This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft File: bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft (raw, json) Hash identifier: LvU5oIZXzF5gfgefhz8lNf4zzkp15FBF9LHXejV6aD4= Subject key identifier: D7:F0:0B:81:10:0C:31:5C:C3:33:C3:CB:BD:56:9C:10:11:51:DD:7B Authority key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA Certificate issuer: /CN=6c380c8b4e55e59081af73aa1935e10a012057fa Certificate serial: 019BF4D11F16F87487785597D3A6AC77F788 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 11:01:44 +0000 Manifest this update: Sun 25 Jan 2026 11:01:44 +0000 Manifest next update: Mon 26 Jan 2026 11:01:44 +0000 Files and hashes: 1: bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl (hash: XvV3D8Q1UzATX6i/LDEjUffg5Z1MKOJsL7JAZTIwh4o=) 2: etj0sShjec2CBR92UCLlU4OhoHU.roa (hash: T3WyGa+EDgJcqKV7smiXEGZnclSaocbCUmsz9FP6vjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d1:1f:16:f8:74:87:78:55:97:d3:a6:ac:77:f7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c380c8b4e55e59081af73aa1935e10a012057fa Validity Not Before: Jan 25 11:01:44 2026 GMT Not After : Jan 26 11:01:44 2026 GMT Subject: CN=d7f00b81100c315cc333c3cbbd569c101151dd7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:69:b8:b4:89:18:c2:69:2e:4a:d6:d0:71:03: 6d:07:31:ae:df:61:82:d6:8a:20:d1:6d:d5:a1:8e: 96:83:9d:9e:fc:18:bf:24:68:9b:ae:67:25:82:12: 49:0c:aa:f3:53:d8:07:72:94:28:63:69:63:81:32: 92:a1:59:b5:43:41:7a:fd:d5:9d:ad:4a:4f:9a:9d: 3a:ec:d7:14:e9:32:73:d2:7b:6c:b9:4f:ff:90:42: 87:f7:30:06:dc:e5:4c:c2:95:cf:55:95:6e:8d:d0: c4:de:9a:68:ac:b7:3c:70:08:11:e6:e3:6a:ab:b1: ec:1b:74:b1:bc:aa:86:c8:d7:35:2f:a1:fb:d5:36: 2f:5b:4f:b4:13:7a:04:46:c9:97:5d:54:71:de:62: dd:e6:05:bb:e8:91:07:bc:fa:54:43:37:d8:71:cc: 47:df:5e:e5:1a:00:54:cf:15:36:94:c2:c9:12:a2: 5b:3b:f3:17:15:cb:93:70:d8:22:c8:b2:c3:26:36: a5:63:2b:c8:17:bf:d5:b2:49:21:11:96:f9:ca:77: 45:2f:29:0f:4c:a6:26:81:f4:19:fc:ae:68:41:00: 0d:2f:0d:23:72:10:5c:d6:e2:5e:68:dc:aa:a5:70: 48:b4:a6:df:e5:dd:b2:cc:f4:c0:16:0b:e4:c5:3a: 4e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F0:0B:81:10:0C:31:5C:C3:33:C3:CB:BD:56:9C:10:11:51:DD:7B X509v3 Authority Key Identifier: keyid:6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ea:55:f9:7d:00:4f:23:82:fa:3a:08:8d:0b:7f:d9:b0:1c: 9b:4a:ec:bf:27:ce:e6:e2:14:84:fa:c4:fe:34:29:e9:d2:1a: 