This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json) Hash identifier: 6t1ssCUa13+6PNCPGakrxRU5u2JY0inb971ntVspheY= Subject key identifier: 90:8C:1D:7C:65:7E:FC:AC:95:D3:A3:7A:F4:BE:5E:8B:E7:50:B7:9C Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8 Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8 Certificate serial: 019BF5AC3AAA5AEDDF577634BADF2FDA3111 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 15:01:03 +0000 Manifest this update: Sun 25 Jan 2026 15:01:03 +0000 Manifest next update: Mon 26 Jan 2026 15:01:03 +0000 Files and hashes: 1: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: 27RaxjOz+ox4rxvZ5r57u05T96TWii/bkHiNBMXI3bw=) 2: LINYNse5gTnQTaGpDC4P2orwLNw.roa (hash: jwdJGzlRoAppijnlgLmKSEl5CMBxNzYsYm+HHhXiWR0=) 3: Wu-LPUMqwocBNlt5ypkyRQ-BcG8.roa (hash: udr6u/rjNC9kwCUZ4fpiUpE5gr+CoJtYznz4JyS606g=) 4: dpzibW71BafVtewDmI9jnKwB0PE.roa (hash: Lb6hcW86Ys7t4OSo9igJpzp6AC9QU/RfmTo/e1nf/rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:3a:aa:5a:ed:df:57:76:34:ba:df:2f:da:31:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8 Validity Not Before: Jan 25 15:01:03 2026 GMT Not After : Jan 26 15:01:03 2026 GMT Subject: CN=908c1d7c657efcac95d3a37af4be5e8be750b79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:bf:ef:2c:4e:d1:01:69:14:e5:ff:0e:b7: 3c:f1:6a:ef:9a:ae:1d:e9:09:f3:34:0f:ed:52:13: 9f:02:a0:cc:0f:21:04:a7:74:ec:d8:1e:71:85:02: 19:61:05:35:6c:f3:a4:7c:a1:af:6a:bd:98:ac:f4: 66:1e:3c:4a:86:12:c8:4c:2b:52:3f:ad:f6:f1:8c: a4:41:a5:ea:f3:c1:ca:38:3e:ce:45:f1:d7:cb:b8: 9b:03:de:68:0d:85:0b:48:f1:1b:1e:0d:cd:6b:6f: b2:24:6f:33:75:a1:10:04:d3:04:c9:fd:f9:47:88: 60:d1:b8:6c:ac:dd:e5:b7:2b:65:fb:7f:b8:c3:13: 8f:96:c2:a5:cb:3f:ed:c1:23:22:36:4a:a3:82:c8: 17:60:4f:b8:4e:84:8a:b0:4d:10:6c:8c:bf:2f:2e: 1b:cb:4a:a7:8d:0c:3f:4d:1d:e7:97:70:b6:86:b4: 44:84:cf:12:11:ec:83:40:d5:59:a3:d7:8e:f6:1f: dd:36:49:d4:9a:a1:1b:f9:8c:f0:f1:d0:12:4e:17: 5c:c5:4f:7f:fe:3a:bb:bb:d9:6d:7e:ff:c7:85:b5: 98:95:aa:16:6a:c4:56:39:db:b3:80:cb:93:9b:ab: 29:19:d5:2a:a8:a4:d6:39:ef:56:af:8b:73:20:97: 4e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8C:1D:7C:65:7E:FC:AC:95:D3:A3:7A:F4:BE:5E:8B:E7:50:B7:9C X509v3 Authority Key Identifier: keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:94:89:74:f6:7b:4a:08:ee:3f:ca:ee:62:29:c6:e0:9d:2d: ae:1e:a3:04:7a:1b:0d:4c:80:2e:83:43:fd:88:a0:5e:12:15: b0:47:f3:2e:fc:23:5a:a6:5b:f2:ab:34:dd:00:97:db:58:ce: df:b2:42:e0:bf:b9:71:99:0d:e8:bc:61:84:12:18:ce:60:30: 4e:35:a7:d8:8e:d3:56:cd:a6:91:4d:a3:fe:5e:3c:e8:73:d7: d6:62:35:72:86:fd:04:0f:3a:e0:af:5b:eb:8e:78:4f:b2:5a: 98:7a:24:fe:bf:de:e3:ad:aa:d1:5a:f3:c3:45:44:e2:02:b2: 5a:a9:e0:18:8b:b7:48:0e:8b:10:48:e9:1c:5a:94:fd:c0:81: ae:e7:d0:5c:47:eb:00:b7:ec:02:d2:76:40:f0:14:d7:7f:a1: fd:9b:67:6b:f1:62:82:a8:85:81:cb:c4:86:84:1f:91:1a:0b: e7:0b:98:34:19:5d:91:62:40:d3:3b:90:1f:a2:2f:e5:27:e3: 6c:1e:36:a4:ec:b0:ac:14:ca:6d:7c:9d:db:07:74:84:b6:7d: 4f:57:6b:58:9e:94:db:5c:12:14:a2:7d:12:c6:f8:d4:46:65: bf:18:dd:a9:a3:13:10:bb:00:74:6b:7e:b5:70:2c:cd:35:30: 6a:d4:cd:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rDqqWu3fV3Y0ut8v2jERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTdjYjNhMWU1M2U3NjI5ZWUzYjlmMjY3MmQ0NTcxZWY4 NWQyYzgwHhcNMjYwMTI1MTUwMTAzWhcNMjYwMTI2MTUwMTAzWjAzMTEwLwYDVQQD Eyg5MDhjMWQ3YzY1N2VmY2FjOTVkM2EzN2FmNGJlNWU4YmU3NTBiNzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3K/7yxO0QFpFOX/Drc88Wrvmq4d 6QnzNA/tUhOfAqDMDyEEp3Ts2B5xhQIZYQU1bPOkfKGvar2YrPRmHjxKhhLITCtS P6328YykQaXq88HKOD7ORfHXy7ibA95oDYULSPEbHg3Na2+yJG8zdaEQBNMEyf35 R4hg0bhsrN3ltytl+3+4wxOPlsKlyz/twSMiNkqjgsgXYE+4ToSKsE0QbIy/Ly4b y0qnjQw/TR3nl3C2hrREhM8SEeyDQNVZo9eO9h/dNknUmqEb+Yzw8dASThdcxU9/ /jq7u9ltfv/HhbWYlaoWasRWOduzgMuTm6spGdUqqKTWOe9Wr4tzIJdOyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCMHXxlfvysldOjevS+XovnULecMB8GA1UdIwQY MBaAFAxXyzoeU+dinuO58mctRXHvhdLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMt Y2Y3MjMyZGRlYmVjLzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMtY2Y3MjMyZGRlYmVj LzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpSJdPZ7 SgjuP8ruYinG4J0trh6jBHobDUyALoND/YigXhIVsEfzLvwjWqZb8qs03QCX21jO 37JC4L+5cZkN6LxhhBIYzmAwTjWn2I7TVs2mkU2j/l486HPX1mI1cob9BA864K9b 6454T7JamHok/r/e462q0Vrzw0VE4gKyWqngGIu3SA6LEEjpHFqU/cCBrufQXEfr ALfsAtJ2QPAU13+h/Ztna/FigqiFgcvEhoQfkRoL5wuYNBldkWJA0zuQH6Iv5Sfj bB42pOywrBTKbXyd2wd0hLZ9T1drWJ6U21wSFKJ9Esb41EZlvxjdqaMTELsAdGt+ tXAszTUwatTNRQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:14:32 2026 by rpki-client