This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json) Hash identifier: Cz+3JqrfCgla5XtwLn1gW/8XxgY2PV6Qzs8fpDjVw+s= Subject key identifier: FC:0F:44:35:30:D7:B3:93:5E:E1:05:65:6D:DF:5B:C3:23:41:BC:AB Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51 Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51 Certificate serial: 019BE0A4FBBFF95EBE7F3F2685E036DDC84F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft Manifest number: 0682 Signing time: Wed 21 Jan 2026 13:01:07 +0000 Manifest this update: Wed 21 Jan 2026 13:01:07 +0000 Manifest next update: Thu 22 Jan 2026 13:01:07 +0000 Files and hashes: 1: 3oD6UkoDNe0rtJWj8HxpE6jlak0.roa (hash: R/cwbFv0lOGUpDjFofG3nbPlnQvyiD5HE3kAtqBG9wA=) 2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: fhzpQJxqk6T+vwZbF/FkLSoYGYeiswBaL39VDLYgvVM=) 3: i1-MRvdMDpnMLALR5PXvq3Ies1U.roa (hash: HEuTRcWCE5Yae2e9tc9P+E6KpceFFBapRR9OHKeJssE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:a4:fb:bf:f9:5e:be:7f:3f:26:85:e0:36:dd:c8:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51 Validity Not Before: Jan 21 13:01:07 2026 GMT Not After : Jan 22 13:01:07 2026 GMT Subject: CN=fc0f443530d7b3935ee105656ddf5bc32341bcab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0e:69:16:4d:51:b1:9c:0a:7b:c1:68:c4:2f: 14:ac:70:40:05:81:79:ed:ec:61:15:81:c3:f1:6d: 31:97:22:7b:a1:1f:f7:59:84:85:2c:08:28:96:7a: 8c:40:ff:b1:c6:57:f5:c2:60:92:6f:78:da:bf:5a: 69:8f:ba:8e:dd:1c:9d:1b:2d:69:f7:2c:4a:42:ab: d7:7f:47:df:90:b2:65:5d:55:15:98:c5:3b:fb:d5: e9:ba:ba:09:e0:c6:c1:7a:60:a4:4c:35:bb:59:30: 2e:42:93:f4:ab:f0:c2:d8:91:b1:74:56:c7:d2:dc: 26:6d:c7:95:5a:94:c2:74:29:e9:b0:16:ea:8a:9b: fb:c0:de:60:be:ba:e9:a5:a0:84:ad:1d:3b:ab:36: ca:8c:a4:21:b3:c9:94:3a:54:fe:3d:76:73:09:4e: 4a:79:4e:f9:70:a3:c6:42:19:f4:ba:5d:95:0d:98: 1a:11:2d:ab:ae:60:a0:18:34:1b:bc:b2:56:10:66: 27:cb:28:43:ac:c7:3c:45:9c:8b:f9:2f:35:c0:0e: fb:37:4c:79:1c:ce:52:33:21:67:3c:5a:35:fa:cd: ca:9f:b6:26:2f:51:b6:75:03:57:15:e3:4e:77:af: 0c:1d:11:d0:c0:b7:6a:fc:f0:cf:70:6e:25:27:e3: 3a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0F:44:35:30:D7:B3:93:5E:E1:05:65:6D:DF:5B:C3:23:41:BC:AB X509v3 Authority Key Identifier: keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:95:6a:93:dd:75:0d:90:4c:ca:82:fd:8d:0c:99:03:e6:df: 09:38:79:96:5c:88:e4:54:49:b8:bd:bb:fe:49:aa:f1:bc:32: 9d:76:88:19:04:a0:27:3e:15:7a:37:2b:f7:2f:da:2e:eb:a4: 27:e9:34:a8:2b:bb:80:a5:b8:55:f0:e4:cb:52:a3:cb:d0:7c: 36:ed:89:6b:54:f3:a1:63:22:aa:7a:e7:8e:4f:1d:5b:10:05: 5a:e4:39:9e:f6:36:fa:7a:4f:73:31:9d:26:1c:8c:0c:a8:8d: 6a:2d:65:ce:69:d5:a7:2f:03:fc:2c:8b:c1:78:9e:53:a1:33: ff:11:89:dc:b7:7e:06:55:d8:ff:45:84:8e:27:b7:b5:bd:5f: a9:0e:98:f0:da:19:40:47:b1:c5:d2:38:1a:20:3c:10:26:c9: 02:c7:70:a6:83:3b:7e:ab:cb:bf:8c:0f:b0:0e:ba:48:b8:ff: b8:d2:06:1f:89:7d:00:2d:23:8b:6b:1f:47:42:e6:f9:c5:f8: bf:d4:8e:7f:a2:1c:da:bd:7f:c6:b4:9b:34:a4:6f:d7:ba:9a: 08:6f:50:6d:75:d9:6c:90:a1:62:e5:84:3d:d1:19:64:0b:06: fd:a9:f4:fa:0c:87:d4:b1:a6:60:a5:56:a1:87:2a:33:51:18: 58:4e:8d:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgpPu/+V6+fz8mheA23chPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNjg1OWZlYmE3ODM0YzkzMjJiN2M2ZjZiZDgxYmQzYmVm NWNlNTEwHhcNMjYwMTIxMTMwMTA3WhcNMjYwMTIyMTMwMTA3WjAzMTEwLwYDVQQD EyhmYzBmNDQzNTMwZDdiMzkzNWVlMTA1NjU2ZGRmNWJjMzIzNDFiY2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg5pFk1RsZwKe8FoxC8UrHBABYF5 7exhFYHD8W0xlyJ7oR/3WYSFLAgolnqMQP+xxlf1wmCSb3jav1ppj7qO3RydGy1p 9yxKQqvXf0ffkLJlXVUVmMU7+9XpuroJ4MbBemCkTDW7WTAuQpP0q/DC2JGxdFbH 0twmbceVWpTCdCnpsBbqipv7wN5gvrrppaCErR07qzbKjKQhs8mUOlT+PXZzCU5K eU75cKPGQhn0ul2VDZgaES2rrmCgGDQbvLJWEGYnyyhDrMc8RZyL+S81wA77N0x5 HM5SMyFnPFo1+s3Kn7YmL1G2dQNXFeNOd68MHRHQwLdq/PDPcG4lJ+M6SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwPRDUw17OTXuEFZW3fW8MjQbyrMB8GA1UdIwQY MBaAFAxoWf66eDTJMit8b2vYG9O+9c5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAt NzdmY2E3YTMwYjlmLzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAtNzdmY2E3YTMwYjlm LzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArZVqk911 DZBMyoL9jQyZA+bfCTh5llyI5FRJuL27/kmq8bwynXaIGQSgJz4Vejcr9y/aLuuk J+k0qCu7gKW4VfDky1Kjy9B8Nu2Ja1TzoWMiqnrnjk8dWxAFWuQ5nvY2+npPczGd JhyMDKiNai1lzmnVpy8D/CyLwXieU6Ez/xGJ3Ld+BlXY/0WEjie3tb1fqQ6Y8NoZ QEexxdI4GiA8ECbJAsdwpoM7fqvLv4wPsA66SLj/uNIGH4l9AC0ji2sfR0Lm+cX4 v9SOf6Ic2r1/xrSbNKRv17qaCG9QbXXZbJChYuWEPdEZZAsG/an0+gyH1LGmYKVW oYcqM1EYWE6Nng== -----END CERTIFICATE-----Generated at Wed Jan 21 14:34:21 2026 by rpki-client