This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft File: DBATeUToh60HVp7U1BKEZzLQr3A.mft (raw, json) Hash identifier: ntWJ3K1t2FS/n8LAwRNl8zOcjyp0/i18Z9AYNzpkBSs= Subject key identifier: F7:D4:BA:7B:63:2F:F8:6D:CD:15:D2:3D:67:FE:93:AA:48:B2:41:92 Authority key identifier: 0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70 Certificate issuer: /CN=0c10137944e887ad07569ed4d412846732d0af70 Certificate serial: 019BFA9C27E618F474872F566E39DA1F0F3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft Manifest number: 0FCA Signing time: Mon 26 Jan 2026 14:01:36 +0000 Manifest this update: Mon 26 Jan 2026 14:01:36 +0000 Manifest next update: Tue 27 Jan 2026 14:01:36 +0000 Files and hashes: 1: DBATeUToh60HVp7U1BKEZzLQr3A.crl (hash: D78v4fONlS3GOVg0g2MXGPUSziF98wD0g68RjHsh8LU=) 2: VOGa2OgWjgky6pjaze0aKigA4Xw.roa (hash: AEeSZ9408PCHxw0xHDJSkG2Qd0qqfMOh4o/RtotNNi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9c:27:e6:18:f4:74:87:2f:56:6e:39:da:1f:0f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c10137944e887ad07569ed4d412846732d0af70 Validity Not Before: Jan 26 14:01:36 2026 GMT Not After : Jan 27 14:01:36 2026 GMT Subject: CN=f7d4ba7b632ff86dcd15d23d67fe93aa48b24192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7e:05:af:67:1a:6c:81:de:08:01:4d:4f:fb: 63:14:d7:76:da:19:58:48:41:7f:79:8e:37:fc:6d: da:5c:12:95:ac:f4:09:15:01:40:d2:6c:71:59:8e: 15:42:25:1c:b2:aa:d3:86:4f:9f:d0:0a:65:03:78: 94:b1:1e:74:c0:7c:6c:b8:c9:45:11:a5:ff:f5:67: a2:f4:c0:f4:a2:e9:21:c0:90:3e:2c:21:94:79:55: d9:0d:3d:ff:81:11:32:47:13:25:11:55:13:49:70: 11:7e:78:35:62:d1:96:97:83:26:fc:df:dd:42:8d: 3f:b2:a5:55:04:fc:ea:02:a7:13:06:02:f7:d4:f5: cc:10:31:c5:c7:de:6a:39:6b:32:ae:83:10:b1:53: c6:50:f9:05:34:d0:06:83:84:a5:fd:94:ee:e1:ee: 5d:9d:33:a1:1c:8b:ab:da:2c:5b:b7:6d:6a:40:49: d0:ba:32:67:bd:81:2f:34:32:42:09:77:e2:f9:9f: 41:7d:63:97:80:18:f9:56:53:c6:6a:a9:86:db:9b: 94:8b:b9:76:fa:ef:66:b4:ea:27:74:36:1f:08:4a: 64:0d:0b:21:23:d8:7c:ec:75:49:d3:a4:0d:4c:42: 8b:b2:56:9f:ed:a1:c9:ed:cf:e2:3e:4e:77:4e:0d: c3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D4:BA:7B:63:2F:F8:6D:CD:15:D2:3D:67:FE:93:AA:48:B2:41:92 X509v3 Authority Key Identifier: keyid:0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:cd:f6:a3:39:d8:ea:fa:ad:38:a4:56:3c:75:f0:47:09:1a: 89:21:bf:6c:c3:a9:96:37:fa:be:fe:5a:0b:47:1c:e2:e3:92: 