This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft File: DfDWLe46FKBuUrfveggwM42dd1E.mft (raw, json) Hash identifier: xOjQnznadmKEoLhZvWEvScqY/6MLwb2y6UAJJq/iUoc= Subject key identifier: 81:8D:6C:4F:31:98:EF:98:46:BE:72:E2:0C:22:44:19:FC:41:9A:7F Authority key identifier: 0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51 Certificate issuer: /CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751 Certificate serial: 019BF763E533F5437F7A8E9F2E90CF9161C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft Manifest number: 21 Signing time: Sun 25 Jan 2026 23:01:17 +0000 Manifest this update: Sun 25 Jan 2026 23:01:17 +0000 Manifest next update: Mon 26 Jan 2026 23:01:17 +0000 Files and hashes: 1: DfDWLe46FKBuUrfveggwM42dd1E.crl (hash: NAQVJFH/6y09ikH0VLnj2DCIrVVrTpnzLQIcA/NWccQ=) 2: ukKanfspjPtogwslBOvKVuFlnzU.roa (hash: VJCtLd80BTyZ1jJxvamfRrMpjXu4ufEwo/wpl1CsYuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:e5:33:f5:43:7f:7a:8e:9f:2e:90:cf:91:61:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751 Validity Not Before: Jan 25 23:01:17 2026 GMT Not After : Jan 26 23:01:17 2026 GMT Subject: CN=818d6c4f3198ef9846be72e20c224419fc419a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:d3:a1:c4:09:f7:22:67:e9:a4:4a:0d:df: 63:bf:17:61:46:2b:a4:37:91:48:42:fa:4e:21:47: 18:dd:a2:27:1d:d5:f2:88:7a:00:c0:b5:ba:ad:90: 08:cf:41:0b:84:16:45:3b:2a:6c:30:2f:a2:e7:9f: 53:0f:96:5f:bd:5b:fc:79:a6:ac:32:28:0e:bd:66: 7f:8f:e0:d8:80:7e:0d:5e:0f:f3:08:f1:83:29:95: 0b:80:36:9e:29:9c:cf:84:12:c6:c8:e5:5d:f3:76: 01:7c:31:d2:b1:07:83:64:28:11:44:24:aa:fd:10: ef:80:ea:64:48:cf:05:7d:5f:6a:2f:d9:92:91:c7: 70:f4:fe:69:81:12:27:66:a8:3a:5d:99:e1:19:12: c6:59:2a:d8:03:f1:bf:d6:b8:94:b1:9c:3b:d3:9d: fd:d6:9b:c1:ad:40:42:a5:0d:4a:43:c2:cc:94:9a: c4:6c:0d:fa:fa:b0:1a:41:dd:3a:fc:cb:98:dd:63: bc:cf:df:c3:99:c5:bd:ba:2f:d4:75:28:f1:dc:27: 48:d7:9b:b0:7e:e5:7f:81:c7:8f:8b:73:4e:b1:79: c1:17:fd:95:50:2f:d5:e3:ef:0c:26:c6:55:94:9b: cf:80:78:03:be:cc:a6:a6:2e:35:57:2b:f3:2b:f0: ba:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8D:6C:4F:31:98:EF:98:46:BE:72:E2:0C:22:44:19:FC:41:9A:7F X509v3 Authority Key Identifier: keyid:0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:9d:e1:48:17:8b:4a:f0:a9:de:fe:95:e0:1e:26:e7:1e:63: 33:5a:28:23:ac:02:0c:1e:cf:e0:67:3f:9a:12:68:d3:8b:8b: