This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft File: d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json) Hash identifier: uz9QHR77zQSwhnYojqdGKozqiGjN6sQa4bBkXzQKi/M= Subject key identifier: 7D:EC:DB:E7:8A:ED:E0:50:9A:85:55:36:1C:8E:C6:FA:BD:E5:05:93 Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1 Certificate issuer: /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1 Certificate serial: 019BF6BF5E18541030182A91CE838EB84AEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft Manifest number: 0ECE Signing time: Sun 25 Jan 2026 20:01:35 +0000 Manifest this update: Sun 25 Jan 2026 20:01:35 +0000 Manifest next update: Mon 26 Jan 2026 20:01:35 +0000 Files and hashes: 1: 1-x1SQoCge1oAxdF8NH1g432c8v4.roa (hash: gGNG1VzQDUnu5gmTgkEbwFhdDKx8kxbSdmHR7f+ftE8=) 2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: vdORCOwycbIhEUIhAIKz41dhRjdGv3bFjN1I5jYsJTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:5e:18:54:10:30:18:2a:91:ce:83:8e:b8:4a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1 Validity Not Before: Jan 25 20:01:35 2026 GMT Not After : Jan 26 20:01:35 2026 GMT Subject: CN=7decdbe78aede0509a8555361c8ec6fabde50593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:31:2d:fc:c1:5e:c1:79:6b:84:89:82:aa:4f: 83:7b:97:7d:fd:13:6f:a7:f1:b8:eb:d0:83:f4:86: f6:9e:81:8b:3b:49:1e:75:16:8d:36:c0:a5:13:c0: c3:b2:7b:7f:7f:83:1d:c5:a3:55:38:d2:b8:67:ec: 3c:dc:7f:e1:13:72:60:84:97:3d:59:c3:d2:60:7a: 3f:ac:d5:42:5a:58:ae:a6:8a:b9:bc:60:a1:8b:c4: 0f:d6:1a:77:4a:96:57:82:61:27:12:1b:57:9a:04: 62:2f:3b:44:6b:73:b4:26:1d:ae:d8:4c:c7:21:f6: 99:ca:50:4a:e9:67:5d:4e:5c:a8:fd:e0:8b:20:07: d9:33:eb:58:b0:25:40:16:5c:c4:41:9f:81:92:25: 1b:d0:c9:be:6e:28:8c:db:c7:10:89:70:17:c8:59: 7a:38:b2:96:78:31:73:09:da:5a:a6:fc:c8:7d:8f: ca:30:9d:07:77:22:15:83:69:3b:cd:9c:f7:d9:5e: e4:84:7b:25:6f:14:e1:18:25:f5:e6:2e:bb:7d:91: 69:52:85:b5:dd:cb:75:a7:6e:6e:0e:aa:db:74:5d: 26:a3:a9:b1:e3:de:2b:60:3b:69:25:73:51:0c:31: ad:a6:6e:af:18:01:2e:69:6b:95:ca:a3:73:33:b2: 96:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EC:DB:E7:8A:ED:E0:50:9A:85:55:36:1C:8E:C6:FA:BD:E5:05:93 X509v3 Authority Key Identifier: keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:9b:aa:bd:4a:df:05:9e:c2:57:51:da:d1:56:c8:b5:bf:6f: b6:50:1b:60:7f:b8:39:35:a7:83:4b:5e:e6:3c:3b:00:56:3a: 82:6b:cd:ff:4a:00:83:0d:80:73:81:7e:db:1e:f2:97:93:23: 17:f5:45:f5:dd:3b:0a:5b:db:21:14:6b:e5:41:4b:41:10:a3: c6:ce:f6:ad:e8:1a:46:1f:2b:bf:e0:ad:60:cb:6c:e1:3e:91: 5e:56:b5:40:a7:d9:b8:82:74:8b:ba:49:16:d4:87:b4:6e:2d: 34:50:ec:c4:a9:09:4e:0c:2b:30:d8:40:62:5d:d6:61:b2:f4: 7a:42:fe:0d:93:ee:f3:94:cd:5f:e6:d1:c0:c1:26:c3:aa:a6: 30:35:77:c6:72:08:51:27:a7:86:03:0f:74:7b:3a:7a:b6:36: 80:58:93:af:e7:5b:0d:e1:1b:d6:6a:d7:e6:b5:45:26:eb:af: a5:45:4e:f7:5a:8a:84:81:75:e7:14:e9:cc:c3:7d:63:5b:ed: 17:8e:98:35:94:b6:f1:b5:bd:4d:54:a8:96:4c:41:9c:24:f2: b1:ce:d3:3a:75:2e:53:41:ab:2d:9b:ee:b3:47:e8:26:03:73: 25:4b:8b:c8:33:2d:fa:2f:81:e0:32:ab:4d:d8:25:9e:f4:18: 65:8a:e2:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v14YVBAwGCqRzoOOuErrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YTM1MGQ5ZmU0ZTlmOTBmZjNlODRlMmY5NjBjYjVkYzNk NmNlZTEwHhcNMjYwMTI1MjAwMTM1WhcNMjYwMTI2MjAwMTM1WjAzMTEwLwYDVQQD Eyg3ZGVjZGJlNzhhZWRlMDUwOWE4NTU1MzYxYzhlYzZmYWJkZTUwNTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszEt/MFewXlrhImCqk+De5d9/RNv p/G469CD9Ib2noGLO0kedRaNNsClE8DDsnt/f4MdxaNVONK4Z+w83H/hE3JghJc9 WcPSYHo/rNVCWliupoq5vGChi8QP1hp3SpZXgmEnEhtXmgRiLztEa3O0Jh2u2EzH IfaZylBK6WddTlyo/eCLIAfZM+tYsCVAFlzEQZ+BkiUb0Mm+biiM28cQiXAXyFl6 OLKWeDFzCdpapvzIfY/KMJ0HdyIVg2k7zZz32V7khHslbxThGCX15i67fZFpUoW1 3ct1p25uDqrbdF0mo6mx494rYDtpJXNRDDGtpm6vGAEuaWuVyqNzM7KWGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3s2+eK7eBQmoVVNhyOxvq95QWTMB8GA1UdIwQY MBaAFHejUNn+Tp+Q/z6E4vlgy13D1s7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84YmM0NGItNWQ1YS00YjU0LWFiOTEt ZGExYzUxNWU1YjI5LzEvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84YmM0NGItNWQ1YS00YjU0LWFiOTEtZGExYzUxNWU1YjI5 LzEvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJuqvUrf BZ7CV1Ha0VbItb9vtlAbYH+4OTWng0te5jw7AFY6gmvN/0oAgw2Ac4F+2x7yl5Mj F/VF9d07ClvbIRRr5UFLQRCjxs72regaRh8rv+CtYMts4T6RXla1QKfZuIJ0i7pJ FtSHtG4tNFDsxKkJTgwrMNhAYl3WYbL0ekL+DZPu85TNX+bRwMEmw6qmMDV3xnII USenhgMPdHs6erY2gFiTr+dbDeEb1mrX5rVFJuuvpUVO91qKhIF15xTpzMN9Y1vt F46YNZS28bW9TVSolkxBnCTysc7TOnUuU0GrLZvus0foJgNzJUuLyDMt+i+B4DKr TdglnvQYZYrikg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:08:33 2026 by rpki-client