This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft File: dyDGcENNpRAiYQmdoQHyXdP3qto.mft (raw, json) Hash identifier: zkF8LpdnkJngbmLM/fuaARZHbwdPKKjVZWHHSTX6aao= Subject key identifier: B8:83:17:AB:EA:DE:DD:76:D6:3B:3C:70:72:63:61:67:47:86:95:99 Authority key identifier: 77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA Certificate issuer: /CN=7720c670434da5102261099da101f25dd3f7aada Certificate serial: 019BF763C92610F7F56E09B7569C5480C52B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft Manifest number: 102C Signing time: Sun 25 Jan 2026 23:01:10 +0000 Manifest this update: Sun 25 Jan 2026 23:01:10 +0000 Manifest next update: Mon 26 Jan 2026 23:01:10 +0000 Files and hashes: 1: dyDGcENNpRAiYQmdoQHyXdP3qto.crl (hash: 98gGQNbkW4+Hvk3KXM+t7aU/28H7qUO2+OqhytEGYKk=) 2: fxjDmBMtX4lZXvQ-w62aJNa_wcA.roa (hash: k9PdZxgspVP2JG6hPwNtH2QKs9wDWHLF4meodXKpQn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:c9:26:10:f7:f5:6e:09:b7:56:9c:54:80:c5:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7720c670434da5102261099da101f25dd3f7aada Validity Not Before: Jan 25 23:01:10 2026 GMT Not After : Jan 26 23:01:10 2026 GMT Subject: CN=b88317abeadedd76d63b3c707263616747869599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fe:25:0f:87:fe:85:c2:d0:bf:7c:a0:30:69: 27:c5:4f:1c:89:ab:c8:09:b9:1b:9a:24:8d:46:79: 73:8e:2e:22:b6:1c:2a:6b:09:04:32:9b:34:cd:89: fb:8c:04:c7:00:d6:d7:0b:63:29:71:13:7a:c6:bf: d6:d7:82:b7:9f:50:8e:1e:27:cf:64:14:52:21:c5: c8:0c:5c:f3:3e:53:67:82:13:af:61:79:73:38:24: 21:3c:2d:46:95:40:c0:8a:a4:ac:8c:24:5e:f4:59: 6a:fb:8f:ed:8a:fc:1d:d3:dc:aa:18:ba:26:0d:a1: 2b:f8:25:ac:3c:dc:89:59:2d:fb:d7:22:5e:9c:d9: 45:ed:07:23:28:86:57:7c:a9:28:53:f0:81:e8:c3: 35:25:d8:c1:2d:5a:ca:3a:2c:31:fe:7f:06:4a:22: 6e:c2:f6:fe:8d:c3:3f:29:42:dc:b2:99:45:30:aa: 2f:e2:ad:ff:f7:74:cf:1b:db:a3:b4:ec:44:59:c6: 6a:06:0b:89:96:fd:9b:2d:42:36:d4:8c:82:0d:3d: b0:05:70:d8:a7:b5:96:fa:8a:b3:80:58:e8:6c:48: a5:cb:16:32:bc:51:cd:4b:fd:0f:bf:7c:84:4f:50: 60:0a:20:20:08:f8:70:d1:f5:7d:f8:43:6a:a7:a4: 53:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:83:17:AB:EA:DE:DD:76:D6:3B:3C:70:72:63:61:67:47:86:95:99 X509v3 Authority Key Identifier: keyid:77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:3e:1c:db:8b:61:f9:88:c0:89:4c:22:34:f5:12:1f:84:1a: f7:70:42:fa:0c:98:56:49:2f:88:24:26:04:11:17:0e:28:ff: 