This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft File: 2v75fKAQutT_We99K2vJB3hgqrI.mft (raw, json) Hash identifier: /KNyQK+jt80JfwJUIwfD82kUpjqwPio05WHY11pkaRY= Subject key identifier: BF:9C:EB:98:CC:5B:F5:C1:47:D1:9F:8A:70:60:41:3F:AE:29:D5:4E Authority key identifier: DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2 Certificate issuer: /CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2 Certificate serial: 019BF650B5CC2A55FEFE58B2D9B9149E6710 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft Manifest number: 03F3 Signing time: Sun 25 Jan 2026 18:00:42 +0000 Manifest this update: Sun 25 Jan 2026 18:00:42 +0000 Manifest next update: Mon 26 Jan 2026 18:00:42 +0000 Files and hashes: 1: 2v75fKAQutT_We99K2vJB3hgqrI.crl (hash: tqd7ASrmSGKTGc/YeSa16LkqJ6kDcGe0rrC23aJTL/c=) 2: XJrQypw2eXZ7ezpEOpOj8qOwJlc.roa (hash: U5AFVavv4y8bxwhEhQQ2exL+ZJwtyEE2Q3oN6TBpcsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:b5:cc:2a:55:fe:fe:58:b2:d9:b9:14:9e:67:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2 Validity Not Before: Jan 25 18:00:42 2026 GMT Not After : Jan 26 18:00:42 2026 GMT Subject: CN=bf9ceb98cc5bf5c147d19f8a7060413fae29d54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c6:aa:b0:c1:be:bd:39:e9:5e:ce:5d:36:b4: 4c:ab:12:a8:62:2c:17:ff:73:94:22:02:41:b0:24: ac:23:2d:74:1a:e0:97:bb:e9:de:ca:c7:ed:54:31: d4:ef:5f:57:d1:22:72:4e:95:4d:2b:e0:0f:f5:84: 25:f7:52:e2:9f:67:0a:f4:05:fe:81:dc:6e:c7:a2: 0f:9d:b8:6e:2a:ae:0f:4c:9e:01:bd:58:2b:42:a7: 1b:9f:f2:1f:8e:6b:37:fd:1f:ca:cb:44:f2:7e:80: 9d:9e:21:44:45:64:54:cc:4f:a7:e4:dc:46:61:19: cc:a7:9f:5b:16:6c:cc:61:ee:5a:32:f4:97:88:6d: 7d:08:af:31:6d:5a:2e:09:75:cd:4f:d1:38:7b:6d: 96:db:6c:0b:ba:f1:5d:9d:b7:c9:0f:1d:61:c8:f1: a5:b2:44:c7:08:6c:c6:5f:85:03:77:cb:32:15:c2: 15:b0:60:b4:dc:e1:13:1f:90:73:d4:55:18:5e:13: af:24:34:8e:3f:74:d6:f7:f8:16:9b:a9:19:69:1c: 51:04:ca:9e:e4:f8:14:74:b5:7e:bb:a9:30:3a:31: e1:36:71:8b:58:f7:25:35:9b:e1:33:b3:6c:d0:dc: 19:a6:ed:37:65:ce:5c:52:a1:5f:17:d0:a4:dc:bb: 1f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9C:EB:98:CC:5B:F5:C1:47:D1:9F:8A:70:60:41:3F:AE:29:D5:4E X509v3 Authority Key Identifier: keyid:DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ee:5d:92:87:a2:14:e1:f2:dd:9c:f5:40:f8:3a:04:c8:20: 99:30:a1:dd:38:2d:fd:a7:e2:82:85:86:03:fa:1c:e8:07:44: 