This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft File: _dlCLeliA-XYc-CZVZGjppDdPZI.mft (raw, json) Hash identifier: lbyWPwKhIuoMiw2K6Y6pVizjmyDniD7/TYPjcoY6Kac= Subject key identifier: 0C:7A:D8:7B:3D:CB:3E:66:61:A9:29:99:2F:6C:49:78:1A:92:53:51 Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92 Certificate issuer: /CN=fdd9422de96203e5d873e0995591a3a690dd3d92 Certificate serial: 019BFCC1471EFF31509BFC2CF57D3C36B00E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft Manifest number: 17EF Signing time: Tue 27 Jan 2026 00:01:23 +0000 Manifest this update: Tue 27 Jan 2026 00:01:23 +0000 Manifest next update: Wed 28 Jan 2026 00:01:23 +0000 Files and hashes: 1: 41PdyGaqWfuZrGCiI7A6Pe8er08.roa (hash: fqabz9d9YrXMSNvuc4clJBMP1zUaniqoWE3YHtZWSoc=) 2: OyiOQQ5RXT-6W_eR_NYBstfLFGQ.roa (hash: cg+zDM1Nsx6Yirfpu41rhF9dShj8Jqt4XkTVhq7Ju3g=) 3: _dlCLeliA-XYc-CZVZGjppDdPZI.crl (hash: 7+zNtP59xH0VtLFIIDVVIepRCvUr6pJm2ajZyr5NRb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:47:1e:ff:31:50:9b:fc:2c:f5:7d:3c:36:b0:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92 Validity Not Before: Jan 27 00:01:23 2026 GMT Not After : Jan 28 00:01:23 2026 GMT Subject: CN=0c7ad87b3dcb3e6661a929992f6c49781a925351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ca:f7:64:e2:bd:16:c0:b4:66:09:33:5a:b3: 84:3d:f7:14:81:a3:e3:6c:4b:1e:b5:03:e2:1f:8f: a1:68:d8:71:4e:5c:1c:e0:b2:e1:ce:5b:e0:aa:b2: d0:22:da:28:bc:df:89:5e:fb:09:2d:90:40:17:5f: 45:0d:14:6c:a8:8c:f6:b4:c5:69:58:80:24:79:81: a9:15:fa:50:94:01:64:45:b7:3e:28:f5:ae:5e:68: c4:0c:8c:e1:37:9e:30:4e:c9:14:92:dc:a2:f3:ce: 4b:32:30:00:d4:e2:56:e5:8e:25:d5:54:b7:36:af: 74:04:76:f9:61:b7:56:c7:de:c0:4d:95:35:f3:8d: 1f:d5:eb:25:b1:19:3c:7f:92:91:e6:e8:46:4c:8d: 6d:3b:10:13:a2:3e:17:14:e9:98:b9:38:74:f6:b9: f2:96:ca:88:02:a5:8c:ac:d3:0f:a6:f9:d9:71:61: db:27:e2:99:c5:f9:69:28:68:c9:ea:31:f6:0b:4b: 0b:2d:f2:d6:bb:91:be:f4:20:1c:00:14:17:86:a3: c8:bd:43:c6:34:d2:e3:6b:50:4b:78:f3:ec:c1:ad: 81:39:f6:54:54:f5:f1:94:c7:5e:56:01:1e:96:75: a3:69:e2:6f:7a:98:bf:a3:d3:e4:6a:70:c3:92:26: c4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7A:D8:7B:3D:CB:3E:66:61:A9:29:99:2F:6C:49:78:1A:92:53:51 X509v3 Authority Key Identifier: keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ba:99:02:16:89:44:f8:1b:e8:cf:c3:58:ab:c0:09:f0:d0: