This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json) Hash identifier: ulsOOE2k7N2omaQTRDzJaQRAcTPzjgHtTQMc5eJfPaE= Subject key identifier: 0E:CA:F5:11:64:B1:0F:89:C2:5E:51:63:27:36:36:D0:39:8D:06:D0 Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7 Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7 Certificate serial: 019BFE78295CCCFA34382F6BB9B8E08E734B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft Manifest number: 12B6 Signing time: Tue 27 Jan 2026 08:00:46 +0000 Manifest this update: Tue 27 Jan 2026 08:00:46 +0000 Manifest next update: Wed 28 Jan 2026 08:00:46 +0000 Files and hashes: 1: PeJEMtupept21vf-rfjqUX1mldY.roa (hash: L3Vq59CQQkeuB9Tb5q+mJV+IQYi3JZHbF6U8aJ9gFYU=) 2: aD0lsDcoNGKfxZpDG-OdR_bzMnU.roa (hash: bvoZBbd9QoLZ+N5I+xfKDL3PeYR6CygFLOwHX1oAOxI=) 3: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: FQCv5/31qWcFfroKKLB9HsXCCnZjBzcF0bT5fyugicQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:78:29:5c:cc:fa:34:38:2f:6b:b9:b8:e0:8e:73:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7 Validity Not Before: Jan 27 08:00:46 2026 GMT Not After : Jan 28 08:00:46 2026 GMT Subject: CN=0ecaf51164b10f89c25e5163273636d0398d06d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:06:bd:57:e6:5c:a9:c6:ed:d9:ef:32:b8:4b: 98:86:93:9e:67:fa:91:65:3d:2e:39:f6:46:c7:46: a0:32:b6:af:47:15:80:0c:97:c4:df:1c:54:c5:d5: f2:a9:8d:8f:c2:51:84:05:bd:88:e4:d0:62:3d:72: f0:c0:a5:ef:02:67:77:dc:e1:cf:c3:59:6f:74:bf: 69:1f:01:a1:0b:7b:36:ad:12:7f:8e:f9:73:07:e0: 82:f3:b4:06:f4:7e:7d:f1:91:41:8c:69:6e:60:aa: 56:45:1a:10:39:3f:a9:1e:10:b4:a9:d6:a4:06:82: b9:24:ba:ed:7e:ee:af:e2:a2:38:2a:1d:be:7b:81: 59:d6:15:5c:b3:97:4c:0a:ce:b0:91:3f:b8:cb:9b: 9f:ec:45:a5:8e:e1:93:12:bb:a8:25:75:74:87:79: 6b:5e:bb:8d:94:49:fa:4f:d9:fe:61:a3:85:07:a8: 75:7a:c7:42:ab:ca:9d:8f:0d:b8:ed:84:03:d1:9a: b9:51:67:a0:05:67:bb:01:56:bc:3f:48:d8:93:a9: 21:26:3c:1d:0b:48:c2:43:9f:2d:c3:9e:ff:2c:13: 99:d5:a4:2d:db:15:a8:7f:f3:f8:14:8b:c3:6d:de: 52:06:8f:28:e4:a9:45:8d:e0:fe:29:d9:85:41:71: db:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CA:F5:11:64:B1:0F:89:C2:5E:51:63:27:36:36:D0:39:8D:06:D0 X509v3 Authority Key Identifier: keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:8a:83:73:db:77:11:f8:2e:95:a8:ac:cb:a4:76:58:94:1a: ac:22:22:1c:28:44:e9:c9:61:f7:9a:29:ae:2e:cc:df:5d:9d: 68:62:2b:af:6f:f3:81:af:08:12:f7:64:c4:fb:5a:1e:cc:35: e9:93:8b:9b:b0:09:02:08:ae:6f:6c:85:62:46:6c:f3:58:9c: ae:ad:cf:cb:55:32:1e:dd:b0:b6:2d:8a:44:f4:9e:42:68:30: aa:7a:cc:09:91:fd:54:e2:66:38:81:32:3d:ef:a9:e6:3b:3a: 0f:00:23:81:48:f7:fa:b4:06:1f:38:f1:62:1d:b1:97:f2:e8: 82:93:2d:9c:e5:91:6f:1d:9c:e7:fc:16:e4:b8:cd:69:cf:fc: 86:ad:7b:5d:0b:97:b0:40:00:e5:92:d7:e6:65:fc:9f:5f:9c: 5c:76:b9:66:c2:41:3d:86:97:1b:4e:ee:28:b2:08:e5:0d:5b: a6:55:a5:ce:e5:6e:fd:6d:83:97:d1:1a:f5:2e:75:96:42:b8: 64:2a:8f:54:2c:ba:d7:a4:99:a9:cb:4a:31:85:6f:a8:fc:56: fd:75:79:70:ee:c8:2d:a0:06:75:60:90:f8:0f:59:af:27:8a: ed:2f:77:7e:54:27:e7:0a:c7:fa:ac:e8:5e:63:31:0f:8f:78: a7:9c:45:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+eClczPo0OC9rubjgjnNLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2Q4NTBjZDEyYTM2M2RkY2RiMGRjMjczZTFkZmM4NjNi NzA1ZjcwHhcNMjYwMTI3MDgwMDQ2WhcNMjYwMTI4MDgwMDQ2WjAzMTEwLwYDVQQD EygwZWNhZjUxMTY0YjEwZjg5YzI1ZTUxNjMyNzM2MzZkMDM5OGQwNmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQa9V+Zcqcbt2e8yuEuYhpOeZ/qR ZT0uOfZGx0agMravRxWADJfE3xxUxdXyqY2PwlGEBb2I5NBiPXLwwKXvAmd33OHP w1lvdL9pHwGhC3s2rRJ/jvlzB+CC87QG9H598ZFBjGluYKpWRRoQOT+pHhC0qdak BoK5JLrtfu6v4qI4Kh2+e4FZ1hVcs5dMCs6wkT+4y5uf7EWljuGTEruoJXV0h3lr XruNlEn6T9n+YaOFB6h1esdCq8qdjw247YQD0Zq5UWegBWe7AVa8P0jYk6khJjwd C0jCQ58tw57/LBOZ1aQt2xWof/P4FIvDbd5SBo8o5KlFjeD+KdmFQXHbowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7K9RFksQ+Jwl5RYyc2NtA5jQbQMB8GA1UdIwQY MBaAFHQ9hQzRKjY93NsNwnPh38hjtwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzIt MWRhZjgwYzUxOWQwLzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzItMWRhZjgwYzUxOWQw LzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4qDc9t3 Efgulaisy6R2WJQarCIiHChE6clh95opri7M312daGIrr2/zga8IEvdkxPtaHsw1 6ZOLm7AJAgiub2yFYkZs81icrq3Py1UyHt2wti2KRPSeQmgwqnrMCZH9VOJmOIEy Pe+p5js6DwAjgUj3+rQGHzjxYh2xl/LogpMtnOWRbx2c5/wW5LjNac/8hq17XQuX sEAA5ZLX5mX8n1+cXHa5ZsJBPYaXG07uKLII5Q1bplWlzuVu/W2Dl9Ea9S51lkK4 ZCqPVCy616SZqctKMYVvqPxW/XV5cO7ILaAGdWCQ+A9ZryeK7S93flQn5wrH+qzo XmMxD494p5xFXQ== -----END CERTIFICATE-----Generated at Tue Jan 27 11:16:02 2026 by rpki-client