This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft File: dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft (raw, json) Hash identifier: Kxm87CD9hGMWo8NzWIwRMpN8E5WmP9PkvpuVGck1dB8= Subject key identifier: 05:CB:41:86:C3:0E:CE:5E:9D:F2:6E:69:99:F1:27:77:C6:61:4C:A2 Authority key identifier: 74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A Certificate issuer: /CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a Certificate serial: 019BD08D1F5F3F71D193C7B264D2076A7328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft Manifest number: 076A Signing time: Sun 18 Jan 2026 10:01:08 +0000 Manifest this update: Sun 18 Jan 2026 10:01:08 +0000 Manifest next update: Mon 19 Jan 2026 10:01:08 +0000 Files and hashes: 1: 0PbPEQsG-kj7SoehWuyEm8KHUSs.roa (hash: PSFO3oJW97UfWkTdnQLs8C6Bk6abk9LmfHzrgXAaZBA=) 2: dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl (hash: ZsZ811pW/g1lfETdtjTwWofNLy+6+FObIO7TRB7C5iQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 10:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:8d:1f:5f:3f:71:d1:93:c7:b2:64:d2:07:6a:73:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a Validity Not Before: Jan 18 10:01:08 2026 GMT Not After : Jan 19 10:01:08 2026 GMT Subject: CN=05cb4186c30ece5e9df26e6999f12777c6614ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ce:e6:ad:54:2c:8b:c4:62:32:c4:ee:58:bd: ad:dc:bb:6f:53:1a:d0:cf:71:81:95:5e:f5:2e:c6: 2b:47:f8:8d:58:85:8b:5d:a6:bf:82:97:ee:22:c0: 5b:be:a7:b1:fb:b3:7f:ff:59:6d:2e:1c:ab:fd:e5: f7:9f:dc:a7:4c:7a:17:e8:3e:f7:0b:f4:26:9a:1f: ec:28:63:46:99:cb:44:96:de:5f:44:1e:d0:8f:e6: c5:52:a8:f1:03:56:08:12:a9:df:ee:19:56:f0:6f: 90:ff:07:91:15:bb:9f:8e:64:7f:bc:c3:a4:01:3f: 3c:74:99:99:bb:5a:f5:0e:4d:56:76:63:34:e3:da: fe:ae:de:9a:5a:79:fc:ad:c8:45:c0:cb:65:29:94: 3e:6c:bd:fd:1a:ee:32:77:f2:23:5b:48:a8:42:23: 0e:d9:74:90:99:d5:8a:1d:4a:8a:f6:11:e9:e0:56: 0f:7b:e9:e1:4c:0c:52:dc:9b:37:94:bd:33:e6:e9: 09:c6:71:36:f6:f1:71:8c:99:b4:27:c1:5d:e1:01: a0:a7:cb:2e:f6:43:83:60:b2:6c:21:a3:8a:1a:8b: 69:97:0e:63:df:19:10:50:65:03:c0:a6:12:f9:88: dd:07:59:09:a6:ca:8b:86:09:6e:24:ce:60:09:1e: 8c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CB:41:86:C3:0E:CE:5E:9D:F2:6E:69:99:F1:27:77:C6:61:4C:A2 X509v3 Authority Key Identifier: keyid:74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:59:a5:37:24:3f:6f:f5:3b:8a:14:ff:06:ed:a3:36:83:c7: 