a9:35:9e:98:3b:62:c9:54:3d:f7:b0:27:5e:96:23:f0:d0:1c: 91:4c:8d:f0:17:54:f4:4e:5c:49:5b:85:2d:55:e1:86:13:ea: 4d:8c:6f:3e:c1:43:e3:8b:2e:e3:c2:44:8c:7a:8a:ef:bd:70: eb:d5:6b:eb:a9:3c:05:f1:96:e7:56:f3:f1:7c:b9:47:56:d8: 55:77:fb:ce:0b:2a:42:9f:bb:d7:b0:54:e6:a3:57:12:75:ea: e5:5f:da:e8:e9:da:d3:d8:bc:8e:37:df:af:e0:7d:40:82:f7: fd:bb:40:74:bd:bb:d7:51:0f:c7:e8:fd:b7:5f:ce:6c:d6:0e: d8:87:d2:56:9c:9a:f3:d8:b5:5f:2c:a6:55:7e:9b:09:b5:d8: b4:3b:1b:b5:60:a1:9a:3a:c9:0c:b5:23:f5:2e:27:bc:4a:a8: d2:77:9b:35:c5:3e:d2:2b:f8:ab:9b:03:69:04:88:e3:54:c8: b5:30:76:ba:38:44:65:3b:98:d3:42:a7:19:3b:61:ea:61:18: ed:5b:98:ba:75:bf:3f:c8:1b:88:76:bd:09:07:0c:31:c6:69: 19:de:7e:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y+Uz9UN/eo6fLpDPkWHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZjBkNjJkZWUzYTE0YTA2ZTUyYjdlZjdhMDgzMDMzOGQ5 ZDc3NTEwHhcNMjYwMTI1MjMwMTE3WhcNMjYwMTI2MjMwMTE3WjAzMTEwLwYDVQQD Eyg4MThkNmM0ZjMxOThlZjk4NDZiZTcyZTIwYzIyNDQxOWZjNDE5YTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpHTocQJ9yJn6aRKDd9jvxdhRiuk N5FIQvpOIUcY3aInHdXyiHoAwLW6rZAIz0ELhBZFOypsMC+i559TD5ZfvVv8eaas MigOvWZ/j+DYgH4NXg/zCPGDKZULgDaeKZzPhBLGyOVd83YBfDHSsQeDZCgRRCSq /RDvgOpkSM8FfV9qL9mSkcdw9P5pgRInZqg6XZnhGRLGWSrYA/G/1riUsZw70539 1pvBrUBCpQ1KQ8LMlJrEbA36+rAaQd06/MuY3WO8z9/DmcW9ui/UdSjx3CdI15uw fuV/gcePi3NOsXnBF/2VUC/V4+8MJsZVlJvPgHgDvsympi41VyvzK/C6NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGNbE8xmO+YRr5y4gwiRBn8QZp/MB8GA1UdIwQY MBaAFA3w1i3uOhSgblK373oIMDONnXdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGZEV0xlNDZGS0J1VXJmdmVnZ3dNNDJkZDFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xMGRhYzktMjdlOC00YTNiLWI0MWMt NTE4NGNkNmZjMjEzLzEvRGZEV0xlNDZGS0J1VXJmdmVnZ3dNNDJkZDFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xMGRhYzktMjdlOC00YTNiLWI0MWMtNTE4NGNkNmZjMjEz LzEvRGZEV0xlNDZGS0J1VXJmdmVnZ3dNNDJkZDFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm53hSBeL SvCp3v6V4B4m5x5jM1ooI6wCDB7P4Gc/mhJo04uLqTWemDtiyVQ997AnXpYj8NAc kUyN8BdU9E5cSVuFLVXhhhPqTYxvPsFD44su48JEjHqK771w69Vr66k8BfGW51bz 8Xy5R1bYVXf7zgsqQp+717BU5qNXEnXq5V/a6Ona09i8jjffr+B9QIL3/btAdL27 11EPx+j9t1/ObNYO2IfSVpya89i1XyymVX6bCbXYtDsbtWChmjrJDLUj9S4nvEqo 0nebNcU+0iv4q5sDaQSI41TItTB2ujhEZTuY00KnGTth6mEY7VuYunW/P8gbiHa9 CQcMMcZpGd5+mQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:31 2026 by rpki-client