14:81:1f:26:a5:84:d0:57:df:3a:00:60:d5:11:e4:19:b7:92: 75:cb:43:c3:e3:1a:1a:74:68:cf:cc:a8:6d:68:35:5b:ca:b3: cc:9d:25:6f:cd:21:63:b3:21:56:10:27:f5:f5:a7:09:d5:db: 94:4e:4c:e1:f2:6f:74:55:25:df:01:c5:1f:b0:41:b3:f1:a9: 87:92:6e:2d:5e:7d:8d:a4:ab:61:bf:89:b4:27:86:f2:86:8b: 68:25:66:f5:64:ed:18:15:4f:f4:e5:31:27:6f:ea:26:09:e8: 4a:9d:fa:c1:89:12:eb:bb:6b:02:0a:e7:d7:4d:10:1b:e4:8c: 29:12:36:fa:16:ff:0b:c4:92:86:40:29:d6:ef:6b:80:21:3f: 32:d9:82:f9:d4:be:8f:c8:23:83:33:b9:c6:04:64:ef:12:0c: 48:32:dc:e0:fd:ce:07:52:0c:83:89:27:ac:70:bd:ba:6b:40: e0:a4:f5:ba:ae:e1:1a:9f:a5:cb:48:46:fe:e7:1e:75:df:e4: a0:67:8d:0f:13:53:cd:f0:1f:90:4f:60:3d:62:2a:ec:58:b0: 3e:d6:40:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y8kmEPf1bgm3VpxUgMUrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MjBjNjcwNDM0ZGE1MTAyMjYxMDk5ZGExMDFmMjVkZDNm N2FhZGEwHhcNMjYwMTI1MjMwMTEwWhcNMjYwMTI2MjMwMTEwWjAzMTEwLwYDVQQD EyhiODgzMTdhYmVhZGVkZDc2ZDYzYjNjNzA3MjYzNjE2NzQ3ODY5NTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf4lD4f+hcLQv3ygMGknxU8ciavI CbkbmiSNRnlzji4ithwqawkEMps0zYn7jATHANbXC2MpcRN6xr/W14K3n1COHifP ZBRSIcXIDFzzPlNnghOvYXlzOCQhPC1GlUDAiqSsjCRe9Flq+4/tivwd09yqGLom DaEr+CWsPNyJWS371yJenNlF7QcjKIZXfKkoU/CB6MM1JdjBLVrKOiwx/n8GSiJu wvb+jcM/KULcsplFMKov4q3/93TPG9ujtOxEWcZqBguJlv2bLUI21IyCDT2wBXDY p7WW+oqzgFjobEilyxYyvFHNS/0Pv3yET1BgCiAgCPhw0fV9+ENqp6RTewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiDF6vq3t121js8cHJjYWdHhpWZMB8GA1UdIwQY MBaAFHcgxnBDTaUQImEJnaEB8l3T96raMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHlER2NFTk5wUkFpWVFtZG9RSHlYZFAzcXRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jZjc1M2YtNzc4MS00ZGZlLWEzOGUt ZDg0NTk5NTk5MWFjLzEvZHlER2NFTk5wUkFpWVFtZG9RSHlYZFAzcXRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9jZjc1M2YtNzc4MS00ZGZlLWEzOGUtZDg0NTk5NTk5MWFj LzEvZHlER2NFTk5wUkFpWVFtZG9RSHlYZFAzcXRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAET4c24th +YjAiUwiNPUSH4Qa93BC+gyYVkkviCQmBBEXDij/FIEfJqWE0FffOgBg1RHkGbeS dctDw+MaGnRoz8yobWg1W8qzzJ0lb80hY7MhVhAn9fWnCdXblE5M4fJvdFUl3wHF H7BBs/Gph5JuLV59jaSrYb+JtCeG8oaLaCVm9WTtGBVP9OUxJ2/qJgnoSp36wYkS 67trAgrn100QG+SMKRI2+hb/C8SShkAp1u9rgCE/MtmC+dS+j8gjgzO5xgRk7xIM SDLc4P3OB1IMg4knrHC9umtA4KT1uq7hGp+ly0hG/ucedd/koGeNDxNTzfAfkE9g PWIq7FiwPtZAbg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:06 2026 by rpki-client