This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json) Hash identifier: gtAUDI4G31UwyQ6ytFo6WibGLePPQwf/oi1RqMyET10= Subject key identifier: 8D:B8:CB:D2:A7:2E:18:BD:1F:06:0B:48:07:A3:48:4F:05:35:51:B1 Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06 Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06 Certificate serial: 019BF61A0DF607AE5DA87C6221BF7E0375D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft Manifest number: 17F0 Signing time: Sun 25 Jan 2026 17:01:01 +0000 Manifest this update: Sun 25 Jan 2026 17:01:01 +0000 Manifest next update: Mon 26 Jan 2026 17:01:01 +0000 Files and hashes: 1: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: tsPVqEWI/lYKY3QolIAjZlrPRJUBWeyLTAbNzDYF/Xw=) 2: f-oFGYgAScvKIY1myYftcDiH90Y.roa (hash: jXYW4bNPX8ymp0HBTNVmMzodvWsb+eQz9bU87veKdFM=) 3: lBMdn2iQdHUL-cwEEQDm3tFBaok.roa (hash: 92N+I3r+uRw8V9HIiYjj1Tx/aQGHG9DB0so6vrEW//w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:0d:f6:07:ae:5d:a8:7c:62:21:bf:7e:03:75:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06 Validity Not Before: Jan 25 17:01:01 2026 GMT Not After : Jan 26 17:01:01 2026 GMT Subject: CN=8db8cbd2a72e18bd1f060b4807a3484f053551b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9d:c1:e1:30:9d:91:1d:32:56:48:95:1e:cb: 78:54:3f:8e:90:44:d3:a9:97:81:bd:46:3c:f6:9c: 4d:2c:5b:c4:c2:e0:c9:fe:b6:46:a0:cc:b4:45:84: 34:c3:e4:05:c9:c3:2d:1a:8c:9a:f9:53:c7:63:1a: 4a:9f:97:ed:11:60:0a:53:76:dd:8d:97:fc:3a:35: 97:8f:93:57:83:31:e1:7e:4e:06:74:4b:6d:63:f4: 6e:80:5b:65:c2:d7:f9:5b:b9:6c:98:70:4b:55:90: 55:06:dc:db:43:14:c0:6e:9c:cd:0d:ac:f2:d4:00: fc:08:26:18:c6:19:81:2e:01:49:0a:d5:50:27:55: 60:6e:b2:73:95:38:b0:1e:91:b7:1b:b6:ea:f7:d0: 69:1c:46:86:88:f9:56:dc:69:4d:54:69:77:cd:6c: ff:56:db:db:9a:bc:30:58:dc:69:82:2d:8c:b0:0c: 3f:65:2c:af:c3:7b:29:aa:12:b7:0f:af:b2:55:62: 60:84:f8:d5:a7:71:41:29:23:cb:25:62:d1:11:5d: cb:a1:be:fa:e3:7b:3b:48:b8:a4:8b:77:2c:da:72: b8:f8:09:75:19:40:f9:a1:4e:56:84:27:10:70:ab: fd:e7:9c:87:24:e8:e4:02:d1:ca:40:5a:f4:38:2e: 58:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B8:CB:D2:A7:2E:18:BD:1F:06:0B:48:07:A3:48:4F:05:35:51:B1 X509v3 Authority Key Identifier: keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:eb:f2:fe:ea:3d:11:bc:17:e0:32:b0:cf:2f:3e:21:21:de: f5:51:db:15:a4:74:f8:f4:98:bd:25:4e:2e:4e:0c:ef:a1:09: 0e:5e:71:3b:80:e6:7b:0a:57:a3:1b:8d:5c:f3:f9:51:65:01: 96:34:e6:a0:81:12:6d:e7:f6:56:bd:e9:16:12:ba:9a:4f:ad: 04:27:47:9a:42:a9:40:f2:f3:c9:70:cc:52:02:d9:53:11:7f: cb:55:75:96:b5:59:4b:a3:fb:05:19:59:e6:90:23:37:c3:92: a6:c3:7f:03:bc:23:79:9d:52:57:e0:d3:e9:ae:4d:69:eb:3f: 2d:d0:66:cd:ba:a2:15:46:25:d3:c7:eb:77:24:42:5e:6f:1d: fb:03:b2:06:06:c2:9d:15:ec:23:1c:9e:82:a6:8f:87:dc:f1: 82:11:31:22:9c:8e:12:9f:f8:a2:b4:2f:7c:c0:61:7a:c4:fb: 9a:3e:df:58:d0:36:c4:61:11:01:3c:35:bd:90:32:67:36:cc: 05:ee:63:ce:fe:14:2c:b3:1b:b1:51:51:05:c8:2c:bb:5b:43: a0:74:2e:53:0a:b9:fb:bc:6c:8b:a8:54:4e:10:41:ae:11:38: 85:8b:51:e0:c8:75:fd:e1:ab:d3:0a:05:ab:ba:1b:12:d2:a0: 25:e8:7a:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gg32B65dqHxiIb9+A3XUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YWViYzE1NGE1NmM4MzAyNWNiZDg2NDFhOWFjMzE1Y2I1 NTFjMDYwHhcNMjYwMTI1MTcwMTAxWhcNMjYwMTI2MTcwMTAxWjAzMTEwLwYDVQQD Eyg4ZGI4Y2JkMmE3MmUxOGJkMWYwNjBiNDgwN2EzNDg0ZjA1MzU1MWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp53B4TCdkR0yVkiVHst4VD+OkETT qZeBvUY89pxNLFvEwuDJ/rZGoMy0RYQ0w+QFycMtGoya+VPHYxpKn5ftEWAKU3bd jZf8OjWXj5NXgzHhfk4GdEttY/RugFtlwtf5W7lsmHBLVZBVBtzbQxTAbpzNDazy 1AD8CCYYxhmBLgFJCtVQJ1VgbrJzlTiwHpG3G7bq99BpHEaGiPlW3GlNVGl3zWz/ VtvbmrwwWNxpgi2MsAw/ZSyvw3spqhK3D6+yVWJghPjVp3FBKSPLJWLREV3Lob76 43s7SLiki3cs2nK4+Al1GUD5oU5WhCcQcKv955yHJOjkAtHKQFr0OC5Y3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI24y9KnLhi9HwYLSAejSE8FNVGxMB8GA1UdIwQY MBaAFHSuvBVKVsgwJcvYZBqawxXLVRwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQt MDdhMWQ2NTU0OGJhLzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQtMDdhMWQ2NTU0OGJh LzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOvy/uo9 EbwX4DKwzy8+ISHe9VHbFaR0+PSYvSVOLk4M76EJDl5xO4DmewpXoxuNXPP5UWUB ljTmoIESbef2Vr3pFhK6mk+tBCdHmkKpQPLzyXDMUgLZUxF/y1V1lrVZS6P7BRlZ 5pAjN8OSpsN/A7wjeZ1SV+DT6a5Naes/LdBmzbqiFUYl08frdyRCXm8d+wOyBgbC nRXsIxyegqaPh9zxghExIpyOEp/4orQvfMBhesT7mj7fWNA2xGERATw1vZAyZzbM Be5jzv4ULLMbsVFRBcgsu1tDoHQuUwq5+7xsi6hUThBBrhE4hYtR4Mh1/eGr0woF q7obEtKgJeh6xA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:17 2026 by rpki-client