This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft File: dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft (raw, json) Hash identifier: b0HYlvvewRQDA5BB/IeN9mguRxpMF2stjzMOzKRx1sY= Subject key identifier: 43:E3:44:47:10:DD:38:31:69:57:DB:D8:97:25:6D:42:C4:6F:E1:EC Authority key identifier: 75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7 Certificate issuer: /CN=756fba46634d22b93db1bf46ec5a8d665e62dac7 Certificate serial: 019BFB77B379D90D09E2445AA515DD8A32CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft Manifest number: 0C56 Signing time: Mon 26 Jan 2026 18:01:24 +0000 Manifest this update: Mon 26 Jan 2026 18:01:24 +0000 Manifest next update: Tue 27 Jan 2026 18:01:24 +0000 Files and hashes: 1: W67sJZlYFgIAjOqo8xpblWxBJvA.roa (hash: IVuhnw8j7o4RQ+rJmEoiYh1oIQYgyJIY5uLBiWowino=) 2: dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl (hash: xSCE8qDVIzsqAgYu+ktXiHRyp3nmzETrzAaChF1kp1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:b3:79:d9:0d:09:e2:44:5a:a5:15:dd:8a:32:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=756fba46634d22b93db1bf46ec5a8d665e62dac7 Validity Not Before: Jan 26 18:01:24 2026 GMT Not After : Jan 27 18:01:24 2026 GMT Subject: CN=43e3444710dd38316957dbd897256d42c46fe1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6d:ee:b2:13:7e:79:04:b3:36:5f:b3:c1:14: 86:64:5b:fe:f6:f0:07:ef:12:6f:cd:e3:a8:99:32: 98:2b:cb:60:e7:96:3b:7e:2d:52:32:b6:26:08:47: d8:7b:e3:45:b2:9a:3b:90:c4:67:df:8f:71:87:b6: 52:8f:32:50:9b:0c:70:0d:6d:63:a0:da:6b:ca:7b: 36:38:69:42:78:ec:7e:d6:01:4f:5b:db:10:81:9e: 38:22:47:35:1a:45:bc:b1:12:7f:2a:fc:3f:3f:21: 1f:26:e6:fb:1e:56:7b:0e:4e:c0:03:e2:1f:e8:24: 05:da:28:b6:f3:e1:2e:05:68:97:24:7e:5b:43:36: 39:68:8c:75:5f:f9:fd:63:5e:26:c7:ab:c7:b0:41: 3f:7e:34:4b:8a:fe:dc:ee:8b:fe:51:55:67:db:41: bb:38:30:5a:d2:b8:41:0a:ce:a8:40:37:31:5f:8e: fe:2d:f6:41:66:12:b9:56:10:a6:30:5d:67:d7:1b: 2b:e7:1e:8e:50:d0:13:57:b1:8c:34:63:ac:9d:a1: 12:24:3f:1d:41:7f:47:f7:97:e2:7e:4b:2e:63:9b: e8:ae:2c:21:cd:09:b7:d6:90:96:65:76:37:06:84: cf:56:85:68:8e:12:49:e4:1f:15:da:ae:17:66:34: 8b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E3:44:47:10:DD:38:31:69:57:DB:D8:97:25:6D:42:C4:6F:E1:EC X509v3 Authority Key Identifier: keyid:75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:02:b0:ca:63:43:46:3f:27:27:43:60:78:25:3e:1e:a8:be: 