This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft File: 29weM6UtreAbUtkXC8KbjCjZi2w.mft (raw, json) Hash identifier: 0A5saJwCwyRfUaEB7fP0+NgYZFb0f/leGwDIxTh+VOU= Subject key identifier: 15:5A:0E:F8:C8:A6:7C:16:86:2D:A4:DF:1D:83:6C:CD:6E:95:AF:86 Authority key identifier: DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C Certificate issuer: /CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c Certificate serial: 019BF6BEAC0C9AD500F88DD327E11856B6FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft Manifest number: 0264 Signing time: Sun 25 Jan 2026 20:00:49 +0000 Manifest this update: Sun 25 Jan 2026 20:00:49 +0000 Manifest next update: Mon 26 Jan 2026 20:00:49 +0000 Files and hashes: 1: 0XpSx_PqBsgWn7gAIHU3QZlrH3g.roa (hash: Eviyd5MC3TSKuaGr7W9HYIt5jchGDmF2CLXeiWnw2P0=) 2: 29weM6UtreAbUtkXC8KbjCjZi2w.crl (hash: pBEb/v+cxrMzDwYjyqAF3DxHc419PIMem7Np8KjII1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:ac:0c:9a:d5:00:f8:8d:d3:27:e1:18:56:b6:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c Validity Not Before: Jan 25 20:00:49 2026 GMT Not After : Jan 26 20:00:49 2026 GMT Subject: CN=155a0ef8c8a67c16862da4df1d836ccd6e95af86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:81:1f:3f:6d:6a:ac:a5:43:d5:42:05:13:d9: 95:af:54:cb:01:eb:85:72:e9:4a:39:0b:f9:a0:71: a4:29:90:df:ea:78:b3:1d:bd:ef:53:1f:0d:88:59: 63:b0:e6:89:4e:c5:61:da:47:f4:2f:98:85:5e:b7: 64:c0:f7:23:75:c6:70:d1:3d:b0:f3:d2:b8:17:94: ec:9a:6d:be:96:29:59:36:c6:ac:4b:4a:d0:70:eb: dd:34:a8:07:8e:57:71:da:e8:f3:c7:3c:22:e0:67: 74:65:66:16:a6:40:7b:3b:98:95:61:4b:f7:12:31: 8a:7b:0f:52:49:4e:2b:a7:35:05:b8:54:a4:f5:0e: fe:1c:28:cb:26:26:58:b5:d9:fb:d9:3c:b8:30:c9: 54:3a:37:91:21:bf:b9:96:1b:76:da:23:18:9e:e6: 23:3a:5a:48:32:b6:3e:d0:a2:41:d9:3c:ff:1e:43: 65:ee:cc:87:21:3d:75:19:ee:04:80:82:76:3a:3d: 3e:a6:10:d3:b6:1b:8b:99:66:ab:0b:63:8b:3f:f7: ff:0a:8b:97:22:29:de:5a:5f:fa:82:6c:11:78:ae: 6f:57:67:73:16:3e:65:68:7d:4f:b1:f3:c7:69:a1: f9:10:69:e1:9c:5e:c5:bc:fe:3a:29:15:40:b7:03: 38:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5A:0E:F8:C8:A6:7C:16:86:2D:A4:DF:1D:83:6C:CD:6E:95:AF:86 X509v3 Authority Key Identifier: keyid:DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ec:a8:c1:35:9e:84:66:71:c6:20:b9:ea:3a:3c:21:26:10:43: f7:ec:a9:55:4a:0d:42:a4:76:97:68:1b:0d:2e:bd:20:9c:10: 