This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json) Hash identifier: JJ/ZxU2V98AQYOVEzPI6VAUxmMSGbMF4zWw4OLSRzb4= Subject key identifier: 86:D5:A0:06:84:A9:0C:D8:4E:6E:92:4B:FD:0C:4A:EF:AD:BC:17:C1 Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3 Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3 Certificate serial: 019BFD9D323108E420062417ABD46A2ECB20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft Manifest number: 17F0 Signing time: Tue 27 Jan 2026 04:01:36 +0000 Manifest this update: Tue 27 Jan 2026 04:01:36 +0000 Manifest next update: Wed 28 Jan 2026 04:01:36 +0000 Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: 3kT2GeXmk/ZByxe5gNHD3jtitF5cD0ELyFZY10kvglI=) 2: xRmmdqH1-j--sEXPtnNY3Z-R5Zo.roa (hash: 3OUa7VjiPRdUyQdSMo547+vkOocCdI86key02w1U7/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:9d:32:31:08:e4:20:06:24:17:ab:d4:6a:2e:cb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3 Validity Not Before: Jan 27 04:01:36 2026 GMT Not After : Jan 28 04:01:36 2026 GMT Subject: CN=86d5a00684a90cd84e6e924bfd0c4aefadbc17c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:e1:09:60:4e:17:f4:d9:d3:1e:bf:0c:97: 87:ac:a6:d9:b4:01:99:38:49:14:9b:c7:68:c5:04: 33:03:2a:03:f8:ce:b5:49:6b:c3:ba:0d:c1:2d:db: f8:38:42:69:c7:a8:9b:52:76:93:b0:84:98:fa:3a: 72:da:cc:63:f7:6d:ec:4a:ec:56:f7:9a:46:3e:8b: 7d:66:b3:2a:4f:1a:99:0a:e6:ea:61:d8:89:b6:9d: 71:ef:0a:8c:c2:91:e6:4e:cf:7b:0f:f9:4f:3f:7a: b6:2b:ad:8a:cb:39:a9:d5:98:8e:5a:5e:33:66:35: 6c:db:a0:ea:ed:8f:d8:d0:0c:0f:04:af:43:8d:a5: b4:ee:62:78:13:af:e8:3c:83:84:4e:da:33:4f:bd: a4:34:96:e7:16:a4:ba:94:f0:35:6a:57:c8:4c:c7: 4e:ee:4b:bf:21:ea:4e:e4:f6:46:b2:5f:7f:55:7e: 7a:62:db:1e:d8:ca:e0:13:b3:2e:3f:5d:25:34:db: 05:39:1d:ab:d3:10:4f:73:8b:2e:7f:80:ff:bb:60: 05:95:fe:7a:7f:e5:0b:9e:83:04:48:cb:df:f0:1f: a0:d1:ad:48:3e:4b:ad:04:6a:98:be:b5:e5:13:c8: 2b:7c:a1:e5:25:fa:7c:89:8f:ae:89:1b:fd:e5:58: eb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D5:A0:06:84:A9:0C:D8:4E:6E:92:4B:FD:0C:4A:EF:AD:BC:17:C1 X509v3 Authority Key Identifier: keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:29:68:62:af:92:41:92:aa:b7:97:f6:51:6f:ec:e4:b7:30: f6:ca:18:82:d5:b5:de:3c:f5:ca:cd:b6:e0:a9:51:2e:22:6b: 98:e8:5c:35:a4:2c:56:33:76:d3:0c:d5:4f:63:d4:5c:a1:3a: c6:50:93:ef:83:80:b6:b3:ce:e5:e6:da:f3:f3:9a:41:c1:91: 3c:70:51:33:0c:fe:85:23:48:3c:f5:97:0e:8e:c8:59:a2:d8: 6f:36:8d:fd:79:e0:cc:7c:f8:bf:c3:9a:79:91:3e:d5:d8:1a: 18:63:48:5b:f7:3f:96:c3:56:e2:bc:4d:88:df:13:b7:9e:1d: 72:d6:29:d2:04:06:93:33:4e:d9:e8:0c:aa:f0:f4:c8:54:a6: e0:6c:31:68:3a:58:30:6b:84:8a:6e:9d:27:e2:89:2f:86:97: fd:c0:86:44:a7:84:5e:5d:3a:4a:c8:c8:8c:fc:31:db:fb:79: ac:53:80:d5:98:e5:cd:15:0e:67:bc:65:7e:7b:85:77:da:87: f2:3a:0f:72:52:57:49:88:a1:45:14:07:6a:a6:0c:f5:70:b7: 67:ad:ab:3b:4d:29:c0:02:e4:c8:3b:39:e8:11:f7:d9:ea:af: 5a:76:cc:94:5a:d4:e3:4c:c4:b0:a4:93:2b:50:0f:11:92:a8: 08:66:38:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9nTIxCOQgBiQXq9RqLssgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjYyNWJkZmZhOTQzN2RjMmI5NmQ4YWUwMjMxMDBiYzg4 ZTZmZTMwHhcNMjYwMTI3MDQwMTM2WhcNMjYwMTI4MDQwMTM2WjAzMTEwLwYDVQQD Eyg4NmQ1YTAwNjg0YTkwY2Q4NGU2ZTkyNGJmZDBjNGFlZmFkYmMxN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTDhCWBOF/TZ0x6/DJeHrKbZtAGZ OEkUm8doxQQzAyoD+M61SWvDug3BLdv4OEJpx6ibUnaTsISY+jpy2sxj923sSuxW 95pGPot9ZrMqTxqZCubqYdiJtp1x7wqMwpHmTs97D/lPP3q2K62Kyzmp1ZiOWl4z ZjVs26Dq7Y/Y0AwPBK9DjaW07mJ4E6/oPIOETtozT72kNJbnFqS6lPA1alfITMdO 7ku/IepO5PZGsl9/VX56Ytse2MrgE7MuP10lNNsFOR2r0xBPc4suf4D/u2AFlf56 f+ULnoMESMvf8B+g0a1IPkutBGqYvrXlE8grfKHlJfp8iY+uiRv95VjrfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbVoAaEqQzYTm6SS/0MSu+tvBfBMB8GA1UdIwQY MBaAFAwmJb3/qUN9wrltiuAjEAvIjm/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENZbHZmLXBRMzNDdVcySzRDTVFDOGlPYi1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85Yzc4YjktZGEzOS00NTBmLWJiOTYt MDc4MDRhZmY0OTBmLzEvRENZbHZmLXBRMzNDdVcySzRDTVFDOGlPYi1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC85Yzc4YjktZGEzOS00NTBmLWJiOTYtMDc4MDRhZmY0OTBm LzEvRENZbHZmLXBRMzNDdVcySzRDTVFDOGlPYi1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCloYq+S QZKqt5f2UW/s5Lcw9soYgtW13jz1ys224KlRLiJrmOhcNaQsVjN20wzVT2PUXKE6 xlCT74OAtrPO5eba8/OaQcGRPHBRMwz+hSNIPPWXDo7IWaLYbzaN/XngzHz4v8Oa eZE+1dgaGGNIW/c/lsNW4rxNiN8Tt54dctYp0gQGkzNO2egMqvD0yFSm4GwxaDpY MGuEim6dJ+KJL4aX/cCGRKeEXl06SsjIjPwx2/t5rFOA1ZjlzRUOZ7xlfnuFd9qH 8joPclJXSYihRRQHaqYM9XC3Z62rO00pwALkyDs56BH32eqvWnbMlFrU40zEsKST K1APEZKoCGY4uw== -----END CERTIFICATE-----Generated at Tue Jan 27 08:02:39 2026 by rpki-client