This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: jKpIhlrELZ+3shfB6YNPpV+ZFEmeObKHGOF/4Voece4= Subject key identifier: 41:AE:1D:E0:6F:F7:1B:A0:CC:46:41:29:6C:56:20:E9:F1:55:2E:A0 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019BFD65DCFCE898092062D71721D235BF5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 11B9 Signing time: Tue 27 Jan 2026 03:01:09 +0000 Manifest this update: Tue 27 Jan 2026 03:01:09 +0000 Manifest next update: Wed 28 Jan 2026 03:01:09 +0000 Files and hashes: 1: 4Rc8awWER1dWSivAWyBxQYvhNBc.roa (hash: 4cpiA/ovKfEb/H/Zx4o59n8dO49gnXcdaVDGvWSeHi8=) 2: A8k-ktADekUW8KGL9-TD1MM8a3Q.roa (hash: 8xlZQD8rUGje2ii4uZloIXz3Wi4R3xzE+RBDkavOVHI=) 3: AbJQHx5ahYpjvv315eRsPQzSy6s.roa (hash: IieQfWIJT+/3Ysx4MwtAIRbsPXEZaLQ5D1UaLDyxns0=) 4: Cl4gUWWdkaLuufc7IaskeYPpLtI.roa (hash: 1MLU7eGqfR1fNhY59VB68snOwCNrx/MEqW1PogRhMWg=) 5: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: 5YdFPYLM5RH7l4uL97wDnec4TNjFSddWRk35ibGvSx4=) 6: GMfg_IltBAfUi8YQpIPuZWHWPVM.roa (hash: 88EeE1BLpzbAgAQpYWqHKatkmYfK+ol5tgjxm21cKXI=) 7: M3d-ndtS-EWKNtc6mJwZhcKWXhE.roa (hash: IX96+0wugdLurSubiSiT1icuKiERC0yGvvvWL4yy+fQ=) 8: SLt04H5KmH3Vrs5wkvZpWnGiha0.roa (hash: G9GxEVefW947uRK0BuK6mQqyb0vu3oxfGtbziIUIJQw=) 9: VDlRmZ_UUBGQIZXe-tlycFHtxuY.roa (hash: roAWquTgnTt3gI/FQ9e2D2VEpYewknrb+S48y8ncfXs=) 10: aYjhOwvnCzlgzbQHnira-ZaC3N8.roa (hash: ymasb353D4nJPS2cZZCPXG+hFCONgTbrdZ3r87bzCsI=) 11: dQ7u4JbIzkGK7zGlgsaEjYvDyPw.roa (hash: 0Io/aF5BJoS3S7A3SgO0UMDiD52MQt1rPPj3iNE5lRA=) 12: eWt0Tak3myBNkMD7r4cZaRZMMuI.roa (hash: H9iIgQUbeHquNPmfK/S2A+3CGFk8Rb9c/Cx3jhDtaaM=) 13: hzQ7tMh6oqC5v0mKv_jBU_A9aCw.roa (hash: fUyvgz1r/egD8D0UE0/Rhf6tbMxfTD9jAEgan6se/FA=) 14: jg4t7SrnuYvRZomc0XCPotAh4u0.roa (hash: 9RmoUuo6041b6kGDwKKpPE71TUf5ltFSivOlPvvgN5o=) 15: kP39bsnw_qJA-nAXWzwPudCCaSw.roa (hash: p5h1eBsrXq6bm8kjGVr9OVb84+2GgS0jxbrmtlhu5Yc=) 16: t9zXA_rZh6B_pE4ccfKKbM0UX8M.roa (hash: x+rDhCDJVIl1HJ9OhOXObawt9Y9MUYeu8ZdvRA+YDqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:dc:fc:e8:98:09:20:62:d7:17:21:d2:35:bf:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Jan 27 03:01:09 2026 GMT Not After : Jan 28 03:01:09 2026 GMT Subject: CN=41ae1de06ff71ba0cc4641296c5620e9f1552ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a0:0c:fa:cd:c1:00:3e:56:60:66:d2:6d:81: 84:e1:03:d2:ad:57:e3:6e:51:5f:1f:bf:aa:cc:93: c4:38:46:86:57:32:13:47:2b:f2:f4:31:aa:d1:02: 5f:25:5c:24:9a:2d:23:aa:3a:90:d8:e0:12:be:d2: 6e:d4:7f:34:cc:5a:8d:4b:d9:cb:9d:c8:fc:55:b9: 3f:86:84:b5:82:9c:ab:cb:ff:f1:7d:9f:7b:20:65: 26:40:5a:19:77:73:ae:eb:c4:85:26:73:7d:d4:43: 