4a:70:82:73:42:02:bb:82:e9:a2:0e:99:17:f1:d0:00:14:91: 8c:2b:65:48:72:01:b9:6e:00:0b:de:2f:39:2f:41:a4:cc:3a: ff:4a:7a:80:a9:4d:c6:99:bc:66:20:e0:81:f7:fb:4b:e4:00: 2e:55:90:ee:7d:88:a6:6b:26:ad:e5:3f:a7:1c:1a:00:92:c6: 03:92:0d:3b:36:ea:3f:ba:68:a8:64:79:1c:08:45:ca:99:59: 02:92:93:dd:0d:8c:c2:81:44:cc:2e:70:b3:96:cd:6c:25:60: 05:81:14:37:b4:bd:71:df:02:09:a0:97:59:9e:54:b3:3c:22: 05:e9:8b:d8:eb:71:ba:b5:e6:de:10:49:a1:72:0a:3b:c4:7d: 28:68:8e:9b:20:6f:ae:7e:6f:9a:d2:00:61:1a:68:6b:b3:32: fb:d7:71:50:34:b2:f3:10:a8:7a:6a:81:6b:ba:8a:50:03:ca: 57:c1:3c:20:fa:b9:f8:8d:04:e1:f5:73:fb:14:f6:07:cf:a6: 96:2b:51:57:a6:e3:c7:ae:13:12:da:90:9d:9b:b3:02:56:d3: 4c:f2:4c:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00R8W+HSHeFWX06asd/eIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzgwYzhiNGU1NWU1OTA4MWFmNzNhYTE5MzVlMTBhMDEy MDU3ZmEwHhcNMjYwMTI1MTEwMTQ0WhcNMjYwMTI2MTEwMTQ0WjAzMTEwLwYDVQQD EyhkN2YwMGI4MTEwMGMzMTVjYzMzM2MzY2JiZDU2OWMxMDExNTFkZDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Wm4tIkYwmkuStbQcQNtBzGu32GC 1oog0W3VoY6Wg52e/Bi/JGibrmclghJJDKrzU9gHcpQoY2ljgTKSoVm1Q0F6/dWd rUpPmp067NcU6TJz0ntsuU//kEKH9zAG3OVMwpXPVZVujdDE3pporLc8cAgR5uNq q7HsG3SxvKqGyNc1L6H71TYvW0+0E3oERsmXXVRx3mLd5gW76JEHvPpUQzfYccxH 317lGgBUzxU2lMLJEqJbO/MXFcuTcNgiyLLDJjalYyvIF7/VskkhEZb5yndFLykP TKYmgfQZ/K5oQQANLw0jchBc1uJeaNyqpXBItKbf5d2yzPTAFgvkxTpO3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfwC4EQDDFcwzPDy71WnBARUd17MB8GA1UdIwQY MBaAFGw4DItOVeWQga9zqhk14QoBIFf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRnTWkwNVY1WkNCcjNPcUdUWGhDZ0VnVl9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZTQyYzctMTU1YS00OWFhLWFhMDAt MDhmMDk0ZGFmMjQ3LzEvYkRnTWkwNVY1WkNCcjNPcUdUWGhDZ0VnVl9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZTQyYzctMTU1YS00OWFhLWFhMDAtMDhmMDk0ZGFmMjQ3 LzEvYkRnTWkwNVY1WkNCcjNPcUdUWGhDZ0VnVl9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOpV+X0A TyOC+joIjQt/2bAcm0rsvyfO5uIUhPrE/jQp6dIaSnCCc0ICu4Lpog6ZF/HQABSR jCtlSHIBuW4AC94vOS9BpMw6/0p6gKlNxpm8ZiDggff7S+QALlWQ7n2IpmsmreU/ pxwaAJLGA5INOzbqP7poqGR5HAhFyplZApKT3Q2MwoFEzC5ws5bNbCVgBYEUN7S9 cd8CCaCXWZ5UszwiBemL2OtxurXm3hBJoXIKO8R9KGiOmyBvrn5vmtIAYRpoa7My +9dxUDSy8xCoemqBa7qKUAPKV8E8IPq5+I0E4fVz+xT2B8+mlitRV6bjx64TEtqQ nZuzAlbTTPJM9w== -----END CERTIFICATE-----Generated at Sun Jan 25 19:15:27 2026 by rpki-client