This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft File: djLJDvGdK9b2aKSCbi0NFWNelH0.mft (raw, json) Hash identifier: 9ptH+BhoptbgK4gjHQfjTGfdH8P2uinMcPhBVlYAPEU= Subject key identifier: 54:34:90:5A:54:00:56:7A:DE:A8:1C:46:42:FB:5B:77:A8:FA:FD:60 Authority key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D Certificate issuer: /CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d Certificate serial: 019BFBE4CE6986DB0110A88959A05157A5CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft Manifest number: 17EE Signing time: Mon 26 Jan 2026 20:00:34 +0000 Manifest this update: Mon 26 Jan 2026 20:00:34 +0000 Manifest next update: Tue 27 Jan 2026 20:00:34 +0000 Files and hashes: 1: djLJDvGdK9b2aKSCbi0NFWNelH0.crl (hash: FcldWbskoif/FJmM4ruZBjAQSfBQr9u8tFP2TAn674k=) 2: wh_PCPds1RwG_9tgWaa95lJUo8U.roa (hash: EEiVZ8EA5GDTXxuFdvW1T5/BRNMZ0ByEGciAuKi2zOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e4:ce:69:86:db:01:10:a8:89:59:a0:51:57:a5:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d Validity Not Before: Jan 26 20:00:34 2026 GMT Not After : Jan 27 20:00:34 2026 GMT Subject: CN=5434905a5400567adea81c4642fb5b77a8fafd60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:f3:df:2d:31:30:b9:d9:6c:6f:f1:22:b3: 66:ae:24:11:1f:30:5d:4e:3f:ac:b6:67:91:62:ab: 3d:e7:04:47:d7:5e:57:d8:d3:44:11:63:be:48:da: a0:e6:c6:a0:58:60:a5:25:4d:7e:bb:c9:74:c0:1c: 49:ba:4a:39:5b:82:e4:28:64:65:72:b7:7f:53:37: 64:36:20:b5:a9:c7:21:ba:49:a7:35:49:9e:0e:c4: fa:bf:1c:ad:cc:b5:53:84:df:01:79:b1:0a:d2:2d: 4a:90:f5:78:37:66:ad:09:f1:b0:12:98:25:f3:02: 59:02:22:d3:a9:3c:6b:41:bc:3d:85:39:7f:5c:5e: 64:5a:7a:a1:98:db:26:c6:87:24:b3:7c:96:c6:1b: 05:c3:e6:5c:cb:53:ab:80:4d:c8:5d:5f:2f:db:4c: 8f:c2:4c:19:4b:df:26:8a:c4:a6:8b:26:61:d1:d0: 7e:ac:1c:fd:a1:03:14:90:6c:81:5e:5b:a0:0e:83: 24:2a:fd:b4:a3:4d:fe:d9:dc:4c:f3:84:8c:8d:6e: b6:37:f2:d0:df:d1:78:cd:f7:7f:37:bc:49:46:bd: cd:55:90:b3:75:a2:e2:95:e9:f7:d7:9b:93:56:bc: b5:04:99:83:0e:0d:ce:ae:d4:78:36:bc:e5:9a:18: 4b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:34:90:5A:54:00:56:7A:DE:A8:1C:46:42:FB:5B:77:A8:FA:FD:60 X509v3 Authority Key Identifier: keyid:76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ad:56:a2:75:ff:51:df:83:e6:dc:6b:67:93:11:a5:fc:b0: af:7e:53:4b:2e:aa:ff:73:47:96:7a:0f:b7:71:35:d8:44:5b: af:b2:03:2d:98:8f:b1:a7:1f:7a:59:d5:26:d4:52:a0:22:65: e0:d5:7f:fa:ea:2e:f5:9c:16:7f:df:31:40:b4:d8:7f:53:4b: c2:e1:a2:0d:55:1a:a0:d3:bf:41:d0:e7:da:5a:22:c8:73:60: da:14:36:d7:9d:48:aa:6e:8a:57:6d:ad:26:ca:a4:75:31:b8: 79:6a:ba:07:1d:5f:c7:16:16:db:35:0e:bd:47:a2:db:ff:d2: 73:f9:e8:bd:1b:1c:cf:c9:e1:9a:cc:ac:75:8c:d5:5f:67:a3: c4:df:20:94:99:b6:26:3f:83:b7:13:cd:58:d6:3d:40:d8:48: 63:05:f9:f5:66:a4:a0:f1:33:b1:21:ac:8d:90:62:81:dc:4a: 43:af:26:31:cd:6f:e3:28:58:c1:9c:bd:4b:af:a9:9e:ff:7f: 9f:c1:4d:2b:15:c9:19:31:62:77:36:dc:63:06:e0:a2:6a:b0: 58:b3:6f:8a:16:65:b8:a5:bc:b2:90:ee:2e:05:75:14:7d:33: 6f:a8:03:f5:15:9f:90:37:64:95:dd:99:52:dc:a5:dc:6d:81: 79:55:dc:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75M5phtsBEKiJWaBRV6XNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MzJjOTBlZjE5ZDJiZDZmNjY4YTQ4MjZlMmQwZDE1NjM1 ZTk0N2QwHhcNMjYwMTI2MjAwMDM0WhcNMjYwMTI3MjAwMDM0WjAzMTEwLwYDVQQD Eyg1NDM0OTA1YTU0MDA1NjdhZGVhODFjNDY0MmZiNWI3N2E4ZmFmZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNfz3y0xMLnZbG/xIrNmriQRHzBd Tj+stmeRYqs95wRH115X2NNEEWO+SNqg5sagWGClJU1+u8l0wBxJuko5W4LkKGRl crd/UzdkNiC1qcchukmnNUmeDsT6vxytzLVThN8BebEK0i1KkPV4N2atCfGwEpgl 8wJZAiLTqTxrQbw9hTl/XF5kWnqhmNsmxocks3yWxhsFw+Zcy1OrgE3IXV8v20yP wkwZS98misSmiyZh0dB+rBz9oQMUkGyBXlugDoMkKv20o03+2dxM84SMjW62N/LQ 39F4zfd/N7xJRr3NVZCzdaLilen315uTVry1BJmDDg3OrtR4NrzlmhhLqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQ0kFpUAFZ63qgcRkL7W3eo+v1gMB8GA1UdIwQY MBaAFHYyyQ7xnSvW9mikgm4tDRVjXpR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGpMSkR2R2RLOWIyYUtTQ2JpME5GV05lbEgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC85ODQ0Y2QtMjRmOC00ZTUyLWI0MmIt YzdiZjAyMWVlNjY0LzEvZGpMSkR2R2RLOWIyYUtTQ2JpME5GV05lbEgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC85ODQ0Y2QtMjRmOC00ZTUyLWI0MmItYzdiZjAyMWVlNjY0 LzEvZGpMSkR2R2RLOWIyYUtTQ2JpME5GV05lbEgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcq1WonX/ Ud+D5txrZ5MRpfywr35TSy6q/3NHlnoPt3E12ERbr7IDLZiPsacfelnVJtRSoCJl 4NV/+uou9ZwWf98xQLTYf1NLwuGiDVUaoNO/QdDn2loiyHNg2hQ2151Iqm6KV22t JsqkdTG4eWq6Bx1fxxYW2zUOvUei2//Sc/novRscz8nhmsysdYzVX2ejxN8glJm2 Jj+DtxPNWNY9QNhIYwX59WakoPEzsSGsjZBigdxKQ68mMc1v4yhYwZy9S6+pnv9/ n8FNKxXJGTFidzbcYwbgomqwWLNvihZluKW8spDuLgV1FH0zb6gD9RWfkDdkld2Z Utyl3G2BeVXcwg== -----END CERTIFICATE-----Generated at Tue Jan 27 04:44:00 2026 by rpki-client