This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json) Hash identifier: tP9EdhZdYuQjoi7ngC8AmNQupSvY7weWPKatB8KQFb8= Subject key identifier: 2A:D0:D4:52:1E:00:B1:17:67:DE:86:82:D6:E6:99:32:07:D1:55:B0 Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Certificate serial: 019BF53EE368709BE1A60AB65FA8BCF14898 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft Manifest number: 17F9 Signing time: Sun 25 Jan 2026 13:01:37 +0000 Manifest this update: Sun 25 Jan 2026 13:01:37 +0000 Manifest next update: Mon 26 Jan 2026 13:01:37 +0000 Files and hashes: 1: 8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa (hash: kjvVcc0xOxJUg+x1ocm3gLplTcfZBpQ+nllVK3oSP4I=) 2: BYRF65R_gvTrOamV1sFiMyQQwwo.roa (hash: UcJdHpYQj1TR2O2eeL78WCxx+T3hnx4QNGLSHOCWD40=) 3: Clokdo8iEnkyRg1-72rcFdu0uTM.roa (hash: qI/NxfPHzKCTkxa3q3ZgfCGrWFBeBUVuUQo7H3Os6L4=) 4: IULcSReBl6BR3I_U3liy7HZAnac.roa (hash: 8rcQZaYhRzic9A6LKK6K6/YTQNKz/3wSmuzt2vfN2vM=) 5: X5-PcFCXcBmeXFytRndx1GWZR6M.roa (hash: CusHkyVTE5E1hf9Dcr6iJxa9rL7UUSerxewweRWup5Q=) 6: cpXyEOPsQYnhoiU9YXgEHRotygE.roa (hash: 1cwR9tQfEOIHfGITqs8rBDCiCASn32+xpW4m0FX9NNo=) 7: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: ISSYK0udxeEouvhkU1FzOxDWCgbtQV2FAFGuK6Y5iHg=) 8: ht0ZHZI605xUDKgSuTW22dQeuGI.roa (hash: 4Wq4/BC9bk0nDo/1dAW7K8pSTWikWYSsafNCxLUrqSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:e3:68:70:9b:e1:a6:0a:b6:5f:a8:bc:f1:48:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Validity Not Before: Jan 25 13:01:37 2026 GMT Not After : Jan 26 13:01:37 2026 GMT Subject: CN=2ad0d4521e00b11767de8682d6e6993207d155b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b4:af:ff:2a:11:db:79:d1:19:e4:82:4c:4e: 24:93:b6:22:3c:aa:31:2a:1d:19:80:39:f9:5f:d9: 47:28:98:a1:a2:f9:89:8c:3d:1e:82:a7:28:47:19: ea:62:03:86:e6:7e:9d:d4:91:b3:2a:c0:d7:4f:dd: b8:a3:1a:35:23:12:28:1b:59:d4:0f:2c:ba:2f:d5: 8e:bb:4e:ab:34:6a:ef:89:20:61:e6:3c:e0:0d:37: a0:52:88:be:f6:1f:57:7a:f8:96:66:84:d0:a1:a0: a2:2f:c4:83:ea:f7:93:03:48:8b:54:e4:f2:31:8f: 9a:0b:df:67:78:18:e5:ac:76:e1:d7:25:6a:cf:71: 41:11:c6:01:98:cf:a3:b3:60:8a:81:05:9d:98:65: 6d:1f:b0:c1:32:80:f9:20:ed:56:6b:49:c2:ae:1c: 27:ed:c8:c4:18:a4:58:c7:7a:b0:aa:c8:73:56:51: df:e6:4b:1f:49:3e:90:c4:e7:24:f6:02:a6:e4:1f: 5f:4d:21:1a:5e:de:4b:e2:d7:49:0a:77:90:9e:51: bd:c7:9a:8b:c0:ca:ba:df:27:10:95:4c:01:fe:af: 