This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft File: DXj57XHKOklrjVS5fxR5GNrbnFQ.mft (raw, json) Hash identifier: W+FfXsZbUPMZN9WlavO6hjddoQDLl90Ps4uQP9pXHRE= Subject key identifier: 97:7B:4E:0F:04:54:F6:CE:1E:71:94:65:2C:CA:7D:6E:85:9F:A0:29 Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54 Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54 Certificate serial: 019BA3474D0382C99038A8307D8F6FF6AFA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft Manifest number: 0355 Signing time: Fri 09 Jan 2026 15:01:57 +0000 Manifest this update: Fri 09 Jan 2026 15:01:57 +0000 Manifest next update: Sat 10 Jan 2026 15:01:57 +0000 Files and hashes: 1: DXj57XHKOklrjVS5fxR5GNrbnFQ.crl (hash: rvuRA70Pb3RjLhlZ9Tc6ykg7LUbTdHjikIqGtfMkrWc=) 2: WBE9XqEf7MFyalSUqu-vF0MYUwE.roa (hash: dqMxE1BdW8dFl07KbG3IeIB419vd91Jj1Eyr9ex+Uk0=) 3: WBO5Gvlksp1h2Nj2XcuQWgWe3aM.roa (hash: 21Q33n7ktv9Mw0KQGNV5mbgpviM4S02U0e8hX8gzv14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:47:4d:03:82:c9:90:38:a8:30:7d:8f:6f:f6:af:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54 Validity Not Before: Jan 9 15:01:57 2026 GMT Not After : Jan 10 15:01:57 2026 GMT Subject: CN=977b4e0f0454f6ce1e7194652cca7d6e859fa029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8a:2f:6d:14:71:3f:3b:7c:cc:41:cc:ed:11: a3:bd:76:f6:e6:0f:db:9e:99:5d:f8:3f:a6:4f:5a: ce:7a:1e:96:94:48:af:56:d0:4c:94:40:54:a0:17: 1a:9d:f3:3d:39:89:99:35:c8:46:fb:51:ca:d4:e5: 63:f5:36:ec:27:c4:16:b8:04:fb:c7:b9:8b:e1:9c: 50:33:f2:e9:dc:ba:a9:65:46:6d:bf:49:83:f6:98: a2:50:d9:9b:d8:b2:25:0e:f7:16:a5:8d:e1:f0:90: e3:3c:c1:d5:3e:f0:41:2a:d7:eb:69:b5:7b:0c:db: 9e:08:f2:43:cc:8c:a6:02:38:b7:00:31:dd:61:c4: 02:77:71:67:0b:4a:38:c8:d1:06:c0:ff:1e:68:ed: 40:34:db:32:5f:c7:01:38:3d:58:ad:c3:14:49:5b: 50:ea:e9:33:a1:aa:73:d2:63:a4:34:84:96:da:fa: e1:7b:a6:87:87:d3:fa:59:c6:6a:e4:92:de:a4:b8: aa:f4:d1:f4:b8:64:7d:2e:06:97:6f:95:ff:e4:22: 11:4e:32:18:0b:65:a1:dd:e5:0a:3b:da:a9:2e:b9: 25:52:fc:5a:89:12:28:3d:c6:b6:1b:1d:1c:34:a5: 02:23:20:b2:26:4f:61:b7:c1:4e:a8:d6:bb:46:ea: f2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7B:4E:0F:04:54:F6:CE:1E:71:94:65:2C:CA:7D:6E:85:9F:A0:29 X509v3 Authority Key Identifier: keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:13:b4:a1:3d:4a:b7:a7:a6:4e:66:1c:d0:86:85:7e:62:ba: 