This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: p5kvowA8q8XLTyie7/sgD6laTvpZ2e4vuQMRJXDeQJ4= Subject key identifier: 2D:64:51:7C:12:1C:F1:DD:6C:BE:21:46:F8:CC:FB:21:DE:2E:69:17 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019BF3190B616E2B1661841385034F08D364 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 0FD3 Signing time: Sun 25 Jan 2026 03:01:03 +0000 Manifest this update: Sun 25 Jan 2026 03:01:03 +0000 Manifest next update: Mon 26 Jan 2026 03:01:03 +0000 Files and hashes: 1: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (hash: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4=) 2: JX55jcV6gfM2l9um7UDwtp1OuG4.roa (hash: virMj+OsUzasT2LSKwkjbS79ulje/gW/NhHTtSzr02c=) 3: XAbgL3yvZgOKNAQjd1K9TP7pR8E.roa (hash: EjsNK7RSKyP5lQacqZqjj1ZJHHLWHYhMqYQnL5S1TtQ=) 4: bxNi_-6u7kP5TeT0Lyd7BaqXnRs.roa (hash: 5vnFiDMeEKd80qE9NAzKY9sR8xG7Nxr2BAEMHNGMAsg=) 5: d-z4l-p8ZBdLBWQNdDCtt_xfGis.roa (hash: boqcFFSeHYzaC/MB48/wEx7gSAv6anNVR2wLBXtwZcc=) 6: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: JdXnouagVwG+fsWAYuSivVW+cLULUdR3XfI0mVpDN1w=) 7: fIT5zl6P_qwVoUuVicIP_N2r_Bg.roa (hash: B4tOow/C6D8tDzDLeNixxR/9H7fxk9DXc6/0ipYY1mI=) 8: h7gL0hf8PKW5UfJKeWMvlMbuF4Q.roa (hash: 97OJ6K/abBmmKoKNW81ZsEWIr8JQ0+nMXiyveu282Ms=) 9: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (hash: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM=) 10: xWkHq7OIQ8g_-84oE6K5BEv2GC4.roa (hash: Q2y+f16eTdxYLcVJIdtMlh5TQXlgsuWa+aMEDs13J+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:19:0b:61:6e:2b:16:61:84:13:85:03:4f:08:d3:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Jan 25 03:01:03 2026 GMT Not After : Jan 26 03:01:03 2026 GMT Subject: CN=2d64517c121cf1dd6cbe2146f8ccfb21de2e6917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ea:de:69:75:58:a0:86:61:c5:39:a5:98:0c: 35:1a:15:b4:e7:f3:0d:c4:72:75:df:96:b1:6f:1d: 55:67:25:0f:b9:74:36:c5:09:6b:d7:04:81:6d:18: 37:96:f9:f8:65:0f:09:a6:ab:99:e0:58:ce:97:da: 89:68:ec:1f:50:d8:4b:79:f4:5c:d6:b5:74:6a:86: 96:2c:55:c1:0f:69:bf:d8:03:29:a3:5d:b1:39:4c: 1b:cb:e9:28:90:bb:e7:6f:ed:d2:41:f8:2f:2f:b5: a8:7d:93:c6:c4:5a:19:b9:d1:87:dc:f1:71:82:0c: 41:06:fb:e0:2d:04:b9:33:9a:f1:3e:f3:9a:f1:50: b0:ab:f0:cc:1d:1e:96:da:91:97:0a:1a:8f:29:3c: 4c:48:39:70:68:c3:68:ae:c1:94:c9:bd:af:bb:88: a6:50:53:fb:ef:ee:d0:83:b7:df:95:94:de:d5:78: c1:62:9d:c0:ff:04:87:00:e6:df:06:23:d0:a1:46: 20:07:a4:df:5c:32:0f:07:6d:3e:39:8c:0c:71:af: fc:2c:4b:26:e4:86:f8:b8:e3:c5:68:31:09:4e:a2: d7:81:71:f1:3d:13:89:d2:47:ab:d3:23:c0:8a:05: d3:04:f4:2c:8d:2f:04:a4:0a:2b:52:bb:d0:86:b7: a3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:64:51:7C:12:1C:F1:DD:6C:BE:21:46:F8:CC:FB:21:DE:2E:69:17 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:1f:85:9c:6a:92:65:76:7e:ec:dc:d2:d4:e8:8a:8d:df:5f: 54:26:79:88:4c:dc:c3:e1:4a:1f:dc:79:ec:1d:be:9d:ae:7f: de:38:ce:7f:2f:a0:ca:39:e2:a0:a2:53:d0:2b:f8:7c:ca:77: 08:b5:46:7d:69:dd:bf:1a:20:6d:8d:65:e5:4b:a0:95:75:b2: 89:8f:03:6c:49:63:62:f0:24:81:45:f4:89:c9:56:0a:97:ea: 4e:3e:2d:43:89:0a:e3:67:1c:a7:19:44:21:1a:5b:dd:77:04: 54:0d:82:f8:4c:49:d3:3e:63:e1:25:ba:d5:25:69:1f:c0:5f: 9e:e6:a6:a4:f4:75:4c:2b:79:56:e6:4b:5e:c8:29:83:da:c9: 34:07:46:9c:63:d3:a9:e0:3f:ea:3b:71:4a:16:47:46:dd:a5: 48:36:d8:6a:57:34:c2:aa:ca:98:02:22:8d:e4:52:9d:48:3c: 14:46:a0:98:e2:e2:63:11:9d:ab:69:e5:dc:9a:c4:76:1f:22: b7:7e:2f:c0:3f:60:f1:5a:4d:d8:47:d1:0a:86:84:2c:45:a9: 88:83:e2:05:85:00:2b:b6:a4:a8:d3:13:ba:5d:9d:09:5e:6f: 7f:d1:18:0d:3d:55:be:33:dc:d5:50:76:4f:c6:9f:15:a8:2f: cc:24:be:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGQthbisWYYQThQNPCNNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwMTI1MDMwMTAzWhcNMjYwMTI2MDMwMTAzWjAzMTEwLwYDVQQD EygyZDY0NTE3YzEyMWNmMWRkNmNiZTIxNDZmOGNjZmIyMWRlMmU2OTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyureaXVYoIZhxTmlmAw1GhW05/MN xHJ135axbx1VZyUPuXQ2xQlr1wSBbRg3lvn4ZQ8JpquZ4FjOl9qJaOwfUNhLefRc 1rV0aoaWLFXBD2m/2AMpo12xOUwby+kokLvnb+3SQfgvL7WofZPGxFoZudGH3PFx ggxBBvvgLQS5M5rxPvOa8VCwq/DMHR6W2pGXChqPKTxMSDlwaMNorsGUyb2vu4im UFP77+7Qg7fflZTe1XjBYp3A/wSHAObfBiPQoUYgB6TfXDIPB20+OYwMca/8LEsm 5Ib4uOPFaDEJTqLXgXHxPROJ0ker0yPAigXTBPQsjS8EpAorUrvQhrej6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1kUXwSHPHdbL4hRvjM+yHeLmkXMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIh+FnGqS ZXZ+7NzS1OiKjd9fVCZ5iEzcw+FKH9x57B2+na5/3jjOfy+gyjnioKJT0Cv4fMp3 CLVGfWndvxogbY1l5UuglXWyiY8DbEljYvAkgUX0iclWCpfqTj4tQ4kK42ccpxlE IRpb3XcEVA2C+ExJ0z5j4SW61SVpH8BfnuampPR1TCt5VuZLXsgpg9rJNAdGnGPT qeA/6jtxShZHRt2lSDbYalc0wqrKmAIijeRSnUg8FEagmOLiYxGdq2nl3JrEdh8i t34vwD9g8VpN2EfRCoaELEWpiIPiBYUAK7akqNMTul2dCV5vf9EYDT1VvjPc1VB2 T8afFagvzCS+mA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:33 2026 by rpki-client