This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft File: DvJQ9m3TDDt1RDCoXVMjbxczG38.mft (raw, json) Hash identifier: f39B0skEN2FQ+uE7//ZYbfkRh05S/JISII9jdpqGjdE= Subject key identifier: 7C:77:2C:5B:9F:AC:5B:70:DF:1B:79:8E:38:0B:C2:B1:47:8F:EB:27 Authority key identifier: 0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F Certificate issuer: /CN=0ef250f66dd30c3b754430a85d53236f17331b7f Certificate serial: 019BFC8A302188690E129839E4C7B7AA67EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft Manifest number: 048A Signing time: Mon 26 Jan 2026 23:01:13 +0000 Manifest this update: Mon 26 Jan 2026 23:01:13 +0000 Manifest next update: Tue 27 Jan 2026 23:01:13 +0000 Files and hashes: 1: DvJQ9m3TDDt1RDCoXVMjbxczG38.crl (hash: nLXsdnkpMaISQQbEQT50gDtoVrj5i+6GPok521kXU+4=) 2: wUZK58GnfnXrFcL-rJ6SW3dQ9lM.roa (hash: tpiKkysQtleOXY8s7JxmnW98sGuzWNG7qUWUKxa7byA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:30:21:88:69:0e:12:98:39:e4:c7:b7:aa:67:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef250f66dd30c3b754430a85d53236f17331b7f Validity Not Before: Jan 26 23:01:13 2026 GMT Not After : Jan 27 23:01:13 2026 GMT Subject: CN=7c772c5b9fac5b70df1b798e380bc2b1478feb27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:05:80:e1:69:c1:2d:10:a2:6f:f6:43:01: 65:23:96:26:46:65:16:cf:90:99:0e:f7:48:15:70: 2c:ee:02:e3:c8:05:69:fc:fa:31:6d:7a:6b:d6:38: f2:e1:5d:fd:f8:3d:29:56:f5:09:83:68:64:cb:a1: d3:68:c2:bf:78:59:eb:57:23:2b:4e:bf:43:08:68: 8d:43:b1:a3:c0:cd:06:4c:6b:28:43:23:18:13:b5: 87:6e:21:99:14:a5:ce:8e:a0:9d:14:b8:a4:f6:30: 09:95:b1:12:9e:40:e5:f2:90:4e:29:b5:9c:35:4b: e8:a0:aa:77:af:68:aa:9d:53:3a:bd:33:2a:7f:1f: d5:96:c2:3a:41:a2:9f:6c:a5:04:c7:90:a7:f7:93: a5:50:c0:a8:3b:5c:a2:2e:7b:29:c4:2e:6d:50:bc: 53:66:7d:0a:75:99:31:48:09:33:e4:be:70:ec:15: 42:43:26:b5:b2:52:17:95:0b:0d:ce:f0:c4:fb:39: d2:42:25:16:ba:88:27:26:3a:2a:bb:8c:79:df:d3: 1d:14:8f:29:4f:06:a1:7e:00:cb:eb:90:4c:8d:6b: 6e:54:2c:c1:0f:a5:1e:1a:ad:94:d3:cf:c4:c6:32: 6b:8d:15:07:d5:d2:7b:85:6f:a6:4b:fc:d1:88:76: 6a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:77:2C:5B:9F:AC:5B:70:DF:1B:79:8E:38:0B:C2:B1:47:8F:EB:27 X509v3 Authority Key Identifier: keyid:0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:2e:56:29:d4:5b:c9:b1:8c:91:49:ea:6b:d5:c1:e2:59:be: 