This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft File: dHWiyViPxpXSdUKD3NPRI9H3eBE.mft (raw, json) Hash identifier: vtkRum/t9k7INzidm08h6BIwUyUOV/8K0HJyKqmN6fc= Subject key identifier: E4:CF:EC:EF:58:49:3B:AD:7A:D9:98:64:2C:2E:52:6E:B9:AB:AB:91 Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11 Certificate issuer: /CN=7475a2c9588fc695d2754283dcd3d123d1f77811 Certificate serial: 019BF988B0BC0ADEC8B8B9D203F08ACF2298 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 09:00:43 +0000 Manifest this update: Mon 26 Jan 2026 09:00:43 +0000 Manifest next update: Tue 27 Jan 2026 09:00:43 +0000 Files and hashes: 1: B6KgFpwvViQTEk9Dmhs8MfS-w7s.roa (hash: OhVWCZDoCQizES2xkeCkzPUeD4jK/eG28KZNwsfJC3Y=) 2: dHWiyViPxpXSdUKD3NPRI9H3eBE.crl (hash: f+InCl/MasBk74BW8QAysHfUgWys5e8jxlYy81deSpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:88:b0:bc:0a:de:c8:b8:b9:d2:03:f0:8a:cf:22:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811 Validity Not Before: Jan 26 09:00:43 2026 GMT Not After : Jan 27 09:00:43 2026 GMT Subject: CN=e4cfecef58493bad7ad998642c2e526eb9abab91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:89:ac:4c:a4:48:03:4f:80:5a:fe:b8:90:bc: a1:aa:56:4d:4c:50:26:6e:1b:ef:83:4f:76:82:6b: 83:95:15:f4:f7:47:91:1b:49:fe:5d:63:cf:2a:05: cc:52:61:40:ee:b1:1c:6f:ec:9e:5b:b8:11:bb:ea: 96:92:7f:2a:e0:ad:25:92:a1:d5:a1:02:b2:b2:ca: 30:d9:4e:68:d5:f4:c1:dd:7a:8a:5d:76:ad:a7:ba: 77:4b:37:06:3a:40:ff:eb:cc:04:0f:67:b3:72:95: e9:2a:f1:05:ad:c2:c8:9c:63:74:73:11:86:79:3e: db:65:c3:3d:c0:7b:07:68:b2:9c:bd:a1:7b:cb:1a: 38:70:51:14:26:80:86:ac:c2:a9:55:29:d2:13:29: f7:f7:c2:75:34:51:5e:16:aa:ed:88:84:f4:8d:05: 42:6c:ac:e2:f7:bb:8c:16:7d:d8:b1:e7:6a:d9:36: ce:84:07:9d:80:82:22:49:d2:06:0d:00:37:eb:76: 67:bd:49:c3:ff:cc:b3:93:02:60:03:64:a3:75:e2: 20:c4:0f:d5:f8:b5:0b:ea:5f:ca:10:92:14:09:d0: 50:7f:2e:a3:03:3c:b0:7b:a5:58:11:6e:5d:4a:87: d5:98:a6:b2:10:ff:63:de:ad:69:24:7e:92:9a:9b: 91:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CF:EC:EF:58:49:3B:AD:7A:D9:98:64:2C:2E:52:6E:B9:AB:AB:91 X509v3 Authority Key Identifier: keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:af:8c:11:30:a5:d3:37:17:75:e4:13:11:7a:04:04:ac:fe: f5:46:c1:94:48:d4:dd:53:f0:c7:31:2a:81:c3:da:e0:d3:79: ad:7b:85:31:8f:fa:bc:02:0f:d1:48:c6:71:1a:4b:f6:50:bf: 