This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft File: CDfJmypMBi1cIGePnc8yB679Xng.mft (raw, json) Hash identifier: 5tWx+JZ1gPOUCmvcRd6tfeG2y0o6YCQBovLbZVFaAiQ= Subject key identifier: FD:B9:FA:71:C4:96:3D:93:F8:59:91:76:88:00:22:75:2F:71:81:DF Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78 Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78 Certificate serial: 019BDA35C4F602E0A942B8ED5788B88F3881 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft Manifest number: 12 Signing time: Tue 20 Jan 2026 07:01:55 +0000 Manifest this update: Tue 20 Jan 2026 07:01:55 +0000 Manifest next update: Wed 21 Jan 2026 07:01:55 +0000 Files and hashes: 1: 97nEgc4A4sVjs4YgAX5Sm9-LJbk.roa (hash: 3MLozR2LySFs3MSUPZHuRrx2i4ALDNqaZIuRMZWvSoQ=) 2: CDfJmypMBi1cIGePnc8yB679Xng.crl (hash: 7nnGr/JaKI/EltHYFJ9ntqUhC4sAwlykjG8ZVzQ2QnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:35:c4:f6:02:e0:a9:42:b8:ed:57:88:b8:8f:38:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78 Validity Not Before: Jan 20 07:01:55 2026 GMT Not After : Jan 21 07:01:55 2026 GMT Subject: CN=fdb9fa71c4963d93f8599176880022752f7181df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fe:d4:4f:d0:ff:bb:f7:a0:b7:9e:12:3c:01: 43:4c:2d:24:30:aa:90:40:47:85:ce:0d:ad:1e:ef: 00:46:80:a3:45:d8:9f:cd:95:f1:70:ec:36:9a:32: 8c:0b:8b:94:8e:02:54:06:53:09:5a:95:dd:c5:d1: e1:6e:a7:04:94:1d:a8:e2:29:a1:8a:b5:64:b9:2a: 15:13:53:20:fc:06:50:5b:f7:73:4b:2a:78:47:92: bf:21:16:e0:d6:12:ba:f1:5a:8d:f6:b0:df:8a:b0: cc:de:f2:16:13:a1:34:69:13:8f:2d:7b:1c:ec:61: 01:8c:55:47:3f:71:79:22:b0:ad:ca:dd:5c:8b:22: e5:94:6a:27:8a:88:c5:6b:d1:19:a2:4c:bc:2b:36: d4:fa:18:74:a6:87:4c:75:e8:c4:e6:64:9e:5a:81: 38:16:3b:dd:26:12:82:ab:81:86:b3:66:15:bf:88: 33:6d:69:45:c6:6b:f7:d9:67:9e:03:e4:51:3f:ad: ee:1e:d0:b1:5f:6f:6d:8e:51:a0:05:bd:2f:8f:ad: ad:2b:f1:d3:0c:d3:4b:e5:27:7f:3e:c1:6c:a3:94: 4f:5d:ee:83:ee:80:f3:99:fb:66:64:e1:a2:49:b7: 5a:b7:b1:51:2e:b0:a8:4d:2e:94:92:0a:97:42:b6: 52:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B9:FA:71:C4:96:3D:93:F8:59:91:76:88:00:22:75:2F:71:81:DF X509v3 Authority Key Identifier: keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:70:0b:f3:55:40:b9:38:33:ea:a5:2d:f3:c5:7a:e1:2d:b6: 03:85:b0:69:9c:bc:bc:29:11:10:b2:45:6a:44:8c:ae:03:9a: 06:59:da:71:57:f0:d4:c5:eb:f7:9f:0c:c0:c1:b8:66:35:e2: 1f:c6:43:79:a2:5b:db:fe:72:00:09:8d:1f:1d:40:fe:4e:fe: c7:40:8d:a4:db:c3:9e:d0:38:64:0c:93:66:b1:60:87:0e:6b: 61:48:8e:7c:e0:e0:26:58:0a:87:46:e2:84:32:92:8c:10:20: de:48:cd:bb:75:1e:99:9f:f0:91:24:75:5b:6d:0d:16:ec:7d: 59:82:ce:50:52:ce:51:6e:11:12:5c:18:ed:e9:80:b7:7c:f4: db:dd:7f:b4:50:64:06:f1:2f:bd:ce:b2:85:23:ec:8e:ca:0b: 59:78:06:75:ad:43:1f:da:f1:d8:8b:0f:62:cf:1b:13:fe:b0: 0b:6e:b0:5c:ab:08:31:15:42:be:e0:c6:1b:90:27:df:ca:f9: fc:94:b4:9d:a2:f8:46:77:45:bc:c7:12:54:cf:04:7c:2e:28: 82:23:f4:c1:42:31:bc:56:7d:b1:8f:f0:58:64:21:90:2f:51: db:6b:b9:a5:62:24:8b:17:4f:7a:ac:6d:dd:49:6d:3a:31:c7: 69:f4:cd:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvaNcT2AuCpQrjtV4i4jziBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzdjOTliMmE0YzA2MmQ1YzIwNjc4ZjlkY2YzMjA3YWVm ZDVlNzgwHhcNMjYwMTIwMDcwMTU1WhcNMjYwMTIxMDcwMTU1WjAzMTEwLwYDVQQD EyhmZGI5ZmE3MWM0OTYzZDkzZjg1OTkxNzY4ODAwMjI3NTJmNzE4MWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP7UT9D/u/egt54SPAFDTC0kMKqQ QEeFzg2tHu8ARoCjRdifzZXxcOw2mjKMC4uUjgJUBlMJWpXdxdHhbqcElB2o4imh irVkuSoVE1Mg/AZQW/dzSyp4R5K/IRbg1hK68VqN9rDfirDM3vIWE6E0aROPLXsc 7GEBjFVHP3F5IrCtyt1ciyLllGoniojFa9EZoky8KzbU+hh0podMdejE5mSeWoE4 FjvdJhKCq4GGs2YVv4gzbWlFxmv32WeeA+RRP63uHtCxX29tjlGgBb0vj62tK/HT DNNL5Sd/PsFso5RPXe6D7oDzmftmZOGiSbdat7FRLrCoTS6UkgqXQrZSAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP25+nHElj2T+FmRdogAInUvcYHfMB8GA1UdIwQY MBaAFAg3yZsqTAYtXCBnj53PMgeu/V54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEt ZjEyMzdmNGM1Y2Y2LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEtZjEyMzdmNGM1Y2Y2 LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArXAL81VA uTgz6qUt88V64S22A4WwaZy8vCkRELJFakSMrgOaBlnacVfw1MXr958MwMG4ZjXi H8ZDeaJb2/5yAAmNHx1A/k7+x0CNpNvDntA4ZAyTZrFghw5rYUiOfODgJlgKh0bi hDKSjBAg3kjNu3UemZ/wkSR1W20NFux9WYLOUFLOUW4RElwY7emAt3z0291/tFBk BvEvvc6yhSPsjsoLWXgGda1DH9rx2IsPYs8bE/6wC26wXKsIMRVCvuDGG5An38r5 /JS0naL4RndFvMcSVM8EfC4ogiP0wUIxvFZ9sY/wWGQhkC9R22u5pWIkixdPeqxt 3UltOjHHafTNQw== -----END CERTIFICATE-----Generated at Tue Jan 20 14:36:37 2026 by rpki-client