This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json) Hash identifier: Jyqtrlu7mxq41ypBNoMqa8zQjb4iGb8MJXIyxeVj1GQ= Subject key identifier: CF:53:1E:1B:D5:21:E0:C2:B6:55:B4:4D:03:5C:EC:EE:F3:5A:36:AD Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa Certificate serial: 019BF50762E7432B84D6A1FBB203B857B8C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft Manifest number: 127F Signing time: Sun 25 Jan 2026 12:01:00 +0000 Manifest this update: Sun 25 Jan 2026 12:01:00 +0000 Manifest next update: Mon 26 Jan 2026 12:01:00 +0000 Files and hashes: 1: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: gCYzhfbfZwSdsM9IFvvB+b7oxINvGK0Ez6H7ivrg6XM=) 2: KRcQChyIkdk17z-o88DTXwkNu_Y.roa (hash: k4ZBkPTraQNZ31kK5NnaOy56WVAVKO/c8Q/xt3FDIoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:62:e7:43:2b:84:d6:a1:fb:b2:03:b8:57:b8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa Validity Not Before: Jan 25 12:01:00 2026 GMT Not After : Jan 26 12:01:00 2026 GMT Subject: CN=cf531e1bd521e0c2b655b44d035ceceef35a36ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4e:2f:1f:fb:92:45:80:7b:47:91:38:e9:0c: 97:5d:02:3a:62:a9:31:4a:7d:38:14:c9:f9:08:c0: 79:28:67:ec:f3:2c:b8:6c:e5:ec:68:04:3b:8c:4a: 7b:0d:7e:c3:ac:e6:d5:5f:a7:c7:39:13:2f:15:73: 2d:6f:c6:ec:f3:13:59:a5:eb:f9:0a:65:32:6c:5e: 6c:1b:07:53:de:2d:e0:3c:dd:4a:4b:dc:5d:ed:6e: f8:d0:7f:00:1b:0d:4e:34:a6:ea:c2:85:f2:7e:00: 78:d9:05:e8:83:75:1e:b1:02:d4:fb:ec:85:49:55: 4d:09:42:9c:5c:d7:bb:a1:ca:c3:1d:f8:01:55:61: dc:90:fc:72:bf:5b:36:58:6c:b9:31:21:9e:fa:77: 5d:97:e6:29:db:29:3a:75:f6:7a:d6:e3:c8:6f:48: c6:bf:6d:37:aa:5b:e1:63:48:d5:24:8d:d8:b4:51: 68:ab:cf:2b:33:29:b5:2f:68:a6:42:9d:80:c0:68: 4c:66:3a:c6:a3:4f:44:6f:3b:8e:39:50:db:f8:62: a0:be:46:d0:f3:25:3b:5b:b7:df:3a:c1:03:e1:96: a9:46:5c:cc:dc:92:b9:4a:92:cb:be:6a:a5:35:ea: 40:22:35:3a:e6:82:18:92:97:81:ad:99:af:29:a1: 11:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:53:1E:1B:D5:21:E0:C2:B6:55:B4:4D:03:5C:EC:EE:F3:5A:36:AD X509v3 Authority Key Identifier: keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:eb:bf:58:5b:ee:5f:e2:19:6e:f1:6a:fc:bf:ca:b1:7f:06: 14:49:0c:53:2c:5d:e2:31:7a:eb:d0:43:0f:0b:ac:e4:4a:c8: 31:1c:69:32:90:6f:2d:4c:cd:f3:e5:c3:a8:ee:2c:51:82:a7: c2:e4:66:22:02:42:9f:c5:9b:96:f5:7e:7d:35:09:3c:68:3c: 1c:d2:f1:2d:95:03:96:d1:d2:06:b3:a8:c1:df:76:a5:ac:6a: 4b:2a:e7:cf:ba:c6:d5:15:45:0c:0a:bc:69:2d:db:84:16:44: f7:a2:ab:97:d2:37:1d:f7:6d:7a:77:d0:c7:00:0f:76:bc:c6: aa:76:10:e7:06:6d:c4:82:51:de:c7:f1:18:eb:1b:d7:ef:95: 48:53:92:22:29:d8:df:93:27:29:7a:cd:6b:8b:61:e6:54:7e: a4:b8:6f:df:f9:c6:7e:8c:98:2f:7f:96:2d:c8:d5:ff:e1:ae: b8:55:c3:44:de:c6:a2:29:02:bf:0d:b9:ea:f9:19:93:96:30: 99:9f:99:0b:21:c4:c2:f7:bf:52:f4:ac:8c:1d:8c:c9:2a:32: 09:a3:1c:62:03:e2:69:f4:02:d3:f9:7f:1b:da:95:13:41:ab: bf:1d:c4:3a:3b:17:7d:3c:56:9c:7e:37:36:3b:22:97:e8:0a: 32:47:91:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B2LnQyuE1qH7sgO4V7jIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZTczMmU2YjI0OTA5M2U3OWExYTUwN2NiY2Q4MTk2ZjAx ODE3ZmEwHhcNMjYwMTI1MTIwMTAwWhcNMjYwMTI2MTIwMTAwWjAzMTEwLwYDVQQD EyhjZjUzMWUxYmQ1MjFlMGMyYjY1NWI0NGQwMzVjZWNlZWYzNWEzNmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk4vH/uSRYB7R5E46QyXXQI6Yqkx Sn04FMn5CMB5KGfs8yy4bOXsaAQ7jEp7DX7DrObVX6fHORMvFXMtb8bs8xNZpev5 CmUybF5sGwdT3i3gPN1KS9xd7W740H8AGw1ONKbqwoXyfgB42QXog3UesQLU++yF SVVNCUKcXNe7ocrDHfgBVWHckPxyv1s2WGy5MSGe+nddl+Yp2yk6dfZ61uPIb0jG v203qlvhY0jVJI3YtFFoq88rMym1L2imQp2AwGhMZjrGo09EbzuOOVDb+GKgvkbQ 8yU7W7ffOsED4ZapRlzM3JK5SpLLvmqlNepAIjU65oIYkpeBrZmvKaERdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9THhvVIeDCtlW0TQNc7O7zWjatMB8GA1UdIwQY MBaAFA/nMuaySQk+eaGlB8vNgZbwGBf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUt YTI3Nzg5ODI5M2I5LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUtYTI3Nzg5ODI5M2I5 LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeu/WFvu X+IZbvFq/L/KsX8GFEkMUyxd4jF669BDDwus5ErIMRxpMpBvLUzN8+XDqO4sUYKn wuRmIgJCn8WblvV+fTUJPGg8HNLxLZUDltHSBrOowd92paxqSyrnz7rG1RVFDAq8 aS3bhBZE96Krl9I3HfdtenfQxwAPdrzGqnYQ5wZtxIJR3sfxGOsb1++VSFOSIinY 35MnKXrNa4th5lR+pLhv3/nGfoyYL3+WLcjV/+GuuFXDRN7GoikCvw256vkZk5Yw mZ+ZCyHEwve/UvSsjB2MySoyCaMcYgPiafQC0/l/G9qVE0Grvx3EOjsXfTxWnH43 Njsil+gKMkeRzg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:12:38 2026 by rpki-client