsEpLHocGA9Q4=) 2: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: 3LEubXaEadntbGdk1dmUjW2BlWMCYNIl3Dg//qls6jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:50:d3:b1:3a:41:b3:68:19:ed:05:b3:6f:39:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838 Validity Not Before: Jan 27 01:01:30 2026 GMT Not After : Jan 28 01:01:30 2026 GMT Subject: CN=6739473a9e90f199a1d60851f60a1f95c77356ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:16:cd:d4:65:32:d3:5c:e5:32:73:17:05:ea: 47:d9:45:e7:52:0f:2b:ae:a4:c4:80:6d:54:2a:65: 7a:ca:39:79:e2:1d:b4:0d:86:39:73:51:c2:1e:9e: c8:8b:45:bc:b4:c3:09:74:50:0d:73:76:f3:60:1e: 70:e4:9e:4d:35:56:e3:92:f9:30:8d:7c:6a:c6:ef: 83:39:3d:3f:62:f5:68:db:97:40:60:a9:3b:1a:9a: 69:e5:a8:d4:cc:80:6f:7a:a3:04:66:a0:8f:fb:2e: 5b:9e:97:b2:2c:15:f0:12:0c:1d:27:da:8c:9b:c1: 4d:07:27:2a:9f:3b:d2:cf:1f:54:f9:bc:74:d3:d8: e1:28:31:65:68:77:6e:bb:64:58:e3:28:38:c2:17: ba:e5:47:89:40:75:89:fc:15:40:9f:e1:2f:3b:a7: a6:47:b2:f4:a8:e2:26:4a:54:ee:65:e9:9f:22:25: 8b:87:d1:34:cf:a8:df:a1:e8:27:ee:fb:a5:eb:c2: fc:74:ca:16:37:9c:08:79:6b:e9:94:88:75:08:8e: 06:32:20:b7:ee:58:fe:3d:db:cf:3f:5c:9f:ce:ec: d0:d8:f1:b9:d9:3d:e5:ff:1f:81:58:15:dc:84:45: 77:8a:ab:69:13:ac:de:8d:f8:03:fc:b7:7c:62:d5: a2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:39:47:3A:9E:90:F1:99:A1:D6:08:51:F6:0A:1F:95:C7:73:56:EE X509v3 Authority Key Identifier: keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d3:70:4a:9e:97:3b:98:c6:ff:7b:4f:43:49:24:55:f5:a1: d9:d5:87:ff:52:44:6a:1d:7d:c5:3c:b0:46:44:62:06:9c:90: 89:21:43:ee:2b:f7:43:61:b1:a6:c4:75:1b:ee:eb:2d:c9:e9: c7:8d:68:6a:95:02:9c:81:da:22:b8:c9:cf:f0:d1:95:30:5c: 19:35:e7:13:a5:7d:d5:08:16:69:54:5b:18:c9:71:76:4c:57: 59:43:0d:64:c7:60:04:78:d5:cc:1e:d2:a9:b3:32:1d:ce:b6: 8a:45:d4:6f:30:e1:65:4f:1e:13:20:4b:7e:a4:3f:b2:53:47: 13:db:78:05:92:01:1c:ad:a4:b3:c9:08:fb:66:53:06:2a:70: f8:2f:a1:36:ed:a8:76:cc:1d:8d:9e:7a:e8:a3:a1:d7:b1:d9: 36:f1:5e:a8:a5:87:31:35:23:90:19:a8:47:a5:9f:82:9d:cd: 0e:65:3f:41:7a:26:2c:3d:8c:a6:65:17:89:0d:3d:a4:ba:7e: 85:eb:be:08:26:ed:7c:30:d2:98:43:ff:c4:6e:55:10:18:07: 54:fc:f1:f2:e6:6c:f0:5b:9a:7d:82:1a:d9:27:75:da:04:9f: f6:d0:1f:e4:9f:0e:d9:52:44:aa:91:85:e7:85:85:ad:02:8a: 80:5f:d7:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+FDTsTpBs2gZ7QWzbzm2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0N2FhZTVkMjRiMGM5N2E0MjAzMWYzNTEwYTE0ZTJmOTVi YmQ4MzgwHhcNMjYwMTI3MDEwMTMwWhcNMjYwMTI4MDEwMTMwWjAzMTEwLwYDVQQD Eyg2NzM5NDczYTllOTBmMTk5YTFkNjA4NTFmNjBhMWY5NWM3NzM1NmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBbN1GUy01zlMnMXBepH2UXnUg8r rqTEgG1UKmV6yjl54h20DYY5c1HCHp7Ii0W8tMMJdFANc3bzYB5w5J5NNVbjkvkw jXxqxu+DOT0/YvVo25dAYKk7Gppp5ajUzIBveqMEZqCP+y5bnpeyLBXwEgwdJ9qM m8FNBycqnzvSzx9U+bx009jhKDFlaHduu2RY4yg4whe65UeJQHWJ/BVAn+EvO6em R7L0qOImSlTuZemfIiWLh9E0z6jfoegn7vul68L8dMoWN5wIeWvplIh1CI4GMiC3 7lj+PdvPP1yfzuzQ2PG52T3l/x+BWBXchEV3iqtpE6zejfgD/Ld8YtWi0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGc5RzqekPGZodYIUfYKH5XHc1buMB8GA1UdIwQY MBaAFHR6rl0ksMl6QgMfNRChTi+Vu9g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9mNDFmYmYtNGU4ZC00YWFhLTlkYjEt NjI2YmJmZWUwYjMxLzEvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9mNDFmYmYtNGU4ZC00YWFhLTlkYjEtNjI2YmJmZWUwYjMx LzEvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNNwSp6X O5jG/3tPQ0kkVfWh2dWH/1JEah19xTywRkRiBpyQiSFD7iv3Q2GxpsR1G+7rLcnp x41oapUCnIHaIrjJz/DRlTBcGTXnE6V91QgWaVRbGMlxdkxXWUMNZMdgBHjVzB7S qbMyHc62ikXUbzDhZU8eEyBLfqQ/slNHE9t4BZIBHK2ks8kI+2ZTBipw+C+hNu2o dswdjZ566KOh17HZNvFeqKWHMTUjkBmoR6Wfgp3NDmU/QXomLD2MpmUXiQ09pLp+ heu+CCbtfDDSmEP/xG5VEBgHVPzx8uZs8FuafYIa2Sd12gSf9tAf5J8O2VJEqpGF 54WFrQKKgF/XYw== -----END CERTIFICATE-----Generated at Tue Jan 27 06:41:31 2026 by rpki-client