This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft File: dbeVBmFQocNn2rzPaclwqwxyMhU.mft (raw, json) Hash identifier: NuLv2JcypbH79GjyUO0WCeDG4dqW1+HBsEiakIm8QXA= Subject key identifier: 8A:98:77:34:B8:B0:3D:46:D6:54:9F:29:5B:FD:B5:25:22:7D:7B:36 Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15 Certificate issuer: /CN=75b795066150a1c367dabccf69c970ab0c723215 Certificate serial: 019BF6518EA01C2061A7E06DBB6385CE1E06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft Manifest number: 0BCF Signing time: Sun 25 Jan 2026 18:01:38 +0000 Manifest this update: Sun 25 Jan 2026 18:01:38 +0000 Manifest next update: Mon 26 Jan 2026 18:01:38 +0000 Files and hashes: 1: 0T8fcmm1hsNnOmqM2PEgoAyliqU.roa (hash: 9ZfWKoxYg5iUkW9bq0QBmY+p7hBHHw7kGA3tl6yyKw0=) 2: FLA5zAJXuRYhVvLbMvHegLVx03k.roa (hash: ALcLJ5P9PXv6U4nYIysJQ7DHdsSCbcTf30882RyAGwc=) 3: QLKMe_jElWZCYxaDhAzkorlz3LQ.roa (hash: vuhA+iGQjke4jhUjZeVHGZ6IY30SRz7Sp3mzEHAQJQs=) 4: TSfqyIUxAgfu2d6E5vUEde-a71w.roa (hash: m9pFo8gt/WhMRWsNe6yus9/BFb/kzFEfeC7Fbw2hXyw=) 5: dbeVBmFQocNn2rzPaclwqwxyMhU.crl (hash: 8Mvon63LnqPnGLtBXg0QK6mcN4PuORhisGymeBwmpwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:8e:a0:1c:20:61:a7:e0:6d:bb:63:85:ce:1e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215 Validity Not Before: Jan 25 18:01:38 2026 GMT Not After : Jan 26 18:01:38 2026 GMT Subject: CN=8a987734b8b03d46d6549f295bfdb525227d7b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:22:ca:ce:38:f2:8e:7b:46:5d:ff:90:2c:cd: d5:95:4c:91:bc:90:74:c7:ac:5b:09:e5:a1:b2:ac: 33:9e:af:a3:8d:0c:7b:22:d4:c6:6c:dc:10:8b:f5: 53:39:1f:82:5f:99:56:5b:60:e1:db:f6:26:76:9a: 12:28:64:5a:c4:30:21:1c:30:e7:6c:2f:21:04:41: 0a:be:d2:58:5f:ef:db:65:84:bf:6e:a1:1d:bd:82: ff:fa:ff:45:64:56:d3:a6:a1:b2:30:31:6d:93:87: 5f:58:54:7e:a6:68:c4:0b:30:a4:ce:61:01:dc:7b: fd:3a:91:88:b4:2e:9c:00:4a:33:ed:68:15:61:61: 5c:b5:58:1d:d2:f7:13:52:8d:e4:c3:83:51:2a:ff: 42:39:89:84:e4:b8:c8:e0:71:a0:da:b8:18:f5:06: 92:9e:bd:77:2d:eb:ee:60:4c:10:d0:4d:ef:fa:21: 60:39:5a:56:95:7d:05:88:90:c7:3e:03:4c:44:bc: 4e:34:fd:38:7f:d8:a1:8b:73:4e:bc:10:05:25:2d: bb:a6:28:23:2f:60:a6:d3:92:c2:69:91:de:c4:f5: 43:b5:38:f0:f5:c4:80:41:3c:17:2b:1f:ac:50:d1: 66:48:4f:6b:1a:c6:5e:7c:45:66:b7:72:bb:3d:3c: 5c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:98:77:34:B8:B0:3D:46:D6:54:9F:29:5B:FD:B5:25:22:7D:7B:36 X509v3 