This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft File: cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json) Hash identifier: U3RGKlaXP75Vw6HxuOoXqmwdYDmniVsPwtrA2VeD8uA= Subject key identifier: 61:5A:10:06:BD:57:34:AE:E4:E2:2E:2C:35:54:37:67:97:89:3C:09 Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31 Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831 Certificate serial: 019BF4D065854983F8C5DCF571AB1A8F2304 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft Manifest number: 038B Signing time: Sun 25 Jan 2026 11:00:56 +0000 Manifest this update: Sun 25 Jan 2026 11:00:56 +0000 Manifest next update: Mon 26 Jan 2026 11:00:56 +0000 Files and hashes: 1: S00d78TItkDHq888CPL8snBiq8U.roa (hash: xbbWOfkY4EBmGgNTfua9nJ1QvCvgAkZPsqc/WKzPEio=) 2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: 6rYYMiwIlXMpql7D/x/XM1U7/KnBmneif4li1KGr3Q4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:65:85:49:83:f8:c5:dc:f5:71:ab:1a:8f:23:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831 Validity Not Before: Jan 25 11:00:56 2026 GMT Not After : Jan 26 11:00:56 2026 GMT Subject: CN=615a1006bd5734aee4e22e2c3554376797893c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:13:3b:cb:15:b2:a9:8f:4a:c1:2b:0e:27:7d: f7:73:89:2b:2f:44:f8:6d:1d:59:89:0a:6d:41:12: ff:dc:a5:f2:1d:73:ff:59:67:a2:23:dd:7e:11:8b: c5:65:4d:d3:ba:5e:78:df:a1:21:ec:7d:99:4c:f9: c6:cd:42:a0:27:00:53:2b:3d:9c:e3:be:7c:a0:eb: 2f:d8:86:f7:39:b3:bf:8c:72:f0:6f:c5:ba:35:5b: a6:a8:ed:d2:3a:1e:19:60:84:7e:57:e3:93:53:2f: 93:40:c4:3a:8a:b1:fd:36:54:51:19:5d:9b:f0:a1: 7f:20:de:87:64:1b:1a:bb:b1:b2:1e:9a:88:dd:1e: b1:c2:d7:a4:bd:24:d0:4e:35:c4:32:34:13:5b:90: 53:49:45:16:13:b8:7a:ed:a4:3d:6a:46:bf:c4:c1: 43:fa:bb:39:b7:37:d3:5b:b2:69:9e:e8:49:09:dc: 2c:9b:4f:b3:ea:21:f0:6f:f5:73:24:14:31:ac:2f: fc:5b:0d:cd:46:b1:64:f7:6f:f1:76:db:cc:5e:90: dd:d0:4b:a7:94:2f:d3:34:26:c6:18:ba:8b:37:66: 6f:6b:cc:35:68:2b:0a:86:fc:ce:7f:54:40:05:1a: 99:66:6f:02:db:e6:ac:55:48:bd:0f:c1:da:0a:86: 04:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5A:10:06:BD:57:34:AE:E4:E2:2E:2C:35:54:37:67:97:89:3C:09 X509v3 Authority Key Identifier: keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:3c:90:06:da:f6:d6:1c:0d:b4:b5:cb:cc:1a:33:48:45:ea: 5a:90:bf:99:26:26:38:2c:ad:fe:ff:13:43:63:1f:78:df:7f: b2:2d:8b:0a:dc:75:a0:be:6a:59:85:13:a9:28:79:6f:61:9e: d4:eb:46:bf:82:2d:fe:d7:6b:cf:5f:47:ab:e3:88:03:61:fb: db:b5:0b:95:c4:7c:5a:59:b7:5d:e2:ba:69:45:8d:1a:c6:ee: a9:f4:33:a8:7b:67:e2:ca:74:00:ec:ce:f6:15:77:32:22:cd: 70:5a:db:53:9e:8a:39:83:3a:15:1e:04:55:c9:9e:99:27:e7: 81:42:76:07:38:b8:91:e0:fe:36:a9:23:9a:0d:bd:f3:ec:7d: 1b:ac:d9:94:e2:e2:5a:11:b6:ca:40:46:fd:b0:18:e0:25:67: 39:63:29:14:72:1d:57:8e:55:70:e3:2e:98:7f:ca:6b:95:da: f8:7b:fe:67:8d:fe:61:e2:9c:1a:96:4c:bb:3b:b2:d7:40:81: 87:bd:74:33:46:ba:b4:19:2b:92:b0:2c:cb:e2:22:5c:e6:ed: c6:1e:cf:47:10:36:28:dc:ce:3c:f1:70:51:fc:da:da:f9:de: 52:31:6b:3a:c8:1f:cb:d0:b5:c9:8c:33:9c:83:ee:9d:f9:a6: 11:20:f2:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00GWFSYP4xdz1casajyMEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMzZlMDRlNTNiOWQzOTY3Y2Y5ZDQxOGU3OGI2MGJiYWQw NzU4MzEwHhcNMjYwMTI1MTEwMDU2WhcNMjYwMTI2MTEwMDU2WjAzMTEwLwYDVQQD Eyg2MTVhMTAwNmJkNTczNGFlZTRlMjJlMmMzNTU0Mzc2Nzk3ODkzYzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRM7yxWyqY9KwSsOJ333c4krL0T4 bR1ZiQptQRL/3KXyHXP/WWeiI91+EYvFZU3Tul5436Eh7H2ZTPnGzUKgJwBTKz2c 4758oOsv2Ib3ObO/jHLwb8W6NVumqO3SOh4ZYIR+V+OTUy+TQMQ6irH9NlRRGV2b 8KF/IN6HZBsau7GyHpqI3R6xwtekvSTQTjXEMjQTW5BTSUUWE7h67aQ9aka/xMFD +rs5tzfTW7JpnuhJCdwsm0+z6iHwb/VzJBQxrC/8Ww3NRrFk92/xdtvMXpDd0Eun lC/TNCbGGLqLN2Zva8w1aCsKhvzOf1RABRqZZm8C2+asVUi9D8HaCoYEoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFaEAa9VzSu5OIuLDVUN2eXiTwJMB8GA1UdIwQY MBaAFHA24E5TudOWfPnUGOeLYLutB1gxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84MzMyY2ItZmQ0Yi00OWQ5LWIwYTEt ODlkZWYwMDgyZTJhLzEvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC84MzMyY2ItZmQ0Yi00OWQ5LWIwYTEtODlkZWYwMDgyZTJh LzEvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljyQBtr2 1hwNtLXLzBozSEXqWpC/mSYmOCyt/v8TQ2MfeN9/si2LCtx1oL5qWYUTqSh5b2Ge 1OtGv4It/tdrz19Hq+OIA2H727ULlcR8Wlm3XeK6aUWNGsbuqfQzqHtn4sp0AOzO 9hV3MiLNcFrbU56KOYM6FR4EVcmemSfngUJ2Bzi4keD+Nqkjmg298+x9G6zZlOLi WhG2ykBG/bAY4CVnOWMpFHIdV45VcOMumH/Ka5Xa+Hv+Z43+YeKcGpZMuzuy10CB h710M0a6tBkrkrAsy+IiXObtxh7PRxA2KNzOPPFwUfza2vneUjFrOsgfy9C1yYwz nIPunfmmESDyyA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:15:11 2026 by rpki-client