This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json) Hash identifier: oF+LSSceFR73dql2aSs6kzCaY9H/3uBT2fMqw9snA7U= Subject key identifier: 56:A3:8A:5C:95:B3:A0:C5:81:1D:13:4B:60:71:51:DD:0A:B7:16:95 Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb Certificate serial: 019BFF1D41CD87A1D2D8E99F0BBA6D232869 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft Manifest number: 15AC Signing time: Tue 27 Jan 2026 11:01:05 +0000 Manifest this update: Tue 27 Jan 2026 11:01:05 +0000 Manifest next update: Wed 28 Jan 2026 11:01:05 +0000 Files and hashes: 1: UWc6YQjM9t1ffmI-LVxAUT_OwbI.roa (hash: 6Dahf9gKo3spL66J3FQf4jt5WqJRr1c/pSpOxLB19HE=) 2: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: U1aWPQAgzi7S5bhq4tYmx5X69atl3hAPDRDH5/gGbjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:1d:41:cd:87:a1:d2:d8:e9:9f:0b:ba:6d:23:28:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb Validity Not Before: Jan 27 11:01:05 2026 GMT Not After : Jan 28 11:01:05 2026 GMT Subject: CN=56a38a5c95b3a0c5811d134b607151dd0ab71695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:63:02:e4:81:6f:71:8f:3c:d6:95:b4:63:86: 95:5c:87:99:8e:7d:d2:c2:0f:b3:93:bb:fb:ec:16: a4:5f:f9:ba:b1:e8:e9:c9:32:7e:84:77:de:38:8d: f9:14:ec:52:a5:23:08:24:4c:c6:f4:0f:9f:59:c0: e7:39:67:7b:be:a8:8c:48:7f:7b:90:95:ee:f9:d0: 3f:d0:21:b5:39:31:ee:38:19:fd:42:30:75:f0:66: 41:35:46:5a:a9:4a:2e:79:e1:81:53:e1:f8:9a:2e: d3:cf:c8:f6:56:49:5d:4f:cb:86:d2:39:1e:39:db: df:d1:4b:59:d7:22:7b:e9:c0:82:db:1d:49:ba:35: 4e:87:e7:e3:5f:a5:ec:e2:11:4c:98:72:84:f1:9f: 72:c1:ef:4a:e9:44:59:84:6e:f0:5a:75:25:41:43: a7:56:86:3e:3c:7c:c4:7e:33:9f:fa:df:72:88:ac: b5:06:29:20:4d:c1:20:7b:6a:07:21:70:87:3f:4b: 20:e7:3f:ea:14:fc:f8:09:fb:dd:e9:ec:3f:24:70: 96:81:87:0c:cf:47:76:19:ec:1a:34:d7:4f:48:1e: ee:6a:f9:ca:9c:be:78:82:b3:20:90:fd:80:bf:a4: df:ff:4a:b2:53:f0:18:5e:d3:7a:04:07:4d:6a:13: ae:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A3:8A:5C:95:B3:A0:C5:81:1D:13:4B:60:71:51:DD:0A:B7:16:95 X509v3 Authority Key Identifier: keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:c6:2d:01:1e:02:f7:99:13:cc:51:98:08:6d:a1:92:24:ea: fc:5c:1c:6c:be:81:2c:54:7b:86:f5:96:00:6f:32:e3:ee:c9: 51:a7:3d:ed:e0:ef:00:31:8b:fd:9d:e5:80:dd:f4:1e:db:46: 8b:3a:8a:87:96:f3:af:9d:11:82:4d:22:ce:ee:4d:e0:c6:af: f4:5b:d4:96:c2:f7:bc:63:b2:11:3d:fd:be:7e:d7:89:eb:cd: 78:c3:4e:65:88:61:fa:4c:ca:e2:91:1e:e2:77:92:14:ec:11: 33:4f:3c:a8:23:de:31:49:49:38:65:37:af:4d:2f:ad:cd:7b: 81:48:41:5d:47:9e:87:4e:ee:41:70:e8:ba:59:3b:64:a0:0d: c1:85:6f:11:51:1e:d9:fa:bb:b7:08:3a:91:dc:c0:c7:11:b5: 17:a5:3c:d0:1c:de:26:97:a5:b7:82:f6:93:8d:4a:53:52:85: 96:db:89:a0:60:b2:99:4a:5e:ee:10:ed:13:02:e5:94:a1:7c: 70:fa:39:7d:6b:16:1b:a4:c2:36:2e:fd:fd:c0:3b:8f:69:ee: d0:f7:0d:0e:44:6d:b2:f8:04:ba:7d:b0:5a:e7:4b:e4:96:8d: bc:1c:f8:ce:8c:19:e2:3c:ba:ca:f8:be:a9:4c:c0:74:e7:aa: bb:ce:85:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/HUHNh6HS2OmfC7ptIyhpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZDAzMjUyOGJiMWQxNTk3NjZjZDc5ZGU0Nzg2ZGNkOTYy YTFmYmIwHhcNMjYwMTI3MTEwMTA1WhcNMjYwMTI4MTEwMTA1WjAzMTEwLwYDVQQD Eyg1NmEzOGE1Yzk1YjNhMGM1ODExZDEzNGI2MDcxNTFkZDBhYjcxNjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumMC5IFvcY881pW0Y4aVXIeZjn3S wg+zk7v77BakX/m6sejpyTJ+hHfeOI35FOxSpSMIJEzG9A+fWcDnOWd7vqiMSH97 kJXu+dA/0CG1OTHuOBn9QjB18GZBNUZaqUoueeGBU+H4mi7Tz8j2VkldT8uG0jke Odvf0UtZ1yJ76cCC2x1JujVOh+fjX6Xs4hFMmHKE8Z9ywe9K6URZhG7wWnUlQUOn VoY+PHzEfjOf+t9yiKy1BikgTcEge2oHIXCHP0sg5z/qFPz4Cfvd6ew/JHCWgYcM z0d2GewaNNdPSB7uavnKnL54grMgkP2Av6Tf/0qyU/AYXtN6BAdNahOupQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFajilyVs6DFgR0TS2BxUd0KtxaVMB8GA1UdIwQY MBaAFHTQMlKLsdFZdmzXneR4bc2WKh+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWE0MjItYTc5MS00ZGNmLTkwZmIt MmM5MTI3YWI0OGMzLzEvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWE0MjItYTc5MS00ZGNmLTkwZmItMmM5MTI3YWI0OGMz LzEvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMYtAR4C 95kTzFGYCG2hkiTq/FwcbL6BLFR7hvWWAG8y4+7JUac97eDvADGL/Z3lgN30HttG izqKh5bzr50Rgk0izu5N4Mav9FvUlsL3vGOyET39vn7XievNeMNOZYhh+kzK4pEe 4neSFOwRM088qCPeMUlJOGU3r00vrc17gUhBXUeeh07uQXDoulk7ZKANwYVvEVEe 2fq7twg6kdzAxxG1F6U80BzeJpelt4L2k41KU1KFltuJoGCymUpe7hDtEwLllKF8 cPo5fWsWG6TCNi79/cA7j2nu0PcNDkRtsvgEun2wWudL5JaNvBz4zowZ4jy6yvi+ qUzAdOequ86Ffw== -----END CERTIFICATE-----Generated at Tue Jan 27 16:26:27 2026 by rpki-client