This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json) Hash identifier: 2NATTFEoREFN+7TqZjKizzZKgeaHDbMiE4IaFn6D76s= Subject key identifier: 51:8F:D4:0C:7B:31:2C:E4:B2:DE:D3:86:28:2F:F5:5D:18:9D:43:57 Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a Certificate serial: 019BEA83D05526AC97316FEA5D3A24069E4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft Manifest number: 125D Signing time: Fri 23 Jan 2026 11:01:05 +0000 Manifest this update: Fri 23 Jan 2026 11:01:05 +0000 Manifest next update: Sat 24 Jan 2026 11:01:05 +0000 Files and hashes: 1: 9z2R7mR7CTqEMhJ2KlrHCYJ3vjc.roa (hash: FvuJb6Wc0/pGsiV3BQi7hOtAMeCwlp8+eAq8AekfMKM=) 2: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: EAuhBrRaDjVzxE2F+/oEDSVEWc0r866ykYFEy8X7q0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:83:d0:55:26:ac:97:31:6f:ea:5d:3a:24:06:9e:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a Validity Not Before: Jan 23 11:01:05 2026 GMT Not After : Jan 24 11:01:05 2026 GMT Subject: CN=518fd40c7b312ce4b2ded386282ff55d189d4357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8c:0f:39:7a:f7:53:97:97:f6:67:57:bb:21: af:a7:12:7b:ca:bf:c9:93:24:ff:57:8d:da:e4:a0: a2:88:54:1e:6f:bc:ec:9c:33:17:b7:c1:de:6d:f5: 9e:ff:47:67:8c:a8:4b:d5:ac:61:d2:49:2a:31:cc: dc:80:8e:c5:df:77:03:d3:3c:a8:64:a9:65:a2:8f: 55:81:8c:9b:65:a3:3e:54:59:e2:90:58:f9:a1:d6: a2:11:b0:78:4c:cb:10:3d:3e:bc:55:84:49:5c:c2: ef:4c:4f:7c:12:7c:bb:e7:03:11:b6:f2:5c:ab:f5: ac:bf:23:56:a8:4b:78:e0:5d:59:b0:ae:4e:16:a8: ec:ba:a1:e8:0f:ca:13:a4:e1:0c:0f:e4:20:a5:9d: cd:cf:b5:06:af:62:49:8d:7f:e9:c0:2f:16:26:1e: 39:fc:9c:b1:7e:6a:a3:90:11:02:80:ad:cc:f1:d8: f4:62:9b:5b:2a:fc:38:48:ff:0b:62:e2:50:15:0d: 4e:df:00:8f:94:29:79:d5:7b:c0:ae:a4:e5:cf:3a: cf:11:54:8f:14:8e:ad:4c:d4:76:cd:ef:31:ba:d0: 5d:cc:d5:2a:35:f1:38:45:b6:d8:bc:d4:08:79:d1: 88:18:d4:65:6b:90:46:e5:ae:b9:5d:28:75:6a:da: 78:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8F:D4:0C:7B:31:2C:E4:B2:DE:D3:86:28:2F:F5:5D:18:9D:43:57 X509v3 Authority Key Identifier: keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f6:8a:de:b8:a9:da:5c:aa:b9:3b:42:d5:e2:c2:75:05:7c: 32:98:65:9e:bf:0a:cd:e8:2e:e0:c1:f5:9d:ab:2c:96:46:1a: 41:4c:0a:a7:06:0f:56:aa:88:cb:04:02:67:af:8e:de:4d:7a: 58:38:29:95:f3:ce:d2:e9:50:a9:95:fa:00:e5:e9:66:87:9c: 31:71:27:b4:49:cf:c7:80:5e:3e:e6:d2:4c:a8:06:d9:0e:0e: 3b:e7:68:df:83:f3:b4:f5:ef:6b:9c:ee:d4:fa:2b:09:f5:f8: d4:25:2f:61:ab:63:7f:a6:d6:d9:31:2e:7d:0b:bd:fd:6e:f4: 35:59:b3:ce:7a:1f:da:40:52:fe:bb:d9:90:2d:d5:a5:fd:47: 75:89:74:2a:0f:36:5c:e3:59:91:99:0e:55:21:50:e0:d7:76: 02:73:b9:ea:6d:e3:66:36:6c:f8:91:63:ae:be:1c:55:80:23: c1:b0:08:66:f4:16:cb:7d:d4:06:93:6e:f2:d5:4e:35:2b:d1: 62:06:17:8c:d4:d6:f8:3f:bc:4c:a6:cf:37:38:88:ed:60:ba: 78:70:f5:94:d7:0f:db:ba:f9:ab:3b:66:60:d6:73:00:b9:c2: c1:69:79:dd:1a:c6:dd:88:c5:f6:6d:1c:82:54:67:6d:c4:f2: 35:41:d8:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvqg9BVJqyXMW/qXTokBp5LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMDg2YjY3ZDg5ODk2NTNiYWViNjhiOGQyNGFiOWU5YmQw Y2FmMmEwHhcNMjYwMTIzMTEwMTA1WhcNMjYwMTI0MTEwMTA1WjAzMTEwLwYDVQQD Eyg1MThmZDQwYzdiMzEyY2U0YjJkZWQzODYyODJmZjU1ZDE4OWQ0MzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtowPOXr3U5eX9mdXuyGvpxJ7yr/J kyT/V43a5KCiiFQeb7zsnDMXt8HebfWe/0dnjKhL1axh0kkqMczcgI7F33cD0zyo ZKlloo9VgYybZaM+VFnikFj5odaiEbB4TMsQPT68VYRJXMLvTE98Eny75wMRtvJc q/WsvyNWqEt44F1ZsK5OFqjsuqHoD8oTpOEMD+QgpZ3Nz7UGr2JJjX/pwC8WJh45 /JyxfmqjkBECgK3M8dj0YptbKvw4SP8LYuJQFQ1O3wCPlCl51XvArqTlzzrPEVSP FI6tTNR2ze8xutBdzNUqNfE4RbbYvNQIedGIGNRla5BG5a65XSh1atp47wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGP1Ax7MSzkst7Thigv9V0YnUNXMB8GA1UdIwQY MBaAFA4Ia2fYmJZTuutouNJKuem9DK8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQt NjIyYmI0ODk5ODg3LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQtNjIyYmI0ODk5ODg3 LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPaK3rip 2lyquTtC1eLCdQV8Mphlnr8Kzegu4MH1nasslkYaQUwKpwYPVqqIywQCZ6+O3k16 WDgplfPO0ulQqZX6AOXpZoecMXEntEnPx4BePubSTKgG2Q4OO+do34PztPXva5zu 1PorCfX41CUvYatjf6bW2TEufQu9/W70NVmzznof2kBS/rvZkC3Vpf1HdYl0Kg82 XONZkZkOVSFQ4Nd2AnO56m3jZjZs+JFjrr4cVYAjwbAIZvQWy33UBpNu8tVONSvR YgYXjNTW+D+8TKbPNziI7WC6eHD1lNcP27r5qztmYNZzALnCwWl53RrG3YjF9m0c glRnbcTyNUHYbg== -----END CERTIFICATE-----Generated at Fri Jan 23 16:24:55 2026 by rpki-client