This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft File: daWp6O8n4wJyk--E-4-NMPq25tY.mft (raw, json) Hash identifier: NrDcX/vyRJETFzOh7aGjTybU1RF/5AEvKxppwgsCGdQ= Subject key identifier: CF:18:AE:99:A9:3E:9E:0B:A8:4C:FC:28:7C:0B:EF:16:4B:AA:30:48 Authority key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6 Certificate issuer: /CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6 Certificate serial: 019C0DB493353F359B429BAC92BFE6ACEB4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft Manifest number: 17F4 Signing time: Fri 30 Jan 2026 07:01:03 +0000 Manifest this update: Fri 30 Jan 2026 07:01:03 +0000 Manifest next update: Sat 31 Jan 2026 07:01:03 +0000 Files and hashes: 1: daWp6O8n4wJyk--E-4-NMPq25tY.crl (hash: R5weEg+Ks1sGiFVMQ98kMwBeGPly+/gLqBqsvR1brsI=) 2: nDj9PT5N_QWx4Sz5FT7RF4CSpok.roa (hash: h0RW3y25bIVEC8aKObDu/RDtNTnrw2v6jC5PsgpIK5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0d:b4:93:35:3f:35:9b:42:9b:ac:92:bf:e6:ac:eb:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6 Validity Not Before: Jan 30 07:01:03 2026 GMT Not After : Jan 31 07:01:03 2026 GMT Subject: CN=cf18ae99a93e9e0ba84cfc287c0bef164baa3048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d5:4c:6e:7b:3c:89:ff:4a:be:86:10:58:55: d2:f9:04:b1:d5:8b:2d:1c:b9:79:ce:ff:a4:e0:40: d9:21:78:d1:1a:94:c3:6b:b2:eb:04:c4:a6:23:1e: cb:b7:8f:16:cd:37:90:78:03:ea:45:81:36:a9:a1: a6:4b:a8:7f:fb:44:80:c1:7f:55:f9:1e:46:8b:67: 02:b9:1e:9d:29:37:15:a2:c0:25:56:5b:a0:52:59: e3:6d:42:49:31:e1:9a:f6:0a:0f:12:f3:30:78:5c: 16:1a:e7:55:e9:b3:b5:d3:1f:0d:14:de:82:9f:ca: 2b:e2:c5:77:22:75:0f:2d:7a:5d:a9:21:29:ac:b5: c2:98:fb:7d:99:02:04:fe:dc:d2:77:5f:a0:48:0e: b3:96:11:06:43:b9:ec:fc:4a:aa:0d:79:c1:37:f8: 02:f0:0d:47:cd:ee:f4:27:46:5e:78:2e:42:46:de: 55:b7:cc:3f:e8:16:55:bf:33:b1:97:0e:5e:81:5d: 74:d8:44:66:18:dd:91:63:aa:6e:85:02:c2:78:ba: 63:fd:6b:ac:f1:9c:9e:a6:ee:32:22:ae:0f:3f:e5: 16:61:bd:8e:cb:ab:7c:af:5f:d3:e2:c0:11:c8:b8: bd:47:31:a3:24:8f:9c:a0:15:30:bf:60:de:cb:5c: 07:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:18:AE:99:A9:3E:9E:0B:A8:4C:FC:28:7C:0B:EF:16:4B:AA:30:48 X509v3 Authority Key Identifier: keyid:75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:26:25:ac:7e:58:2d:44:0d:81:2d:12:61:19:8b:b6:fb:8d: aa:ac:23:2b:56:80:de:c8:cb:d8:0a:da:a9:80:85:77:bc:b8: 