This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft File: dkkoqXvpVTdwE9OCxilA6VDdISs.mft (raw, json) Hash identifier: TfK9ctKBbtRwe6fIlWLA1WA3HUp/3NQMwqh0pRNqh38= Subject key identifier: D5:8E:CE:5B:7D:19:59:80:72:61:99:2D:26:E6:E0:87:89:26:5D:BA Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B Certificate issuer: /CN=764928a97be955377013d382c62940e950dd212b Certificate serial: 019BF9BFE84BC6DFF4CC4463AFDE3A6F63D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft Manifest number: 12C6 Signing time: Mon 26 Jan 2026 10:01:02 +0000 Manifest this update: Mon 26 Jan 2026 10:01:02 +0000 Manifest next update: Tue 27 Jan 2026 10:01:02 +0000 Files and hashes: 1: B7aCk0b-K5XgdvEjGdk5wXSAkDc.roa (hash: nyiUF3Zt9sMp6+mzeEZ8PMtjO/iACI+KfmNy9BotXDk=) 2: D9aUpKX2PTU1wmWHLRRqPaZtLBI.roa (hash: dH6am4VhkjdQhWRQqbXQ4D/HbErjXar5HVgXeANi9W0=) 3: Lp0vHH3sV5CmRox_CW0AyUEO49A.roa (hash: HnRMr5r2HkpjEYviPbeXFZfwzUunRvvI+wgZvCnFlCc=) 4: c6nKpma73pYWxvMGKppaadDfEFw.roa (hash: vhO0PPLdQXMMpfgBSaG37tdr8r6MbA4mP7J/LJzhZao=) 5: dkkoqXvpVTdwE9OCxilA6VDdISs.crl (hash: 5HgGQQSKj61ceBF2AFF0a2Y9HjrkhmopKU8yANS9fpk=) 6: jGSNHMpFNbQkO_PxgFvC_4Gf8QE.roa (hash: K41n6g6IzXx6vx3vFplymreUJX4uIZoX2K6TNqcNUyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:bf:e8:4b:c6:df:f4:cc:44:63:af:de:3a:6f:63:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764928a97be955377013d382c62940e950dd212b Validity Not Before: Jan 26 10:01:02 2026 GMT Not After : Jan 27 10:01:02 2026 GMT Subject: CN=d58ece5b7d1959807261992d26e6e08789265dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:8b:db:f6:6a:e6:84:38:43:d4:50:49:9e:2d: d7:5a:82:78:b1:96:43:fa:a5:ec:e3:57:d4:c7:96: 62:b4:23:92:35:de:6a:98:f0:c1:c7:97:30:45:08: 84:bb:df:4e:fc:01:c2:10:e0:66:90:6f:f5:eb:2e: 72:e4:4a:6c:71:31:81:13:1c:b6:25:32:15:8d:74: d0:85:2c:9c:8d:54:8a:c1:31:33:a5:6b:ff:97:4c: d3:ed:bc:62:6b:5f:bb:03:ef:7d:83:86:9d:fd:8d: b8:f8:3d:63:72:e6:46:bb:30:04:b5:7d:ba:a4:83: 2d:86:b3:ad:8c:c6:e9:14:98:a9:38:2c:ea:ac:0f: db:08:38:5f:a6:dc:d9:aa:c6:f9:e9:68:d2:c3:bc: a5:fc:a6:3a:e0:13:52:e0:d9:62:0d:26:8a:21:03: 58:89:61:15:c3:71:ab:d4:81:62:59:5c:a8:1d:3f: 75:fb:8c:a9:ad:0e:92:7b:fa:7a:0b:72:81:0e:0b: 7f:f0:e0:55:ee:42:c2:25:30:30:20:69:e6:78:3e: 47:18:fb:b3:48:a0:c1:69:74:eb:c4:44:d9:db:31: 60:55:2b:ff:1a:40:4e:8f:a0:f2:16:4d:f1:3e:30: e6:7c:ac:ab:86:b7:f8:2a:c2:3a:cd:1f:2a:f9:eb: 