07:e2:9a:77:0d:0b:31:85:0e:d3:91:a5:49:84:4a: ea:8b:11:26:ec:b0:50:b8:13:81:49:d6:a8:b8:79: d7:3b:2a:4c:2c:6a:cc:1b:4f:13:d9:10:d7:87:14: fc:0b:3d:6b:c2:37:48:eb:0f:bb:5e:9b:d0:a2:a7: 9f:a2:9b:41:48:99:11:f8:80:35:49:6a:2e:69:71: 1f:e1:c4:f1:3c:7d:65:7e:39:bd:9b:5b:6d:87:ea: 63:87:9d:00:e1:6d:1b:5b:38:34:d1:6e:64:f1:da: 02:b3:5d:05:a2:08:78:99:9d:66:6e:da:f7:2c:f6: c2:fa:b0:a0:8f:1d:e4:ec:a7:62:4f:28:06:57:7c: da:8c:b9:5b:f6:a5:b0:97:ef:bb:5d:82:36:06:78: a5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AE:1D:E0:6F:F7:1B:A0:CC:46:41:29:6C:56:20:E9:F1:55:2E:A0 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:50:8e:41:01:d3:f0:5f:96:b2:97:51:ae:8f:0a:a5:ab:08: a5:2e:5f:50:24:a0:48:ab:01:f4:6a:d6:e1:a4:87:37:9f:02: c0:ae:cc:4f:93:b5:25:63:d4:f0:df:c0:29:6c:a8:63:ed:3e: 94:f7:e9:1f:a4:85:b4:29:c6:4f:50:2b:d4:76:75:a6:9f:f2: 36:79:fa:ff:11:e1:5d:45:dc:80:80:ce:9e:2f:f4:e3:cd:20: d0:9f:d8:da:85:06:eb:6f:a8:e3:a1:ec:3b:c2:6b:49:f9:94: 1e:4d:82:4a:16:5b:12:af:14:fa:5e:34:44:77:39:06:fc:b4: d9:9c:24:4b:07:41:44:ab:bc:a4:ec:be:57:c2:70:93:91:cc: 1b:70:a2:78:d6:26:6d:c6:c0:85:68:ad:f4:08:2c:82:68:6f: d5:0f:f3:75:45:fb:7e:de:b9:6a:a8:0c:06:d5:47:55:8a:57: 94:3f:6b:18:03:19:db:8d:ae:42:be:2f:af:f1:47:cd:c1:ee: 29:4c:fb:f0:38:4b:d6:e8:52:00:9d:f6:3b:84:b0:fe:fa:df: 99:27:18:ea:9b:bd:01:ee:dd:63:04:6f:23:5b:e3:21:14:1b: de:89:1e:ef:e4:3f:76:3a:0d:7d:95:e8:9f:31:cf:b1:a9:3a: 0e:d1:70:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9Zdz86JgJIGLXFyHSNb9dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYwMTI3MDMwMTA5WhcNMjYwMTI4MDMwMTA5WjAzMTEwLwYDVQQD Eyg0MWFlMWRlMDZmZjcxYmEwY2M0NjQxMjk2YzU2MjBlOWYxNTUyZWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6AM+s3BAD5WYGbSbYGE4QPSrVfj blFfH7+qzJPEOEaGVzITRyvy9DGq0QJfJVwkmi0jqjqQ2OASvtJu1H80zFqNS9nL ncj8Vbk/hoS1gpyry//xfZ97IGUmQFoZd3Ou68SFJnN91EMH4pp3DQsxhQ7TkaVJ hErqixEm7LBQuBOBSdaouHnXOypMLGrMG08T2RDXhxT8Cz1rwjdI6w+7XpvQoqef optBSJkR+IA1SWouaXEf4cTxPH1lfjm9m1tth+pjh50A4W0bWzg00W5k8doCs10F ogh4mZ1mbtr3LPbC+rCgjx3k7KdiTygGV3zajLlb9qWwl++7XYI2BnilWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGuHeBv9xugzEZBKWxWIOnxVS6gMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtVCOQQHT 8F+WspdRro8KpasIpS5fUCSgSKsB9GrW4aSHN58CwK7MT5O1JWPU8N/AKWyoY+0+ lPfpH6SFtCnGT1Ar1HZ1pp/yNnn6/xHhXUXcgIDOni/0480g0J/Y2oUG62+o46Hs O8JrSfmUHk2CShZbEq8U+l40RHc5Bvy02ZwkSwdBRKu8pOy+V8Jwk5HMG3CieNYm bcbAhWit9Agsgmhv1Q/zdUX7ft65aqgMBtVHVYpXlD9rGAMZ242uQr4vr/FHzcHu KUz78DhL1uhSAJ32O4Sw/vrfmScY6pu9Ae7dYwRvI1vjIRQb3oke7+Q/djoNfZXo nzHPsak6DtFwxQ== -----END CERTIFICATE-----Generated at Tue Jan 27 08:03:06 2026 by rpki-client