This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft File: DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft (raw, json) Hash identifier: t2raQne6uKxMeWOI68gKhC9T0+IYg9DQX0lEJvp2NMw= Subject key identifier: EE:95:57:38:1D:C4:0D:DD:1C:51:C3:7A:4E:F0:8B:D9:2A:26:6E:79 Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5 Certificate issuer: /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5 Certificate serial: 019B9F332BF9CABA1AE167436EE87757284B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft Manifest number: 1751 Signing time: Thu 08 Jan 2026 20:01:29 +0000 Manifest this update: Thu 08 Jan 2026 20:01:29 +0000 Manifest next update: Fri 09 Jan 2026 20:01:29 +0000 Files and hashes: 1: CbfPnzkIg630GLdNxKGZc9evepo.roa (hash: OlSSfeY+x6XajlxSO7XTBJeyZDwUAJ2psAjSHgtLxx8=) 2: DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl (hash: cQYb2AApxy7PWWunUf0gEX6IdQEHmslWngzqaRpLKGI=) 3: KaCfEz66BVobYaD4JAQbgoR-gKg.roa (hash: y8noCaUxD0ZZ36hzHL6X++bGHmSgDwDhVDPA3PlLSas=) 4: bLAhu5lXcadgsUjXwrwUb6-bfDk.roa (hash: QiRPIH9ChMQyWzj17MGwS6pyprSZmf/z8o/RjS+A7O4=) 5: gQm12kL8qC8G8fld0ndxKWB7Le4.roa (hash: DZyw6qHuuDne2cu+Q2hXVAXkBqKQX9CgYl0ktuHs/9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9f:33:2b:f9:ca:ba:1a:e1:67:43:6e:e8:77:57:28:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5 Validity Not Before: Jan 8 20:01:29 2026 GMT Not After : Jan 9 20:01:29 2026 GMT Subject: CN=ee9557381dc40ddd1c51c37a4ef08bd92a266e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f6:a5:27:e8:01:71:e8:f3:ec:d7:b5:48:e2: 50:be:0f:0d:e0:47:de:f0:65:7a:bb:b7:2c:46:5b: 69:32:8d:13:a8:92:6e:30:73:d2:c0:ca:13:d1:3b: 99:1b:c6:b8:32:42:df:07:62:5b:74:d0:d4:83:32: 07:5e:0f:c7:c0:21:69:09:de:66:cf:23:95:d4:78: 98:7c:6f:af:9e:cf:0f:f1:fe:91:f1:53:7c:d9:b3: 84:e8:7c:a2:ca:ed:a8:d8:7e:d8:f4:f8:95:0b:44: dc:98:96:f5:65:59:e2:20:f8:42:c9:b0:36:81:27: 1b:a7:9f:e2:7b:16:ab:17:0f:fc:3d:82:9a:fb:ac: 8a:2d:52:f8:21:a4:d9:df:bb:d0:ee:02:2b:80:aa: 53:e5:72:69:53:17:af:d9:10:14:86:c9:fb:67:3f: 76:bd:93:2a:13:4a:ca:f8:eb:d3:3d:c4:a9:a8:8e: a9:a5:ed:20:f0:2a:97:ff:14:d4:48:4c:8a:2b:eb: 8d:cf:5f:1a:f8:8c:9c:f3:a7:c4:96:14:10:49:de: 5c:24:bb:dc:46:1d:9a:d8:6b:31:62:e3:db:10:2f: 03:31:6c:0c:d6:7c:46:83:4c:72:bb:aa:29:37:e3: 51:2c:9d:e0:82:be:5b:83:f7:97:8c:e4:0c:40:7c: 21:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:95:57:38:1D:C4:0D:DD:1C:51:C3:7A:4E:F0:8B:D9:2A:26:6E:79 