0c:25:8e:b7:45:ab:34:71:4d:76:89:8b:61:ff:40:26:fe:c0: 29:fd:55:3a:4a:3f:2f:12:bf:05:0a:76:9c:50:9c:a9:9b:5d: 5a:c7:62:e7:5b:c6:3d:75:53:84:14:b4:78:f6:80:6a:b9:83: 4b:26:1f:95:60:0b:ac:db:78:b7:95:d4:de:cc:d9:8d:4f:39: e5:d0:c5:7f:18:8f:82:96:5d:9e:74:be:cf:06:4a:44:c6:b8: 60:be:2d:b3:79:f0:2c:7f:d8:40:37:67:14:7d:d5:4c:69:f9: 7d:12:23:7c:26:6c:0e:61:4b:f5:27:b1:8c:dd:06:fb:44:81: 9a:87:87:29:dd:97:24:e9:6e:69:4b:a2:52:98:e8:53:1a:2e: 5b:25:5e:63:ff:c8:c5:ce:7e:9e:e9:c6:f0:60:dd:1d:9c:6a: af:86:3c:78:27:cd:f2:4c:ae:c4:bc:9d:ff:2c:91:38:b2:0c: 22:ea:ca:f6:b3:67:3c:e1:d7:d4:b6:6a:ee:0d:f9:37:da:e8: c9:04:32:2b:5e:9f:af:5c:43:ce:46:f4:33:16:12:c3:96:b0: 7b:4a:a2:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6nCfmGPR0hy9WbjnaHw8+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMTAxMzc5NDRlODg3YWQwNzU2OWVkNGQ0MTI4NDY3MzJk MGFmNzAwHhcNMjYwMTI2MTQwMTM2WhcNMjYwMTI3MTQwMTM2WjAzMTEwLwYDVQQD EyhmN2Q0YmE3YjYzMmZmODZkY2QxNWQyM2Q2N2ZlOTNhYTQ4YjI0MTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH4Fr2cabIHeCAFNT/tjFNd22hlY SEF/eY43/G3aXBKVrPQJFQFA0mxxWY4VQiUcsqrThk+f0AplA3iUsR50wHxsuMlF EaX/9Wei9MD0oukhwJA+LCGUeVXZDT3/gREyRxMlEVUTSXARfng1YtGWl4Mm/N/d Qo0/sqVVBPzqAqcTBgL31PXMEDHFx95qOWsyroMQsVPGUPkFNNAGg4Sl/ZTu4e5d nTOhHIur2ixbt21qQEnQujJnvYEvNDJCCXfi+Z9BfWOXgBj5VlPGaqmG25uUi7l2 +u9mtOondDYfCEpkDQshI9h87HVJ06QNTEKLslaf7aHJ7c/iPk53Tg3DrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfUuntjL/htzRXSPWf+k6pIskGSMB8GA1UdIwQY MBaAFAwQE3lE6IetB1ae1NQShGcy0K9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREJBVGVVVG9oNjBIVnA3VTFCS0VaekxRcjNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81ODRhNDYtM2ZkYy00MjViLWIyYjYt ZjAzYWFlMTMwMzJmLzEvREJBVGVVVG9oNjBIVnA3VTFCS0VaekxRcjNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS81ODRhNDYtM2ZkYy00MjViLWIyYjYtZjAzYWFlMTMwMzJm LzEvREJBVGVVVG9oNjBIVnA3VTFCS0VaekxRcjNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaM32oznY 6vqtOKRWPHXwRwkaiSG/bMOpljf6vv5aC0cc4uOSDCWOt0WrNHFNdomLYf9AJv7A Kf1VOko/LxK/BQp2nFCcqZtdWsdi51vGPXVThBS0ePaAarmDSyYflWALrNt4t5XU 3szZjU855dDFfxiPgpZdnnS+zwZKRMa4YL4ts3nwLH/YQDdnFH3VTGn5fRIjfCZs DmFL9SexjN0G+0SBmoeHKd2XJOluaUuiUpjoUxouWyVeY//Ixc5+nunG8GDdHZxq r4Y8eCfN8kyuxLyd/yyROLIMIurK9rNnPOHX1LZq7g35N9royQQyK16fr1xDzkb0 MxYSw5awe0qiAg== -----END CERTIFICATE-----Generated at Mon Jan 26 18:23:14 2026 by rpki-client