This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft File: dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json) Hash identifier: L0XChzmI+oxxjm3toYvuQZ7cJUkK64Z0A+Ycwj8ohnA= Subject key identifier: 67:7D:50:81:89:53:0C:2E:78:D0:F5:67:41:B3:11:9C:68:1F:32:0B Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63 Certificate issuer: /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63 Certificate serial: 019C0631E93DC89EDA1C0783326A967369DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft Manifest number: 0C1A Signing time: Wed 28 Jan 2026 20:00:59 +0000 Manifest this update: Wed 28 Jan 2026 20:00:59 +0000 Manifest next update: Thu 29 Jan 2026 20:00:59 +0000 Files and hashes: 1: cLTBY0x98iSs-6Cq3vbECPm_74w.asa (hash: 8w6sqSdlGvX1lbVCngXKKl24zTm7KhQKQzRK40Ycchc=) 2: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: kqub63ncs9V/904H3Ipxd8fRbwwQAIpy3+U58uDPIqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:06:31:e9:3d:c8:9e:da:1c:07:83:32:6a:96:73:69:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63 Validity Not Before: Jan 28 20:00:59 2026 GMT Not After : Jan 29 20:00:59 2026 GMT Subject: CN=677d508189530c2e78d0f56741b3119c681f320b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:44:24:46:48:72:fa:0f:dd:0a:78:bc:55:83: 56:66:6d:c4:ae:ed:88:4a:28:a8:89:ba:68:a6:9a: 41:bc:7b:ce:6d:8c:b0:4d:a8:35:07:b6:f0:53:49: cf:44:4d:dd:02:b5:b3:e2:db:bd:26:8c:f5:9a:d1: 2a:5c:74:d7:ad:71:1b:82:57:f4:2a:20:fd:31:3c: 2a:dc:fd:de:64:cc:b9:3c:32:d7:0d:bf:c4:fe:3d: 30:ef:93:d7:74:a5:0f:2d:9b:f1:81:b0:df:27:80: 51:9a:85:1b:be:24:ee:87:b4:0b:41:2b:b2:e1:f0: f9:f0:7e:ce:0b:6a:56:2e:c0:6d:b1:b0:a3:98:1e: 02:7a:6d:3a:eb:5e:1d:5b:d2:b0:7f:bf:62:5a:46: 72:1c:6a:db:4b:fa:e7:7e:46:07:49:d0:8f:1d:d1: 66:a1:5d:d8:01:30:67:97:3d:20:9c:cc:f8:26:2d: 6a:c3:ec:bb:71:ae:91:22:c7:a3:27:af:7c:6b:98: 45:31:8c:46:d3:1b:1d:88:6f:5f:da:4c:5c:0d:03: 80:5f:21:d9:a8:fe:5e:d5:c6:fc:f0:dd:e3:ad:eb: fc:57:38:f1:ac:e7:fb:56:bb:ea:99:48:18:12:a2: 66:2d:68:10:a8:30:3f:d6:86:b9:f5:fb:c7:82:2f: 3a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7D:50:81:89:53:0C:2E:78:D0:F5:67:41:B3:11:9C:68:1F:32:0B X509v3 Authority Key Identifier: keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:85:3f:e6:f7:b5:81:59:62:68:63:a5:f0:b4:c2:d6:3f:dc: 7c:48:34:09:95:98:cf:f0:ec:70:01:9d:2b:3d:63:2c:7c:b8: 