This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json) Hash identifier: GA/i04oh+a370xZwwY65Q/i5wFrSgLDMOTMOCAy6LI4= Subject key identifier: 48:D7:0D:3A:4C:68:D2:FC:68:11:B9:F6:93:6D:BB:5B:35:51:46:34 Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e Certificate serial: 019BF68809918BE169CDC6A66A07109D8975 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft Manifest number: 12EE Signing time: Sun 25 Jan 2026 19:01:09 +0000 Manifest this update: Sun 25 Jan 2026 19:01:09 +0000 Manifest next update: Mon 26 Jan 2026 19:01:09 +0000 Files and hashes: 1: 1-r9qYFCluKH7Ma8TQ_Akyltf1Lc.roa (hash: GVSG8HQq960x0d4CpK5jN+FSCHq1SzLhEkFhDXdwhwI=) 2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: BXv8WXACOO4J2D/WvQBARGAOtZXP00MUf64smI7BPRo=) 3: Pk5JLOSd1QInAh2OTvMfyyR1NPI.roa (hash: O7rw9h1GQCgx5zvERGlnO4YLbgkL7RaVJgOWvuy279I=) 4: oVjc2gbj8Z3HA7eAzKIRnl2lQMA.roa (hash: zAAZk1U4VBtTI0cONSxWT3e4cbR3Hkt4vRra+VHSqCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:09:91:8b:e1:69:cd:c6:a6:6a:07:10:9d:89:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e Validity Not Before: Jan 25 19:01:09 2026 GMT Not After : Jan 26 19:01:09 2026 GMT Subject: CN=48d70d3a4c68d2fc6811b9f6936dbb5b35514634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0b:8e:bd:b8:b4:4c:e0:99:54:cc:b4:6d:7e: 28:a4:e1:5c:a1:e8:b8:7a:ae:48:ed:9a:6d:88:76: ed:70:57:3a:fb:42:7e:93:43:e0:9a:3e:42:9f:33: bf:a7:71:56:f4:23:00:c8:4e:0c:4e:09:be:bf:a9: 65:c0:7c:f1:fa:a7:03:71:6e:57:c1:bd:3c:f8:32: d8:fb:93:4b:ae:29:1e:ed:e0:81:5b:fb:3d:b2:b6: 53:00:01:21:44:8e:12:d0:38:58:cb:22:80:3b:7f: 4b:09:89:4e:d3:09:41:5f:14:d5:dc:09:55:b2:80: ac:71:6a:ed:50:81:27:b1:48:d7:22:42:ac:b0:31: d5:cc:d1:cc:51:c2:b7:f8:f1:74:8c:8b:5a:c3:f6: 6f:68:09:94:93:09:17:e3:4a:0e:bf:74:ea:64:66: 20:29:66:8b:b0:30:4a:02:bc:88:d3:d4:28:a3:99: bf:84:d1:b4:b8:92:d2:50:0e:49:0c:1c:ac:f6:d4: e4:98:02:07:5d:1d:c0:ce:65:8b:2b:7e:72:b6:f9: 33:1b:17:9e:66:c4:e7:30:cc:31:be:2d:a5:e9:7d: 0e:13:a9:d5:14:e5:4b:3d:df:c0:11:2d:d8:25:3f: ff:1c:c5:f4:14:20:6d:b5:66:e3:4d:21:93:71:74: 73:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D7:0D:3A:4C:68:D2:FC:68:11:B9:F6:93:6D:BB:5B:35:51:46:34 X509v3 Authority Key Identifier: keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:d6:3c:1f:40:90:b5:f2:bf:8a:2f:67:b3:93:5e:f4:3c:bd: ab:cc:36:4c:58:d9:36:e9:b0:4e:e2:e0:ea:0c:a0:c3:33:df: 0f:b8:ee:2d:61:3a:9a:26:0e:70:5e:13:6d:9c:4c:ed:18:cd: f4:32:ba:d3:78:30:39:3a:b9:2d:bb:56:d4:64:bb:21:e3:e7: b7:78:20:c2:e9:e2:f9:ea:80:f6:48:8f:c2:58:fd:bc:8d:59: d4:6b:cf:35:25:b0:99:62:75:18:53:b6:f5:14:24:24:45:98: 42:a7:f6:24:73:7b:a7:a3:70:ca:8c:60:46:a8:39:98:92:18: 29:a4:a9:a6:58:18:3e:51:7f:82:55:72:80:19:ca:4d:03:0f: c1:8c:12:ff:2c:92:ff:76:e5:1a:25:50:90:5c:84:67:6b:b8: f7:9d:6b:87:06:2a:c8:ec:28:cb:51:5a:8b:27:c4:44:59:ab: 84:1c:ea:ef:2c:e6:32:dc:9e:7d:d4:74:ec:b1:cf:00:8f:90: 81:89:ff:3c:cc:04:b5:ed:ae:77:a3:29:6a:13:ea:f7:ef:77: 30:2f:31:c1:ce:0a:62:6d:7a:74:88:56:1d:32:d3:87:e8:8d: 51:cc:89:cb:5a:03:d6:c1:cb:5c:19:6f:86:bd:a2:f2:9d:67: 83:c0:36:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iAmRi+FpzcamagcQnYl1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjMwNjRlM2MyN2VjOTJiN2VhYjY2NzY0OWQyMDRlNTY3 MzgzOGUwHhcNMjYwMTI1MTkwMTA5WhcNMjYwMTI2MTkwMTA5WjAzMTEwLwYDVQQD Eyg0OGQ3MGQzYTRjNjhkMmZjNjgxMWI5ZjY5MzZkYmI1YjM1NTE0NjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQuOvbi0TOCZVMy0bX4opOFcoei4 eq5I7ZptiHbtcFc6+0J+k0Pgmj5CnzO/p3FW9CMAyE4MTgm+v6llwHzx+qcDcW5X wb08+DLY+5NLrike7eCBW/s9srZTAAEhRI4S0DhYyyKAO39LCYlO0wlBXxTV3AlV soCscWrtUIEnsUjXIkKssDHVzNHMUcK3+PF0jItaw/ZvaAmUkwkX40oOv3TqZGYg KWaLsDBKAryI09Qoo5m/hNG0uJLSUA5JDBys9tTkmAIHXR3AzmWLK35ytvkzGxee ZsTnMMwxvi2l6X0OE6nVFOVLPd/AES3YJT//HMX0FCBttWbjTSGTcXRzvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjXDTpMaNL8aBG59pNtu1s1UUY0MB8GA1UdIwQY MBaAFA0jBk48J+ySt+q2Z2SdIE5Wc4OOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMt NWNlZjA0Yjc5NzM3LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMtNWNlZjA0Yjc5NzM3 LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNY8H0CQ tfK/ii9ns5Ne9Dy9q8w2TFjZNumwTuLg6gygwzPfD7juLWE6miYOcF4TbZxM7RjN 9DK603gwOTq5LbtW1GS7IePnt3ggwuni+eqA9kiPwlj9vI1Z1GvPNSWwmWJ1GFO2 9RQkJEWYQqf2JHN7p6NwyoxgRqg5mJIYKaSpplgYPlF/glVygBnKTQMPwYwS/yyS /3blGiVQkFyEZ2u4951rhwYqyOwoy1FaiyfERFmrhBzq7yzmMtyefdR07LHPAI+Q gYn/PMwEte2ud6MpahPq9+93MC8xwc4KYm16dIhWHTLTh+iNUcyJy1oD1sHLXBlv hr2i8p1ng8A2Kg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:27 2026 by rpki-client