03:4e:0e:a5:ac:d0:d5:fe:54:38:72:d4:a2:5c:17:eb:ab:96: 5d:4a:0b:52:8a:b2:de:d6:70:ac:0e:61:22:75:9b:07:66:7c: 0d:a9:87:a9:8f:2b:c2:4a:63:ba:6e:aa:8e:5a:a0:10:76:da: 86:65:7f:92:ab:39:84:d8:47:87:43:b7:da:88:2e:8d:de:6f: 3c:bc:e2:f3:3c:4f:77:52:fa:76:96:e1:5d:94:47:72:44:00: 66:0e:b1:3f:b8:a5:5f:11:e9:7f:3e:1e:23:b7:19:e7:3d:8b: bc:4c:eb:1b:35:08:2d:73:a5:e4:cc:61:9f:e3:07:6e:63:e2: ec:ca:5a:e4:83:86:c9:b5:8a:80:33:50:f8:6c:74:c5:07:da: a5:68:18:f3:ba:32:f2:e3:e6:f6:c8:2e:a1:c7:aa:c6:6a:57: 6b:77:20:14:4e:40:e2:80:27:e0:28:01:04:9c:66:cf:97:e0: cc:03:d5:6a:51:a2:bb:a9:f8:1a:57:d6:3f:00:38:b9:dd:1d: 39:63:fa:17:c9:fc:e7:90:34:09:b3:9f:7c:39:b4:bf:30:4b: 86:b9:84:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwNtJM1PzWbQpuskr/mrOtKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YTVhOWU4ZWYyN2UzMDI3MjkzZWY4NGZiOGY4ZDMwZmFi NmU2ZDYwHhcNMjYwMTMwMDcwMTAzWhcNMjYwMTMxMDcwMTAzWjAzMTEwLwYDVQQD EyhjZjE4YWU5OWE5M2U5ZTBiYTg0Y2ZjMjg3YzBiZWYxNjRiYWEzMDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9VMbns8if9KvoYQWFXS+QSx1Yst HLl5zv+k4EDZIXjRGpTDa7LrBMSmIx7Lt48WzTeQeAPqRYE2qaGmS6h/+0SAwX9V +R5Gi2cCuR6dKTcVosAlVlugUlnjbUJJMeGa9goPEvMweFwWGudV6bO10x8NFN6C n8or4sV3InUPLXpdqSEprLXCmPt9mQIE/tzSd1+gSA6zlhEGQ7ns/EqqDXnBN/gC 8A1Hze70J0ZeeC5CRt5Vt8w/6BZVvzOxlw5egV102ERmGN2RY6puhQLCeLpj/Wus 8Zyepu4yIq4PP+UWYb2Oy6t8r1/T4sARyLi9RzGjJI+coBUwv2Dey1wHdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8YrpmpPp4LqEz8KHwL7xZLqjBIMB8GA1UdIwQY MBaAFHWlqejvJ+MCcpPvhPuPjTD6tubWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGFXcDZPOG40d0p5ay0tRS00LU5NUHEyNXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jYTZmNjktNmZlYy00NzUzLWFkNzct ZWI2ZjlkZjA0NWIyLzEvZGFXcDZPOG40d0p5ay0tRS00LU5NUHEyNXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9jYTZmNjktNmZlYy00NzUzLWFkNzctZWI2ZjlkZjA0NWIy LzEvZGFXcDZPOG40d0p5ay0tRS00LU5NUHEyNXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtyYlrH5Y LUQNgS0SYRmLtvuNqqwjK1aA3sjL2AraqYCFd7y4A04OpazQ1f5UOHLUolwX66uW XUoLUoqy3tZwrA5hInWbB2Z8DamHqY8rwkpjum6qjlqgEHbahmV/kqs5hNhHh0O3 2ogujd5vPLzi8zxPd1L6dpbhXZRHckQAZg6xP7ilXxHpfz4eI7cZ5z2LvEzrGzUI LXOl5Mxhn+MHbmPi7Mpa5IOGybWKgDNQ+Gx0xQfapWgY87oy8uPm9sguoceqxmpX a3cgFE5A4oAn4CgBBJxmz5fgzAPValGiu6n4GlfWPwA4ud0dOWP6F8n855A0CbOf fDm0vzBLhrmELQ== -----END CERTIFICATE-----Generated at Fri Jan 30 13:59:27 2026 by rpki-client