This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft File: Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json) Hash identifier: lZMGC5pYU5VK8pStQA2OnvEdsySstrgxtXKhpR/CoDI= Subject key identifier: 5A:43:0B:ED:85:79:6E:03:C1:C2:4C:0C:5F:94:00:E2:EB:BB:ED:CA Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92 Certificate issuer: /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92 Certificate serial: 019BF6882D9076E766C03F05BA8389B6A305 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft Manifest number: 17EE Signing time: Sun 25 Jan 2026 19:01:18 +0000 Manifest this update: Sun 25 Jan 2026 19:01:18 +0000 Manifest next update: Mon 26 Jan 2026 19:01:18 +0000 Files and hashes: 1: DkVdvbXhpbo9CQqVcVFBg1LNoNE.roa (hash: qaF1R+er71d5hFs2KTiNhXAjh56KPYgioy+6tvssIEE=) 2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: +45sBAFIwMHQhHIxM4AFf7EU2L9x1nlfDAgwd5xexhA=) 3: WIQ88PUyl0Wn69b9mzqB92sF45M.roa (hash: ATP8ajAQ0MqjrK6hyWC+m5lGC/lxKRtV3XstqqIRErs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:2d:90:76:e7:66:c0:3f:05:ba:83:89:b6:a3:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92 Validity Not Before: Jan 25 19:01:18 2026 GMT Not After : Jan 26 19:01:18 2026 GMT Subject: CN=5a430bed85796e03c1c24c0c5f9400e2ebbbedca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:08:e0:42:a0:4c:fe:3a:64:ba:81:dd:a4:47: b5:9f:8b:b9:87:f9:30:68:f9:c9:c4:36:6b:b0:29: 0a:78:e7:19:eb:51:a8:c2:f2:b8:20:8f:d8:be:34: ac:2f:cb:1a:f6:85:c9:14:a6:fc:6d:12:20:31:a5: 4e:bc:86:f1:45:af:78:84:13:b9:95:bc:68:d2:c2: 67:9c:05:66:76:11:ca:86:9f:aa:ad:3a:b6:ab:1c: 75:04:22:ef:8e:b6:f2:b4:00:b8:08:a0:ca:91:74: 7f:5f:97:e0:27:a0:8b:77:72:47:fb:7b:99:98:74: 54:6e:8b:c9:95:b3:fe:76:d2:a8:62:90:1c:2a:ff: 9f:2d:f6:7e:45:cc:d0:e6:05:18:83:ae:af:35:e4: db:b5:0c:78:7d:9e:37:d4:0c:fa:21:86:2b:30:c7: d7:09:28:5e:92:44:e5:48:13:28:41:14:20:f0:a5: e2:8f:5b:3f:29:6d:e6:33:71:c1:10:d8:5b:38:e1: 73:19:41:cf:56:81:60:93:d3:f3:36:1f:4a:ce:76: 04:29:4f:f7:4e:0c:53:6a:6e:98:b4:64:8f:92:e2: 79:b6:99:e7:25:11:cc:c3:6a:7a:5a:5f:a3:80:09: fb:ac:3a:44:d4:16:33:16:a3:dc:eb:5a:05:f7:a0: 9b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:43:0B:ED:85:79:6E:03:C1:C2:4C:0C:5F:94:00:E2:EB:BB:ED:CA X509v3 Authority Key Identifier: keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:7c:61:49:a5:a9:27:5e:52:4f:31:24:b7:fd:e4:24:e5:0b: 65:9b:9b:4d:0a:1a:31:70:c7:7a:9f:5b:75:5a:3c:fd:c1:63: 9f:f7:13:0e:99:91:17:ac:31:9c:9f:fc:f5:f3:6c:db:5a:ae: b7:bb:28:0a:dc:db:bb:27:1f:1c:e2:fa:fe:0e:c1:0a:5f:ca: 0d:ca:4f:56:6f:54:94:d5:c6:28:a7:eb:6c:bb:e7:d0:9f:50: 04:86:1a:9b:22:bb:04:f8:fe:c7:b1:4b:9f:f6:ed:13:65:7c: 2d:e9:b2:9a:02:6b:14:c5:cc:09:c3:fb:2f:cc:af:f8:a5:55: 0d:87:9d:0b:f1:98:00:1c:13:41:03:d6:3e:5e:f2:10:79:06: 63:c7:36:09:c5:85:cb:7c:8c:c7:ce:6f:d5:e1:bb:90:ce:34: 8d:39:49:c5:f1:bc:90:1a:03:34:a5:55:ce:4e:cc:c2:03:6c: 7e:0f:e1:18:49:9c:82:0e:ff:84:ba:70:c9:6b:f5:8d:db:ac: 05:fa:d6:22:a1:a4:16:08:c9:dd:c7:dc:3e:d5:1e:32:30:8b: 1e:47:21:7b:cc:1b:52:00:5a:f9:56:a3:99:c7:7a:c1:19:bd: 1b:bd:01:9c:e6:2e:ba:0f:f2:11:99:a1:1a:d6:10:49:31:e9: fb:bc:39:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iC2QdudmwD8FuoOJtqMFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMDkxYmRjNjY2YjhhNTk0MzNjNjhkOTBlMGQ4Y2MzN2Fj ZGNlOTIwHhcNMjYwMTI1MTkwMTE4WhcNMjYwMTI2MTkwMTE4WjAzMTEwLwYDVQQD Eyg1YTQzMGJlZDg1Nzk2ZTAzYzFjMjRjMGM1Zjk0MDBlMmViYmJlZGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgjgQqBM/jpkuoHdpEe1n4u5h/kw aPnJxDZrsCkKeOcZ61GowvK4II/YvjSsL8sa9oXJFKb8bRIgMaVOvIbxRa94hBO5 lbxo0sJnnAVmdhHKhp+qrTq2qxx1BCLvjrbytAC4CKDKkXR/X5fgJ6CLd3JH+3uZ mHRUbovJlbP+dtKoYpAcKv+fLfZ+RczQ5gUYg66vNeTbtQx4fZ431Az6IYYrMMfX CShekkTlSBMoQRQg8KXij1s/KW3mM3HBENhbOOFzGUHPVoFgk9PzNh9KznYEKU/3 TgxTam6YtGSPkuJ5tpnnJRHMw2p6Wl+jgAn7rDpE1BYzFqPc61oF96CbnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpDC+2FeW4DwcJMDF+UAOLru+3KMB8GA1UdIwQY MBaAFA8JG9xma4pZQzxo2Q4NjMN6zc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iNjQwODMtNTUwZS00Y2FmLWJjMjkt YTM0YThiODA2ODMyLzEvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iNjQwODMtNTUwZS00Y2FmLWJjMjktYTM0YThiODA2ODMy LzEvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHxhSaWp J15STzEkt/3kJOULZZubTQoaMXDHep9bdVo8/cFjn/cTDpmRF6wxnJ/89fNs21qu t7soCtzbuycfHOL6/g7BCl/KDcpPVm9UlNXGKKfrbLvn0J9QBIYamyK7BPj+x7FL n/btE2V8LemymgJrFMXMCcP7L8yv+KVVDYedC/GYABwTQQPWPl7yEHkGY8c2CcWF y3yMx85v1eG7kM40jTlJxfG8kBoDNKVVzk7MwgNsfg/hGEmcgg7/hLpwyWv1jdus BfrWIqGkFgjJ3cfcPtUeMjCLHkche8wbUgBa+Vajmcd6wRm9G70BnOYuug/yEZmh GtYQSTHp+7w5aw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:28 2026 by rpki-client