This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json) Hash identifier: YY8tyCfG3oXWNdH8RDKl1Z4B5naT0S7Yb0yZE2Gxo/w= Subject key identifier: 7E:31:C4:48:B3:D4:AF:34:21:EB:66:19:E1:20:37:29:C7:EE:6D:26 Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6 Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6 Certificate serial: 019BF3506531C51036B91A3FD3974CB642EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft Manifest number: 04CA Signing time: Sun 25 Jan 2026 04:01:30 +0000 Manifest this update: Sun 25 Jan 2026 04:01:30 +0000 Manifest next update: Mon 26 Jan 2026 04:01:30 +0000 Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: QDHdQpVBQhLHgE/drYKBu7Apjyf3+rzpefQfDva63jw=) 2: d-dWQuydMoCZtytzQ81CyqKGHF8.roa (hash: rHhhXAeBGXlacTL0skc5ZpbciDYSLDNez3YfIDsP5dQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:65:31:c5:10:36:b9:1a:3f:d3:97:4c:b6:42:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6 Validity Not Before: Jan 25 04:01:30 2026 GMT Not After : Jan 26 04:01:30 2026 GMT Subject: CN=7e31c448b3d4af3421eb6619e1203729c7ee6d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c2:21:70:2d:fe:ca:91:2f:64:f3:2d:4f:81: c1:9e:65:8f:5e:88:cf:19:53:91:b1:f2:ca:9a:57: d7:f0:d1:3f:1d:01:4c:46:b6:b3:3a:86:e2:03:4a: 10:b9:e0:57:82:5f:6d:5a:da:a1:db:36:80:82:26: fd:3a:63:7f:10:96:6b:f5:3a:59:de:82:4f:3d:b5: b8:6a:e7:7f:79:3d:97:80:38:68:ec:9a:e4:16:6d: 81:25:4f:21:23:19:e5:31:d8:26:f8:f5:2c:b1:ca: 3f:8c:45:56:81:2b:06:9c:a6:66:a2:5a:67:af:46: e8:a0:3e:23:14:11:41:c8:58:9f:7c:1e:ff:e7:ad: c5:2b:2c:00:01:53:88:98:fd:f7:32:6b:ee:2a:67: f3:56:6a:1f:3f:d4:16:20:1a:74:96:34:9a:23:1f: cc:21:98:22:d9:8d:49:3d:6b:83:5b:d5:25:1c:02: 73:e7:ab:dc:7b:85:33:c9:7a:47:56:70:02:dc:ea: 36:9b:c3:f4:54:fc:20:a4:8f:a7:73:a1:22:c8:bd: a5:16:c5:86:10:ee:ea:8b:7a:59:0d:5d:82:e8:e6: 15:4f:4d:af:32:ce:96:6a:fa:cd:0f:39:a2:2b:77: 6d:89:9b:3e:30:f7:31:cf:28:20:38:a5:68:f5:6c: c8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:31:C4:48:B3:D4:AF:34:21:EB:66:19:E1:20:37:29:C7:EE:6D:26 X509v3 Authority Key Identifier: keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:5d:1c:7c:86:11:28:1f:54:20:70:10:58:e0:d1:c0:7c:c3: aa:7d:af:40:c7:8e:26:2d:36:9a:4f:25:50:9c:b7:a7:9d:79: 5d:3a:fd:4d:59:fd:3d:c8:0a:23:23:19:c4:71:ab:a8:8c:8b: 65:db:ee:8d:5e:78:6b:b9:52:77:2e:c7:f5:6c:03:9c:e8:e1: a6:0a:05:d1:ea:b4:cb:f9:57:e5:50:81:74:bf:0d:14:5a:18: 50:c2:50:97:07:68:5e:34:10:e2:0d:2d:86:87:39:6c:f9:27: c6:1c:84:25:7b:60:08:4a:8d:ce:81:80:22:ac:83:bb:5a:25: 28:fa:68:fb:c8:2a:29:08:ca:98:7b:66:8b:75:8f:be:99:57: 98:53:5c:36:a9:8c:ed:54:69:13:d1:f0:9e:f4:78:d0:98:93: fd:55:a1:1b:5b:bc:44:86:d9:11:2c:e0:3d:7f:44:36:93:ff: 87:1a:26:ea:4f:31:55:14:ee:c0:cc:08:04:53:ad:12:31:00: e8:1f:b8:64:36:f3:aa:27:99:a6:f1:d4:19:17:c0:5d:3c:e2: 9c:e9:08:a3:8d:9f:7a:c7:f1:c9:76:de:ad:76:8a:0c:f1:16: eb:b5:03:dd:9a:66:bf:02:3a:c3:f3:7d:22:76:4a:81:3e:21: 0e:13:16:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUGUxxRA2uRo/05dMtkLvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMzlkMDRhZDgzYWFjMWRlNWE5OGNkZjc2MjQwYTk3MzYy YzRhYzYwHhcNMjYwMTI1MDQwMTMwWhcNMjYwMTI2MDQwMTMwWjAzMTEwLwYDVQQD Eyg3ZTMxYzQ0OGIzZDRhZjM0MjFlYjY2MTllMTIwMzcyOWM3ZWU2ZDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cIhcC3+ypEvZPMtT4HBnmWPXojP GVORsfLKmlfX8NE/HQFMRrazOobiA0oQueBXgl9tWtqh2zaAgib9OmN/EJZr9TpZ 3oJPPbW4aud/eT2XgDho7JrkFm2BJU8hIxnlMdgm+PUssco/jEVWgSsGnKZmolpn r0booD4jFBFByFiffB7/563FKywAAVOImP33MmvuKmfzVmofP9QWIBp0ljSaIx/M IZgi2Y1JPWuDW9UlHAJz56vce4UzyXpHVnAC3Oo2m8P0VPwgpI+nc6EiyL2lFsWG EO7qi3pZDV2C6OYVT02vMs6WavrNDzmiK3dtiZs+MPcxzyggOKVo9WzI1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4xxEiz1K80IetmGeEgNynH7m0mMB8GA1UdIwQY MBaAFAw50ErYOqwd5amM33YkCpc2LErGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRERuUVN0ZzZyQjNscVl6ZmRpUUtsellzU3NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xZjFhZGUtZTJlNi00ZDczLTk2YTkt NDI3NDI5ZmNkNzRjLzEvRERuUVN0ZzZyQjNscVl6ZmRpUUtsellzU3NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8xZjFhZGUtZTJlNi00ZDczLTk2YTktNDI3NDI5ZmNkNzRj LzEvRERuUVN0ZzZyQjNscVl6ZmRpUUtsellzU3NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOF0cfIYR KB9UIHAQWODRwHzDqn2vQMeOJi02mk8lUJy3p515XTr9TVn9PcgKIyMZxHGrqIyL ZdvujV54a7lSdy7H9WwDnOjhpgoF0eq0y/lX5VCBdL8NFFoYUMJQlwdoXjQQ4g0t hoc5bPknxhyEJXtgCEqNzoGAIqyDu1olKPpo+8gqKQjKmHtmi3WPvplXmFNcNqmM 7VRpE9HwnvR40JiT/VWhG1u8RIbZESzgPX9ENpP/hxom6k8xVRTuwMwIBFOtEjEA 6B+4ZDbzqieZpvHUGRfAXTzinOkIo42fesfxyXberXaKDPEW67UD3ZpmvwI6w/N9 InZKgT4hDhMW+A== -----END CERTIFICATE-----Generated at Sun Jan 25 14:44:47 2026 by rpki-client