08:5e:51:90:e0:06:7d:84:a3:f1:16:1a:95:35:af:ae:71:6e: c0:3c:c3:b0:58:28:4b:4c:a5:f1:ff:01:f2:44:15:1c:af:a8: ed:cf:74:a8:35:27:f1:c5:e7:f0:c2:4a:ac:62:2d:97:25:40: a0:be:15:41:93:ba:c1:05:9c:4d:36:57:5a:34:d8:3d:32:8c: ee:25:6f:8a:eb:03:48:e0:ad:d2:fc:33:5b:2e:df:cd:b8:0b: 25:25:c1:59:7a:32:c0:66:5a:2b:0f:fc:d2:30:af:bc:41:84: ec:3f:08:d8:3c:01:1b:94:2d:e7:68:5a:d0:af:d8:3f:08:d9: 82:b0:6b:47:0e:2e:52:9f:55:71:9f:fb:ee:75:14:ac:42:92: 68:20:45:41:ac:31:34:40:fc:1b:56:5c:03:8e:a5:d1:a1:38: 7f:3c:13:ff:34:2f:77:21:f3:c4:27:30:66:3f:55:e5:58:10: e2:88:76:ce:88:02:bf:3c:f1:ac:7c:43:54:ec:18:a8:b9:b7: d0:48:ca:d2:aa:15:49:86:c1:37:38:28:50:4e:5a:4f:34:58: 3a:c1:e9:3e:84:5d:bd:5a:ee:62:b7:1f:31:4a:42:d4:b4:0f: b9:a0:37:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ijAhiGkOEpg55Me3qmfvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjI1MGY2NmRkMzBjM2I3NTQ0MzBhODVkNTMyMzZmMTcz MzFiN2YwHhcNMjYwMTI2MjMwMTEzWhcNMjYwMTI3MjMwMTEzWjAzMTEwLwYDVQQD Eyg3Yzc3MmM1YjlmYWM1YjcwZGYxYjc5OGUzODBiYzJiMTQ3OGZlYjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGoFgOFpwS0Qom/2QwFlI5YmRmUW z5CZDvdIFXAs7gLjyAVp/PoxbXpr1jjy4V39+D0pVvUJg2hky6HTaMK/eFnrVyMr Tr9DCGiNQ7GjwM0GTGsoQyMYE7WHbiGZFKXOjqCdFLik9jAJlbESnkDl8pBOKbWc NUvooKp3r2iqnVM6vTMqfx/VlsI6QaKfbKUEx5Cn95OlUMCoO1yiLnspxC5tULxT Zn0KdZkxSAkz5L5w7BVCQya1slIXlQsNzvDE+znSQiUWuognJjoqu4x539MdFI8p TwahfgDL65BMjWtuVCzBD6UeGq2U08/ExjJrjRUH1dJ7hW+mS/zRiHZq+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHx3LFufrFtw3xt5jjgLwrFHj+snMB8GA1UdIwQY MBaAFA7yUPZt0ww7dUQwqF1TI28XMxt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85OTlkZDMtODhmNy00MmMyLWFmZjUt ODFkNWFhYzAzNDk2LzEvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85OTlkZDMtODhmNy00MmMyLWFmZjUtODFkNWFhYzAzNDk2 LzEvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWC5WKdRb ybGMkUnqa9XB4lm+CF5RkOAGfYSj8RYalTWvrnFuwDzDsFgoS0yl8f8B8kQVHK+o 7c90qDUn8cXn8MJKrGItlyVAoL4VQZO6wQWcTTZXWjTYPTKM7iVviusDSOCt0vwz Wy7fzbgLJSXBWXoywGZaKw/80jCvvEGE7D8I2DwBG5Qt52ha0K/YPwjZgrBrRw4u Up9VcZ/77nUUrEKSaCBFQawxNED8G1ZcA46l0aE4fzwT/zQvdyHzxCcwZj9V5VgQ 4oh2zogCvzzxrHxDVOwYqLm30EjK0qoVSYbBNzgoUE5aTzRYOsHpPoRdvVruYrcf MUpC1LQPuaA3Og== -----END CERTIFICATE-----Generated at Tue Jan 27 07:47:19 2026 by rpki-client