82:b6:e1:e5:9d:6b:4b:ea:01:96:63:1a:32:5f:83:d8:9e:ad: 25:fd:08:ac:34:4e:3a:5e:23:84:81:61:b8:18:a6:21:1a:69: e0:19:47:c2:a4:fc:e1:d9:76:f0:2b:33:fb:7d:4c:8b:1e:a9: 83:d9:d4:b5:7f:aa:79:24:5c:7a:eb:33:01:63:11:dd:7c:ea: 5f:8c:c2:76:01:9e:9c:17:21:32:fa:ff:d5:38:3b:42:89:0f: 49:51:65:b0:8c:5e:0d:61:68:39:bc:5e:ec:93:de:c7:8c:e7: 71:69:a6:70:2d:62:0e:58:2c:4e:89:90:a1:3a:ac:df:ec:26: f0:07:b2:1d:57:b7:fe:03:65:84:76:ee:c4:c0:67:18:79:a1: ec:c1:30:7a:88:93:ae:0a:6f:4c:db:1c:12:8d:40:a5:aa:7d: f9:96:19:74:9c:cd:93:a1:bb:02:8d:15:f6:26:f6:05:47:61: 3f:b1:4f:41:32:84:6d:e4:11:9f:4c:08:c8:62:b7:27:97:9f: be:69:16:82:ff:2c:09:5c:de:d7:68:fd:2d:ea:5d:de:7d:a8: a2:46:01:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2ULXMKlX+/liy2bkUnmcQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZmVmOTdjYTAxMGJhZDRmZjU5ZWY3ZDJiNmJjOTA3Nzg2 MGFhYjIwHhcNMjYwMTI1MTgwMDQyWhcNMjYwMTI2MTgwMDQyWjAzMTEwLwYDVQQD EyhiZjljZWI5OGNjNWJmNWMxNDdkMTlmOGE3MDYwNDEzZmFlMjlkNTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncaqsMG+vTnpXs5dNrRMqxKoYiwX /3OUIgJBsCSsIy10GuCXu+neysftVDHU719X0SJyTpVNK+AP9YQl91Lin2cK9AX+ gdxux6IPnbhuKq4PTJ4BvVgrQqcbn/Ifjms3/R/Ky0TyfoCdniFERWRUzE+n5NxG YRnMp59bFmzMYe5aMvSXiG19CK8xbVouCXXNT9E4e22W22wLuvFdnbfJDx1hyPGl skTHCGzGX4UDd8syFcIVsGC03OETH5Bz1FUYXhOvJDSOP3TW9/gWm6kZaRxRBMqe 5PgUdLV+u6kwOjHhNnGLWPclNZvhM7Ns0NwZpu03Zc5cUqFfF9Ck3LsfPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+c65jMW/XBR9GfinBgQT+uKdVOMB8GA1UdIwQY MBaAFNr++XygELrU/1nvfStryQd4YKqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnY3NWZLQVF1dFRfV2U5OUsydkpCM2hncXJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yOTIxZTYtODFjNi00NDQ3LTlkNzgt YmZhOTRlYjFhYTAyLzEvMnY3NWZLQVF1dFRfV2U5OUsydkpCM2hncXJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yOTIxZTYtODFjNi00NDQ3LTlkNzgtYmZhOTRlYjFhYTAy LzEvMnY3NWZLQVF1dFRfV2U5OUsydkpCM2hncXJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+5dkoei FOHy3Zz1QPg6BMggmTCh3Tgt/afigoWGA/oc6AdEgrbh5Z1rS+oBlmMaMl+D2J6t Jf0IrDROOl4jhIFhuBimIRpp4BlHwqT84dl28Csz+31Mix6pg9nUtX+qeSRceusz AWMR3XzqX4zCdgGenBchMvr/1Tg7QokPSVFlsIxeDWFoObxe7JPex4zncWmmcC1i DlgsTomQoTqs3+wm8AeyHVe3/gNlhHbuxMBnGHmh7MEweoiTrgpvTNscEo1Apap9 +ZYZdJzNk6G7Ao0V9ib2BUdhP7FPQTKEbeQRn0wIyGK3J5efvmkWgv8sCVze12j9 Lepd3n2ookYB/Q== -----END CERTIFICATE-----Generated at Sun Jan 25 22:56:50 2026 by rpki-client