4f:66:1a:b7:30:14:86:5b:9d:bb:52:43:b6:68:5f:10:4a:fc: 5e:46:57:89:f5:fe:44:de:e7:23:1d:5e:39:80:8d:cd:97:2b: 8d:2c:05:11:b9:dc:87:21:1f:31:d8:c4:65:cf:40:ed:99:92: 7a:3a:3c:26:31:1c:d7:2d:83:6c:7b:ba:2e:63:7c:c5:4a:dc: db:26:2f:ae:35:f4:73:b0:03:d3:08:b5:f3:69:94:53:97:52: 40:a6:23:a4:11:aa:2c:e0:97:dd:1e:53:20:57:3a:4b:11:26: 43:94:d8:a0:80:88:03:fe:66:dd:93:5b:90:a7:72:99:f4:4a: 3e:6d:b6:9b:bb:6a:bc:9a:ab:79:5c:dc:73:40:a8:ae:f0:71: 04:7d:9c:69:d8:47:c2:2f:ed:4b:0c:2a:1e:71:ef:9f:7b:4e: d5:c7:05:64:91:23:1d:d4:4d:a2:2a:c5:9b:b3:15:46:d9:de: 40:35:cb:5a:35:a5:a2:fc:19:bc:6c:89:4c:19:35:2b:a4:99: f6:be:47:14:af:0b:2f:22:49:ce:ec:3a:59:6a:6c:c7:0f:f7: 3a:b4:05:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vqwMmtUA+I3TJ+EYVrb9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZGMxZTMzYTUyZGFkZTAxYjUyZDkxNzBiYzI5YjhjMjhk OThiNmMwHhcNMjYwMTI1MjAwMDQ5WhcNMjYwMTI2MjAwMDQ5WjAzMTEwLwYDVQQD EygxNTVhMGVmOGM4YTY3YzE2ODYyZGE0ZGYxZDgzNmNjZDZlOTVhZjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIEfP21qrKVD1UIFE9mVr1TLAeuF culKOQv5oHGkKZDf6nizHb3vUx8NiFljsOaJTsVh2kf0L5iFXrdkwPcjdcZw0T2w 89K4F5Tsmm2+lilZNsasS0rQcOvdNKgHjldx2ujzxzwi4Gd0ZWYWpkB7O5iVYUv3 EjGKew9SSU4rpzUFuFSk9Q7+HCjLJiZYtdn72Ty4MMlUOjeRIb+5lht22iMYnuYj OlpIMrY+0KJB2Tz/HkNl7syHIT11Ge4EgIJ2Oj0+phDTthuLmWarC2OLP/f/CouX IineWl/6gmwReK5vV2dzFj5laH1PsfPHaaH5EGnhnF7FvP46KRVAtwM4qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVaDvjIpnwWhi2k3x2DbM1ula+GMB8GA1UdIwQY MBaAFNvcHjOlLa3gG1LZFwvCm4wo2YtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjl3ZU02VXRyZUFiVXRrWEM4S2JqQ2paaTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNDlmMWMtYzk0NS00N2M0LWJkZGMt ZWVjY2MyMGE4ZDIxLzEvMjl3ZU02VXRyZUFiVXRrWEM4S2JqQ2paaTJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kNDlmMWMtYzk0NS00N2M0LWJkZGMtZWVjY2MyMGE4ZDIx LzEvMjl3ZU02VXRyZUFiVXRrWEM4S2JqQ2paaTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7KjBNZ6E ZnHGILnqOjwhJhBD9+ypVUoNQqR2l2gbDS69IJwQT2YatzAUhludu1JDtmhfEEr8 XkZXifX+RN7nIx1eOYCNzZcrjSwFEbnchyEfMdjEZc9A7ZmSejo8JjEc1y2DbHu6 LmN8xUrc2yYvrjX0c7AD0wi182mUU5dSQKYjpBGqLOCX3R5TIFc6SxEmQ5TYoICI A/5m3ZNbkKdymfRKPm22m7tqvJqreVzcc0CorvBxBH2cadhHwi/tSwwqHnHvn3tO 1ccFZJEjHdRNoirFm7MVRtneQDXLWjWlovwZvGyJTBk1K6SZ9r5HFK8LLyJJzuw6 WWpsxw/3OrQFcw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:07:56 2026 by rpki-client