5b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8E:CE:5B:7D:19:59:80:72:61:99:2D:26:E6:E0:87:89:26:5D:BA X509v3 Authority Key Identifier: keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f6:91:98:4d:04:7d:9b:6d:01:4e:bf:99:4b:1c:83:c4:06: 8f:09:96:4b:dc:42:38:b9:0e:28:11:57:3c:4e:6d:0d:b3:f7: ab:18:79:d2:b6:92:b8:21:9c:16:29:d0:54:55:0b:4e:9a:90: 89:29:9a:e2:2c:ee:2d:5d:4d:22:70:cc:ed:d4:58:6c:3b:bc: f2:2c:3d:1a:02:f3:d4:15:a0:ce:8c:9b:94:7d:8b:c3:ea:fc: 2b:2b:dd:12:48:ad:b7:c9:d6:81:52:0f:c5:78:16:9f:61:53: 8f:67:1a:ad:fa:ef:68:54:b6:c2:67:a2:12:18:ec:d3:4f:79: 34:f9:60:9a:51:3a:b4:91:97:01:a5:f1:16:39:b1:c8:6c:52: cb:11:ce:9c:3c:76:bb:4d:9d:26:88:e8:49:81:8b:72:28:2f: 3d:98:79:07:c8:92:99:45:8c:8b:4e:2b:60:73:b8:29:18:b6: c7:43:d3:e1:30:86:06:24:7b:85:b9:75:ea:4c:01:f9:c1:12: 96:10:2a:41:5d:0d:d2:ed:8b:70:f5:ac:78:bf:ac:bc:76:aa: c9:2c:8f:41:d9:6a:99:1e:fd:da:bc:1a:47:64:52:62:d1:79: 46:b8:ac:fe:87:37:4a:b9:47:25:1e:1f:9c:f1:56:e5:d1:51: b4:78:20:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5v+hLxt/0zERjr946b2PSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NDkyOGE5N2JlOTU1Mzc3MDEzZDM4MmM2Mjk0MGU5NTBk ZDIxMmIwHhcNMjYwMTI2MTAwMTAyWhcNMjYwMTI3MTAwMTAyWjAzMTEwLwYDVQQD EyhkNThlY2U1YjdkMTk1OTgwNzI2MTk5MmQyNmU2ZTA4Nzg5MjY1ZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+4vb9mrmhDhD1FBJni3XWoJ4sZZD +qXs41fUx5ZitCOSNd5qmPDBx5cwRQiEu99O/AHCEOBmkG/16y5y5EpscTGBExy2 JTIVjXTQhSycjVSKwTEzpWv/l0zT7bxia1+7A+99g4ad/Y24+D1jcuZGuzAEtX26 pIMthrOtjMbpFJipOCzqrA/bCDhfptzZqsb56WjSw7yl/KY64BNS4NliDSaKIQNY iWEVw3Gr1IFiWVyoHT91+4yprQ6Se/p6C3KBDgt/8OBV7kLCJTAwIGnmeD5HGPuz SKDBaXTrxETZ2zFgVSv/GkBOj6DyFk3xPjDmfKyrhrf4KsI6zR8q+etbVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWOzlt9GVmAcmGZLSbm4IeJJl26MB8GA1UdIwQY MBaAFHZJKKl76VU3cBPTgsYpQOlQ3SErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDkt YmMxNTIyNzg5ZDNiLzEvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDktYmMxNTIyNzg5ZDNi LzEvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/aRmE0E fZttAU6/mUscg8QGjwmWS9xCOLkOKBFXPE5tDbP3qxh50raSuCGcFinQVFULTpqQ iSma4izuLV1NInDM7dRYbDu88iw9GgLz1BWgzoyblH2Lw+r8KyvdEkitt8nWgVIP xXgWn2FTj2carfrvaFS2wmeiEhjs0095NPlgmlE6tJGXAaXxFjmxyGxSyxHOnDx2 u02dJojoSYGLcigvPZh5B8iSmUWMi04rYHO4KRi2x0PT4TCGBiR7hbl16kwB+cES lhAqQV0N0u2LcPWseL+svHaqySyPQdlqmR792rwaR2RSYtF5Rris/oc3SrlHJR4f nPFW5dFRtHggeQ== -----END CERTIFICATE-----Generated at Mon Jan 26 19:10:53 2026 by rpki-client