This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft File: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft (raw, json) Hash identifier: smjivZr/eXAtkaO8ShazxeU7Yg8nGZHQqxt547oUAZE= Subject key identifier: 81:EE:1D:0C:70:2E:B4:89:10:72:B8:6D:E8:9E:14:34:C8:87:FC:11 Authority key identifier: 75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2 Certificate issuer: /CN=75b345562d5718b6c4b206b1ae304fc68436adb2 Certificate serial: 019BFA64EC9AE3AFCF64723673E44A756B21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 13:01:16 +0000 Manifest this update: Mon 26 Jan 2026 13:01:16 +0000 Manifest next update: Tue 27 Jan 2026 13:01:16 +0000 Files and hashes: 1: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl (hash: xFhtCyuFTsPm7YOWXUdTA4z3wv7kOz0xaaCX47czpyo=) 2: lAqIj2UybXhOPBtGQcLNXWIjono.roa (hash: UVYOgTudlzpIM7zdesRsrm334w88DrZr8YDCmf2V4Cs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:ec:9a:e3:af:cf:64:72:36:73:e4:4a:75:6b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b345562d5718b6c4b206b1ae304fc68436adb2 Validity Not Before: Jan 26 13:01:16 2026 GMT Not After : Jan 27 13:01:16 2026 GMT Subject: CN=81ee1d0c702eb4891072b86de89e1434c887fc11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f8:a6:da:86:2c:3b:f0:11:29:86:52:38:d4: 0a:b7:86:81:f3:ff:9a:a7:8a:69:ee:77:92:e9:07: 08:9f:f6:54:ea:22:38:55:fa:57:c1:70:d7:1f:a2: d3:e2:63:3c:e1:4f:b7:4c:c6:1b:80:82:34:d2:2a: 12:1f:b1:14:76:96:18:70:cd:35:04:7a:9f:ec:fb: 91:4e:0a:4a:ac:19:30:86:6f:26:10:65:60:73:17: a9:92:83:f6:dd:44:85:78:4a:bd:f7:73:b9:d5:42: 7e:a8:82:dd:cc:69:cd:be:01:26:77:58:ef:b8:bb: 44:2d:7e:3c:19:35:ba:92:5f:bc:fc:58:40:47:84: 00:66:f2:09:5f:42:2c:c9:6e:f5:97:98:12:13:fe: 27:e8:a0:d1:51:ba:0b:fb:27:40:7c:d5:62:24:08: bc:42:85:53:04:69:e8:db:9d:1f:bd:60:17:2e:37: ee:96:ed:68:9b:94:f9:9f:41:a0:e0:ae:2b:74:94: f2:f7:eb:eb:4e:89:b3:a9:ff:95:66:01:8e:68:a2: ee:ab:f7:a2:56:75:b1:1c:f3:54:8d:c2:3b:47:04: ee:6e:83:d2:4a:b4:74:cb:d3:7b:64:32:27:64:cb: 22:b1:51:29:8f:35:f5:34:6f:96:c2:f8:a9:b4:96: 4e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:EE:1D:0C:70:2E:B4:89:10:72:B8:6D:E8:9E:14:34:C8:87:FC:11 X509v3 Authority Key Identifier: keyid:75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f3:9f:14:25:41:41:fa:df:78:5e:f7:bc:f0:fe:d8:5b:5f: 39:48:39:6a:b4:55:39:47:fb:74:4b:ed:d8:8e:87:1a:41:d4: 5c:ea:b5:fb:66:e5:cd:cb:f9:0d:cf:3a:35:a9:25:34:50:dd: 88:7e:45:e4:77:a9:eb:fe:6f:90:21:1d:75:9b:42:0b:43:2e: c9:17:fb:b4:6b:f8:92:03:7a:6e:e1:1e:b5:9a:9d:7f:65:89: d1:bd:6d:91:b7:09:53:75:69:b4:fd:aa:b9:0b:41:96:1b:48: e0:30:c8:90:4c:f6:5b:e6:45:fe:e7:01:02:54:ae:84:5a:bf: e7:22:04:ac:df:31:c8:fb:86:92:4f:a6:82:71:7a:ce:fe:14: f4:8a:42:aa:99:17:be:f7:32:74:71:5a:e6:2e:6c:a8:61:6e: d1:a9:f1:d1:e4:cb:67:2c:c7:0f:5a:b6:8b:c4:80:8c:1a:dc: ae:e2:89:e4:12:13:61:a1:96:21:7c:f4:9a:19:fc:69:26:09: 4b:a5:cd:40:d4:e8:c9:8f:2c:d5:43:02:ee:9c:99:af:60:b8: 2b:e2:37:0a:5a:d3:b4:de:29:8f:c7:6f:6d:09:9f:4d:42:38: d5:a1:85:60:0b:b6:f9:32:cb:04:b9:e2:ff:af:6e:61:dc:2d: 3b:22:d2:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZOya46/PZHI2c+RKdWshMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YjM0NTU2MmQ1NzE4YjZjNGIyMDZiMWFlMzA0ZmM2ODQz NmFkYjIwHhcNMjYwMTI2MTMwMTE2WhcNMjYwMTI3MTMwMTE2WjAzMTEwLwYDVQQD Eyg4MWVlMWQwYzcwMmViNDg5MTA3MmI4NmRlODllMTQzNGM4ODdmYzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPim2oYsO/ARKYZSONQKt4aB8/+a p4pp7neS6QcIn/ZU6iI4VfpXwXDXH6LT4mM84U+3TMYbgII00ioSH7EUdpYYcM01 BHqf7PuRTgpKrBkwhm8mEGVgcxepkoP23USFeEq993O51UJ+qILdzGnNvgEmd1jv uLtELX48GTW6kl+8/FhAR4QAZvIJX0IsyW71l5gSE/4n6KDRUboL+ydAfNViJAi8 QoVTBGno250fvWAXLjfulu1om5T5n0Gg4K4rdJTy9+vrTomzqf+VZgGOaKLuq/ei VnWxHPNUjcI7RwTuboPSSrR0y9N7ZDInZMsisVEpjzX1NG+WwviptJZOqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHuHQxwLrSJEHK4beieFDTIh/wRMB8GA1UdIwQY MBaAFHWzRVYtVxi2xLIGsa4wT8aENq2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zMGVhZWUtMWFkNy00ZTczLWE0ZGMt OGFlNTFmNjJkMjE4LzEvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8zMGVhZWUtMWFkNy00ZTczLWE0ZGMtOGFlNTFmNjJkMjE4 LzEvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/OfFCVB QfrfeF73vPD+2FtfOUg5arRVOUf7dEvt2I6HGkHUXOq1+2blzcv5Dc86NaklNFDd iH5F5Hep6/5vkCEddZtCC0MuyRf7tGv4kgN6buEetZqdf2WJ0b1tkbcJU3VptP2q uQtBlhtI4DDIkEz2W+ZF/ucBAlSuhFq/5yIErN8xyPuGkk+mgnF6zv4U9IpCqpkX vvcydHFa5i5sqGFu0anx0eTLZyzHD1q2i8SAjBrcruKJ5BITYaGWIXz0mhn8aSYJ S6XNQNToyY8s1UMC7pyZr2C4K+I3ClrTtN4pj8dvbQmfTUI41aGFYAu2+TLLBLni /69uYdwtOyLSYg== -----END CERTIFICATE-----Generated at Mon Jan 26 18:22:00 2026 by rpki-client