This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft File: dADVATwShSJCNDCTy_UUjU6uqvk.mft (raw, json) Hash identifier: RYZYqpS66oOiR7SbM1yzP5JsVo7P+qGsUZsNg/scxs4= Subject key identifier: DE:79:67:F6:48:CF:D4:C1:96:AA:75:82:BD:FD:52:42:F1:A6:01:1E Authority key identifier: 74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9 Certificate issuer: /CN=7400d5013c12852242343093cbf5148d4eaeaaf9 Certificate serial: 019BDADAFF0EE298CD511639133C0E3A205E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft Manifest number: 17E3 Signing time: Tue 20 Jan 2026 10:02:23 +0000 Manifest this update: Tue 20 Jan 2026 10:02:23 +0000 Manifest next update: Wed 21 Jan 2026 10:02:23 +0000 Files and hashes: 1: BJ7HazHaGccfvxTQc_w6SKWhZEA.roa (hash: Pl+4ZXeFDCtsyZiimkR12UecWLcE8XYpnlEtA132eQ4=) 2: dADVATwShSJCNDCTy_UUjU6uqvk.crl (hash: B1KMxdhnyNBjFGM7u2lG5TrBmPW7MtOk15aadUv0ncc=) 3: vF10V7lqg_z1ClW_JFRqKWSSSgs.roa (hash: 5LcZLtIG267Hhy192bqk2cmUen7W8721AugGcNOPgeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 10:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:da:ff:0e:e2:98:cd:51:16:39:13:3c:0e:3a:20:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7400d5013c12852242343093cbf5148d4eaeaaf9 Validity Not Before: Jan 20 10:02:23 2026 GMT Not After : Jan 21 10:02:23 2026 GMT Subject: CN=de7967f648cfd4c196aa7582bdfd5242f1a6011e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:62:05:95:bf:fa:fc:10:ae:7f:b0:b0:68:84: 9c:5b:d9:03:f5:22:4c:5b:42:6d:f4:3e:5a:41:a0: a2:8b:4c:68:53:32:2f:3e:dc:7f:ce:50:fa:ed:29: 3e:7f:50:62:1e:c0:1b:d3:dc:08:77:57:8c:e6:ad: ef:b2:51:40:c7:ce:3c:b1:cc:74:ad:c1:71:9c:0b: ba:e8:27:15:65:7e:b2:8e:f0:6a:e8:0c:1e:50:a8: 3e:1a:07:dd:64:3c:e4:f5:11:ea:a7:1b:40:ef:48: 6b:76:14:fe:45:b8:13:fa:f9:04:79:48:de:d2:62: cd:96:3c:a0:2f:a7:d3:8d:25:f0:ec:94:35:47:fc: 2d:e9:64:4c:ac:63:c1:d2:38:68:f2:2b:e5:7c:8a: f8:08:a9:69:1b:69:ce:52:f0:e0:58:b6:5e:54:ae: 07:ec:56:d8:dc:56:1e:02:5a:d9:8d:df:a2:76:db: c4:85:84:b8:c7:01:aa:1b:f5:27:d3:a4:11:47:3f: a4:88:44:0f:fe:f3:67:93:b8:0d:f2:e3:8c:5f:fb: 83:de:d9:81:69:22:2c:1c:a0:33:d6:c5:a7:43:99: 3d:3a:21:1a:4c:a0:6c:96:dc:54:5f:46:f8:da:cd: 66:96:88:80:73:c2:f2:af:8f:60:d0:a1:ed:9d:fb: a9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:79:67:F6:48:CF:D4:C1:96:AA:75:82:BD:FD:52:42:F1:A6:01:1E X509v3 Authority Key Identifier: keyid:74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:54:8a:5f:de:1f:8b:4e:2b:49:e0:50:ea:39:db:49:36:5f: