This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json) Hash identifier: OdyC/WRzRPSVzpdRgXVM9FJwzi99T21fDvlN1X/Hbsw= Subject key identifier: 5B:F5:6A:6D:91:05:C2:57:7E:D6:12:6A:AB:6C:D3:4B:4D:28:CE:DC Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79 Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779 Certificate serial: 019BF5AC594228F0EEC57AC4481ED6ECB26D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft Manifest number: 17F0 Signing time: Sun 25 Jan 2026 15:01:11 +0000 Manifest this update: Sun 25 Jan 2026 15:01:11 +0000 Manifest next update: Mon 26 Jan 2026 15:01:11 +0000 Files and hashes: 1: 1_3QPj2kcZJlDlUR0wUaWH0hnN4.roa (hash: HjpmYaddiFadOHWD4a1Uq/l0fBMZhg54vPDiEU9FmAo=) 2: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: fMr1Z3Ir0E89W9XZERlpJyGJgTOI9HAy2bJ8MTKBmjU=) 3: b3BYq2GWfMwJHoWmAuIkoqzVBVA.roa (hash: XNgIXKY6d3KMvTnZqnzkIrqeWkBBwAFD3F11zTkNoG4=) 4: dOBeP6c511bhyxhKOl1QYRWaxPM.roa (hash: TATVX7qCBXnkq+JZzCH4bdJ1Q/CylPyqx/nVOxJrUII=) 5: wFT-gzmhRqgVywX_alBqSQGShuo.roa (hash: gX1S45YD4ooSsAhPDzvbDfjjDz84SBGIWiAajTxl5cw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:59:42:28:f0:ee:c5:7a:c4:48:1e:d6:ec:b2:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779 Validity Not Before: Jan 25 15:01:11 2026 GMT Not After : Jan 26 15:01:11 2026 GMT Subject: CN=5bf56a6d9105c2577ed6126aab6cd34b4d28cedc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1c:d8:4c:ea:cf:77:88:0c:f3:7a:0c:ac:4d: 09:76:c4:2b:bf:d1:a4:d2:fb:fe:22:e6:b8:10:f1: 36:93:d4:ef:f8:e0:23:22:3c:c2:01:14:55:6b:e2: 88:4d:2d:bb:5e:e6:79:6b:9f:21:7d:27:72:61:4e: 41:b1:9f:a0:e4:18:99:4f:b1:f0:62:db:82:28:ad: 70:88:57:09:e0:61:70:b4:eb:9d:b4:03:92:4e:f7: fc:46:f7:9f:19:c4:d6:6c:41:93:f7:03:73:b3:57: 40:c7:fc:52:e7:cf:d6:09:41:0a:61:13:3f:1e:df: ec:b7:a4:32:15:0d:be:4b:de:54:21:0f:1c:7d:cc: f0:cc:82:da:47:51:55:02:d7:02:39:2c:a6:e3:a5: ca:23:cf:6c:ad:f1:d1:96:e7:d3:99:1f:8e:19:98: dc:0f:b5:eb:f1:04:1f:aa:f9:87:14:0b:57:5b:d1: dc:fe:19:4f:95:e3:23:2c:20:60:94:e9:2c:d6:0d: 8a:e0:72:fd:5c:d7:5f:53:4e:39:6d:ca:e7:50:a0: dc:c8:7c:90:f5:99:78:9b:9a:58:97:ee:b8:79:8b: a4:fb:12:42:57:93:44:2b:e5:3d:20:b1:5d:b7:1c: e4:65:07:65:16:00:74:42:96:f3:01:01:db:3e:49: cf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F5:6A:6D:91:05:C2:57:7E:D6:12:6A:AB:6C:D3:4B:4D:28:CE:DC X509v3 Authority Key Identifier: keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:8a:d1:9b:f9:04:2b:9a:5e:90:f3:56:46:7a:e2:08:07:1b: 68:8d:91:9c:d8:12:28:df:5d:cd:6f:5c:5d:c5:6b:68:2d:e6: 85:94:65:c1:bc:62:8b:d0:8b:13:5e:4f:e0:7f:90:54:05:ed: a1:04:ca:2b:94:a5:cd:27:d6:80:d3:19:3e:2c:5c:af:a7:15: 8b:ac:2b:37:1e:b0:91:a6:9a:48:25:f4:c4:33:02:c1:3b:c9: 21:4b:8d:b8:9c:72:2f:7c:bc:0a:ba:8b:03:a7:f5:1b:4c:ca: 36:33:2f:08:f0:af:c3:f9:e5:72:ee:05:c4:0e:7c:ea:65:6d: 69:b9:86:84:13:16:ac:8e:4b:f3:3b:00:7b:46:5e:41:f5:5e: 23:42:9c:8e:39:59:03:84:3b:6c:bd:b4:21:80:11:af:d0:c7: 02:58:12:b9:ca:e8:e9:31:fb:49:2f:dd:c8:f2:31:86:e4:cc: 14:44:94:ac:a0:ba:eb:e7:18:87:2f:a2:d2:71:02:b8:73:e1: 9f:0e:a4:c0:89:b9:ba:88:4b:58:7e:a2:a8:f5:94:5d:fc:97: 58:5f:dc:50:dd:27:ed:8c:17:34:28:34:0b:bc:b5:30:7d:9c: b3:10:f4:64:ab:06:4c:44:d6:fa:aa:c3:0a:22:3e:aa:76:58: cd:ba:c8:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rFlCKPDuxXrESB7W7LJtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMjE1MjFhNzEyNzE1N2Y3ZGFmMGFkMDkxMzk0YWQ1YTFj Y2U3NzkwHhcNMjYwMTI1MTUwMTExWhcNMjYwMTI2MTUwMTExWjAzMTEwLwYDVQQD Eyg1YmY1NmE2ZDkxMDVjMjU3N2VkNjEyNmFhYjZjZDM0YjRkMjhjZWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hzYTOrPd4gM83oMrE0JdsQrv9Gk 0vv+Iua4EPE2k9Tv+OAjIjzCARRVa+KITS27XuZ5a58hfSdyYU5BsZ+g5BiZT7Hw YtuCKK1wiFcJ4GFwtOudtAOSTvf8RvefGcTWbEGT9wNzs1dAx/xS58/WCUEKYRM/ Ht/st6QyFQ2+S95UIQ8cfczwzILaR1FVAtcCOSym46XKI89srfHRlufTmR+OGZjc D7Xr8QQfqvmHFAtXW9Hc/hlPleMjLCBglOks1g2K4HL9XNdfU045bcrnUKDcyHyQ 9Zl4m5pYl+64eYuk+xJCV5NEK+U9ILFdtxzkZQdlFgB0QpbzAQHbPknPDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFv1am2RBcJXftYSaqts00tNKM7cMB8GA1UdIwQY MBaAFA8hUhpxJxV/fa8K0JE5StWhzOd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lODMxYjEtOWVjMC00NmYyLTg2MGQt ZmFkNWZkNzk3MGJhLzEvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lODMxYjEtOWVjMC00NmYyLTg2MGQtZmFkNWZkNzk3MGJh LzEvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIrRm/kE K5pekPNWRnriCAcbaI2RnNgSKN9dzW9cXcVraC3mhZRlwbxii9CLE15P4H+QVAXt oQTKK5SlzSfWgNMZPixcr6cVi6wrNx6wkaaaSCX0xDMCwTvJIUuNuJxyL3y8CrqL A6f1G0zKNjMvCPCvw/nlcu4FxA586mVtabmGhBMWrI5L8zsAe0ZeQfVeI0KcjjlZ A4Q7bL20IYARr9DHAlgSucro6TH7SS/dyPIxhuTMFESUrKC66+cYhy+i0nECuHPh nw6kwIm5uohLWH6iqPWUXfyXWF/cUN0n7YwXNCg0C7y1MH2csxD0ZKsGTETW+qrD CiI+qnZYzbrITg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:15:34 2026 by rpki-client