97:de:00:73:2e:0a:c4:b4:be:5e:0d:4d:48:4f:01: 3f:bf:98:64:51:a9:e0:a1:32:11:16:aa:70:84:15: 9c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D0:D4:52:1E:00:B1:17:67:DE:86:82:D6:E6:99:32:07:D1:55:B0 X509v3 Authority Key Identifier: keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e1:98:a8:f4:c5:81:f5:7f:0e:4a:07:9a:6f:a5:fc:28:c2: f4:60:ac:92:37:5a:fb:d7:63:ac:2e:6c:67:24:a1:59:76:b6: 9b:e6:f1:4c:9a:fc:81:63:a9:3e:36:4d:28:1e:57:5b:bb:0e: a1:be:36:64:fe:23:c7:1d:8b:e5:c5:e0:61:fc:bb:23:fb:18: c7:ef:0d:73:24:00:7a:fb:ee:5d:b0:86:b8:d8:8e:b8:af:ab: 80:ef:bb:89:34:77:12:eb:66:c7:59:5d:c8:4c:36:a4:e0:07: d0:78:36:50:e3:b5:ed:c9:e7:83:01:4e:91:8e:8e:79:4b:65: 35:83:f7:be:57:60:fb:54:eb:7a:c4:e9:b7:f0:ae:80:64:62: bb:80:23:4b:f8:8c:c2:7f:e9:ad:1f:b1:5d:63:5f:7b:4c:15: 33:7b:f5:78:6d:48:ce:dd:c3:f8:9d:f7:42:04:51:b9:23:ca: 67:42:63:17:7d:cf:d3:64:3a:d2:33:58:fb:e1:3c:b7:45:f8: 52:51:f6:19:3b:a4:fd:ad:b7:9b:c6:50:d5:ce:92:b6:cb:6a: 44:33:d2:50:f1:57:d1:b4:48:f5:af:2f:25:aa:62:e5:2c:ec: 3f:8f:6c:d0:5a:ff:a9:fe:7f:f0:99:5b:d9:b0:0e:03:39:93: a5:ec:98:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PuNocJvhpgq2X6i88UiYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm OWRlNTYwHhcNMjYwMTI1MTMwMTM3WhcNMjYwMTI2MTMwMTM3WjAzMTEwLwYDVQQD EygyYWQwZDQ1MjFlMDBiMTE3NjdkZTg2ODJkNmU2OTkzMjA3ZDE1NWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrSv/yoR23nRGeSCTE4kk7YiPKox Kh0ZgDn5X9lHKJihovmJjD0egqcoRxnqYgOG5n6d1JGzKsDXT924oxo1IxIoG1nU Dyy6L9WOu06rNGrviSBh5jzgDTegUoi+9h9XeviWZoTQoaCiL8SD6veTA0iLVOTy MY+aC99neBjlrHbh1yVqz3FBEcYBmM+js2CKgQWdmGVtH7DBMoD5IO1Wa0nCrhwn 7cjEGKRYx3qwqshzVlHf5ksfST6QxOck9gKm5B9fTSEaXt5L4tdJCneQnlG9x5qL wMq63ycQlUwB/q+X3gBzLgrEtL5eDU1ITwE/v5hkUangoTIRFqpwhBWchwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrQ1FIeALEXZ96GgtbmmTIH0VWwMB8GA1UdIwQY MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt ZDkzMzdkYjM5ZDFmLzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+GYqPTF gfV/DkoHmm+l/CjC9GCskjda+9djrC5sZyShWXa2m+bxTJr8gWOpPjZNKB5XW7sO ob42ZP4jxx2L5cXgYfy7I/sYx+8NcyQAevvuXbCGuNiOuK+rgO+7iTR3Eutmx1ld yEw2pOAH0Hg2UOO17cnngwFOkY6OeUtlNYP3vldg+1TresTpt/CugGRiu4AjS/iM wn/prR+xXWNfe0wVM3v1eG1Izt3D+J33QgRRuSPKZ0JjF33P02Q60jNY++E8t0X4 UlH2GTuk/a23m8ZQ1c6StstqRDPSUPFX0bRI9a8vJapi5SzsP49s0Fr/qf5/8Jlb 2bAOAzmTpeyYMw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:21:02 2026 by rpki-client