This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: 0+q///HS38w5EGfA0q0cVnGWYWGNtGJlJUWobTpBmmg= Subject key identifier: C5:EC:F0:2C:FB:AF:B0:6F:5C:40:AD:60:1B:C5:1F:E3:8D:E1:AA:5D Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 019BF5752D34AB1113537469799E37EB609A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 1055 Signing time: Sun 25 Jan 2026 14:00:55 +0000 Manifest this update: Sun 25 Jan 2026 14:00:55 +0000 Manifest next update: Mon 26 Jan 2026 14:00:55 +0000 Files and hashes: 1: 4aHbMfy3j-ECkrD4rvedcCjTB_0.roa (hash: qusttE+9ZpOBhcPrh6x5LDaTogCO5iBos5RhS/oM6AY=) 2: 5-xa1DwYQklowUOFsT1S-uTdWNs.roa (hash: L6ahwy7v3F/eJH7YLdiIkbI0hjgLlbmnqluQBda3pbM=) 3: 9oVvdEoztm2muhkwHTmAIiSboxY.roa (hash: xZjJjhfrzY5FzTi4sci1qrWURSjGM2JBzOOEdQWgB+0=) 4: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: aMKQ2IisVJF3WNd3Vn7+UZdV54mdYTM1maELWbil3Ug=) 5: DqwgEpy8tzQ8MT3YIzSTmMnsaoU.roa (hash: F0Z+Aiea4uLu6qp3gJMuctXX0e3YeSp0/r7/SyVg7oU=) 6: GLlV_QNfxAHgbPbOQuZSom8Go7k.roa (hash: 7Gk5aFbSltujIpc/l7EhPu0VuZTxlAcLmjwbJVWm0p8=) 7: LRsAkvslcwyvjR-GyMdM6597IZA.roa (hash: /5MkBlONah8XkH1G2dWhrVOK6eZR0nrPNy2NU1Yt4so=) 8: UOXbVXyzSsZqFmvvMWlFNgrUDWs.roa (hash: SwMKdG9PQtp/UmBy8238eDwxjrTfaf4LKchtiCe136w=) 9: XhXwZGz_0ot-Yipy5gjWlGapqJg.roa (hash: osMFJv9ESYs8+a8oe5L8opFDI8cvKk+g8mqi6wPX570=) 10: _lIz-ZhP2tOm-0Bb99DULlXTc50.roa (hash: 4dGEG45wVvQueTiwmqRhKVqr9rpL9b9WGKdRjggMgG4=) 11: c1WcScQ-iUvtqaFkrNNSIFe5J6Q.roa (hash: 9taVcBd6UWLT46HKsQQ8HZLq62dEzc2Av1/NrgPYxiw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:2d:34:ab:11:13:53:74:69:79:9e:37:eb:60:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Jan 25 14:00:55 2026 GMT Not After : Jan 26 14:00:55 2026 GMT Subject: CN=c5ecf02cfbafb06f5c40ad601bc51fe38de1aa5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b2:bb:df:1c:01:7b:1d:b9:80:87:44:7a:fc: 84:dc:ac:3b:ee:7b:9c:30:74:43:68:95:4e:47:ed: 2a:88:76:06:cf:68:cf:ed:37:3f:f7:f4:17:46:30: 80:ed:6f:7e:bb:b5:93:80:70:1c:18:d8:37:92:a3: 59:d8:cc:65:1b:71:8f:d1:85:f7:b5:f2:d2:c1:83: 36:95:9f:59:84:d8:99:c1:33:32:10:25:a2:9f:f5: 35:65:f1:c4:82:f5:50:f5:c5:e3:70:aa:d3:f8:5f: 02:1b:f2:a5:98:b3:eb:ff:76:92:1b:0f:67:76:16: 7a:79:8c:8f:77:aa:ef:11:57:2d:2e:57:4e:78:ab: bd:7a:d2:17:95:ee:29:81:ec:e6:a5:14:50:4e:65: 00:9b:d6:81:00:ce:2d:57:3b:2e:01:bd:47:fc:82: 1c:b2:1e:30:a7:47:7d:b5:ac:0e:75:6e:55:75:7f: 