This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json) Hash identifier: kzRbwLM2972r3l52UG4LaO3DSmXO1u9fddr5PZ7KXAU= Subject key identifier: 43:01:95:1B:2D:DA:EF:8D:58:FE:B3:5B:91:3D:BD:10:F2:08:E1:60 Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00 Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00 Certificate serial: 019BFCF857417B8921236068300DC00619EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft Manifest number: 0339 Signing time: Tue 27 Jan 2026 01:01:32 +0000 Manifest this update: Tue 27 Jan 2026 01:01:32 +0000 Manifest next update: Wed 28 Jan 2026 01:01:32 +0000 Files and hashes: 1: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: okshAHl+tjbN61TILMEIVjiWSrTo23Kgl0ve8ab1W5A=) 2: SlA5tSP0JsNUjyJD0_sJwHDnin4.roa (hash: bKdVeFE4Poy+cUlHJCjz5CZJ/t5ehlZqsw1uXknJEjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:57:41:7b:89:21:23:60:68:30:0d:c0:06:19:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00 Validity Not Before: Jan 27 01:01:32 2026 GMT Not After : Jan 28 01:01:32 2026 GMT Subject: CN=4301951b2ddaef8d58feb35b913dbd10f208e160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:75:56:50:18:68:5a:f2:49:0b:cf:5c:37:de: 1d:d5:4a:80:75:82:5d:f8:d7:a2:65:53:13:62:0d: 17:ca:53:c9:d1:ee:51:de:4b:3b:22:6f:ef:2d:9c: 6d:bb:51:9b:44:51:f5:e1:ae:4b:e0:ae:28:94:f4: a1:d3:93:38:fe:cb:e9:9f:18:ec:9f:9a:c7:0f:20: d1:85:8c:7c:c5:2f:e0:dc:eb:ce:a9:22:dd:c9:a0: 0e:2d:7b:f3:45:52:46:c8:85:68:26:48:67:86:e7: f2:d1:a8:63:52:e0:93:a6:33:28:cb:3a:53:24:54: 1f:72:62:f6:29:da:b6:76:3a:d3:89:ed:01:9c:44: ec:52:56:e1:19:b8:4b:39:14:b5:b1:da:64:2c:bf: b6:65:e2:bf:27:85:4b:88:47:5b:50:58:7a:80:07: d4:70:d6:69:ef:92:fc:cc:4d:d2:f7:38:46:35:2f: e2:14:2e:42:c8:ff:cc:09:9c:55:e4:4c:e9:61:23: b4:38:4e:1c:23:a9:7d:1b:ce:72:36:de:41:50:89: 8f:af:01:22:6b:58:06:d6:a2:a3:af:01:b3:df:2e: 69:56:df:90:da:c5:a5:8d:4a:87:16:37:3d:f1:7d: 06:a3:dc:0a:94:86:53:7c:46:b2:0d:1e:1a:20:c7: c7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:01:95:1B:2D:DA:EF:8D:58:FE:B3:5B:91:3D:BD:10:F2:08:E1:60 X509v3 Authority Key Identifier: keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d8:54:7d:a1:aa:1a:52:ec:2e:2b:a7:39:cc:41:55:82:76: 0a:57:0e:81:7a:48:7e:19:1a:72:13:56:ec:ca:77:1a:fd:6c: b2:18:59:6c:ec:16:ec:f4:51:f8:eb:f4:3e:15:a4:d6:47:d4: d7:3c:39:31:c1:46:25:ed:e5:70:7f:23:a5:c9:ee:d3:b6:e9: 4d:97:f6:24:26:dc:ab:89:ac:83:32:b1:f3:e6:53:2a:44:d7: 46:80:74:f3:f1:c4:b0:62:93:c9:aa:c8:29:7a:06:bf:81:ed: 2d:11:eb:cd:6b:05:ab:de:32:d4:a7:6a:2b:10:7e:2f:fa:7b: 4b:06:ee:52:62:89:97:a4:be:4f:97:49:2e:92:ff:70:88:fa: 25:1b:05:23:31:be:cc:03:fb:0a:f1:05:7d:db:e8:f2:5a:60: 7c:95:d9:44:94:13:62:f1:6f:8c:40:21:9a:75:4d:ff:54:ca: a8:83:f7:d5:dc:ba:12:c4:7a:50:68:19:4d:e5:8c:30:18:12: 1b:3d:9c:13:7c:ab:c1:24:7f:01:38:c9:09:9b:59:01:9c:5a: 34:a3:b5:18:d2:70:d7:ed:35:bf:9c:5c:1a:06:00:36:ac:a1: 3b:0a:34:ba:b0:e0:95:2b:71:a4:4c:05:86:84:6e:0d:00:37: fb:4c:23:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+FdBe4khI2BoMA3ABhnsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTJkZDA1ZjY4YWExYTMyNGFkNWJjMTI0NzZjNWI5YTYx ZWJjMDAwHhcNMjYwMTI3MDEwMTMyWhcNMjYwMTI4MDEwMTMyWjAzMTEwLwYDVQQD Eyg0MzAxOTUxYjJkZGFlZjhkNThmZWIzNWI5MTNkYmQxMGYyMDhlMTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHVWUBhoWvJJC89cN94d1UqAdYJd +NeiZVMTYg0XylPJ0e5R3ks7Im/vLZxtu1GbRFH14a5L4K4olPSh05M4/svpnxjs n5rHDyDRhYx8xS/g3OvOqSLdyaAOLXvzRVJGyIVoJkhnhufy0ahjUuCTpjMoyzpT JFQfcmL2Kdq2djrTie0BnETsUlbhGbhLORS1sdpkLL+2ZeK/J4VLiEdbUFh6gAfU cNZp75L8zE3S9zhGNS/iFC5CyP/MCZxV5EzpYSO0OE4cI6l9G85yNt5BUImPrwEi a1gG1qKjrwGz3y5pVt+Q2sWljUqHFjc98X0Go9wKlIZTfEayDR4aIMfH4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMBlRst2u+NWP6zW5E9vRDyCOFgMB8GA1UdIwQY MBaAFAxS3QX2iqGjJK1bwSR2xbmmHrwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYjRlNTctNWViNC00YjlkLWJjMjYt NzA3NDllN2E0ZDk0LzEvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xYjRlNTctNWViNC00YjlkLWJjMjYtNzA3NDllN2E0ZDk0 LzEvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdhUfaGq GlLsLiunOcxBVYJ2ClcOgXpIfhkachNW7Mp3Gv1sshhZbOwW7PRR+Ov0PhWk1kfU 1zw5McFGJe3lcH8jpcnu07bpTZf2JCbcq4msgzKx8+ZTKkTXRoB08/HEsGKTyarI KXoGv4HtLRHrzWsFq94y1KdqKxB+L/p7SwbuUmKJl6S+T5dJLpL/cIj6JRsFIzG+ zAP7CvEFfdvo8lpgfJXZRJQTYvFvjEAhmnVN/1TKqIP31dy6EsR6UGgZTeWMMBgS Gz2cE3yrwSR/ATjJCZtZAZxaNKO1GNJw1+01v5xcGgYANqyhOwo0urDglStxpEwF hoRuDQA3+0wjkg== -----END CERTIFICATE-----Generated at Tue Jan 27 03:55:26 2026 by rpki-client