This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft File: dRk72fhLSp7UegO9-JLZ55i3Jyc.mft (raw, json) Hash identifier: BedgVCxE3YCT0wiTjOJK83358oSVCLipCBW/AvqdfR8= Subject key identifier: 6B:DE:74:B0:21:C5:68:A7:8E:A9:D3:FF:D0:10:85:D3:5A:5C:7A:13 Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27 Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727 Certificate serial: 019BF6BE60CDBE26AF5844ADC3F962F1230A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 20:00:30 +0000 Manifest this update: Sun 25 Jan 2026 20:00:30 +0000 Manifest next update: Mon 26 Jan 2026 20:00:30 +0000 Files and hashes: 1: dRk72fhLSp7UegO9-JLZ55i3Jyc.crl (hash: XYCQfp4FIeGwrCFkfxVamvPiiUjdwHO5h2jNScnniec=) 2: npNQdbBPSAtnOlq0Culg6ehSO3c.roa (hash: nzhX62ENfek+KzOEsFGqCHI0pXJKicAlbiFtnu/GhCc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:60:cd:be:26:af:58:44:ad:c3:f9:62:f1:23:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727 Validity Not Before: Jan 25 20:00:30 2026 GMT Not After : Jan 26 20:00:30 2026 GMT Subject: CN=6bde74b021c568a78ea9d3ffd01085d35a5c7a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2c:e9:5f:5e:c3:fe:b8:9a:77:43:d6:cc:29: ac:8d:01:7e:a7:ec:a1:fa:6e:e4:01:fc:46:1b:e7: 2b:d4:ab:64:d6:dd:03:91:d7:fa:3c:c4:a4:9a:73: fc:58:ee:aa:ef:d8:b4:c9:0e:91:f1:67:f8:74:12: 0b:19:ed:72:e7:5e:dd:84:44:bb:6b:3c:e3:3a:54: a3:8d:b1:2b:b4:f6:12:9e:ed:3e:af:ee:6b:b4:33: 20:62:24:cc:b7:89:6f:e8:8c:d3:96:f3:4b:b1:e1: 0e:09:4b:a0:ec:4d:1a:b4:6c:23:35:90:ba:b3:f9: e3:4b:84:99:27:64:1a:95:db:0d:36:31:a8:b5:f4: 5d:0c:5f:4f:6a:75:9e:51:b8:f8:3d:3c:73:ba:7d: 21:6e:82:72:e5:a0:17:62:b5:90:af:ca:cb:f4:49: 11:ea:90:b9:70:c6:3b:c2:a4:fc:8f:2f:dd:6d:82: 01:65:08:d7:f2:59:a4:74:ad:ea:0a:29:55:62:93: 46:da:fd:23:34:0f:0c:df:c9:c1:f4:b7:d2:d3:ab: 91:40:b1:a1:ff:a3:79:cc:cc:45:37:4c:85:3f:3c: 9c:f5:81:9a:f8:3a:4c:17:7c:0d:c2:fc:d3:da:6b: a6:14:89:3a:fa:68:04:65:eb:07:96:02:4a:34:49: f3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DE:74:B0:21:C5:68:A7:8E:A9:D3:FF:D0:10:85:D3:5A:5C:7A:13 X509v3 Authority Key Identifier: keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:8d:5f:68:5e:23:73:6a:66:9f:8c:21:28:c3:10:94:ea:16: 85:06:3e:8f:90:ce:1e:1f:b8:84:f4:ff:fe:c7:e6:87:39:ce: fa:df:37:b7:ac:e8:51:ed:3e:8f:db:fa:12:9f:35:11:5b:a0: 98:ea:db:df:ce:5d:e4:71:dc:e1:d1:7d:58:ad:54:b9:bf:9b: 57:84:f8:af:7c:23:ac:56:c9:ac:db:a5:85:ce:ff:be:33:16: 4c:83:87:03:b6:e2:59:16:b2:71:28:27:67:49:b2:5e:e4:73: 6e:7d:40:5e:e4:47:89:7e:42:ef:dd:9f:73:8c:e9:0a:cf:d2: 40:28:18:40:a9:50:73:02:9a:52:d1:70:a9:13:c0:7c:4a:66: ac:b1:3d:e1:6d:f5:82:10:8c:bb:9a:0e:2a:c3:32:b4:d9:79: e3:72:77:f8:12:ea:4d:f6:81:5d:ab:40:ad:b1:d2:f5:0d:1f: 72:d9:bc:c0:89:93:bb:2b:77:2e:27:a2:b9:5d:ca:4c:ca:09: 75:55:a6:69:cd:e8:c5:2e:c2:e0:f8:12:29:c3:11:41:cf:45: 5d:ac:cf:84:1c:c8:de:7e:a8:99:4d:d2:6b:14:8d:c7:f7:36: 29:63:91:8c:3e:6c:98:aa:91:7b:04:f7:88:3a:5b:7a:00:5c: fc:11:81:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vmDNviavWEStw/li8SMKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MTkzYmQ5Zjg0YjRhOWVkNDdhMDNiZGY4OTJkOWU3OThi NzI3MjcwHhcNMjYwMTI1MjAwMDMwWhcNMjYwMTI2MjAwMDMwWjAzMTEwLwYDVQQD Eyg2YmRlNzRiMDIxYzU2OGE3OGVhOWQzZmZkMDEwODVkMzVhNWM3YTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCzpX17D/riad0PWzCmsjQF+p+yh +m7kAfxGG+cr1Ktk1t0Dkdf6PMSkmnP8WO6q79i0yQ6R8Wf4dBILGe1y517dhES7 azzjOlSjjbErtPYSnu0+r+5rtDMgYiTMt4lv6IzTlvNLseEOCUug7E0atGwjNZC6 s/njS4SZJ2QaldsNNjGotfRdDF9PanWeUbj4PTxzun0hboJy5aAXYrWQr8rL9EkR 6pC5cMY7wqT8jy/dbYIBZQjX8lmkdK3qCilVYpNG2v0jNA8M38nB9LfS06uRQLGh /6N5zMxFN0yFPzyc9YGa+DpMF3wNwvzT2mumFIk6+mgEZesHlgJKNEnzCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvedLAhxWinjqnT/9AQhdNaXHoTMB8GA1UdIwQY MBaAFHUZO9n4S0qe1HoDvfiS2eeYtycnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jNGU2YTQtNjFjMi00Mzg4LWI4NDQt M2I3MTU2OTFkMmU5LzEvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9jNGU2YTQtNjFjMi00Mzg4LWI4NDQtM2I3MTU2OTFkMmU5 LzEvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF41faF4j c2pmn4whKMMQlOoWhQY+j5DOHh+4hPT//sfmhznO+t83t6zoUe0+j9v6Ep81EVug mOrb385d5HHc4dF9WK1Uub+bV4T4r3wjrFbJrNulhc7/vjMWTIOHA7biWRaycSgn Z0myXuRzbn1AXuRHiX5C792fc4zpCs/SQCgYQKlQcwKaUtFwqRPAfEpmrLE94W31 ghCMu5oOKsMytNl543J3+BLqTfaBXatArbHS9Q0fctm8wImTuyt3LieiuV3KTMoJ dVWmac3oxS7C4PgSKcMRQc9FXazPhBzI3n6omU3SaxSNx/c2KWORjD5smKqRewT3 iDpbegBc/BGBCA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:39 2026 by rpki-client