This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft File: DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json) Hash identifier: Enm74geSiN8lqcVsNH21bZNzjyrbG0ibr7/PmjpBAOk= Subject key identifier: 45:69:4E:71:3D:3F:D9:69:08:89:2B:BB:CA:2A:7A:B6:8F:A5:02:EA Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d Certificate serial: 019BFDD39D7C527F746F4CC79D3DEDF6341F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft Manifest number: 17EF Signing time: Tue 27 Jan 2026 05:01:02 +0000 Manifest this update: Tue 27 Jan 2026 05:01:02 +0000 Manifest next update: Wed 28 Jan 2026 05:01:02 +0000 Files and hashes: 1: 8TaBsBYidW6NwN4w-r-_-frpmPw.roa (hash: d3cj9imIBJIrG7w+OMuxucJCXGk/PoAG60c7YkaGWUU=) 2: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: aCjxdnn4QMGAVnrLEly+9X9gDvYT3wXHlkfZnblcGDA=) 3: cfuyV7WY5uCzefphkg9dkFiDF4o.roa (hash: 56j+8wClcw9KajdQHM4PT6tZ5VXaRrrlOf4m/1pMO8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:d3:9d:7c:52:7f:74:6f:4c:c7:9d:3d:ed:f6:34:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d Validity Not Before: Jan 27 05:01:02 2026 GMT Not After : Jan 28 05:01:02 2026 GMT Subject: CN=45694e713d3fd96908892bbbca2a7ab68fa502ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:01:2d:d9:7c:04:4d:74:ef:71:33:73:c0:a6: e1:67:9d:b2:1b:3c:8f:2d:f0:27:23:c9:10:e7:ed: 92:66:a1:da:94:35:8a:98:d1:ab:7a:46:1f:6c:9b: 6a:f9:d7:df:10:39:fa:f2:a3:0c:4d:e2:8a:f8:b2: 85:e8:84:c6:90:37:e3:17:6c:6e:4c:bb:8b:69:ad: 2c:47:b5:4f:cd:d8:39:74:87:3e:35:f7:f0:8f:59: 86:31:83:e0:31:ba:fb:62:32:51:7f:ca:a9:b8:9d: d8:ec:30:af:05:fc:21:4e:9f:ce:ad:8d:a7:fc:4a: 97:2f:ec:91:3f:42:03:4a:a0:a7:58:23:01:d3:c2: 8a:00:43:5f:19:f0:c1:f4:ba:c9:52:b0:36:cb:97: e7:c3:4d:d0:b9:77:eb:84:79:a2:61:e0:52:b4:63: 21:59:fe:9e:b4:47:09:f9:4e:9a:3b:5d:64:e3:16: d5:ec:47:93:51:85:60:d2:7a:24:88:00:b3:b1:b9: ff:14:2a:1f:c1:4e:1e:97:d7:76:50:0b:5e:ca:7d: 4a:26:22:97:f8:fd:21:5d:21:b3:fd:a7:d4:d4:96: 7e:54:eb:ee:fe:5e:28:9e:51:ae:ab:39:99:04:27: f5:ce:73:d1:d1:93:f8:b5:c5:a7:3c:4e:58:c1:ba: eb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:69:4E:71:3D:3F:D9:69:08:89:2B:BB:CA:2A:7A:B6:8F:A5:02:EA X509v3 Authority Key Identifier: keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:99:88:e5:6b:8c:cb:58:28:e4:86:4c:44:f0:bb:c8:ae:30: 46:86:0e:f6:ae:92:0e:a8:86:09:ba:26:31:0a:62:25:04:69: c7:03:42:96:3b:5f:e8:ae:f7:6d:eb:dd:37:ec:6a:9b:32:ff: a5:2c:84:df:e0:b2:23:6c:2c:87:01:f8:a8:fa:f3:43:e0:16: d2:8b:0e:bc:a3:81:77:4c:96:72:7e:93:dd:1f:f8:de:bf:14: 0f:92:f2:29:20:81:d4:72:6f:85:1b:50:97:d7:5b:f4:ad:8e: 37:c7:73:8b:ec:00:47:ce:f7:20:59:06:d3:b5:1c:2e:70:61: 74:f2:4e:54:3b:a9:53:d9:71:f0:23:75:4f:d8:48:d4:8a:b9: ba:80:55:b5:ed:6b:2f:d3:d6:c9:31:8b:e3:35:09:47:a5:10: 93:6b:ab:ae:3c:fc:de:d9:28:84:46:5a:4a:58:72:a9:68:6a: 3b:0e:b9:d7:fc:6b:0d:df:5b:f6:ec:c6:98:4a:83:b5:85:bd: 84:fa:a6:45:97:20:46:e6:02:9b:ee:cc:5e:ff:e1:3d:03:1d: 86:ea:9e:48:93:af:b4:b5:07:b3:7c:6f:82:98:bb:cb:68:4c: aa:0f:30:a2:cc:18:0e:e6:a4:0b:8a:f3:6a:9b:bb:37:ed:cb: 72:23:37:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv90518Un90b0zHnT3t9jQfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMDEzNGZhZmJhNzJlMDYzMzljYWRjNTVkNWYxM2JhZTQ4 MmIxMmQwHhcNMjYwMTI3MDUwMTAyWhcNMjYwMTI4MDUwMTAyWjAzMTEwLwYDVQQD Eyg0NTY5NGU3MTNkM2ZkOTY5MDg4OTJiYmJjYTJhN2FiNjhmYTUwMmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgEt2XwETXTvcTNzwKbhZ52yGzyP LfAnI8kQ5+2SZqHalDWKmNGrekYfbJtq+dffEDn68qMMTeKK+LKF6ITGkDfjF2xu TLuLaa0sR7VPzdg5dIc+Nffwj1mGMYPgMbr7YjJRf8qpuJ3Y7DCvBfwhTp/OrY2n /EqXL+yRP0IDSqCnWCMB08KKAENfGfDB9LrJUrA2y5fnw03QuXfrhHmiYeBStGMh Wf6etEcJ+U6aO11k4xbV7EeTUYVg0nokiACzsbn/FCofwU4el9d2UAteyn1KJiKX +P0hXSGz/afU1JZ+VOvu/l4onlGuqzmZBCf1znPR0ZP4tcWnPE5Ywbrr2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVpTnE9P9lpCIkru8oqeraPpQLqMB8GA1UdIwQY MBaAFA4BNPr7py4GM5ytxV1fE7rkgrEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hODIxZGYtNmI0OS00NDg5LThhNzct ZDEyNDZjYzJjMzRlLzEvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9hODIxZGYtNmI0OS00NDg5LThhNzctZDEyNDZjYzJjMzRl LzEvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpmI5WuM y1go5IZMRPC7yK4wRoYO9q6SDqiGCbomMQpiJQRpxwNCljtf6K73bevdN+xqmzL/ pSyE3+CyI2wshwH4qPrzQ+AW0osOvKOBd0yWcn6T3R/43r8UD5LyKSCB1HJvhRtQ l9db9K2ON8dzi+wAR873IFkG07UcLnBhdPJOVDupU9lx8CN1T9hI1Iq5uoBVte1r L9PWyTGL4zUJR6UQk2urrjz83tkohEZaSlhyqWhqOw651/xrDd9b9uzGmEqDtYW9 hPqmRZcgRuYCm+7MXv/hPQMdhuqeSJOvtLUHs3xvgpi7y2hMqg8woswYDuakC4rz apu7N+3LciM33g== -----END CERTIFICATE-----Generated at Tue Jan 27 07:42:42 2026 by rpki-client