21:87:d5:8c:da:65:80:b2:51:39:ce:b5:18:91:13:55:66:2b: 49:9e:22:cf:eb:66:5f:bb:84:b3:a8:9f:b0:03:d1:d2:75:d1: bc:0c:59:cd:6a:b6:21:57:22:51:9b:95:d6:de:26:90:18:55: c7:d5:a9:5f:5c:0a:d0:2c:b0:de:10:e3:64:74:e3:ed:8a:47: ac:79:2e:a9:a2:93:d8:12:7d:84:8b:5f:4f:b4:9a:2c:a4:ed: 82:ba:4f:a7:37:c9:36:58:dd:d8:e0:fe:8f:75:7c:08:30:1f: af:bb:99:96:84:a9:0e:17:b6:a1:be:a0:9b:86:73:03:54:d0: 87:d4:06:af:c3:83:4c:b5:26:d8:70:22:c6:d8:b6:34:e2:04: 25:80:23:be:bf:00:e9:78:62:54:fe:78:ef:41:2e:d3:03:28: 44:51:db:34:a6:bd:77:2d:7d:35:82:95:2a:38:17:1d:de:5a: fd:8e:ef:e8:5a:71:31:ba:38:ca:72:c8:33:8e:ed:c6:27:07: 16:f8:0d:f2:04:5a:92:46:67:45:d5:e0:96:10:9a:24:bf:c1: 7c:28:9d:d9:af:ec:a0:e7:e5:ca:06:90:f3:7c:65:3e:46:14: dc:f0:d5:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d7N52Q0J4kRapRXdijLMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NmZiYTQ2NjM0ZDIyYjkzZGIxYmY0NmVjNWE4ZDY2NWU2 MmRhYzcwHhcNMjYwMTI2MTgwMTI0WhcNMjYwMTI3MTgwMTI0WjAzMTEwLwYDVQQD Eyg0M2UzNDQ0NzEwZGQzODMxNjk1N2RiZDg5NzI1NmQ0MmM0NmZlMWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm3ushN+eQSzNl+zwRSGZFv+9vAH 7xJvzeOomTKYK8tg55Y7fi1SMrYmCEfYe+NFspo7kMRn349xh7ZSjzJQmwxwDW1j oNpryns2OGlCeOx+1gFPW9sQgZ44Ikc1GkW8sRJ/Kvw/PyEfJub7HlZ7Dk7AA+If 6CQF2ii28+EuBWiXJH5bQzY5aIx1X/n9Y14mx6vHsEE/fjRLiv7c7ov+UVVn20G7 ODBa0rhBCs6oQDcxX47+LfZBZhK5VhCmMF1n1xsr5x6OUNATV7GMNGOsnaESJD8d QX9H95fifksuY5voriwhzQm31pCWZXY3BoTPVoVojhJJ5B8V2q4XZjSLNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPjREcQ3TgxaVfb2JclbULEb+HsMB8GA1UdIwQY MBaAFHVvukZjTSK5PbG/RuxajWZeYtrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFctNlJtTk5Jcms5c2I5RzdGcU5abDVpMnNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iNjg0MjEtOTliMS00ODVlLWIyMTct ZDNhZGM3NDQ5MzkxLzEvZFctNlJtTk5Jcms5c2I5RzdGcU5abDVpMnNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9iNjg0MjEtOTliMS00ODVlLWIyMTctZDNhZGM3NDQ5Mzkx LzEvZFctNlJtTk5Jcms5c2I5RzdGcU5abDVpMnNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAKwymND Rj8nJ0NgeCU+Hqi+IYfVjNplgLJROc61GJETVWYrSZ4iz+tmX7uEs6ifsAPR0nXR vAxZzWq2IVciUZuV1t4mkBhVx9WpX1wK0Cyw3hDjZHTj7YpHrHkuqaKT2BJ9hItf T7SaLKTtgrpPpzfJNljd2OD+j3V8CDAfr7uZloSpDhe2ob6gm4ZzA1TQh9QGr8OD TLUm2HAixti2NOIEJYAjvr8A6XhiVP5470Eu0wMoRFHbNKa9dy19NYKVKjgXHd5a /Y7v6FpxMbo4ynLIM47txicHFvgN8gRakkZnRdXglhCaJL/BfCid2a/soOflygaQ 83xlPkYU3PDVXw== -----END CERTIFICATE-----Generated at Tue Jan 27 00:36:47 2026 by rpki-client