This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft File: diY1mUnOzyQYxaLbIayrhd2Rk9g.mft (raw, json) Hash identifier: /Bzt6skss3zWBojRWqcWW320VRpNB2yWtrJkCizvV/s= Subject key identifier: DD:DA:63:0D:BF:45:35:71:41:CF:4A:97:6C:D8:65:99:57:10:90:39 Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8 Certificate issuer: /CN=7626359949cecf2418c5a2db21acab85dd9193d8 Certificate serial: 019BF83EF71B4DDE8E27FF43AB1C5EF78D90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 03:00:34 +0000 Manifest this update: Mon 26 Jan 2026 03:00:34 +0000 Manifest next update: Tue 27 Jan 2026 03:00:34 +0000 Files and hashes: 1: Ra_O1tJPqxceyq_rAhiwFMOrKjw.roa (hash: Rmyhdy6TeiiXlYpWyq2MVfXDcJgMeLMhA0axqCrhBSg=) 2: diY1mUnOzyQYxaLbIayrhd2Rk9g.crl (hash: AkbAVprjKLWykiBKCK5wbsBab3wFIOSBHwgyeG9XrXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3e:f7:1b:4d:de:8e:27:ff:43:ab:1c:5e:f7:8d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8 Validity Not Before: Jan 26 03:00:34 2026 GMT Not After : Jan 27 03:00:34 2026 GMT Subject: CN=ddda630dbf45357141cf4a976cd8659957109039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2c:ec:80:e6:89:47:34:80:4b:43:b2:f2:9c: fa:6e:04:11:30:bd:52:5f:af:7b:af:d8:f7:73:bc: c9:56:c2:14:b3:ae:58:f3:cc:e5:23:9f:e5:ea:df: 24:42:0d:8a:cd:ea:ae:6c:30:ba:22:62:db:b1:ac: c6:99:88:ed:d7:85:33:59:99:74:78:38:00:d9:7d: 33:bc:17:3e:15:fd:cf:77:ca:14:01:86:4b:7d:90: 73:00:02:7f:f5:28:d4:b0:1b:da:26:cf:3e:05:60: 04:18:ae:ab:4b:b1:74:b0:7c:2a:81:96:e3:bf:60: 67:7c:50:fe:e8:fd:a1:ca:c6:45:8c:93:3e:6b:9e: 6b:cb:5b:93:46:0c:4c:d0:d4:bc:3f:87:b4:f6:ad: 64:79:e2:fe:65:bb:c6:09:ea:17:7f:f4:a1:ba:1c: a1:6f:d9:19:aa:7e:96:ec:e2:cc:19:75:a5:39:af: 68:ad:b6:53:64:ca:c7:e6:f9:58:d4:8a:27:5c:35: c1:8b:31:fc:ac:70:d0:16:e0:f2:75:d3:6b:c5:35: 53:62:db:9a:d5:90:fb:75:d5:3f:03:97:2a:76:26: 6a:f2:eb:5a:53:30:df:fd:59:c6:da:ce:44:ac:2b: 54:51:6b:6a:b7:30:c8:54:81:b6:8b:6c:84:fa:bd: 96:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DA:63:0D:BF:45:35:71:41:CF:4A:97:6C:D8:65:99:57:10:90:39 X509v3 Authority Key Identifier: keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:26:04:54:07:78:04:97:c0:91:02:82:4f:b3:49:da:c0:29: 5a:8c:a5:a8:be:36:8d:0d:1f:52:5d:41:40:d4:a4:fe:c0:b9: 32:28:c4:1e:4a:de:20:88:62:a0:1e:7b:d8:cb:3a:09:70:01: 