This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft File: _dD9aMG2tWm598SBOsEt7Wrl6Ks.mft (raw, json) Hash identifier: eo9T1TMrBcO8ZIDVMt+NzjXIg9mYiRLiioBu0nyUp/k= Subject key identifier: 36:0D:D6:B6:16:3D:C9:7A:06:E7:3C:36:C6:B0:E9:03:04:AB:71:3A Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab Certificate serial: 019BF988FCC4933502D08F5BD6A30D1E9331 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft Manifest number: 0C8C Signing time: Mon 26 Jan 2026 09:01:02 +0000 Manifest this update: Mon 26 Jan 2026 09:01:02 +0000 Manifest next update: Tue 27 Jan 2026 09:01:02 +0000 Files and hashes: 1: KfM_Z_Z-SNR188s2cAL37I8urEE.roa (hash: UID52aiMOKJSN+qhsE3djfMdcKj7BbWtDHOsP/vEFqQ=) 2: _dD9aMG2tWm598SBOsEt7Wrl6Ks.crl (hash: wwG4KG5Q8ju5egxHG/1QhW3IUD5Dr7EzjC9nngTBjEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:88:fc:c4:93:35:02:d0:8f:5b:d6:a3:0d:1e:93:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab Validity Not Before: Jan 26 09:01:02 2026 GMT Not After : Jan 27 09:01:02 2026 GMT Subject: CN=360dd6b6163dc97a06e73c36c6b0e90304ab713a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:fa:85:b8:aa:4e:c0:c9:94:6a:e6:50:8c: 17:8b:d5:2e:0a:c6:0e:92:3b:ab:ec:9b:66:d3:d6: 5d:66:ac:be:fc:ff:b0:ab:3d:71:e5:41:9f:cf:59: d1:14:ad:5a:84:fb:bc:e7:2e:68:91:2e:30:97:9a: 75:81:11:c1:a1:85:7f:e4:46:68:e2:48:fa:17:09: 08:0b:e4:86:c9:3b:7a:84:66:eb:1f:19:93:6b:74: 3f:80:51:12:7d:59:5e:7f:f2:0a:cc:87:f7:4b:3e: bb:49:9e:77:c4:ad:cf:62:88:a3:cf:0c:28:86:2a: ef:01:04:88:69:34:e7:1d:3a:03:9e:6e:cb:de:d6: b1:31:02:bf:42:13:0c:ba:8d:43:fb:9d:94:0d:67: 2a:fa:19:47:34:7d:9e:23:6e:68:01:1c:9d:0e:af: a0:b0:0c:a3:33:a8:27:de:c1:e7:8e:a6:23:26:56: b3:63:3c:57:a9:3a:ed:77:25:56:14:87:ae:75:25: 73:c9:15:cd:f0:e6:26:8d:54:2a:45:87:18:5a:b4: ad:5d:41:6b:68:be:b6:56:aa:74:0a:db:33:62:76: da:9b:09:8b:8b:21:37:e1:96:13:1e:17:18:f0:9a: 11:23:be:5a:63:78:a8:b5:b2:6d:8f:58:27:e7:1c: b1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0D:D6:B6:16:3D:C9:7A:06:E7:3C:36:C6:B0:E9:03:04:AB:71:3A X509v3 Authority Key Identifier: keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:16:c2:b9:47:74:74:17:25:d6:0d:3c:7a:01:fd:22:84:d8: 55:b8:ee:2c:5c:a0:6b:3f:c6:97:e8:56:a5:35:ab:9e:29:5b: 7c:7c:21:38:21:60:02:cc:a2:ad:c2:05:0e:be:f0:a5:24:7e: 99:42:ad:53:3e:6a:cc:ce:d3:bf:e4:78:95:83:0b:7a:53:11: ac:5d:07:a6:36:80:8e:77:08:36:c3:5d:43:ea:93:81:3f:59: ee:75:ed:b9:3e:4b:db:5c:22:c3:0c:ac:62:d6:80:6d:e6:92: b3:01:36:5c:d6:d8:0c:27:99:40:5a:1e:8a:0d:4e:26:25:e2: 25:63:dc:dc:02:14:67:44:a1:90:b4:e2:a8:42:ea:6d:1e:c7: 0f:50:f6:b0:ff:5a:50:b1:69:56:c0:77:d9:c2:9d:e2:50:54: 7c:f4:55:0d:ab:ba:72:eb:b0:5c:12:45:a4:8e:6a:97:a7:5a: 35:0a:b9:4f:e6:73:7d:c7:5f:55:a1:28:1f:bc:89:91:82:f5: 9b:26:76:64:78:b8:81:4d:f3:86:a5:f3:d2:de:54:dd:4c:2f: 3c:c1:84:42:1f:96:39:e1:61:ff:a6:35:81:73:a9:2a:9a:55: fb:84:03:ae:3b:b6:65:99:3c:a6:5e:20:0a:13:dc:73:70:60: 6d:73:fa:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iPzEkzUC0I9b1qMNHpMxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDBmZDY4YzFiNmI1NjliOWY3YzQ4MTNhYzEyZGVkNmFl NWU4YWIwHhcNMjYwMTI2MDkwMTAyWhcNMjYwMTI3MDkwMTAyWjAzMTEwLwYDVQQD EygzNjBkZDZiNjE2M2RjOTdhMDZlNzNjMzZjNmIwZTkwMzA0YWI3MTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4X6hbiqTsDJlGrmUIwXi9UuCsYO kjur7Jtm09ZdZqy+/P+wqz1x5UGfz1nRFK1ahPu85y5okS4wl5p1gRHBoYV/5EZo 4kj6FwkIC+SGyTt6hGbrHxmTa3Q/gFESfVlef/IKzIf3Sz67SZ53xK3PYoijzwwo hirvAQSIaTTnHToDnm7L3taxMQK/QhMMuo1D+52UDWcq+hlHNH2eI25oARydDq+g sAyjM6gn3sHnjqYjJlazYzxXqTrtdyVWFIeudSVzyRXN8OYmjVQqRYcYWrStXUFr aL62Vqp0CtszYnbamwmLiyE34ZYTHhcY8JoRI75aY3iotbJtj1gn5xyxSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYN1rYWPcl6Buc8Nsaw6QMEq3E6MB8GA1UdIwQY MBaAFP3Q/WjBtrVpuffEgTrBLe1q5eirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUt NWNjZjZmNGI3OTIwLzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC82MjM0YzAtYTc4Yy00MzljLWE2ZWUtNWNjZjZmNGI3OTIw LzEvX2REOWFNRzJ0V201OThTQk9zRXQ3V3JsNktzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhbCuUd0 dBcl1g08egH9IoTYVbjuLFygaz/Gl+hWpTWrnilbfHwhOCFgAsyircIFDr7wpSR+ mUKtUz5qzM7Tv+R4lYMLelMRrF0HpjaAjncINsNdQ+qTgT9Z7nXtuT5L21wiwwys YtaAbeaSswE2XNbYDCeZQFoeig1OJiXiJWPc3AIUZ0ShkLTiqELqbR7HD1D2sP9a ULFpVsB32cKd4lBUfPRVDau6cuuwXBJFpI5ql6daNQq5T+ZzfcdfVaEoH7yJkYL1 myZ2ZHi4gU3zhqXz0t5U3UwvPMGEQh+WOeFh/6Y1gXOpKppV+4QDrju2ZZk8pl4g ChPcc3BgbXP6Lg== -----END CERTIFICATE-----Generated at Mon Jan 26 14:48:08 2026 by rpki-client