17:43:f4:4c:37:b1:66:ea:ff:c4:8c:16:72:5c:a0:bd:48:d9: 20:13:38:aa:a1:c2:6a:45:00:bf:1d:9f:12:85:03:a8:7f:53: f0:ae:f4:6f:62:40:ac:7e:eb:63:93:24:07:6a:4c:9c:a1:5a: 30:72:df:1b:28:e9:60:9f:f8:1b:ca:1e:54:27:7d:54:3f:58: e7:80:37:fb:a3:73:e4:e1:94:bd:58:96:9a:bf:03:98:27:92: ff:d3:f5:c0:61:ae:13:ea:b6:91:60:cf:d7:d3:6c:40:bf:20: a6:d0:6e:b4:38:74:90:62:89:57:4f:62:ff:16:89:0a:54:2c: 3b:2d:64:4d:ee:ef:02:e7:21:35:79:1f:6c:4a:b7:33:9e:4f: e1:52:95:b0:cb:91:eb:27:11:94:b5:b9:e6:00:56:1d:c8:58: 58:eb:2c:a9:dd:99:31:be:4b:2b:42:5b:42:94:9e:8d:7e:53: 2b:c2:c1:39:b8:d6:06:e7:40:69:c2:81:fa:a9:7a:7a:49:98: 59:96:1b:45:06:a6:48:3b:28:82:7f:5e:e0:f2:9a:d6:39:da: 93:8e:31:df:32:28:c0:a0:f1:5d:8e:78:f3:dd:81:bc:d6:90: 3d:a3:78:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvQjR9fP3HRk8eyZNIHanMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NWRiYTU2Y2YxZmZjMmNmYzFkMDVmNGZhODMzMTE3ZWZk N2M3OGEwHhcNMjYwMTE4MTAwMTA4WhcNMjYwMTE5MTAwMTA4WjAzMTEwLwYDVQQD EygwNWNiNDE4NmMzMGVjZTVlOWRmMjZlNjk5OWYxMjc3N2M2NjE0Y2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws7mrVQsi8RiMsTuWL2t3LtvUxrQ z3GBlV71LsYrR/iNWIWLXaa/gpfuIsBbvqex+7N//1ltLhyr/eX3n9ynTHoX6D73 C/Qmmh/sKGNGmctElt5fRB7Qj+bFUqjxA1YIEqnf7hlW8G+Q/weRFbufjmR/vMOk AT88dJmZu1r1Dk1WdmM049r+rt6aWnn8rchFwMtlKZQ+bL39Gu4yd/IjW0ioQiMO 2XSQmdWKHUqK9hHp4FYPe+nhTAxS3Js3lL0z5ukJxnE29vFxjJm0J8Fd4QGgp8su 9kODYLJsIaOKGotplw5j3xkQUGUDwKYS+YjdB1kJpsqLhgluJM5gCR6MbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXLQYbDDs5enfJuaZnxJ3fGYUyiMB8GA1UdIwQY MBaAFHRdulbPH/ws/B0F9PqDMRfv18eKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEYyNlZzOGZfQ3o4SFFYMC1vTXhGLV9YeDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82NWQzYTQtNWNjYy00MDM3LWE4Zjgt MGEzMjcxMTY2NWFkLzEvZEYyNlZzOGZfQ3o4SFFYMC1vTXhGLV9YeDRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi82NWQzYTQtNWNjYy00MDM3LWE4ZjgtMGEzMjcxMTY2NWFk LzEvZEYyNlZzOGZfQ3o4SFFYMC1vTXhGLV9YeDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVmlNyQ/ b/U7ihT/Bu2jNoPHF0P0TDexZur/xIwWclygvUjZIBM4qqHCakUAvx2fEoUDqH9T 8K70b2JArH7rY5MkB2pMnKFaMHLfGyjpYJ/4G8oeVCd9VD9Y54A3+6Nz5OGUvViW mr8DmCeS/9P1wGGuE+q2kWDP19NsQL8gptButDh0kGKJV09i/xaJClQsOy1kTe7v AuchNXkfbEq3M55P4VKVsMuR6ycRlLW55gBWHchYWOssqd2ZMb5LK0JbQpSejX5T K8LBObjWBudAacKB+ql6ekmYWZYbRQamSDsogn9e4PKa1jnak44x3zIowKDxXY54 892BvNaQPaN4sQ== -----END CERTIFICATE-----Generated at Sun Jan 18 16:44:07 2026 by rpki-client