This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft File: 2iTDCzw_6UYGKD_phemmuouP38s.mft (raw, json) Hash identifier: yeDZemb2eZaAztCXouAhbSLQ0rnBJuVmWvr2BCmZDr4= Subject key identifier: 53:0B:AD:97:4B:BF:61:CE:B4:4A:B1:D5:26:FB:04:3C:D6:55:BF:88 Authority key identifier: DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB Certificate issuer: /CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb Certificate serial: 019BD546D733106E5AF35EE5490D6E195590 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft Manifest number: 09E3 Signing time: Mon 19 Jan 2026 08:02:28 +0000 Manifest this update: Mon 19 Jan 2026 08:02:28 +0000 Manifest next update: Tue 20 Jan 2026 08:02:28 +0000 Files and hashes: 1: 2iTDCzw_6UYGKD_phemmuouP38s.crl (hash: KtiO3jewPR3vv7iTJQ/hMJ+GClU2bHvX8q0naXrZGOw=) 2: Kwvod_z55fwrRW_RYmo9DsA7VRc.roa (hash: CHlhi2uEpeLokyavWdzV+621noAdgR6SEaHKnR6rYN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:46:d7:33:10:6e:5a:f3:5e:e5:49:0d:6e:19:55:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb Validity Not Before: Jan 19 08:02:28 2026 GMT Not After : Jan 20 08:02:28 2026 GMT Subject: CN=530bad974bbf61ceb44ab1d526fb043cd655bf88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d8:81:28:b1:92:e7:ee:8a:07:87:39:7e:f0: 4c:65:23:5e:75:95:9f:2e:06:d9:eb:46:8e:f7:3d: e9:ab:06:c1:44:be:a8:71:84:40:da:f4:b9:2a:7e: ab:eb:2c:10:10:43:a2:c4:a1:93:49:0f:6f:ed:5a: 55:9b:7a:7c:82:3b:16:02:04:a0:43:da:4f:bb:9b: 1d:69:76:c4:e0:76:77:a6:88:68:81:75:bf:b3:07: 43:07:a4:0f:a9:da:d0:7b:1d:51:a2:df:66:30:a6: 6f:82:e5:03:43:0f:e4:1a:35:d8:6c:57:75:10:f8: b4:0e:57:05:47:4f:8c:bb:27:48:12:98:be:3b:a9: eb:31:bc:ff:d7:86:8c:7a:e9:26:a5:ce:99:93:09: af:84:8b:8d:09:cc:06:dc:e9:c9:25:fe:88:b2:0a: 73:37:62:7f:32:ad:52:07:49:c7:86:b1:d4:19:a2: 92:05:31:43:70:3c:e6:47:b7:3a:2b:ff:57:5e:be: eb:3b:1d:3f:3b:31:7c:a4:3c:a0:d5:2d:e9:0e:ac: f1:11:99:53:63:7c:b0:86:a5:a8:2d:0b:41:57:8b: 15:a4:69:17:a0:93:76:32:96:48:d9:a4:e6:80:8f: b6:b0:07:6c:6b:da:0d:2a:28:4b:b8:11:f1:4e:4e: f8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0B:AD:97:4B:BF:61:CE:B4:4A:B1:D5:26:FB:04:3C:D6:55:BF:88 X509v3 Authority Key Identifier: keyid:DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:8b:a6:a2:aa:93:fb:c7:6d:14:5e:54:3e:57:cd:f7:62:df: 3e:61:49:0d:37:f5:ac:4b:34:e3:e9:50:8c:c2:b7:b0:9a:fa: d8:f6:d3:08:e7:03:f0:eb:36:33:2b:84:38:fa:1d:c6:51:3a: 98:64:4d:98:4d:3e:37:77:07:ad:f1:17:8f:ac:ab:2e:38:7c: 27:d4:b1:1f:aa:51:df:2a:65:36:41:80:fa:83:dd:35:cb:ee: 38:fd:b7:13:cb:cd:a8:37:3d:a0:1b:78:66:45:66:a7:a6:9e: 07:ed:e1:b5:fd:e7:d5:13:ea:3f:0d:96:03:30:a6:dd:46:08: c8:1d:fb:e8:7b:98:39:70:5f:00:24:f4:b4:a4:46:08:d4:45: aa:fb:71:bf:64:7c:48:d7:36:16:dd:d8:4a:ad:19:cb:60:01: d8:c9:e3:b4:05:a5:5c:9b:42:58:f0:3e:f5:df:38:53:72:a1: 2a:63:f9:4f:b2:b5:40:b9:dc:b6:11:8e:5e:67:2e:03:e2:c6: 90:7c:b5:f0:da:01:56:cb:39:ca:52:d0:3f:b2:81:6c:11:ae: 03:4f:c4:15:42:48:82:4b:11:48:a1:53:42:ad:c2:51:7d:f3: 6f:27:06:95:0c:70:75:e6:f9:cf:1c:43:3f:e2:08:6e:9a:d1: 99:2b:c2:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvVRtczEG5a817lSQ1uGVWQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMjRjMzBiM2MzZmU5NDYwNjI4M2ZlOTg1ZTlhNmJhOGI4 ZmRmY2IwHhcNMjYwMTE5MDgwMjI4WhcNMjYwMTIwMDgwMjI4WjAzMTEwLwYDVQQD Eyg1MzBiYWQ5NzRiYmY2MWNlYjQ0YWIxZDUyNmZiMDQzY2Q2NTViZjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztiBKLGS5+6KB4c5fvBMZSNedZWf LgbZ60aO9z3pqwbBRL6ocYRA2vS5Kn6r6ywQEEOixKGTSQ9v7VpVm3p8gjsWAgSg Q9pPu5sdaXbE4HZ3pohogXW/swdDB6QPqdrQex1Rot9mMKZvguUDQw/kGjXYbFd1 EPi0DlcFR0+MuydIEpi+O6nrMbz/14aMeukmpc6ZkwmvhIuNCcwG3OnJJf6Isgpz N2J/Mq1SB0nHhrHUGaKSBTFDcDzmR7c6K/9XXr7rOx0/OzF8pDyg1S3pDqzxEZlT Y3ywhqWoLQtBV4sVpGkXoJN2MpZI2aTmgI+2sAdsa9oNKihLuBHxTk74bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMLrZdLv2HOtEqx1Sb7BDzWVb+IMB8GA1UdIwQY MBaAFNokwws8P+lGBig/6YXpprqLj9/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81ZWU2ZjktYjAyNS00OGEzLWFkODUt ZjA2YmJmYjg0MDhmLzEvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS81ZWU2ZjktYjAyNS00OGEzLWFkODUtZjA2YmJmYjg0MDhm LzEvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUoumoqqT +8dtFF5UPlfN92LfPmFJDTf1rEs04+lQjMK3sJr62PbTCOcD8Os2MyuEOPodxlE6 mGRNmE0+N3cHrfEXj6yrLjh8J9SxH6pR3yplNkGA+oPdNcvuOP23E8vNqDc9oBt4 ZkVmp6aeB+3htf3n1RPqPw2WAzCm3UYIyB376HuYOXBfACT0tKRGCNRFqvtxv2R8 SNc2Ft3YSq0Zy2AB2MnjtAWlXJtCWPA+9d84U3KhKmP5T7K1QLncthGOXmcuA+LG kHy18NoBVss5ylLQP7KBbBGuA0/EFUJIgksRSKFTQq3CUX3zbycGlQxwdeb5zxxD P+IIbprRmSvCEQ== -----END CERTIFICATE-----Generated at Mon Jan 19 19:02:22 2026 by rpki-client