This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft File: DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft (raw, json) Hash identifier: vUm6WSIS0HKwObsM/q1PaH//qVgFb5Vv4wMFCduyJMg= Subject key identifier: 4D:5C:B2:2D:FB:FB:30:03:1E:1E:21:8F:83:6A:B1:11:C8:62:B1:1B Authority key identifier: 0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05 Certificate issuer: /CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605 Certificate serial: 019BF9F6620967782CE5166882809A820820 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft Manifest number: 17EE Signing time: Mon 26 Jan 2026 11:00:32 +0000 Manifest this update: Mon 26 Jan 2026 11:00:32 +0000 Manifest next update: Tue 27 Jan 2026 11:00:32 +0000 Files and hashes: 1: DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl (hash: qp296YAy50MkiAE9e1yKTO1+TfIYPvzdtSgPSFt0I+c=) 2: Eo2yGv92Iskz5EbG0NmCt1URmKk.roa (hash: fxnebqPHQp7jptxrhNUpFE2k+KgOhPZJRXJqh9LjE7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:62:09:67:78:2c:e5:16:68:82:80:9a:82:08:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605 Validity Not Before: Jan 26 11:00:32 2026 GMT Not After : Jan 27 11:00:32 2026 GMT Subject: CN=4d5cb22dfbfb30031e1e218f836ab111c862b11b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:50:51:c2:ac:19:77:6a:7f:0c:74:b8:af:e2: 45:72:63:15:b2:3a:35:92:24:c2:4a:ad:b7:3a:68: 85:6a:26:20:e2:3c:81:4a:b6:0e:cd:24:f3:73:df: 97:76:59:d9:80:c9:1e:ae:e1:4a:16:05:5d:73:f9: 7a:76:3d:50:9a:94:d1:17:6d:c4:e8:0d:89:b1:3a: b3:15:fb:6c:2c:9a:4a:64:eb:d8:6d:7e:83:17:7d: 07:bc:bb:34:1a:48:c1:44:b1:7e:d8:26:8a:10:3c: 08:1b:aa:a8:5b:14:0e:8b:a5:88:d4:38:d9:07:f1: db:7f:db:fb:8d:b6:ee:73:a0:1b:5d:e1:97:43:9d: f3:c3:4b:2b:89:dd:a3:9b:d5:e4:08:a7:4a:34:73: 16:d7:e6:ae:00:0c:6d:2e:bb:5e:81:e0:96:46:16: 36:b3:0f:12:1f:33:ce:3d:5d:bb:ee:72:83:30:1f: 8c:9c:1b:ef:64:01:31:61:ea:d0:93:bb:a9:71:90: 13:98:6a:73:57:52:0f:82:e3:92:ef:09:a9:94:3e: 2c:ea:72:c8:27:d6:4f:fd:a0:06:67:24:60:d0:9f: 2a:98:de:8b:2c:f9:b6:69:8d:0a:f8:3f:2f:3b:13: c0:f1:58:6b:ba:3d:8b:59:10:f1:2f:b7:2c:74:f3: 86:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5C:B2:2D:FB:FB:30:03:1E:1E:21:8F:83:6A:B1:11:C8:62:B1:1B X509v3 Authority Key Identifier: keyid:0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:21:9b:49:e4:3f:32:06:e6:f9:6c:89:ad:3a:7a:03:3f:f2: 1a:a3:9f:4b:d8:db:f1:c1:0b:a3:f5:48:1a:66:8e:83:0b:72: 35:fb:31:23:91:68:d3:31:37:ab:65:4a:cd:2d:49:dd:8c:ea: 03:05:77:ae:46:08:c9:b6:7b:91:a2:01:2d:ee:d2:3b:6e:9a: fa:c0:70:20:46:aa:6d:20:d6:7d:a8:5f:a5:1e:fe:2e:ec:d4: 1e:c0:36:ef:44:67:f0:8f:e1:dc:45:87:45:a5:b4:b7:17:d5: ce:ad:68:bf:b9:5c:bb:b3:94:00:6a:32:96:44:bf:13:68:73: fa:9d:a7:46:33:e3:f9:ca:09:fd:13:55:b5:7a:12:36:de:4c: ea:9d:3d:74:25:d3:a4:78:b4:f9:fa:2f:1c:69:a9:60:b3:e8: ea:d5:bb:b1:2d:c3:60:df:4d:f0:1d:02:17:af:32:f1:d3:7d: 74:f2:06:04:c9:03:7d:40:53:d8:3b:41:d5:3d:c9:d5:13:77: ec:f0:d7:67:13:6c:5f:f5:87:9c:68:62:e3:f1:45:ea:24:45: 5f:14:09:a5:59:4d:6e:89:61:a9:dc:65:cb:2b:6c:bf:da:30: c4:77:97:cc:75:81:39:ae:28:6b:f3:99:33:97:28:94:a2:49: b8:3f:6f:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59mIJZ3gs5RZogoCaggggMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYjUxMGQ3YzkxNWE0YmU2ZGY2YjE2ZmY1ODJmZDJkNmFk MjM2MDUwHhcNMjYwMTI2MTEwMDMyWhcNMjYwMTI3MTEwMDMyWjAzMTEwLwYDVQQD Eyg0ZDVjYjIyZGZiZmIzMDAzMWUxZTIxOGY4MzZhYjExMWM4NjJiMTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVBRwqwZd2p/DHS4r+JFcmMVsjo1 kiTCSq23OmiFaiYg4jyBSrYOzSTzc9+XdlnZgMkeruFKFgVdc/l6dj1QmpTRF23E 6A2JsTqzFftsLJpKZOvYbX6DF30HvLs0GkjBRLF+2CaKEDwIG6qoWxQOi6WI1DjZ B/Hbf9v7jbbuc6AbXeGXQ53zw0srid2jm9XkCKdKNHMW1+auAAxtLrtegeCWRhY2 sw8SHzPOPV277nKDMB+MnBvvZAExYerQk7upcZATmGpzV1IPguOS7wmplD4s6nLI J9ZP/aAGZyRg0J8qmN6LLPm2aY0K+D8vOxPA8Vhruj2LWRDxL7csdPOG6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1csi37+zADHh4hj4NqsRHIYrEbMB8GA1UdIwQY MBaAFA61ENfJFaS+bfaxb/WC/S1q0jYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85NmJlM2QtZDdkMi00NzUzLWE3ODMt ZDYzOGEzYmU4OGNhLzEvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi85NmJlM2QtZDdkMi00NzUzLWE3ODMtZDYzOGEzYmU4OGNh LzEvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3CGbSeQ/ Mgbm+WyJrTp6Az/yGqOfS9jb8cELo/VIGmaOgwtyNfsxI5Fo0zE3q2VKzS1J3Yzq AwV3rkYIybZ7kaIBLe7SO26a+sBwIEaqbSDWfahfpR7+LuzUHsA270Rn8I/h3EWH RaW0txfVzq1ov7lcu7OUAGoylkS/E2hz+p2nRjPj+coJ/RNVtXoSNt5M6p09dCXT pHi0+fovHGmpYLPo6tW7sS3DYN9N8B0CF68y8dN9dPIGBMkDfUBT2DtB1T3J1RN3 7PDXZxNsX/WHnGhi4/FF6iRFXxQJpVlNbolhqdxlyytsv9owxHeXzHWBOa4oa/OZ M5colKJJuD9vrg== -----END CERTIFICATE-----Generated at Mon Jan 26 13:35:30 2026 by rpki-client