This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft File: 59nPsHjtpYFvyAnpjCXLcZY-dbc.mft (raw, json) Hash identifier: oFGXWVVg10nzNSclNderV7vBEleWGhOLQwCHDoMhKo4= Subject key identifier: 6D:18:0B:14:EB:CB:D3:B6:E8:A2:F1:0F:00:0C:4D:73:7B:14:74:0A Authority key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7 Certificate issuer: /CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7 Certificate serial: 019BFC52AE21C8C1400D128FA4EDAC3B1435 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft Manifest number: 130A Signing time: Mon 26 Jan 2026 22:00:35 +0000 Manifest this update: Mon 26 Jan 2026 22:00:35 +0000 Manifest next update: Tue 27 Jan 2026 22:00:35 +0000 Files and hashes: 1: 59nPsHjtpYFvyAnpjCXLcZY-dbc.crl (hash: v9aUNfE48aVPfSO7WfSz9XkvYgSRTorGxgu3kmkKMIY=) 2: NuJEHjDX6DrNz16mjk8EVqK6rfk.roa (hash: Ys6DWelm4t8OA8iEU1qUmznaHoT0ZkwCkm2E4AX00hk=) 3: SZX71ph8QaHTDKUZ_awWsJ3Rop8.roa (hash: Ezxrik8lWqt6m7GXayjzec/qOLlnThrVGFvxsgwlbj0=) 4: fcB7v88dNhWSMeT9xkM_6tDlgB4.roa (hash: YUROPGa3vWTnRdc4QLIk9Iod/RP5OfyerhymP88IP4Q=) 5: gwoEbA-s4PqsDQjmI3X53FaRSJ0.roa (hash: avXcM/pU53LLvoxo3B9yOyXnFdyqGLBv2h2RqdKqi6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:52:ae:21:c8:c1:40:0d:12:8f:a4:ed:ac:3b:14:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7 Validity Not Before: Jan 26 22:00:35 2026 GMT Not After : Jan 27 22:00:35 2026 GMT Subject: CN=6d180b14ebcbd3b6e8a2f10f000c4d737b14740a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:19:80:32:04:a2:2c:67:24:fc:bb:31:16: f9:f3:45:ad:9d:36:b5:cb:6d:a7:b1:a6:9d:aa:1e: e5:fe:be:bf:94:f2:11:75:86:64:e6:ce:a5:68:aa: 02:88:2c:08:3f:94:e5:52:98:c5:44:80:85:09:9e: 34:3d:0d:aa:60:8a:8f:81:b7:74:59:43:b4:6f:a5: 1e:ef:6a:3f:7a:bb:54:e2:7e:57:6d:9c:83:d4:21: 7a:47:42:67:41:0e:ab:a5:c3:50:71:c9:5d:d4:42: 33:ef:04:1a:80:c1:ec:89:d5:80:2b:1c:7a:c5:f0: 8d:1d:89:94:f8:c2:5a:b2:cb:15:a3:c7:22:bd:92: 90:73:41:b5:68:f7:62:d3:19:9d:a2:d4:9b:57:db: 07:1b:89:8a:d6:17:14:38:35:e7:7c:84:1c:98:ba: e9:08:26:54:fa:95:01:20:49:0f:1d:3f:ca:4d:b9: 35:22:24:f2:ab:3d:98:53:95:71:0e:38:23:b5:1f: ac:e7:cd:f1:7e:ce:54:a4:c2:89:8b:21:1e:4f:cf: 17:e6:ee:89:4a:f2:ec:1c:ac:ae:a8:41:cc:3c:6f: da:70:36:6e:9f:1d:b8:3f:5e:ee:3e:ca:68:23:79: 1a:fa:8a:96:c9:5a:0d:f5:be:d8:9f:cf:7c:75:a2: 49:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:18:0B:14:EB:CB:D3:B6:E8:A2:F1:0F:00:0C:4D:73:7B:14:74:0A X509v3 Authority Key Identifier: keyid:E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:e5:95:21:95:f8:f4:bd:9a:93:97:7a:97:e5:cf:21:a6:c5: 22:24:75:90:da:d1:4b:1f:8e:34:a5:fd:ca:29:0a:1d:d1:7e: f6:c5:7f:04:fd:be:d4:ca:33:52:f6:b7:e6:ce:f0:3a:66:31: 39:28:1c:9a:b6:ba:13:5f:3d:bb:bc:50:0a:ec:55:95:30:9a: ff:ad:b7:20:17:3b:75:90:b0:1d:74:97:95:5b:f7:e3:d1:73: 56:11:31:0e:d3:da:33:04:55:fc:38:19:73:00:85:90:4f:8d: a2:79:63:aa:ea:f7:af:e0:9b:0f:dd:03:76:40:af:f7:8f:68: 98:57:43:4a:d9:5e:02:2b:95:0e:e9:de:1d:29:ae:ad:50:fb: ba:4a:e9:b5:91:6e:5b:62:36:6b:08:ff:ce:9f:ea:5e:23:a9: 0c:92:5d:43:c6:dd:d5:8a:c4:56:c8:71:dc:0b:da:05:7d:0c: ed:06:67:66:7a:36:e9:27:56:c8:bb:ba:ca:d0:7e:50:07:c1: f3:56:aa:3a:50:05:93:a2:63:58:a1:cc:89:e2:6d:de:74:4e: 23:24:0e:d3:09:d6:9a:03:14:f5:1d:ab:ac:7a:c7:27:7a:27: 89:d0:ef:a3:47:93:8f:b4:ad:53:8b:ab:c9:9c:58:7d:d3:5c: 84:e6:da:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8Uq4hyMFADRKPpO2sOxQ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZDljZmIwNzhlZGE1ODE2ZmM4MDllOThjMjVjYjcxOTYz ZTc1YjcwHhcNMjYwMTI2MjIwMDM1WhcNMjYwMTI3MjIwMDM1WjAzMTEwLwYDVQQD Eyg2ZDE4MGIxNGViY2JkM2I2ZThhMmYxMGYwMDBjNGQ3MzdiMTQ3NDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzgZgDIEoixnJPy7MRb580WtnTa1 y22nsaadqh7l/r6/lPIRdYZk5s6laKoCiCwIP5TlUpjFRICFCZ40PQ2qYIqPgbd0 WUO0b6Ue72o/ertU4n5XbZyD1CF6R0JnQQ6rpcNQccld1EIz7wQagMHsidWAKxx6 xfCNHYmU+MJasssVo8civZKQc0G1aPdi0xmdotSbV9sHG4mK1hcUODXnfIQcmLrp CCZU+pUBIEkPHT/KTbk1IiTyqz2YU5VxDjgjtR+s583xfs5UpMKJiyEeT88X5u6J SvLsHKyuqEHMPG/acDZunx24P17uPspoI3ka+oqWyVoN9b7Yn898daJJKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0YCxTry9O26KLxDwAMTXN7FHQKMB8GA1UdIwQY MBaAFOfZz7B47aWBb8gJ6Ywly3GWPnW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTluUHNIanRwWUZ2eUFucGpDWExjWlktZGJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wMDBlYTctYzlmNC00ZWJiLWI5YjEt ZmVlZTdjMjlkNGRlLzEvNTluUHNIanRwWUZ2eUFucGpDWExjWlktZGJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wMDBlYTctYzlmNC00ZWJiLWI5YjEtZmVlZTdjMjlkNGRl LzEvNTluUHNIanRwWUZ2eUFucGpDWExjWlktZGJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmeWVIZX4 9L2ak5d6l+XPIabFIiR1kNrRSx+ONKX9yikKHdF+9sV/BP2+1MozUva35s7wOmYx OSgcmra6E189u7xQCuxVlTCa/623IBc7dZCwHXSXlVv349FzVhExDtPaMwRV/DgZ cwCFkE+Nonljqur3r+CbD90DdkCv949omFdDStleAiuVDuneHSmurVD7ukrptZFu W2I2awj/zp/qXiOpDJJdQ8bd1YrEVshx3AvaBX0M7QZnZno26SdWyLu6ytB+UAfB 81aqOlAFk6JjWKHMieJt3nROIyQO0wnWmgMU9R2rrHrHJ3onidDvo0eTj7StU4ur yZxYfdNchObaMg== -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:26 2026 by rpki-client