This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft File: DYGcnS5S2Ereot5MLeZLd4mFjrI.mft (raw, json) Hash identifier: RNUrD18QxMl3b0dy7h1++80eWVE6cVJl1GdS2lMHbsI= Subject key identifier: FA:4A:75:43:2F:52:07:D9:D7:99:AC:A1:A3:3F:2E:FC:CB:F0:9E:16 Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2 Certificate issuer: /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2 Certificate serial: 019C04B23C4A84D628F0BFEF6B1FA3561000 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft Manifest number: 0B4D Signing time: Wed 28 Jan 2026 13:01:55 +0000 Manifest this update: Wed 28 Jan 2026 13:01:55 +0000 Manifest next update: Thu 29 Jan 2026 13:01:55 +0000 Files and hashes: 1: 4mvw711lnQzyvs4Hvdkp66DN8WA.roa (hash: cOfCZrF6cE78BmpoYXmsaMPC6thd3G27U3oDjezLwXY=) 2: DYGcnS5S2Ereot5MLeZLd4mFjrI.crl (hash: 0a78OTun8ZYctN4BqDezddSNcpwBs74IoqHPhRj4LJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:b2:3c:4a:84:d6:28:f0:bf:ef:6b:1f:a3:56:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2 Validity Not Before: Jan 28 13:01:55 2026 GMT Not After : Jan 29 13:01:55 2026 GMT Subject: CN=fa4a75432f5207d9d799aca1a33f2efccbf09e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ae:be:21:94:f8:bb:ab:17:c5:a3:e6:c7:4e: 03:f7:ba:02:13:02:04:7c:3e:99:4a:f6:18:f4:e4: e3:bd:84:6d:b4:df:29:35:7c:fe:c7:39:55:d5:6d: e0:ca:7a:75:44:d8:3b:79:07:6d:eb:6d:b5:a1:06: 67:4a:d9:86:29:7e:53:23:bb:97:35:e8:94:ec:20: da:9c:ee:08:bd:09:0f:88:40:d5:2c:8b:05:f9:c2: 05:8f:05:28:45:60:d2:c3:96:af:38:06:09:da:fb: dd:e5:f1:6f:4c:8a:16:fa:be:3e:85:f0:1e:4d:d1: e2:d8:01:eb:a1:68:0e:a2:57:18:dd:a6:c1:c8:ba: a5:fe:21:ac:a3:43:ae:a4:59:c8:dc:65:f8:4b:f7: 4e:ff:9e:52:c2:87:81:14:00:30:70:78:63:b1:a4: 11:b2:8e:6e:04:75:62:e5:63:84:76:f3:14:69:ab: 4a:c0:3f:5f:32:c1:9a:df:0e:1a:d7:a9:7b:e1:e4: 4e:08:06:99:63:8b:65:28:af:94:28:c8:71:c1:de: 02:e3:84:f3:9a:4d:b0:f0:93:7c:e4:52:6c:8a:33: bb:c1:ff:7d:cd:9c:7e:9e:42:b1:14:85:c6:ba:45: 59:de:e1:9e:c8:74:24:73:a1:8c:27:a6:54:e5:69: 3d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4A:75:43:2F:52:07:D9:D7:99:AC:A1:A3:3F:2E:FC:CB:F0:9E:16 X509v3 Authority Key Identifier: keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:20:ba:2a:9a:d2:de:ee:0c:f5:45:e2:49:e1:47:f9:56:79: 85:89:9a:40:db:50:06:92:07:31:d6:e5:66:b2:01:bc:35:4f: 77:66:2a:85:98:d0:cf:aa:8e:f9:85:1c:7e:a6:27:16:b8:e4: 44:ba:d9:f3:0a:b4:05:9e:6a:a7:1d:c0:38:c6:d1:dc:99:06: 80:02:63:51:25:df:f8:43:85:19:71:83:01:dc:94:3c:ee:b6: 8f:a3:0b:45:0e:e3:db:10:34:a5:58:42:34:7e:69:8a:b3:36: 2b:36:d7:03:c0:0e:b5:10:6b:52:67:5a:ba:3d:c1:52:62:ea: 32:fa:ce:47:a4:05:ac:d3:53:c8:97:28:b3:f1:b5:a6:8b:f1: fa:c8:6e:2b:53:f8:d1:97:c7:62:bb:db:18:b2:fd:a6:14:14: bf:f8:bd:42:15:78:3f:2d:88:24:e0:17:38:6e:c5:fd:0d:d6: 7b:f3:7b:c8:4f:9f:8e:f2:fd:94:2c:b4:c7:2c:10:5b:02:38: ed:ad:75:c5:e3:54:ea:72:6b:2d:33:5e:01:d5:a3:90:a0:4a: df:fc:85:c5:2f:b4:ed:e7:ba:5a:96:dc:6f:11:cf:d1:2d:4e: d7:73:24:e7:45:98:e1:da:fc:13:c1:58:34:4b:6d:ae:13:ff: de:e7:55:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwEsjxKhNYo8L/vax+jVhAAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkODE5YzlkMmU1MmQ4NGFkZWEyZGU0YzJkZTY0Yjc3ODk4 NThlYjIwHhcNMjYwMTI4MTMwMTU1WhcNMjYwMTI5MTMwMTU1WjAzMTEwLwYDVQQD EyhmYTRhNzU0MzJmNTIwN2Q5ZDc5OWFjYTFhMzNmMmVmY2NiZjA5ZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq6+IZT4u6sXxaPmx04D97oCEwIE fD6ZSvYY9OTjvYRttN8pNXz+xzlV1W3gynp1RNg7eQdt6221oQZnStmGKX5TI7uX NeiU7CDanO4IvQkPiEDVLIsF+cIFjwUoRWDSw5avOAYJ2vvd5fFvTIoW+r4+hfAe TdHi2AHroWgOolcY3abByLql/iGso0OupFnI3GX4S/dO/55SwoeBFAAwcHhjsaQR so5uBHVi5WOEdvMUaatKwD9fMsGa3w4a16l74eROCAaZY4tlKK+UKMhxwd4C44Tz mk2w8JN85FJsijO7wf99zZx+nkKxFIXGukVZ3uGeyHQkc6GMJ6ZU5Wk9CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpKdUMvUgfZ15msoaM/LvzL8J4WMB8GA1UdIwQY MBaAFA2BnJ0uUthK3qLeTC3mS3eJhY6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS84NzczNDItNzM0Yy00NzFiLWIzZjkt MDJjMzdmZWI4YTllLzEvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS84NzczNDItNzM0Yy00NzFiLWIzZjktMDJjMzdmZWI4YTll LzEvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyC6KprS 3u4M9UXiSeFH+VZ5hYmaQNtQBpIHMdblZrIBvDVPd2YqhZjQz6qO+YUcfqYnFrjk RLrZ8wq0BZ5qpx3AOMbR3JkGgAJjUSXf+EOFGXGDAdyUPO62j6MLRQ7j2xA0pVhC NH5pirM2KzbXA8AOtRBrUmdauj3BUmLqMvrOR6QFrNNTyJcos/G1povx+shuK1P4 0ZfHYrvbGLL9phQUv/i9QhV4Py2IJOAXOG7F/Q3We/N7yE+fjvL9lCy0xywQWwI4 7a11xeNU6nJrLTNeAdWjkKBK3/yFxS+07ee6WpbcbxHP0S1O13Mk50WY4dr8E8FY NEttrhP/3udVCw== -----END CERTIFICATE-----Generated at Wed Jan 28 17:54:43 2026 by rpki-client