This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json) Hash identifier: OtSzn/AUCE3zUWSWa9XX2N6OAuXXIw7RnXMJDduLLD8= Subject key identifier: F9:09:81:49:FB:63:A1:DC:9D:67:4C:9D:17:02:8E:24:08:CF:4E:06 Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22 Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922 Certificate serial: 019BF83FF849E049207A925C8C825B6A5C60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft Manifest number: 0FC8 Signing time: Mon 26 Jan 2026 03:01:40 +0000 Manifest this update: Mon 26 Jan 2026 03:01:40 +0000 Manifest next update: Tue 27 Jan 2026 03:01:40 +0000 Files and hashes: 1: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: Zjb9AMFWTv22jK4g4Gl852XvoSg1vsJE1T5piPfMA1U=) 2: qZ8aQgjdabGbDv-i6H620T5YhwY.roa (hash: UdXrLbOlQenxMN6hG/0L/eJWuifEwthlbNrK+9DhFyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:f8:49:e0:49:20:7a:92:5c:8c:82:5b:6a:5c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922 Validity Not Before: Jan 26 03:01:40 2026 GMT Not After : Jan 27 03:01:40 2026 GMT Subject: CN=f9098149fb63a1dc9d674c9d17028e2408cf4e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7a:68:b2:77:ee:43:11:57:81:07:b7:4c:6f: b9:17:e7:6a:c1:a3:5d:44:1f:a1:e1:32:de:45:f6: 33:d6:f7:f6:d6:ac:86:9d:6a:78:1e:ab:ea:3f:64: c4:50:75:80:3e:a0:50:0d:2e:3a:d2:3d:d1:44:df: 2c:97:30:0d:f3:a7:c9:e5:52:da:bf:82:e6:73:eb: 98:4e:8d:47:f0:c9:c4:94:26:b3:cf:6a:99:48:16: 32:02:29:67:a9:4f:70:35:52:79:d5:fb:15:33:fa: 8e:5a:51:22:3b:77:5f:7c:f4:23:51:5e:b4:7f:9f: 0c:d3:2e:3d:5d:60:36:e6:8b:1d:9c:e7:f2:b0:04: 3a:cd:bb:91:d2:d3:b6:78:ea:4e:25:c8:ba:8d:7f: 5f:83:77:5b:33:eb:ee:67:23:35:78:4d:73:09:be: f7:a9:44:77:3e:6a:a3:fe:cc:8b:a9:e1:bd:04:00: 3d:55:c6:00:4d:28:ab:65:66:45:94:a1:1d:3f:0f: 52:c2:c6:05:26:e0:b1:c0:ee:2e:d9:85:93:29:96: f6:71:e8:18:0e:54:ef:bb:1a:2e:65:4a:7c:2e:8c: 73:22:8a:95:e3:62:c2:d2:70:64:f5:83:b8:8a:77: 95:55:b0:78:d1:c5:80:58:72:53:d7:8b:a1:38:93: 1a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:09:81:49:FB:63:A1:DC:9D:67:4C:9D:17:02:8E:24:08:CF:4E:06 X509v3 Authority Key Identifier: keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:99:05:5d:17:a8:99:86:84:00:70:8d:90:e0:2e:78:76:f3: 2f:09:ce:03:8a:12:ac:e8:72:d3:15:4f:8d:5e:2f:94:76:3c: fd:dd:ec:87:0f:01:5c:1b:95:78:dd:96:0f:57:8c:b7:55:76: f3:dd:6b:c2:14:23:54:11:ac:ab:57:38:2c:20:20:ed:51:b7: 81:50:9e:2b:a9:e6:c6:0e:53:92:e7:92:bf:83:72:f6:8b:8e: 92:b0:e4:b3:c8:d0:6f:3b:a4:aa:43:c5:f4:9c:87:3e:3f:c8: 81:6d:c2:81:ee:d3:1c:9c:56:95:2a:34:94:30:03:6b:6e:5c: 82:01:a7:7d:9e:f1:02:45:46:f9:24:3d:23:60:5d:b9:ef:14: 18:bd:20:d4:6b:04:1c:ff:c2:b8:29:a4:d1:b1:66:fc:46:fc: ae:3b:15:d3:77:74:d8:a5:67:53:57:c5:73:b2:8c:11:9f:5e: e4:e8:c1:e3:cc:22:10:4c:d2:72:d1:cc:63:10:ef:53:11:90: 11:9d:f2:49:a1:29:b6:5e:cc:c9:fa:4b:89:49:bb:3d:22:44: bc:8d:b9:0d:65:d4:71:af:09:74:cd:66:ed:e7:f1:3e:e4:8d: ab:da:9d:33:e5:fb:37:10:a6:aa:02:f6:3e:aa:52:ff:90:f2: 24:ef:07:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P/hJ4EkgepJcjIJbalxgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MWJjZTI5YTM2Y2JkZTg5OGFjMDA3MDdkYjk1MTQzZjg2 YTc5MjIwHhcNMjYwMTI2MDMwMTQwWhcNMjYwMTI3MDMwMTQwWjAzMTEwLwYDVQQD EyhmOTA5ODE0OWZiNjNhMWRjOWQ2NzRjOWQxNzAyOGUyNDA4Y2Y0ZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3posnfuQxFXgQe3TG+5F+dqwaNd RB+h4TLeRfYz1vf21qyGnWp4HqvqP2TEUHWAPqBQDS460j3RRN8slzAN86fJ5VLa v4Lmc+uYTo1H8MnElCazz2qZSBYyAilnqU9wNVJ51fsVM/qOWlEiO3dffPQjUV60 f58M0y49XWA25osdnOfysAQ6zbuR0tO2eOpOJci6jX9fg3dbM+vuZyM1eE1zCb73 qUR3Pmqj/syLqeG9BAA9VcYATSirZWZFlKEdPw9SwsYFJuCxwO4u2YWTKZb2cegY DlTvuxouZUp8LoxzIoqV42LC0nBk9YO4ineVVbB40cWAWHJT14uhOJMaKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkJgUn7Y6HcnWdMnRcCjiQIz04GMB8GA1UdIwQY MBaAFHcbzimjbL3omKwAcH25UUP4ankiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYt MmFmOTE3ODM4MmZiLzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYtMmFmOTE3ODM4MmZi LzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpkFXReo mYaEAHCNkOAueHbzLwnOA4oSrOhy0xVPjV4vlHY8/d3shw8BXBuVeN2WD1eMt1V2 891rwhQjVBGsq1c4LCAg7VG3gVCeK6nmxg5TkueSv4Ny9ouOkrDks8jQbzukqkPF 9JyHPj/IgW3Cge7THJxWlSo0lDADa25cggGnfZ7xAkVG+SQ9I2Bdue8UGL0g1GsE HP/CuCmk0bFm/Eb8rjsV03d02KVnU1fFc7KMEZ9e5OjB48wiEEzSctHMYxDvUxGQ EZ3ySaEptl7MyfpLiUm7PSJEvI25DWXUca8JdM1m7efxPuSNq9qdM+X7NxCmqgL2 PqpS/5DyJO8HJw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:00 2026 by rpki-client