This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft File: d1F6r0j2aaC-yOxqyGgrTBJObTA.mft (raw, json) Hash identifier: B04e9LuzSeA28/V6kYLO8n6gX9FXXWQjyZJQKl1SD3k= Subject key identifier: B3:D6:FC:2D:F9:F8:40:93:F3:76:DD:60:62:0B:CB:9F:A6:D9:1B:14 Authority key identifier: 77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30 Certificate issuer: /CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30 Certificate serial: 019BFBE558104C378AE0F1A4B86FA57C835E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft Manifest number: 0564 Signing time: Mon 26 Jan 2026 20:01:09 +0000 Manifest this update: Mon 26 Jan 2026 20:01:09 +0000 Manifest next update: Tue 27 Jan 2026 20:01:09 +0000 Files and hashes: 1: d1F6r0j2aaC-yOxqyGgrTBJObTA.crl (hash: n3qG/ssHjts83l4POFvFTTsXOLkDcTtBtMcApXvKldc=) 2: kPvxZ2OyeoUeAIvW5z89UU8ASkE.roa (hash: Sv6cjXS82obyL50XzOiS7kDFeEpRD0eJe0mAtx0A7U8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e5:58:10:4c:37:8a:e0:f1:a4:b8:6f:a5:7c:83:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30 Validity Not Before: Jan 26 20:01:09 2026 GMT Not After : Jan 27 20:01:09 2026 GMT Subject: CN=b3d6fc2df9f84093f376dd60620bcb9fa6d91b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:74:a1:ae:25:32:aa:51:1d:04:fe:86:5a:2e: 8a:0d:2b:ec:a6:c0:28:05:85:e6:3d:bd:f0:c2:fb: ff:11:a5:82:5c:b6:e4:35:6d:48:92:fd:fe:c3:51: 57:ac:51:d9:2d:2c:06:1c:4b:fb:11:b0:eb:15:ee: c7:de:fa:74:7d:e4:6b:50:df:0e:5a:b8:35:db:61: 37:5b:c8:4d:93:5a:09:59:0a:33:73:ce:67:66:5f: 31:38:af:0c:b2:ee:39:7f:a4:d2:d0:36:25:5b:c4: f1:e4:e0:3e:b3:25:51:28:f4:1b:e4:ca:0d:0e:3d: 4c:b5:7b:41:a7:7c:2e:f0:8b:4d:d0:b1:8b:c1:4e: 6b:fb:6f:1f:cd:f4:d1:76:b9:08:f3:e1:72:9b:37: 2d:38:bf:7d:82:61:33:66:ab:12:d2:24:9e:d7:f7: 3d:1b:a2:fd:24:1e:f5:c9:07:2e:cc:17:11:0e:c1: 9d:f4:72:70:11:cb:07:31:21:e0:0d:42:e5:1a:4b: 25:5b:1c:1d:eb:6f:da:1e:c6:36:26:81:dd:13:86: 0f:a1:12:23:48:a0:24:41:f6:fa:97:b2:3a:7b:0a: e4:84:8e:1f:ff:73:5b:65:0e:a4:85:ec:0d:4f:77: 91:94:9c:b4:29:83:18:05:ee:b0:8b:a8:98:f3:3b: 7c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D6:FC:2D:F9:F8:40:93:F3:76:DD:60:62:0B:CB:9F:A6:D9:1B:14 X509v3 Authority Key Identifier: keyid:77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8e:a2:0f:ae:d9:dc:5d:94:89:fd:72:6b:ed:a6:35:95:e8: 81:83:8b:b6:c1:46:8a:4d:c5:13:c6:8e:bc:d7:dd:74:0c:91: 06:c9:26:51:c3:eb:9c:45:b3:7e:9a:11:b6:6d:b5:f4:5c:bb: e5:c0:ac:fd:30:a2:fd:50:a9:ee:65:35:f7:83:c2:a9:db:2c: 80:89:2f:a9:a2:b3:5f:e0:60:4f:4f:a5:df:c1:53:a8:5f:b2: 2f:33:58:c7:30:86:73:39:9d:d8:79:f4:c3:11:41:f4:1d:80: 8e:b8:cd:d0:8b:e1:d3:6e:16:d2:a6:9a:98:d7:a0:2b:0f:43: d5:f1:cd:f6:4c:76:ce:6e:24:af:bc:7e:69:54:ab:14:11:7a: 8e:71:41:c5:71:63:49:e0:88:15:36:33:29:aa:2a:b7:32:bb: 5f:1b:1a:94:a9:8a:2f:18:fd:52:23:d2:6b:82:e5:f6:4a:b9: b8:25:24:08:bf:d7:ef:d3:07:58:68:f4:90:38:32:ca:2f:de: 2b:35:03:e5:10:cd:ec:e2:1c:1b:58:af:a1:d3:08:50:34:72: e3:5b:6e:b3:27:32:69:cd:f9:91:a2:e5:6e:f5:c7:51:9c:2a: 46:6a:1a:f0:83:f6:db:53:ce:3c:c1:10:0b:20:88:fb:01:38: d6:c0:16:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75VgQTDeK4PGkuG+lfINeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NTE3YWFmNDhmNjY5YTBiZWM4ZWM2YWM4NjgyYjRjMTI0 ZTZkMzAwHhcNMjYwMTI2MjAwMTA5WhcNMjYwMTI3MjAwMTA5WjAzMTEwLwYDVQQD EyhiM2Q2ZmMyZGY5Zjg0MDkzZjM3NmRkNjA2MjBiY2I5ZmE2ZDkxYjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HShriUyqlEdBP6GWi6KDSvspsAo BYXmPb3wwvv/EaWCXLbkNW1Ikv3+w1FXrFHZLSwGHEv7EbDrFe7H3vp0feRrUN8O Wrg122E3W8hNk1oJWQozc85nZl8xOK8Msu45f6TS0DYlW8Tx5OA+syVRKPQb5MoN Dj1MtXtBp3wu8ItN0LGLwU5r+28fzfTRdrkI8+FymzctOL99gmEzZqsS0iSe1/c9 G6L9JB71yQcuzBcRDsGd9HJwEcsHMSHgDULlGkslWxwd62/aHsY2JoHdE4YPoRIj SKAkQfb6l7I6ewrkhI4f/3NbZQ6khewNT3eRlJy0KYMYBe6wi6iY8zt84wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPW/C35+ECT83bdYGILy5+m2RsUMB8GA1UdIwQY MBaAFHdReq9I9mmgvsjsashoK0wSTm0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEt MjRjNjI2ZTdmNTIwLzEvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEtMjRjNjI2ZTdmNTIw LzEvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATo6iD67Z 3F2Uif1ya+2mNZXogYOLtsFGik3FE8aOvNfddAyRBskmUcPrnEWzfpoRtm219Fy7 5cCs/TCi/VCp7mU194PCqdssgIkvqaKzX+BgT0+l38FTqF+yLzNYxzCGczmd2Hn0 wxFB9B2AjrjN0Ivh024W0qaamNegKw9D1fHN9kx2zm4kr7x+aVSrFBF6jnFBxXFj SeCIFTYzKaoqtzK7XxsalKmKLxj9UiPSa4Ll9kq5uCUkCL/X79MHWGj0kDgyyi/e KzUD5RDN7OIcG1ivodMIUDRy41tusycyac35kaLlbvXHUZwqRmoa8IP221POPMEQ CyCI+wE41sAWhw== -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:44 2026 by rpki-client