This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json) Hash identifier: ZlxgdznLOmbRJkbPETw/8BvrZOZIqqG2l+5DwdZ+xRU= Subject key identifier: E2:4D:F2:39:34:2E:B0:E3:58:A0:64:F4:FA:C6:C6:5F:1E:B6:74:CF Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98 Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398 Certificate serial: 019BF5E3E3F761FE0FDC93BD509DEFD54364 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft Manifest number: 1486 Signing time: Sun 25 Jan 2026 16:01:51 +0000 Manifest this update: Sun 25 Jan 2026 16:01:51 +0000 Manifest next update: Mon 26 Jan 2026 16:01:51 +0000 Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: Zpsm7NOQnuhhdBzXrjGSJuy/8/K4L7FCRubQzeJFgmc=) 2: iYtloRWl9kFypd8JJUfmPgfj4cA.roa (hash: S73CmXUZ6HVY4mwA83JVTETkq549rHQpfRMzqNjQiJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:e3:f7:61:fe:0f:dc:93:bd:50:9d:ef:d5:43:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398 Validity Not Before: Jan 25 16:01:51 2026 GMT Not After : Jan 26 16:01:51 2026 GMT Subject: CN=e24df239342eb0e358a064f4fac6c65f1eb674cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:dd:fd:64:bb:be:27:e5:dc:57:60:22:73:42: 2e:f1:dc:93:0b:98:b0:3a:91:32:c1:f7:0e:76:4c: b9:d0:b2:91:8b:fe:8c:01:c9:eb:05:12:34:ab:a0: 74:c1:96:f3:49:2c:e9:65:f0:3f:e3:51:d0:d8:59: 09:bc:2f:2e:a7:fc:97:35:7f:d8:6e:02:f2:c0:c8: 35:0c:d5:48:80:c5:44:f7:c3:e2:f9:f2:96:8e:9c: 33:a1:3e:18:3a:ba:73:59:22:34:83:4e:57:de:01: f6:b2:fe:f5:f3:78:8d:04:a3:ff:c5:3f:86:fb:a6: 22:c4:85:d4:db:68:00:b8:4a:7b:76:75:90:47:f9: 88:9b:7f:72:d2:f2:ea:03:b2:4c:35:9a:81:12:bd: 61:69:ea:f0:15:55:a5:bc:fd:fd:af:db:54:fc:9c: a9:b3:c5:eb:4d:35:f3:e5:8e:09:5e:51:4b:7f:82: b6:71:98:8b:ee:c0:33:89:90:9e:2f:2d:92:ca:3b: d7:9b:46:57:7a:fb:83:e2:3f:b4:da:59:9b:3a:c8: 3f:b0:57:f4:05:94:1b:5a:4b:6e:4c:62:c4:b8:4c: eb:b1:03:dd:b8:26:75:f1:dd:7f:66:dc:5e:95:22: 21:42:3d:16:2f:6b:4f:97:7a:5f:3b:93:77:71:56: 70:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4D:F2:39:34:2E:B0:E3:58:A0:64:F4:FA:C6:C6:5F:1E:B6:74:CF X509v3 Authority Key Identifier: keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:4f:ee:40:1e:6b:0f:84:cf:ac:1d:48:29:5a:6b:12:56:89: d4:d2:af:6b:55:82:9d:db:1d:f7:fb:70:68:95:9d:4a:bf:d2: ec:ec:e0:f3:75:01:14:3f:53:d4:b9:fe:e0:3d:3c:53:24:7f: 00:5a:1a:6d:fa:96:c3:5e:97:4c:d5:ae:2d:4e:47:20:08:46: 4f:b6:bf:6a:7a:b5:86:01:bc:3a:da:e4:5b:a9:53:2a:0f:3d: df:1e:c7:12:4e:e7:62:95:32:1e:73:bd:fe:e0:db:8e:0c:d5: 88:d7:dc:6e:7a:0d:c5:92:69:fa:2d:88:d7:ae:d1:a9:f8:50: 78:94:67:77:4f:fa:c9:26:ae:02:01:a6:67:9e:7d:81:b7:8b: 6c:1a:fd:7e:fa:77:68:ed:19:c6:10:54:76:ca:bf:00:6b:2d: 3c:53:73:2e:e0:ae:62:8e:26:9a:c2:86:a5:43:87:77:36:8f: f8:df:56:84:28:2f:1f:11:de:20:ed:f1:9a:d8:b4:15:6e:42: 25:08:63:bc:80:88:0e:d6:84:ae:21:7a:e7:75:80:9f:0a:87: cf:57:df:65:54:41:66:e7:9b:5a:32:75:53:1b:63:69:8b:8d: 41:e2:e9:72:e4:46:5a:d4:46:9b:36:35:a7:37:a5:f3:60:db: 6b:9a:0a:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14+P3Yf4P3JO9UJ3v1UNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMzhjMzM4YjEyOGY4M2FkZWMyZjY5ZDkzYzMyYzUzNTNj YTAzOTgwHhcNMjYwMTI1MTYwMTUxWhcNMjYwMTI2MTYwMTUxWjAzMTEwLwYDVQQD EyhlMjRkZjIzOTM0MmViMGUzNThhMDY0ZjRmYWM2YzY1ZjFlYjY3NGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5d39ZLu+J+XcV2Aic0Iu8dyTC5iw OpEywfcOdky50LKRi/6MAcnrBRI0q6B0wZbzSSzpZfA/41HQ2FkJvC8up/yXNX/Y bgLywMg1DNVIgMVE98Pi+fKWjpwzoT4YOrpzWSI0g05X3gH2sv7183iNBKP/xT+G +6YixIXU22gAuEp7dnWQR/mIm39y0vLqA7JMNZqBEr1haerwFVWlvP39r9tU/Jyp s8XrTTXz5Y4JXlFLf4K2cZiL7sAziZCeLy2SyjvXm0ZXevuD4j+02lmbOsg/sFf0 BZQbWktuTGLEuEzrsQPduCZ18d1/ZtxelSIhQj0WL2tPl3pfO5N3cVZw2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJN8jk0LrDjWKBk9PrGxl8etnTPMB8GA1UdIwQY MBaAFNA4wzixKPg63sL2nZPDLFNTygOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMERqRE9MRW8tRHJld3ZhZGs4TXNVMVBLQTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85MjVmOTEtMzBjNS00YTZiLWExNDkt OWJmOGIxZWYyZTk2LzEvMERqRE9MRW8tRHJld3ZhZGs4TXNVMVBLQTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85MjVmOTEtMzBjNS00YTZiLWExNDktOWJmOGIxZWYyZTk2 LzEvMERqRE9MRW8tRHJld3ZhZGs4TXNVMVBLQTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlk/uQB5r D4TPrB1IKVprElaJ1NKva1WCndsd9/twaJWdSr/S7Ozg83UBFD9T1Ln+4D08UyR/ AFoabfqWw16XTNWuLU5HIAhGT7a/anq1hgG8OtrkW6lTKg893x7HEk7nYpUyHnO9 /uDbjgzViNfcbnoNxZJp+i2I167RqfhQeJRnd0/6ySauAgGmZ559gbeLbBr9fvp3 aO0ZxhBUdsq/AGstPFNzLuCuYo4mmsKGpUOHdzaP+N9WhCgvHxHeIO3xmti0FW5C JQhjvICIDtaEriF653WAnwqHz1ffZVRBZuebWjJ1UxtjaYuNQeLpcuRGWtRGmzY1 pzel82Dba5oKXg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:55 2026 by rpki-client