Authority Key Identifier: keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:a5:1d:37:c2:a5:37:8c:05:6e:04:9d:e2:a6:f6:ff:be:4f: 38:b2:f7:47:b2:06:e0:7d:25:3a:3d:4e:1c:23:89:e4:26:f9: c9:05:18:86:65:83:59:08:56:78:85:47:8c:a8:e3:49:85:be: 84:e4:ce:dc:e4:55:a8:96:f7:d0:a2:06:91:4f:79:fe:fc:72: 38:58:2f:85:73:a9:17:04:5e:74:70:50:ac:70:4c:64:ed:35: 76:9b:31:d6:5b:c7:5d:ce:fc:42:81:b0:f0:84:3b:fc:2e:c8: db:40:b1:c3:f0:39:c4:30:a6:23:16:1a:45:1e:99:d1:ac:c9: 25:30:a3:f3:be:41:d1:a8:88:0f:2e:0c:93:7a:2a:76:c6:16: fc:12:8b:c0:ae:6d:33:27:d8:98:6a:31:68:27:14:03:ed:3e: 95:d2:09:5f:fd:2b:ee:60:45:c8:36:da:9a:35:67:00:a7:c5: 53:7a:89:df:18:f1:d2:fd:3f:b1:aa:ad:f6:8f:29:f6:c7:32: 99:ff:30:d5:48:ed:aa:fe:57:29:07:3a:24:a6:32:7f:1c:ff: 05:6b:46:ad:41:ef:68:98:69:9f:f5:c0:4e:60:7e:6a:65:8c: bd:d5:b3:e7:19:8d:08:33:02:0a:f4:1a:10:b3:a9:66:05:82: 71:79:8a:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UY6gHCBhp+Btu2OFzh4GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1Yjc5NTA2NjE1MGExYzM2N2RhYmNjZjY5Yzk3MGFiMGM3 MjMyMTUwHhcNMjYwMTI1MTgwMTM4WhcNMjYwMTI2MTgwMTM4WjAzMTEwLwYDVQQD Eyg4YTk4NzczNGI4YjAzZDQ2ZDY1NDlmMjk1YmZkYjUyNTIyN2Q3YjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyLKzjjyjntGXf+QLM3VlUyRvJB0 x6xbCeWhsqwznq+jjQx7ItTGbNwQi/VTOR+CX5lWW2Dh2/YmdpoSKGRaxDAhHDDn bC8hBEEKvtJYX+/bZYS/bqEdvYL/+v9FZFbTpqGyMDFtk4dfWFR+pmjECzCkzmEB 3Hv9OpGItC6cAEoz7WgVYWFctVgd0vcTUo3kw4NRKv9COYmE5LjI4HGg2rgY9QaS nr13LevuYEwQ0E3v+iFgOVpWlX0FiJDHPgNMRLxONP04f9ihi3NOvBAFJS27pigj L2Cm05LCaZHexPVDtTjw9cSAQTwXKx+sUNFmSE9rGsZefEVmt3K7PTxcHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqYdzS4sD1G1lSfKVv9tSUifXs2MB8GA1UdIwQY MBaAFHW3lQZhUKHDZ9q8z2nJcKsMcjIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80NjZhYWItYTQ3MC00MzQ0LWEzNjct NTQ3YmU0Y2ZhNDU3LzEvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80NjZhYWItYTQ3MC00MzQ0LWEzNjctNTQ3YmU0Y2ZhNDU3 LzEvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv6UdN8Kl N4wFbgSd4qb2/75POLL3R7IG4H0lOj1OHCOJ5Cb5yQUYhmWDWQhWeIVHjKjjSYW+ hOTO3ORVqJb30KIGkU95/vxyOFgvhXOpFwRedHBQrHBMZO01dpsx1lvHXc78QoGw 8IQ7/C7I20Cxw/A5xDCmIxYaRR6Z0azJJTCj875B0aiIDy4Mk3oqdsYW/BKLwK5t MyfYmGoxaCcUA+0+ldIJX/0r7mBFyDbamjVnAKfFU3qJ3xjx0v0/saqt9o8p9scy mf8w1Ujtqv5XKQc6JKYyfxz/BWtGrUHvaJhpn/XATmB+amWMvdWz5xmNCDMCCvQa ELOpZgWCcXmKRA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:20 2026 by rpki-client