5e:22:8a:1e:31:0d:0d:c4:56:68:fc:65:cb:9b:d7:e9:5f:c6: e8:d3:ac:b8:34:5d:9a:68:04:49:cc:62:73:9e:18:c5:ee:09: 32:02:71:f0:05:43:f0:f3:15:a6:0d:9b:f2:47:53:e5:4a:f3: 85:32:57:ff:b8:9e:99:4a:82:1b:20:7a:df:a5:ec:db:60:32: 3f:d0:07:fd:2b:39:bf:fc:75:5a:b4:3c:8e:f3:23:ac:3f:43: af:8d:7d:f0:eb:82:a4:e1:82:6c:c8:e8:83:e2:10:45:16:b1: 09:fd:e5:d8:05:b9:e6:e6:47:c4:31:eb:4b:96:c6:51:d7:93: f4:23:23:c1:8b:6b:7d:33:65:d5:bc:7e:ae:61:69:05:82:51: bc:f4:30:f0:2a:55:46:8f:69:99:dc:b6:87:d5:77:8a:b1:ce: 52:62:92:9f:a9:4e:88:7c:9f:c6:29:b8:93:0b:a9:68:96:3f: cf:74:9c:06:8d:68:28:3e:5c:36:bf:06:b4:58:0a:ff:b7:20: bf:bd:a7:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iLC8Ct7IuLnSA/CKzyKYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NzVhMmM5NTg4ZmM2OTVkMjc1NDI4M2RjZDNkMTIzZDFm Nzc4MTEwHhcNMjYwMTI2MDkwMDQzWhcNMjYwMTI3MDkwMDQzWjAzMTEwLwYDVQQD EyhlNGNmZWNlZjU4NDkzYmFkN2FkOTk4NjQyYzJlNTI2ZWI5YWJhYjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4msTKRIA0+AWv64kLyhqlZNTFAm bhvvg092gmuDlRX090eRG0n+XWPPKgXMUmFA7rEcb+yeW7gRu+qWkn8q4K0lkqHV oQKyssow2U5o1fTB3XqKXXatp7p3SzcGOkD/68wED2ezcpXpKvEFrcLInGN0cxGG eT7bZcM9wHsHaLKcvaF7yxo4cFEUJoCGrMKpVSnSEyn398J1NFFeFqrtiIT0jQVC bKzi97uMFn3Ysedq2TbOhAedgIIiSdIGDQA363ZnvUnD/8yzkwJgA2SjdeIgxA/V +LUL6l/KEJIUCdBQfy6jAzywe6VYEW5dSofVmKayEP9j3q1pJH6SmpuRWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTP7O9YSTutetmYZCwuUm65q6uRMB8GA1UdIwQY MBaAFHR1oslYj8aV0nVCg9zT0SPR93gRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEhXaXlWaVB4cFhTZFVLRDNOUFJJOUgzZUJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yODk4ZTYtMGQ3OS00NTRlLWFiNTQt NDBiZTBjNDYzYjkwLzEvZEhXaXlWaVB4cFhTZFVLRDNOUFJJOUgzZUJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yODk4ZTYtMGQ3OS00NTRlLWFiNTQtNDBiZTBjNDYzYjkw LzEvZEhXaXlWaVB4cFhTZFVLRDNOUFJJOUgzZUJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiK+METCl 0zcXdeQTEXoEBKz+9UbBlEjU3VPwxzEqgcPa4NN5rXuFMY/6vAIP0UjGcRpL9lC/ XiKKHjENDcRWaPxly5vX6V/G6NOsuDRdmmgEScxic54Yxe4JMgJx8AVD8PMVpg2b 8kdT5UrzhTJX/7iemUqCGyB636Xs22AyP9AH/Ss5v/x1WrQ8jvMjrD9Dr4198OuC pOGCbMjog+IQRRaxCf3l2AW55uZHxDHrS5bGUdeT9CMjwYtrfTNl1bx+rmFpBYJR vPQw8CpVRo9pmdy2h9V3irHOUmKSn6lOiHyfxim4kwupaJY/z3ScBo1oKD5cNr8G tFgK/7cgv72nnw== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:11 2026 by rpki-client