This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json) Hash identifier: pihvSj+UhBxAPl5plF24pcFG5bzpa8dYYAUyx2lBz2s= Subject key identifier: F0:3C:5B:33:5F:34:09:39:CC:BE:69:5B:CB:06:1E:55:14:A3:83:AD Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08 Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008 Certificate serial: 019BF72D2F30D98CC145B2306FC740924C73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft Manifest number: 0F60 Signing time: Sun 25 Jan 2026 22:01:32 +0000 Manifest this update: Sun 25 Jan 2026 22:01:32 +0000 Manifest next update: Mon 26 Jan 2026 22:01:32 +0000 Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: AFLYR2QtlydHdAjiia8O7jB4wmuRZaIZhpptTrssV+g=) 2: mssfFR-jvVEjXWitmlgUfKmk1ic.roa (hash: w30uwAMWbY93oGllAg088gC96/ylOV2F4klPStV+KUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:2f:30:d9:8c:c1:45:b2:30:6f:c7:40:92:4c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008 Validity Not Before: Jan 25 22:01:32 2026 GMT Not After : Jan 26 22:01:32 2026 GMT Subject: CN=f03c5b335f340939ccbe695bcb061e5514a383ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:61:da:bc:25:f5:63:3e:97:e2:77:15:35:fa: 95:c3:16:3e:e4:b8:8a:5b:56:35:d1:2c:d4:56:5b: 29:ad:62:c0:a3:65:ba:8e:39:9f:95:0c:98:14:37: 3c:ab:41:da:02:7f:05:9e:cb:92:3e:95:9f:e1:c2: 08:03:62:fe:d7:84:45:5f:b1:fe:e0:b0:d6:45:24: 3b:72:04:d3:fd:10:f5:5e:84:4e:67:d4:d4:48:33: 28:12:9d:03:b1:2e:02:85:a1:ef:af:9d:8e:21:9d: 11:34:69:b0:24:22:05:92:63:1f:b3:00:31:be:0b: 8e:58:40:58:4f:c7:39:27:df:bb:ff:92:2b:87:ba: 49:c1:87:30:2e:aa:99:de:8a:f6:09:96:64:35:cc: 6b:04:8d:41:7f:23:ef:68:fb:8c:48:44:14:35:d0: 02:d7:d3:14:da:20:5c:71:0a:b1:43:e9:a9:a5:74: 28:d3:e4:ef:a4:4c:44:78:5f:cc:ce:dd:a9:d4:d2: 2d:c2:27:23:e9:4e:ea:04:24:0c:5e:9b:0f:a9:b2: 1e:4a:9d:8c:62:81:15:4a:1c:4b:06:de:99:30:73: 1e:b4:6f:5b:b4:ae:f5:87:f3:05:3a:a8:4f:17:1b: 24:b2:42:59:c0:78:9e:1d:95:3b:ca:58:61:4a:a0: 1d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3C:5B:33:5F:34:09:39:CC:BE:69:5B:CB:06:1E:55:14:A3:83:AD X509v3 Authority Key Identifier: keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:87:1a:bc:d0:18:96:ac:a9:da:ec:5e:a6:09:97:e2:5f:51: f7:d9:bb:a2:48:f0:b5:e0:98:64:76:e3:02:2e:77:44:dd:fa: 07:cb:4d:25:9e:7e:4e:d0:f6:c1:a1:ee:b4:1a:8e:6e:90:76: 18:76:57:ce:56:38:04:76:28:52:81:4a:a3:99:86:b6:03:29: d4:c4:5e:29:40:d3:b4:fb:f9:31:48:9e:40:2b:62:8e:97:ae: 82:ee:1c:89:c5:5d:cf:b0:da:2e:d9:90:99:16:7b:79:f3:cf: 33:57:49:39:c6:97:3b:dd:d4:d9:64:58:ac:54:1d:f4:7d:54: 97:ff:ca:6c:24:76:f7:ba:b6:f2:7b:32:3a:00:ea:d2:c8:d8: ad:72:c6:37:29:51:ae:1d:60:e4:ab:65:ba:f4:02:e1:85:41: d2:ce:29:1a:62:66:45:1c:03:0a:d8:6c:34:31:96:c2:b1:e0: 81:26:27:f0:01:6c:8e:cf:0b:41:c3:81:c7:f4:62:79:10:db: 5b:b8:b9:46:cd:c9:f8:87:7c:8c:cb:1b:5c:09:c6:ab:86:07: f2:23:65:b9:42:6c:4b:cc:21:6e:b7:4c:db:05:49:d0:52:96: bf:0c:77:89:f8:90:57:da:8b:d9:6c:4a:9d:d6:02:7b:50:40: a2:81:93:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LS8w2YzBRbIwb8dAkkxzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZmY0OTllY2RiOGUxNTczM2JiNzExMDk1OTk1OWFjMGUx NjYwMDgwHhcNMjYwMTI1MjIwMTMyWhcNMjYwMTI2MjIwMTMyWjAzMTEwLwYDVQQD EyhmMDNjNWIzMzVmMzQwOTM5Y2NiZTY5NWJjYjA2MWU1NTE0YTM4M2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGHavCX1Yz6X4ncVNfqVwxY+5LiK W1Y10SzUVlsprWLAo2W6jjmflQyYFDc8q0HaAn8FnsuSPpWf4cIIA2L+14RFX7H+ 4LDWRSQ7cgTT/RD1XoROZ9TUSDMoEp0DsS4ChaHvr52OIZ0RNGmwJCIFkmMfswAx vguOWEBYT8c5J9+7/5Irh7pJwYcwLqqZ3or2CZZkNcxrBI1BfyPvaPuMSEQUNdAC 19MU2iBccQqxQ+mppXQo0+TvpExEeF/Mzt2p1NItwicj6U7qBCQMXpsPqbIeSp2M YoEVShxLBt6ZMHMetG9btK71h/MFOqhPFxskskJZwHieHZU7ylhhSqAdPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPA8WzNfNAk5zL5pW8sGHlUUo4OtMB8GA1UdIwQY MBaAFA3/SZ7NuOFXM7txEJWZWawOFmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEt NmY3YzBlYzkxZDhhLzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEtNmY3YzBlYzkxZDhh LzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAocavNAY lqyp2uxepgmX4l9R99m7okjwteCYZHbjAi53RN36B8tNJZ5+TtD2waHutBqObpB2 GHZXzlY4BHYoUoFKo5mGtgMp1MReKUDTtPv5MUieQCtijpeugu4cicVdz7DaLtmQ mRZ7efPPM1dJOcaXO93U2WRYrFQd9H1Ul//KbCR297q28nsyOgDq0sjYrXLGNylR rh1g5KtluvQC4YVB0s4pGmJmRRwDCthsNDGWwrHggSYn8AFsjs8LQcOBx/RieRDb W7i5Rs3J+Id8jMsbXAnGq4YH8iNluUJsS8whbrdM2wVJ0FKWvwx3ifiQV9qL2WxK ndYCe1BAooGTGA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:55 2026 by rpki-client