X509v3 Authority Key Identifier: keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:02:92:81:35:72:83:45:c6:04:71:b7:d8:79:20:9b:7a:d9: b7:e2:4e:4f:3c:82:b3:6c:32:af:ed:67:81:6a:d0:91:52:ac: 8c:b0:c6:22:79:90:6c:dd:22:e8:a1:a9:1e:1c:bc:da:9e:ad: 34:e7:d7:09:13:f6:34:9a:02:34:f1:37:32:5a:72:97:e3:3b: 72:63:df:6b:97:fa:39:08:03:44:e8:d1:cf:1d:c5:15:c1:17: be:3a:6d:81:56:98:1c:be:d5:37:31:87:25:db:02:df:b0:78: 23:cb:6b:d2:cb:f9:10:5f:e3:4e:00:8e:68:a4:2e:95:91:62: 44:92:72:28:a6:45:eb:3a:38:f7:d1:cc:8b:6f:ee:59:4c:18: 66:45:e4:a2:9d:17:ff:6a:b7:ed:e1:9a:e7:b9:6b:87:ee:7a: 8c:95:0e:57:64:7c:54:86:aa:db:5d:ed:ab:82:6b:19:98:e4: bd:d7:3a:4b:25:d6:f4:8b:9a:f1:8b:c6:54:c0:73:12:49:9e: 5b:1f:94:10:0b:67:39:16:2d:00:32:90:81:24:75:81:3b:15: b1:6e:56:4a:cc:c5:26:aa:41:f8:5e:f3:6f:5e:20:95:98:f5: c9:a2:c9:b1:2e:36:dd:8c:10:cd:91:6a:6d:df:19:8e:1d:24: de:21:60:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZufMyv5yroa4WdDbuh3VyhLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMjFiNzhjZTk3YjBmNWZiM2Q4OGJmOTVjZmJiMDhiMmZi ZWE4ZTUwHhcNMjYwMTA4MjAwMTI5WhcNMjYwMTA5MjAwMTI5WjAzMTEwLwYDVQQD EyhlZTk1NTczODFkYzQwZGRkMWM1MWMzN2E0ZWYwOGJkOTJhMjY2ZTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5falJ+gBcejz7Ne1SOJQvg8N4Efe 8GV6u7csRltpMo0TqJJuMHPSwMoT0TuZG8a4MkLfB2JbdNDUgzIHXg/HwCFpCd5m zyOV1HiYfG+vns8P8f6R8VN82bOE6Hyiyu2o2H7Y9PiVC0TcmJb1ZVniIPhCybA2 gScbp5/iexarFw/8PYKa+6yKLVL4IaTZ37vQ7gIrgKpT5XJpUxev2RAUhsn7Zz92 vZMqE0rK+OvTPcSpqI6ppe0g8CqX/xTUSEyKK+uNz18a+Iyc86fElhQQSd5cJLvc Rh2a2GsxYuPbEC8DMWwM1nxGg0xyu6opN+NRLJ3ggr5bg/eXjOQMQHwhvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6VVzgdxA3dHFHDek7wi9kqJm55MB8GA1UdIwQY MBaAFA8ht4zpew9fs9iL+Vz7sIsvvqjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wZjc1OTQtZjA0OC00NzNkLWEzOWEt ZGRiOWU0ZGI5OGM2LzEvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8wZjc1OTQtZjA0OC00NzNkLWEzOWEtZGRiOWU0ZGI5OGM2 LzEvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgKSgTVy g0XGBHG32Hkgm3rZt+JOTzyCs2wyr+1ngWrQkVKsjLDGInmQbN0i6KGpHhy82p6t NOfXCRP2NJoCNPE3Mlpyl+M7cmPfa5f6OQgDROjRzx3FFcEXvjptgVaYHL7VNzGH JdsC37B4I8tr0sv5EF/jTgCOaKQulZFiRJJyKKZF6zo499HMi2/uWUwYZkXkop0X /2q37eGa57lrh+56jJUOV2R8VIaq213tq4JrGZjkvdc6SyXW9Iua8YvGVMBzEkme Wx+UEAtnORYtADKQgSR1gTsVsW5WSszFJqpB+F7zb14glZj1yaLJsS423YwQzZFq bd8Zjh0k3iFghQ== -----END CERTIFICATE-----Generated at Fri Jan 9 00:09:36 2026 by rpki-client