71:e5:66:f2:ac:75:a6:60:71:0d:4e:69:60:f7:30:09:7e:37: 9b:55:bc:a8:78:52:61:45:8b:99:5f:6f:ff:10:90:bc:05:7a: 22:de:70:e1:0b:48:64:23:a9:8f:63:04:2e:93:fe:68:f1:92: 4e:6c:af:83:6c:f2:fa:2c:0c:b3:01:ee:81:e7:e2:ec:fd:bd: b1:ff:ed:e7:aa:27:ee:de:99:c0:c7:4a:99:7a:64:59:c4:e3: e8:5d:c4:52:97:66:9f:bb:10:92:e1:93:95:50:ed:3f:9f:aa: 35:8d:08:3d:2a:64:b0:54:6d:cb:1b:36:d1:e8:59:3c:ae:1b: 20:fb:e6:a3:9d:21:27:cd:26:01:35:d1:a5:7d:46:4b:80:24: 86:4b:49:85:1a:f2:4a:4d:e6:7c:eb:d0:a8:cc:11:b9:1e:2b: 57:f4:d5:2b:90:e8:02:06:73:c3:96:bf:42:d7:19:31:9b:dd: 34:31:7d:fb:21:f6:29:93:6c:93:c5:4a:9f:54:e9:b5:d4:80: 45:c3:dc:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4PvcbTd6OJ/9Dqxxe942QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MjYzNTk5NDljZWNmMjQxOGM1YTJkYjIxYWNhYjg1ZGQ5 MTkzZDgwHhcNMjYwMTI2MDMwMDM0WhcNMjYwMTI3MDMwMDM0WjAzMTEwLwYDVQQD EyhkZGRhNjMwZGJmNDUzNTcxNDFjZjRhOTc2Y2Q4NjU5OTU3MTA5MDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yzsgOaJRzSAS0Oy8pz6bgQRML1S X697r9j3c7zJVsIUs65Y88zlI5/l6t8kQg2KzequbDC6ImLbsazGmYjt14UzWZl0 eDgA2X0zvBc+Ff3Pd8oUAYZLfZBzAAJ/9SjUsBvaJs8+BWAEGK6rS7F0sHwqgZbj v2BnfFD+6P2hysZFjJM+a55ry1uTRgxM0NS8P4e09q1keeL+ZbvGCeoXf/Shuhyh b9kZqn6W7OLMGXWlOa9orbZTZMrH5vlY1IonXDXBizH8rHDQFuDyddNrxTVTYtua 1ZD7ddU/A5cqdiZq8utaUzDf/VnG2s5ErCtUUWtqtzDIVIG2i2yE+r2WlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3aYw2/RTVxQc9Kl2zYZZlXEJA5MB8GA1UdIwQY MBaAFHYmNZlJzs8kGMWi2yGsq4XdkZPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGlZMW1Vbk96eVFZeGFMYklheXJoZDJSazlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jM2MxM2UtOGY2MS00ZGZlLTk1MmMt YzgwNDA4M2U3ZDQ5LzEvZGlZMW1Vbk96eVFZeGFMYklheXJoZDJSazlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jM2MxM2UtOGY2MS00ZGZlLTk1MmMtYzgwNDA4M2U3ZDQ5 LzEvZGlZMW1Vbk96eVFZeGFMYklheXJoZDJSazlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSYEVAd4 BJfAkQKCT7NJ2sApWoylqL42jQ0fUl1BQNSk/sC5MijEHkreIIhioB572Ms6CXAB ceVm8qx1pmBxDU5pYPcwCX43m1W8qHhSYUWLmV9v/xCQvAV6It5w4QtIZCOpj2ME LpP+aPGSTmyvg2zy+iwMswHugefi7P29sf/t56on7t6ZwMdKmXpkWcTj6F3EUpdm n7sQkuGTlVDtP5+qNY0IPSpksFRtyxs20ehZPK4bIPvmo50hJ80mATXRpX1GS4Ak hktJhRrySk3mfOvQqMwRuR4rV/TVK5DoAgZzw5a/QtcZMZvdNDF9+yH2KZNsk8VK n1TptdSARcPcIw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:48 2026 by rpki-client