This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json) Hash identifier: hglugO7nuIAaUS/9jyz8IYM+A+nJ4e2MBmXk2O5YGqo= Subject key identifier: AA:4C:53:4E:9C:A9:8B:60:B0:D9:22:03:D5:9C:39:09:6E:8F:D9:A1 Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76 Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176 Certificate serial: 019BF3192965176DAEE098A963E250F8FFF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft Manifest number: 17EE Signing time: Sun 25 Jan 2026 03:01:10 +0000 Manifest this update: Sun 25 Jan 2026 03:01:10 +0000 Manifest next update: Mon 26 Jan 2026 03:01:10 +0000 Files and hashes: 1: DfzOkC0iJ7Qwf9F4vLGZxn-I0RY.roa (hash: m/N6mjMCk7nSF0Y4fLJbCwhmN916abHZ0dz7Xt3/9gg=) 2: NdDg9bagdgyCl8mG_SUnqsEW6Vw.roa (hash: PApZIvzVaGfq5eHyj2rfc7owhBy5ykOlU6D4yLhF2+Y=) 3: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: EeaWNmrEl5mrEVvSxq6rGh4Z3B7Zm45LJtOvUoi8xEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:19:29:65:17:6d:ae:e0:98:a9:63:e2:50:f8:ff:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176 Validity Not Before: Jan 25 03:01:10 2026 GMT Not After : Jan 26 03:01:10 2026 GMT Subject: CN=aa4c534e9ca98b60b0d92203d59c39096e8fd9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8c:89:60:bf:8e:fc:ec:69:16:ce:d4:2b:c7: e4:5f:0a:8a:64:85:b7:d3:7f:ac:5f:07:37:3c:a0: 78:ec:98:9b:1e:32:87:f3:5d:26:51:ce:7e:38:a4: 1a:bd:69:d6:b2:b5:93:2c:81:7f:81:fc:36:bd:92: c5:73:6f:b5:08:b9:fb:28:62:02:d8:4d:2c:63:89: 2e:31:b3:b4:f5:19:c6:57:91:62:89:aa:c9:7b:13: 86:0b:58:6a:b1:cd:a9:24:99:f3:8f:4f:dd:3f:3b: 24:16:67:af:f1:44:8e:f8:d6:cf:01:7c:39:8c:40: fc:67:e9:13:40:38:df:d9:96:c4:e1:7f:c0:69:63: 58:f8:99:0a:c6:6a:29:b5:d1:4e:0b:89:70:97:5b: 2c:b1:48:f1:7d:34:a1:ce:13:b3:6c:ce:11:19:c8: 7c:a6:1b:12:fa:6e:05:1c:db:59:dc:fe:9b:95:89: b7:58:af:76:05:58:1d:b7:1f:18:a5:b4:d3:a3:69: 92:56:b6:99:d0:28:e8:a2:7d:fa:4d:59:85:9f:75: 81:56:97:85:c9:85:9d:a8:a0:90:8f:71:2e:4b:68: f8:29:be:27:e5:e5:6e:27:dc:65:44:26:49:48:d8: a5:cf:63:9e:96:3c:40:f9:f3:3e:73:6f:57:c3:ca: 81:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4C:53:4E:9C:A9:8B:60:B0:D9:22:03:D5:9C:39:09:6E:8F:D9:A1 X509v3 Authority Key Identifier: keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:94:e0:52:86:3c:92:70:ef:41:ac:39:58:1f:81:f0:81:4b: 74:03:18:d2:09:5e:59:11:65:99:68:a7:69:e4:f9:0f:28:39: e8:1d:be:a8:0f:8c:d0:d6:6e:94:95:0f:7a:06:ab:73:d5:22: 3d:96:19:4b:59:10:f3:c2:59:c6:6b:a4:22:5f:68:e9:eb:97: 3c:b8:01:03:67:48:4d:ef:4f:0c:f8:94:60:7e:a5:82:7e:3d: ab:71:32:b7:95:c0:cb:bd:ab:c6:a2:3d:85:62:27:3a:71:f0: f8:fe:f9:01:e4:c8:09:d2:33:0d:79:00:92:b3:d6:8c:41:1e: c8:16:ab:42:29:62:5a:18:0b:56:67:8a:31:5f:1d:1e:e9:64: cc:32:74:ae:9e:cc:b3:89:07:27:4e:2f:40:51:42:8d:7f:9e: 68:c9:f0:8b:a9:44:2a:b5:b0:86:d3:92:35:71:f8:cf:4c:22: 8a:f5:eb:3f:f9:96:e5:cd:ce:44:53:b2:50:4b:12:7b:54:f4: a3:61:be:bf:46:95:ca:e6:df:5d:78:0d:6b:d0:06:65:7a:55: f7:60:41:e6:a2:de:18:03:03:d1:d6:88:a0:0e:a7:14:88:86: 6b:dd:9a:ac:7e:f2:57:0d:b9:e3:91:57:6c:26:95:0a:07:6e: 62:af:c5:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGSllF22u4JipY+JQ+P/xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZGNjNzc2YjJiZjU5NWJmNGIzZTYwYmJhNDI0NWYwMTIw YTIxNzYwHhcNMjYwMTI1MDMwMTEwWhcNMjYwMTI2MDMwMTEwWjAzMTEwLwYDVQQD EyhhYTRjNTM0ZTljYTk4YjYwYjBkOTIyMDNkNTljMzkwOTZlOGZkOWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4yJYL+O/OxpFs7UK8fkXwqKZIW3 03+sXwc3PKB47JibHjKH810mUc5+OKQavWnWsrWTLIF/gfw2vZLFc2+1CLn7KGIC 2E0sY4kuMbO09RnGV5FiiarJexOGC1hqsc2pJJnzj0/dPzskFmev8USO+NbPAXw5 jED8Z+kTQDjf2ZbE4X/AaWNY+JkKxmoptdFOC4lwl1sssUjxfTShzhOzbM4RGch8 phsS+m4FHNtZ3P6blYm3WK92BVgdtx8YpbTTo2mSVraZ0Cjoon36TVmFn3WBVpeF yYWdqKCQj3EuS2j4Kb4n5eVuJ9xlRCZJSNilz2OeljxA+fM+c29Xw8qBZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpMU06cqYtgsNkiA9WcOQluj9mhMB8GA1UdIwQY MBaAFHXcx3ayv1lb9LPmC7pCRfASCiF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQt NjQ1NDAyMDVlY2Y0LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQtNjQ1NDAyMDVlY2Y0 LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZTgUoY8 knDvQaw5WB+B8IFLdAMY0gleWRFlmWinaeT5Dyg56B2+qA+M0NZulJUPegarc9Ui PZYZS1kQ88JZxmukIl9o6euXPLgBA2dITe9PDPiUYH6lgn49q3Eyt5XAy72rxqI9 hWInOnHw+P75AeTICdIzDXkAkrPWjEEeyBarQiliWhgLVmeKMV8dHulkzDJ0rp7M s4kHJ04vQFFCjX+eaMnwi6lEKrWwhtOSNXH4z0wiivXrP/mW5c3ORFOyUEsSe1T0 o2G+v0aVyubfXXgNa9AGZXpV92BB5qLeGAMD0daIoA6nFIiGa92arH7yVw2545FX bCaVCgduYq/FzQ== -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:18 2026 by rpki-client