6e:8a:12:f8:6d:6c:0d:e0:a3:77:7b:56:70:ce:9d:b9:42:c1: 91:12:1a:99:67:a5:80:a9:8a:7e:90:01:9c:de:92:4a:d1:5c: c1:7f:7b:52:47:b6:dc:80:ca:cd:ef:1e:bd:6a:0f:7d:0e:5d: a6:ee:6c:4a:59:fb:63:c9:39:1f:68:fa:1c:6f:47:df:28:ff: 9c:e5:73:07:81:00:32:a2:63:78:dd:06:e5:c5:b3:72:88:a3: bf:9a:6a:92:f9:0e:ff:f2:5a:38:b8:01:99:ae:6b:e2:de:cb: 9f:b9:18:f8:ff:74:96:49:cb:f8:0c:35:56:56:3a:91:75:ef: d8:33:27:0d:14:5a:47:fe:1d:e8:4f:3f:50:e2:be:c0:20:71: 51:84:74:71:29:59:49:15:7b:c3:83:61:ba:df:ac:41:7a:a2: 88:88:51:7a:c1:bb:71:15:1d:8e:56:25:e0:a8:ec:ef:fe:da: 21:4a:68:f6:2a:4a:56:ab:6d:15:34:57:e7:e0:25:43:07:0c: 5f:ab:7e:99:2c:5b:dc:1d:ac:c5:38:7b:af:91:d9:da:93:40: 46:09:ee:c7:bc:6b:25:bb:23:9c:d3:f1:9a:fc:bf:0d:b5:7d: ca:c1:39:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZujR00DgsmQOKgwfY9v9q+hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzhmOWVkNzFjYTNhNDk2YjhkNTRiOTdmMTQ3OTE4ZGFk YjljNTQwHhcNMjYwMTA5MTUwMTU3WhcNMjYwMTEwMTUwMTU3WjAzMTEwLwYDVQQD Eyg5NzdiNGUwZjA0NTRmNmNlMWU3MTk0NjUyY2NhN2Q2ZTg1OWZhMDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oovbRRxPzt8zEHM7RGjvXb25g/b npld+D+mT1rOeh6WlEivVtBMlEBUoBcanfM9OYmZNchG+1HK1OVj9TbsJ8QWuAT7 x7mL4ZxQM/Lp3LqpZUZtv0mD9piiUNmb2LIlDvcWpY3h8JDjPMHVPvBBKtfrabV7 DNueCPJDzIymAji3ADHdYcQCd3FnC0o4yNEGwP8eaO1ANNsyX8cBOD1YrcMUSVtQ 6ukzoapz0mOkNISW2vrhe6aHh9P6WcZq5JLepLiq9NH0uGR9LgaXb5X/5CIRTjIY C2Wh3eUKO9qpLrklUvxaiRIoPca2Gx0cNKUCIyCyJk9ht8FOqNa7RuryHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJd7Tg8EVPbOHnGUZSzKfW6Fn6ApMB8GA1UdIwQY MBaAFA14+e1xyjpJa41UuX8UeRja25xUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mN2QwZjAtYTU3MS00NTdjLTkxNTQt OGU4Njc1Y2IwOTJmLzEvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mN2QwZjAtYTU3MS00NTdjLTkxNTQtOGU4Njc1Y2IwOTJm LzEvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhO0oT1K t6emTmYc0IaFfmK6booS+G1sDeCjd3tWcM6duULBkRIamWelgKmKfpABnN6SStFc wX97Uke23IDKze8evWoPfQ5dpu5sSln7Y8k5H2j6HG9H3yj/nOVzB4EAMqJjeN0G 5cWzcoijv5pqkvkO//JaOLgBma5r4t7Ln7kY+P90lknL+Aw1VlY6kXXv2DMnDRRa R/4d6E8/UOK+wCBxUYR0cSlZSRV7w4Nhut+sQXqiiIhResG7cRUdjlYl4Kjs7/7a IUpo9ipKVqttFTRX5+AlQwcMX6t+mSxb3B2sxTh7r5HZ2pNARgnux7xrJbsjnNPx mvy/DbV9ysE5TA== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:31 2026 by rpki-client