b6:3d:ef:bb:49:cf:f8:16:77:2b:4e:93:fa:1b:cd:2c:0c:10: 4a:cf:57:94:0e:7e:a2:2b:3e:dd:6c:0b:f5:c0:30:c5:4b:be: 30:86:5f:11:7b:9f:7d:93:58:83:33:77:ac:11:ea:50:7b:f3: 5f:4c:d4:88:5d:2d:69:e1:6e:98:f5:dd:35:e9:9d:1a:49:36: 88:dc:09:f7:78:10:1c:ac:15:16:a3:3a:3c:b3:95:fb:5f:ac: cb:40:89:ff:59:75:7f:ec:52:5c:ba:5b:33:95:9b:75:cf:da: 52:e3:74:13:b6:1c:c6:ce:46:91:9d:bb:a9:20:19:cc:ae:7e: 32:9e:ba:d9:41:48:9f:86:a7:da:dc:2a:00:60:60:28:08:a1: 81:0d:9e:41:cd:9d:c0:ff:01:f4:f3:5c:cb:43:5b:bd:20:34: 0a:a5:a9:86:df:63:4c:4f:46:bc:45:d1:cb:e5:0e:c7:02:12: 62:cd:05:74:71:c2:c2:01:52:3f:8e:90:6f:6d:03:50:5c:5c: 42:48:94:61:9d:6b:5b:da:59:58:17:ab:37:13:67:83:c9:1d: 23:94:42:c3:72:1d:7c:ca:c6:02:0c:3c:9b:90:c0:86:83:01: c0:d5:7b:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wUce/zFQm/ws9X08NrAOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDk0MjJkZTk2MjAzZTVkODczZTA5OTU1OTFhM2E2OTBk ZDNkOTIwHhcNMjYwMTI3MDAwMTIzWhcNMjYwMTI4MDAwMTIzWjAzMTEwLwYDVQQD EygwYzdhZDg3YjNkY2IzZTY2NjFhOTI5OTkyZjZjNDk3ODFhOTI1MzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicr3ZOK9FsC0ZgkzWrOEPfcUgaPj bEsetQPiH4+haNhxTlwc4LLhzlvgqrLQItoovN+JXvsJLZBAF19FDRRsqIz2tMVp WIAkeYGpFfpQlAFkRbc+KPWuXmjEDIzhN54wTskUktyi885LMjAA1OJW5Y4l1VS3 Nq90BHb5YbdWx97ATZU1840f1eslsRk8f5KR5uhGTI1tOxAToj4XFOmYuTh09rny lsqIAqWMrNMPpvnZcWHbJ+KZxflpKGjJ6jH2C0sLLfLWu5G+9CAcABQXhqPIvUPG NNLja1BLePPswa2BOfZUVPXxlMdeVgEelnWjaeJvepi/o9PkanDDkibE1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAx62Hs9yz5mYakpmS9sSXgaklNRMB8GA1UdIwQY MBaAFP3ZQi3pYgPl2HPgmVWRo6aQ3T2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hY2YyZTYtYzhkZC00OGM0LTgzODkt YTE4NTUwYTY5ZjY2LzEvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9hY2YyZTYtYzhkZC00OGM0LTgzODktYTE4NTUwYTY5ZjY2 LzEvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7qZAhaJ RPgb6M/DWKvACfDQtj3vu0nP+BZ3K06T+hvNLAwQSs9XlA5+ois+3WwL9cAwxUu+ MIZfEXuffZNYgzN3rBHqUHvzX0zUiF0taeFumPXdNemdGkk2iNwJ93gQHKwVFqM6 PLOV+1+sy0CJ/1l1f+xSXLpbM5Wbdc/aUuN0E7Ycxs5GkZ27qSAZzK5+Mp662UFI n4an2twqAGBgKAihgQ2eQc2dwP8B9PNcy0NbvSA0CqWpht9jTE9GvEXRy+UOxwIS Ys0FdHHCwgFSP46Qb20DUFxcQkiUYZ1rW9pZWBerNxNng8kdI5RCw3IdfMrGAgw8 m5DAhoMBwNV7Kg== -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:31 2026 by rpki-client