e4:f8:4e:47:d0:3f:6e:17:c5:e0:cb:a4:6e:af:7b:f7:68:e1: b0:e6:39:d8:5d:e7:12:dd:23:f7:5b:00:25:ea:88:be:95:75: 83:8d:1c:35:95:03:2a:47:18:3a:3d:21:4b:21:21:43:3a:e1: 8f:8d:40:04:99:2f:2e:b5:51:50:9c:a3:7c:1c:fe:d5:5b:26: 2e:b3:50:51:65:0f:00:b9:88:ad:c2:21:97:cc:21:f5:2d:8b: 1b:f3:fe:f8:aa:2c:e8:d5:01:52:0b:3b:3d:0c:69:ed:c2:b1: 94:42:7a:de:5d:e3:0a:4c:28:10:d6:fc:d7:94:8a:9d:78:91: 9c:c3:fb:19:20:52:ba:70:32:41:53:bc:3b:1f:4c:8a:73:13: 62:2a:65:bd:9f:de:01:56:22:39:7f:2a:fa:2c:d8:35:e7:e1: 4f:05:e3:8e:d9:b7:95:7c:23:0a:19:2b:4b:bc:e7:d4:29:eb: 6d:c6:6d:06:a8:ad:c8:7c:be:6e:80:a4:1c:53:ff:09:ae:bd: d1:b2:96:b4:3d:0e:2c:a3:2c:2c:d4:5c:3d:88:aa:fc:e6:cb: 5f:3e:61:c5:2c:eb:fc:ba:1d:0a:3d:a7:af:cb:c8:18:b2:3e: 7b:8a:e5:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZva2v8O4pjNURY5EzwOOiBeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MDBkNTAxM2MxMjg1MjI0MjM0MzA5M2NiZjUxNDhkNGVh ZWFhZjkwHhcNMjYwMTIwMTAwMjIzWhcNMjYwMTIxMTAwMjIzWjAzMTEwLwYDVQQD EyhkZTc5NjdmNjQ4Y2ZkNGMxOTZhYTc1ODJiZGZkNTI0MmYxYTYwMTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2IFlb/6/BCuf7CwaIScW9kD9SJM W0Jt9D5aQaCii0xoUzIvPtx/zlD67Sk+f1BiHsAb09wId1eM5q3vslFAx848scx0 rcFxnAu66CcVZX6yjvBq6AweUKg+GgfdZDzk9RHqpxtA70hrdhT+RbgT+vkEeUje 0mLNljygL6fTjSXw7JQ1R/wt6WRMrGPB0jho8ivlfIr4CKlpG2nOUvDgWLZeVK4H 7FbY3FYeAlrZjd+idtvEhYS4xwGqG/Un06QRRz+kiEQP/vNnk7gN8uOMX/uD3tmB aSIsHKAz1sWnQ5k9OiEaTKBsltxUX0b42s1mloiAc8Lyr49g0KHtnfupNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN55Z/ZIz9TBlqp1gr39UkLxpgEeMB8GA1UdIwQY MBaAFHQA1QE8EoUiQjQwk8v1FI1Orqr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEFEVkFUd1NoU0pDTkRDVHlfVVVqVTZ1cXZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85NWQ3MWQtZjQxYi00MTcxLTgzNTAt ZTA4OTJhMjhhYWM5LzEvZEFEVkFUd1NoU0pDTkRDVHlfVVVqVTZ1cXZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85NWQ3MWQtZjQxYi00MTcxLTgzNTAtZTA4OTJhMjhhYWM5 LzEvZEFEVkFUd1NoU0pDTkRDVHlfVVVqVTZ1cXZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFSKX94f i04rSeBQ6jnbSTZf5PhOR9A/bhfF4Mukbq9792jhsOY52F3nEt0j91sAJeqIvpV1 g40cNZUDKkcYOj0hSyEhQzrhj41ABJkvLrVRUJyjfBz+1VsmLrNQUWUPALmIrcIh l8wh9S2LG/P++Kos6NUBUgs7PQxp7cKxlEJ63l3jCkwoENb815SKnXiRnMP7GSBS unAyQVO8Ox9MinMTYiplvZ/eAVYiOX8q+izYNefhTwXjjtm3lXwjChkrS7zn1Cnr bcZtBqityHy+boCkHFP/Ca690bKWtD0OLKMsLNRcPYiq/ObLXz5hxSzr/LodCj2n r8vIGLI+e4rlfg== -----END CERTIFICATE-----Generated at Tue Jan 20 14:08:15 2026 by rpki-client