This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json) Hash identifier: Hi8/cJ2sOw/z9fZxafVRVmX2mtACKPfsfJuMilUROhI= Subject key identifier: 30:19:6F:1F:72:BA:76:00:0F:99:75:69:3F:D9:69:39:0D:9A:11:B8 Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa Certificate serial: 019BF6F5C93B025B02B698F2DCBC2CD570F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft Manifest number: 1280 Signing time: Sun 25 Jan 2026 21:01:01 +0000 Manifest this update: Sun 25 Jan 2026 21:01:01 +0000 Manifest next update: Mon 26 Jan 2026 21:01:01 +0000 Files and hashes: 1: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: s+es0ZZdXL44xJiqlbBAtBahStQmqnlANFTj/ecCcMg=) 2: KRcQChyIkdk17z-o88DTXwkNu_Y.roa (hash: k4ZBkPTraQNZ31kK5NnaOy56WVAVKO/c8Q/xt3FDIoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:c9:3b:02:5b:02:b6:98:f2:dc:bc:2c:d5:70:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa Validity Not Before: Jan 25 21:01:01 2026 GMT Not After : Jan 26 21:01:01 2026 GMT Subject: CN=30196f1f72ba76000f9975693fd969390d9a11b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:c9:9a:0c:61:6c:2a:b1:9f:f0:73:cc:de: f1:60:4d:47:a7:60:00:aa:4b:c0:83:26:20:9b:37: 85:47:f1:e6:06:ba:a6:c4:85:d5:29:3c:31:9a:3e: a4:4d:63:b9:7f:bb:35:4f:1b:78:82:ed:b5:ca:42: fe:72:20:54:d0:bd:71:e4:b7:c6:65:6c:09:61:58: f4:5c:90:ba:f9:9e:99:ae:2a:85:02:bc:d7:ed:fc: 68:86:ff:c3:0c:e1:ef:12:ca:04:34:20:b9:f2:e3: a4:75:d6:c8:b5:3f:68:33:de:b1:2c:69:1c:e3:7d: 1d:76:cf:77:d6:a9:e0:58:44:af:be:31:f3:b7:2b: 91:79:64:59:b1:a2:d9:41:4a:a3:fd:30:ae:eb:6e: 6e:02:fc:d0:23:a5:f1:d1:e6:d7:1f:18:b2:b5:81: a5:9c:32:1b:17:1f:03:c7:2b:9a:1a:4d:4c:51:bb: 92:f7:f2:b4:9a:19:be:e1:78:32:d1:25:55:1a:b2: 41:86:37:ce:55:40:cb:fe:f4:bd:b3:6a:56:ac:0f: d1:31:46:1d:02:82:e1:7c:1b:74:fd:81:d1:f0:8f: ed:af:30:39:83:96:31:8e:ea:6f:9b:94:7f:3b:01: f1:df:35:a5:da:54:0a:15:96:f0:27:fd:88:8f:8c: 49:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:19:6F:1F:72:BA:76:00:0F:99:75:69:3F:D9:69:39:0D:9A:11:B8 X509v3 Authority Key Identifier: keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:58:d8:3e:7c:19:07:a4:6a:d2:fe:a1:0e:64:d1:1c:f8:97: 99:40:d1:66:68:79:ac:bf:f3:8b:56:31:d1:c5:21:90:1c:9d: a5:ac:18:0c:79:d0:04:8d:02:ef:6b:fd:e0:6d:f7:4a:92:80: d6:1c:3c:a7:53:3a:b9:ff:ea:66:d6:ed:cd:e8:c8:1e:66:ab: 74:86:98:2c:80:56:85:eb:2d:47:e3:53:ba:70:88:a3:fb:81: 59:93:f7:e0:18:ac:1f:d4:d4:92:c6:ab:3b:10:76:9f:9c:a1: 68:0d:6e:0f:d7:b2:1d:e9:f8:1f:1e:58:d2:f9:5f:40:73:bf: 17:43:3d:d3:87:ad:2e:15:f1:80:52:78:b3:e8:85:6b:cd:74: ab:ec:38:2f:a8:41:fc:98:f8:9f:e7:7f:5d:56:17:06:1c:fe: 58:4f:f2:0c:61:c2:54:a7:91:aa:02:83:80:32:58:58:32:e7: 50:63:60:17:f1:80:07:21:dc:56:3f:cc:97:95:af:0c:5c:8d: 96:08:e7:41:80:20:7e:30:14:d7:7a:88:8b:82:cf:6c:73:a0: 24:d7:5e:02:22:f6:f2:e0:32:46:a4:39:f6:bb:f6:c2:4c:53: 34:59:6a:1c:88:b8:49:3f:3d:d3:22:ad:08:14:07:93:2e:4b: 37:df:4a:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29ck7AlsCtpjy3Lws1XDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZTczMmU2YjI0OTA5M2U3OWExYTUwN2NiY2Q4MTk2ZjAx ODE3ZmEwHhcNMjYwMTI1MjEwMTAxWhcNMjYwMTI2MjEwMTAxWjAzMTEwLwYDVQQD EygzMDE5NmYxZjcyYmE3NjAwMGY5OTc1NjkzZmQ5NjkzOTBkOWExMWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4fJmgxhbCqxn/BzzN7xYE1Hp2AA qkvAgyYgmzeFR/HmBrqmxIXVKTwxmj6kTWO5f7s1Txt4gu21ykL+ciBU0L1x5LfG ZWwJYVj0XJC6+Z6ZriqFArzX7fxohv/DDOHvEsoENCC58uOkddbItT9oM96xLGkc 430dds931qngWESvvjHztyuReWRZsaLZQUqj/TCu625uAvzQI6Xx0ebXHxiytYGl nDIbFx8DxyuaGk1MUbuS9/K0mhm+4Xgy0SVVGrJBhjfOVUDL/vS9s2pWrA/RMUYd AoLhfBt0/YHR8I/trzA5g5Yxjupvm5R/OwHx3zWl2lQKFZbwJ/2Ij4xJUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAZbx9yunYAD5l1aT/ZaTkNmhG4MB8GA1UdIwQY MBaAFA/nMuaySQk+eaGlB8vNgZbwGBf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUt YTI3Nzg5ODI5M2I5LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUtYTI3Nzg5ODI5M2I5 LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATljYPnwZ B6Rq0v6hDmTRHPiXmUDRZmh5rL/zi1Yx0cUhkBydpawYDHnQBI0C72v94G33SpKA 1hw8p1M6uf/qZtbtzejIHmardIaYLIBWhestR+NTunCIo/uBWZP34BisH9TUksar OxB2n5yhaA1uD9eyHen4Hx5Y0vlfQHO/F0M904etLhXxgFJ4s+iFa810q+w4L6hB /Jj4n+d/XVYXBhz+WE/yDGHCVKeRqgKDgDJYWDLnUGNgF/GAByHcVj/Ml5WvDFyN lgjnQYAgfjAU13qIi4LPbHOgJNdeAiL28uAyRqQ59rv2wkxTNFlqHIi4ST890yKt CBQHky5LN99KsQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:12:20 2026 by rpki-client