This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft File: d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft (raw, json) Hash identifier: bIitUgaorv3gBk/pIsdcsd3YvdxH4NssPEj+J4TwHCM= Subject key identifier: 7D:13:83:B0:4B:04:E8:CA:0C:23:20:DA:CF:DD:3D:98:FA:88:02:C7 Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98 Certificate issuer: /CN=777c49d3f627335190e3c2ec3654e154cfd45398 Certificate serial: 019BFA6442D36331AFE02E72B1A252D118A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft Manifest number: 0ED4 Signing time: Mon 26 Jan 2026 13:00:33 +0000 Manifest this update: Mon 26 Jan 2026 13:00:33 +0000 Manifest next update: Tue 27 Jan 2026 13:00:33 +0000 Files and hashes: 1: 1JIM2kMeVJoHRDwhcEraJMNWzzk.roa (hash: 7HnRkqXRdr1xWTIy9iiHnk4cqifwXb86Gt3ZsfiE8YQ=) 2: d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl (hash: yIc8GiKJoQJ5RufnWbruAP72UugdvRAkLCe4dd4zuoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:42:d3:63:31:af:e0:2e:72:b1:a2:52:d1:18:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398 Validity Not Before: Jan 26 13:00:33 2026 GMT Not After : Jan 27 13:00:33 2026 GMT Subject: CN=7d1383b04b04e8ca0c2320dacfdd3d98fa8802c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:31:21:b8:1b:0b:3b:86:2c:fe:83:4b:e6:7c: fc:b4:67:89:d4:a7:f1:df:bf:cb:91:3b:7c:1e:31: bc:b8:0f:7e:65:a2:e5:3d:67:2f:71:1d:9d:c9:30: 9a:90:a6:09:c6:78:14:6d:cd:13:ce:e3:07:58:f0: e3:53:4f:8f:87:a9:10:a3:a5:b5:2f:0c:5c:49:26: 41:c3:e5:ba:3a:e0:77:86:38:6d:6a:cb:5f:06:a6: 3c:5c:58:8f:4e:40:d3:9f:55:96:73:70:82:e1:8f: b7:28:f5:d1:c4:d5:10:9d:f3:e1:be:ec:b0:81:50: b5:8e:a6:e1:37:8c:72:85:be:ae:d7:4b:1f:6c:d5: 5d:c6:4e:de:b9:82:1a:a9:f3:04:66:ea:33:d3:42: b0:3a:dc:72:de:75:2c:a9:c0:0c:25:74:be:df:f5: 39:94:d6:9c:95:3f:8b:fa:cc:88:f9:d5:c7:11:54: 65:4a:00:b8:bd:22:05:61:f4:07:7b:4e:eb:49:2f: f1:72:ba:da:f1:14:dc:1c:19:ab:2c:38:8c:18:00: b9:b0:1e:a7:60:66:c9:cf:9f:2a:71:b7:06:15:e7: 7e:d5:f7:61:12:b4:01:6d:a4:15:5a:e2:08:98:8f: 95:f3:52:bd:b4:5d:74:8f:15:17:74:1b:d7:37:8e: aa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:13:83:B0:4B:04:E8:CA:0C:23:20:DA:CF:DD:3D:98:FA:88:02:C7 X509v3 Authority Key Identifier: keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:30:bd:07:67:30:77:67:dd:f8:0f:2d:17:88:89:f6:c6:52: 07:90:b5:90:ed:f3:d5:4e:d1:d6:bd:74:ee:9a:4f:2e:f7:c7: e0:db:81:ef:a6:d4:a4:33:27:7f:99:31:d0:c4:2a:ce:30:d2: 37:e7:c2:b2:50:e4:92:f7:e8:bf:f3:46:89:a5:d4:ba:f6:bb: 28:7d:4a:7f:21:bf:b2:ce:67:eb:74:90:10:8f:1f:08:73:46: ec:4c:e0:1d:87:1d:f0:10:c9:66:b3:7e:82:08:c2:a1:88:5b: ed:df:6d:0c:d1:a7:0a:b9:7e:a1:bf:73:95:5c:74:c1:e7:c8: 3d:3c:71:3a:3f:a0:3a:7f:f7:ed:2f:79:b2:31:7c:51:2f:93: 66:af:79:92:07:6f:26:4b:11:99:bf:61:2b:8b:9b:4c:e4:12: 1c:fe:c1:39:6d:8b:98:fb:38:76:30:20:92:e4:00:fc:ae:ee: ad:25:76:1f:08:2a:ba:fa:88:6b:da:b1:81:74:59:ea:31:c3: fa:1b:3f:ec:2b:8f:10:d8:21:3f:aa:8c:19:a8:f0:78:7d:c2: 01:f6:97:ee:68:30:d0:36:94:9e:af:44:f7:a3:cc:62:16:2d: a4:26:37:33:a4:0d:ed:4b:39:b9:41:3b:b6:e6:0c:a4:dd:bd: 83:dd:68:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZELTYzGv4C5ysaJS0RigMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3N2M0OWQzZjYyNzMzNTE5MGUzYzJlYzM2NTRlMTU0Y2Zk NDUzOTgwHhcNMjYwMTI2MTMwMDMzWhcNMjYwMTI3MTMwMDMzWjAzMTEwLwYDVQQD Eyg3ZDEzODNiMDRiMDRlOGNhMGMyMzIwZGFjZmRkM2Q5OGZhODgwMmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjEhuBsLO4Ys/oNL5nz8tGeJ1Kfx 37/LkTt8HjG8uA9+ZaLlPWcvcR2dyTCakKYJxngUbc0TzuMHWPDjU0+Ph6kQo6W1 LwxcSSZBw+W6OuB3hjhtastfBqY8XFiPTkDTn1WWc3CC4Y+3KPXRxNUQnfPhvuyw gVC1jqbhN4xyhb6u10sfbNVdxk7euYIaqfMEZuoz00KwOtxy3nUsqcAMJXS+3/U5 lNaclT+L+syI+dXHEVRlSgC4vSIFYfQHe07rSS/xcrra8RTcHBmrLDiMGAC5sB6n YGbJz58qcbcGFed+1fdhErQBbaQVWuIImI+V81K9tF10jxUXdBvXN46qZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0Tg7BLBOjKDCMg2s/dPZj6iALHMB8GA1UdIwQY MBaAFHd8SdP2JzNRkOPC7DZU4VTP1FOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny81ZTdhMzEtZWU2My00MTIwLTk1MmMt Y2QyZjhjOTRmOTc0LzEvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny81ZTdhMzEtZWU2My00MTIwLTk1MmMtY2QyZjhjOTRmOTc0 LzEvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDC9B2cw d2fd+A8tF4iJ9sZSB5C1kO3z1U7R1r107ppPLvfH4NuB76bUpDMnf5kx0MQqzjDS N+fCslDkkvfov/NGiaXUuva7KH1KfyG/ss5n63SQEI8fCHNG7EzgHYcd8BDJZrN+ ggjCoYhb7d9tDNGnCrl+ob9zlVx0wefIPTxxOj+gOn/37S95sjF8US+TZq95kgdv JksRmb9hK4ubTOQSHP7BOW2LmPs4djAgkuQA/K7urSV2HwgquvqIa9qxgXRZ6jHD +hs/7CuPENghP6qMGajweH3CAfaX7mgw0DaUnq9E96PMYhYtpCY3M6QN7Us5uUE7 tuYMpN29g91oGA== -----END CERTIFICATE-----Generated at Mon Jan 26 15:39:53 2026 by rpki-client