This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json) Hash identifier: kFwZi68JXkvrlGhRZiCbx0wseicLAhV2iisSYA1QPVA= Subject key identifier: AA:08:1A:03:44:43:7F:EE:73:FB:14:0C:A7:37:6E:8E:AC:9F:53:7C Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32 Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632 Certificate serial: 019BCE307AB035FD27FF7C962D9FB855BE6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft Manifest number: 0D2F Signing time: Sat 17 Jan 2026 23:00:42 +0000 Manifest this update: Sat 17 Jan 2026 23:00:42 +0000 Manifest next update: Sun 18 Jan 2026 23:00:42 +0000 Files and hashes: 1: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: 0m+u6T1iiUu1bT1LefbluZ6wme6X/hCM/9/XUs95DTs=) 2: gabLNz-9haR8x0JVvUH9RWZfT3o.roa (hash: elMsH5/2kflaBwBGb1wo4RBVBbTZ4kW2OpPSbwpINts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ce:30:7a:b0:35:fd:27:ff:7c:96:2d:9f:b8:55:be:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632 Validity Not Before: Jan 17 23:00:42 2026 GMT Not After : Jan 18 23:00:42 2026 GMT Subject: CN=aa081a0344437fee73fb140ca7376e8eac9f537c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:12:d1:44:4f:84:74:b4:a8:53:14:88:15:9a: 2f:4f:57:e5:22:c7:e6:9a:9b:09:7f:64:aa:58:d6: 5e:8b:37:03:be:fa:24:22:36:1f:10:a5:1d:ff:73: 42:5f:f8:49:a2:43:e6:a3:91:f0:0a:fa:c7:e5:8e: ca:a4:38:23:c7:82:4b:fb:de:0a:d2:36:e1:02:2d: 11:a0:97:a8:9a:35:8a:0b:cc:3c:8e:1a:a7:85:a1: 16:36:ca:ab:04:35:91:83:05:a9:df:c3:8b:62:56: cf:a6:b1:c5:79:e9:50:52:d1:9d:ad:13:b7:c0:07: 2b:6e:1e:65:fa:ea:f1:de:5b:1f:92:72:cb:84:70: df:f9:7b:b2:ba:4f:43:8f:87:47:bc:59:15:b9:15: 54:5d:62:7c:aa:be:41:48:4a:08:e8:a2:59:12:77: 1c:a1:fd:35:72:d6:84:47:1b:51:d5:bf:14:33:d4: ee:43:d0:ea:60:73:ba:2a:06:b0:dc:ec:00:f0:89: eb:49:e1:ed:10:12:05:39:f2:40:3a:82:05:1f:b2: 3a:57:37:6d:9f:24:11:0a:28:4c:15:82:e6:cf:57: 07:52:aa:49:b6:3e:39:4e:d5:7e:29:28:26:34:0c: 2e:dd:e1:31:df:8a:c6:00:1d:4c:0d:6b:9a:2e:35: e4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:08:1A:03:44:43:7F:EE:73:FB:14:0C:A7:37:6E:8E:AC:9F:53:7C X509v3 Authority Key Identifier: keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:91:2a:e0:70:f8:0d:d0:4c:36:ec:88:4a:4f:e3:13:3b:ac: e2:fe:0d:18:68:24:7e:99:ff:a5:31:f8:70:0a:ab:40:dd:d7: b9:4f:64:5e:53:70:dd:22:6c:61:e3:62:56:4d:64:71:3b:ad: 71:84:4b:0a:62:b7:9c:f1:7b:92:bf:6b:ae:58:45:5e:1b:d7: 70:1c:39:81:0d:75:ba:cf:df:b3:0e:4f:e8:9d:95:d9:67:31: bf:02:76:7f:75:df:e3:29:03:6b:1b:60:a4:e2:de:d4:3e:0c: a0:7c:69:27:a0:a9:88:61:ba:a4:2e:2e:66:e2:5b:01:ac:ce: 5e:db:f4:43:9b:7a:09:17:ff:32:f4:6c:d3:f7:22:63:91:0f: 4e:98:ef:11:11:9d:63:82:d7:94:20:70:1c:a2:a0:dc:43:0a: 92:57:ab:e2:18:9d:d5:db:20:5a:c3:e1:5e:9e:b3:fd:4e:44: a1:fa:a5:7a:a7:06:fb:00:ff:8e:fa:87:ba:e6:d8:42:ad:6a: da:fe:20:43:9c:66:3c:cd:7e:c5:a8:7e:15:8c:52:18:05:4c: dc:bd:09:7b:55:c9:11:e0:ae:92:a9:82:88:0e:4a:fc:5f:66: 46:e6:5c:d4:7e:55:55:f6:77:aa:8a:86:3f:83:bc:17:c6:05: 26:b4:e5:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvOMHqwNf0n/3yWLZ+4Vb5tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OGUxMzRlNGZmYjVmYjEzYWMyODRmZTk0ODgyNzY4MjYx NTY2MzIwHhcNMjYwMTE3MjMwMDQyWhcNMjYwMTE4MjMwMDQyWjAzMTEwLwYDVQQD EyhhYTA4MWEwMzQ0NDM3ZmVlNzNmYjE0MGNhNzM3NmU4ZWFjOWY1MzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBLRRE+EdLSoUxSIFZovT1flIsfm mpsJf2SqWNZeizcDvvokIjYfEKUd/3NCX/hJokPmo5HwCvrH5Y7KpDgjx4JL+94K 0jbhAi0RoJeomjWKC8w8jhqnhaEWNsqrBDWRgwWp38OLYlbPprHFeelQUtGdrRO3 wAcrbh5l+urx3lsfknLLhHDf+Xuyuk9Dj4dHvFkVuRVUXWJ8qr5BSEoI6KJZEncc of01ctaERxtR1b8UM9TuQ9DqYHO6Kgaw3OwA8InrSeHtEBIFOfJAOoIFH7I6Vzdt nyQRCihMFYLmz1cHUqpJtj45TtV+KSgmNAwu3eEx34rGAB1MDWuaLjXkxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoIGgNEQ3/uc/sUDKc3bo6sn1N8MB8GA1UdIwQY MBaAFHeOE05P+1+xOsKE/pSIJ2gmFWYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUt MDk5YmFkMDM3NjhlLzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy81ODQxYjEtMDEyZi00MDQ2LWIxZDUtMDk5YmFkMDM3Njhl LzEvZDQ0VFRrXzdYN0U2d29ULWxJZ25hQ1lWWmpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJEq4HD4 DdBMNuyISk/jEzus4v4NGGgkfpn/pTH4cAqrQN3XuU9kXlNw3SJsYeNiVk1kcTut cYRLCmK3nPF7kr9rrlhFXhvXcBw5gQ11us/fsw5P6J2V2WcxvwJ2f3Xf4ykDaxtg pOLe1D4MoHxpJ6CpiGG6pC4uZuJbAazOXtv0Q5t6CRf/MvRs0/ciY5EPTpjvERGd Y4LXlCBwHKKg3EMKkler4hid1dsgWsPhXp6z/U5EofqleqcG+wD/jvqHuubYQq1q 2v4gQ5xmPM1+xah+FYxSGAVM3L0Je1XJEeCukqmCiA5K/F9mRuZc1H5VVfZ3qoqG P4O8F8YFJrTlNQ== -----END CERTIFICATE-----Generated at Sun Jan 18 09:44:10 2026 by rpki-client