3b:94:05:86:a9:54:ce:94:ac:5c:dd:50:d0:25:80:62:ef:29: 16:90:ce:14:79:10:0c:54:21:e5:1f:ea:07:46:db:1c:22:21: 80:c5:99:65:5e:05:56:21:db:9c:10:10:d0:97:be:0e:91:e9: 6a:e4:53:85:7f:c5:4b:af:3f:a0:00:73:5a:e7:75:f1:b1:9e: 35:c8:c9:aa:9c:0e:2c:9b:d9:39:0d:87:10:f0:d2:77:38:a4: 2e:11:81:e9:f0:37:2e:5e:c2:99:db:08:d1:ec:30:8d:0d:7d: a2:34:3b:41:fa:8b:f1:fe:0e:a3:78:8b:d1:74:94:95:ff:e3: 8a:7f:61:87:d1:02:a7:1a:de:91:1c:61:6f:ef:a9:e3:fb:e6: 4d:b0:7b:47:c7:8e:ff:99:6a:9a:2e:43:53:93:2f:45:24:b4: c1:1a:38:83:0d:23:a0:6f:8f:f7:5f:62:02:c9:ab:3d:49:7a: 40:2a:ba:3e:9b:52:47:2d:31:1b:f8:bd:2a:11:6e:3a:1b:b7: 73:79:a5:8c:e2:90:4a:78:40:04:79:a3:a9:30:d8:e4:ba:b2: 49:7c:3c:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwGMek9yJ7aHAeDMmqWc2naMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1OWFhYTM2MTUwZWUxNTVjM2I1MWFkOWM3MDdmNmM0M2Jm MmJlNjMwHhcNMjYwMTI4MjAwMDU5WhcNMjYwMTI5MjAwMDU5WjAzMTEwLwYDVQQD Eyg2NzdkNTA4MTg5NTMwYzJlNzhkMGY1Njc0MWIzMTE5YzY4MWYzMjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEQkRkhy+g/dCni8VYNWZm3Eru2I SiioibpopppBvHvObYywTag1B7bwU0nPRE3dArWz4tu9Joz1mtEqXHTXrXEbglf0 KiD9MTwq3P3eZMy5PDLXDb/E/j0w75PXdKUPLZvxgbDfJ4BRmoUbviTuh7QLQSuy 4fD58H7OC2pWLsBtsbCjmB4Cem06614dW9Kwf79iWkZyHGrbS/rnfkYHSdCPHdFm oV3YATBnlz0gnMz4Ji1qw+y7ca6RIsejJ698a5hFMYxG0xsdiG9f2kxcDQOAXyHZ qP5e1cb88N3jrev8VzjxrOf7VrvqmUgYEqJmLWgQqDA/1oa59fvHgi86owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGd9UIGJUwwueND1Z0GzEZxoHzILMB8GA1UdIwQY MBaAFHWaqjYVDuFVw7Ua2ccH9sQ78r5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFpxcU5oVU80VlhEdFJyWnh3ZjJ4RHZ5dm1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mMmFmZGYtZTNjYy00OTM5LWFlNGUt NzNkMTBkNWI5ZmVjLzEvZFpxcU5oVU80VlhEdFJyWnh3ZjJ4RHZ5dm1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9mMmFmZGYtZTNjYy00OTM5LWFlNGUtNzNkMTBkNWI5ZmVj LzEvZFpxcU5oVU80VlhEdFJyWnh3ZjJ4RHZ5dm1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOoU/5ve1 gVliaGOl8LTC1j/cfEg0CZWYz/DscAGdKz1jLHy4O5QFhqlUzpSsXN1Q0CWAYu8p FpDOFHkQDFQh5R/qB0bbHCIhgMWZZV4FViHbnBAQ0Je+DpHpauRThX/FS68/oABz Wud18bGeNcjJqpwOLJvZOQ2HEPDSdzikLhGB6fA3Ll7CmdsI0ewwjQ19ojQ7QfqL 8f4Oo3iL0XSUlf/jin9hh9ECpxrekRxhb++p4/vmTbB7R8eO/5lqmi5DU5MvRSS0 wRo4gw0joG+P919iAsmrPUl6QCq6PptSRy0xG/i9KhFuOhu3c3mljOKQSnhABHmj qTDY5LqySXw8jA== -----END CERTIFICATE-----Generated at Thu Jan 29 05:22:41 2026 by rpki-client