09:3a:cd:1a:d7:d9:73:d1:e3:a2:36:91:35:0e:f0: 58:c9:58:ff:d2:e2:a3:d2:f7:1a:90:09:26:71:a5: f8:d0:06:06:59:a3:17:bd:0e:5d:be:bb:bb:55:35: 64:20:f1:9f:23:e3:4c:08:8b:e0:7a:40:08:70:34: cc:ae:fd:cd:4b:0c:42:bb:09:2f:c5:6e:f4:68:6e: a3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EC:F0:2C:FB:AF:B0:6F:5C:40:AD:60:1B:C5:1F:E3:8D:E1:AA:5D X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:26:ba:ac:01:da:7b:8c:f6:85:93:3c:1b:17:b9:5f:c6:6e: 4c:92:ad:10:57:8b:31:b3:81:27:73:b0:ed:e6:c0:88:73:f2: 2a:e2:69:17:3a:0c:75:cc:a0:78:83:9f:93:7c:d0:27:91:08: 38:0f:24:78:2b:5f:83:83:1a:77:46:58:fe:c4:a7:ac:48:64: 48:67:b3:79:47:a0:eb:24:2e:6e:82:a4:5b:17:3d:77:3a:73: 25:46:57:00:a1:24:80:86:84:20:97:aa:13:37:80:cb:d8:38: 4f:da:a0:a1:9f:f6:f0:59:e6:3e:03:5e:e7:7e:a1:5b:d6:05: fa:a8:d4:a1:51:c3:82:cd:16:69:98:13:63:6f:79:64:d8:95: d1:b1:9d:ea:af:a5:ec:9d:6d:70:f7:cd:ce:0b:c0:36:5e:1d: 5e:cd:52:10:bf:14:b4:3e:16:11:11:41:f7:a6:f9:8d:67:4b: 24:73:be:56:d7:ea:20:2f:1c:87:03:12:d6:dd:a5:70:4b:b4: 1e:e5:8e:7f:18:f0:b6:84:3d:3b:45:5c:b2:f8:44:51:a6:9e: 08:9a:1b:90:91:ee:7e:8f:36:dc:e1:09:8d:0b:f3:03:34:39: 05:d6:71:7f:e4:71:b3:8a:fd:77:3d:bb:e8:11:09:bf:8c:6c: a4:d7:a9:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dS00qxETU3RpeZ4362CaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjYwMTI1MTQwMDU1WhcNMjYwMTI2MTQwMDU1WjAzMTEwLwYDVQQD EyhjNWVjZjAyY2ZiYWZiMDZmNWM0MGFkNjAxYmM1MWZlMzhkZTFhYTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rK73xwBex25gIdEevyE3Kw77nuc MHRDaJVOR+0qiHYGz2jP7Tc/9/QXRjCA7W9+u7WTgHAcGNg3kqNZ2MxlG3GP0YX3 tfLSwYM2lZ9ZhNiZwTMyECWin/U1ZfHEgvVQ9cXjcKrT+F8CG/KlmLPr/3aSGw9n dhZ6eYyPd6rvEVctLldOeKu9etIXle4pgezmpRRQTmUAm9aBAM4tVzsuAb1H/IIc sh4wp0d9tawOdW5VdX8JOs0a19lz0eOiNpE1DvBYyVj/0uKj0vcakAkmcaX40AYG WaMXvQ5dvru7VTVkIPGfI+NMCIvgekAIcDTMrv3NSwxCuwkvxW70aG6jzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXs8Cz7r7BvXECtYBvFH+ON4apdMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwSa6rAHa e4z2hZM8Gxe5X8ZuTJKtEFeLMbOBJ3Ow7ebAiHPyKuJpFzoMdcygeIOfk3zQJ5EI OA8keCtfg4Mad0ZY/sSnrEhkSGezeUeg6yQuboKkWxc9dzpzJUZXAKEkgIaEIJeq EzeAy9g4T9qgoZ/28FnmPgNe536hW9YF+qjUoVHDgs0WaZgTY295ZNiV0bGd6q+l 7J1tcPfNzgvANl4dXs1SEL8UtD4WERFB96b5jWdLJHO+VtfqIC8chwMS1t2lcEu0 HuWOfxjwtoQ9O0VcsvhEUaaeCJobkJHufo823OEJjQvzAzQ5BdZxf+Rxs4r9dz27 6BEJv4xspNeptg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:03 2026 by rpki-client