This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json) Hash identifier: 9i3Ue6MQCUtzlqqa/74x/y91Zc4IWMVdVnYYV5j93+U= Subject key identifier: AD:0A:E9:17:F2:25:62:E0:C8:BD:BE:BE:84:AB:EC:32:69:B0:6B:AC Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51 Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451 Certificate serial: 019BF4D11613C261B1C3924918109DAE74A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 11:01:41 +0000 Manifest this update: Sun 25 Jan 2026 11:01:41 +0000 Manifest next update: Mon 26 Jan 2026 11:01:41 +0000 Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: LkFJiVTo1l8jKraE3Bo4cR2DYQEmqdd0rtLl07cAQqQ=) 2: 8GUY2bzbxntWIs2gvb760Bh7nsg.roa (hash: ftayi7tK38WsXcZESosrVmgYiCztmc+rh9ioLz8P+sg=) 3: DKvJ6_ZwABtUURH8Yt7PlE4obQM.roa (hash: SQ12RZHo5ponPOG8yDFnr8G4GatSHfSXuoY1WTcSZb4=) 4: ndKj7sv7siAhskI-Ujr55HM8Eqg.roa (hash: BrZsXiOk25bH6V5XZK8dlayhh/dOH8cXdKNgo01yyrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d1:16:13:c2:61:b1:c3:92:49:18:10:9d:ae:74:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451 Validity Not Before: Jan 25 11:01:41 2026 GMT Not After : Jan 26 11:01:41 2026 GMT Subject: CN=ad0ae917f22562e0c8bdbebe84abec3269b06bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a8:19:dc:5b:dd:97:b0:81:01:42:4a:a2:3e: 48:c4:b3:1a:c4:d1:c1:42:bf:0d:4c:b5:7d:3c:36: 17:9c:8e:d1:6e:8f:56:7b:22:df:ef:08:3e:d0:88: 6b:4b:c5:6b:39:8f:7c:7f:ee:c2:58:59:22:06:ba: 3b:d2:ea:de:da:6d:9a:b1:49:6c:f8:0f:67:24:52: 21:63:89:4e:e3:71:3b:d4:8e:b9:cc:b0:d5:3a:80: 60:b4:da:1c:9d:fc:fb:c4:b7:8e:21:5e:bb:c6:1d: 6e:14:71:b9:a4:72:80:91:58:33:4d:a0:ca:52:9f: 3f:3d:0a:8a:32:e3:eb:6d:62:cb:db:1a:95:09:28: 6e:62:8d:75:bd:87:ce:95:43:c7:ee:fb:95:02:fd: d9:25:39:c8:21:fa:9d:2f:08:98:5c:26:be:a0:e9: 5b:12:23:81:6d:b4:80:84:61:53:61:ce:bd:a7:d0: 2d:55:8a:cb:e0:d1:60:6d:79:a8:26:a3:d9:86:b9: 08:0b:27:6c:26:cc:25:90:eb:9b:bb:62:af:07:70: 1f:d6:d1:d6:f7:28:fa:4d:ce:6c:94:43:79:af:08: c5:4b:e1:bd:90:11:03:15:61:7a:97:8c:3c:7a:4f: 09:7b:b7:e5:02:8e:3b:0c:33:37:ea:c0:5f:2d:ae: fe:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0A:E9:17:F2:25:62:E0:C8:BD:BE:BE:84:AB:EC:32:69:B0:6B:AC X509v3 Authority Key Identifier: keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:87:44:0f:bf:4b:3e:e6:cc:77:25:43:e6:c2:10:53:f3:92: ff:79:e8:9b:b0:d6:54:c8:85:1b:6d:ec:9e:88:71:37:b5:28: 63:27:c0:8e:3d:a8:81:47:20:66:ec:d0:1e:2a:bf:1b:42:c7: 0b:14:5d:c3:b3:54:fd:91:ef:3e:ed:7b:f4:62:be:7d:8d:60: b0:a5:f0:f5:e6:76:39:15:6f:2a:6f:06:7b:a6:c4:b0:dc:2a: bd:31:23:b2:69:44:bd:f1:75:0f:19:46:ee:fb:48:fa:9c:75: dc:b1:9d:0a:5a:37:f6:32:f7:d6:2b:0c:7c:a9:81:a4:bf:c8: 3d:92:dc:aa:ae:24:17:e1:45:38:e6:ad:5b:8f:7c:8b:9e:74: 89:55:c0:b7:69:a5:62:91:ab:03:fc:1b:8f:3e:46:b9:42:0f: 0b:bd:51:d6:c9:63:b8:17:2e:76:49:2b:7f:fd:58:5e:e5:9a: 7a:ce:a9:db:51:e1:89:3e:1a:02:5b:48:f6:2d:7c:a6:d0:fe: 0f:f3:d7:f5:17:fb:3c:80:6b:6e:4d:af:ac:03:3c:77:7a:52: b5:b2:e9:f6:58:cd:2c:bb:3f:57:4b:af:fd:66:82:de:bf:4d: 98:dd:15:9a:bb:ac:b4:de:45:7f:f3:9a:a3:94:fd:09:e7:fa: 89:01:c1:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00RYTwmGxw5JJGBCdrnSlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZDdmYzUwNTQ4Mjg3ZGVhZWE3Y2U5MjA5OWU0N2EwNGE3 MGQ0NTEwHhcNMjYwMTI1MTEwMTQxWhcNMjYwMTI2MTEwMTQxWjAzMTEwLwYDVQQD EyhhZDBhZTkxN2YyMjU2MmUwYzhiZGJlYmU4NGFiZWMzMjY5YjA2YmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96gZ3Fvdl7CBAUJKoj5IxLMaxNHB Qr8NTLV9PDYXnI7Rbo9WeyLf7wg+0IhrS8VrOY98f+7CWFkiBro70ure2m2asUls +A9nJFIhY4lO43E71I65zLDVOoBgtNocnfz7xLeOIV67xh1uFHG5pHKAkVgzTaDK Up8/PQqKMuPrbWLL2xqVCShuYo11vYfOlUPH7vuVAv3ZJTnIIfqdLwiYXCa+oOlb EiOBbbSAhGFTYc69p9AtVYrL4NFgbXmoJqPZhrkICydsJswlkOubu2KvB3Af1tHW 9yj6Tc5slEN5rwjFS+G9kBEDFWF6l4w8ek8Je7flAo47DDM36sBfLa7+cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0K6RfyJWLgyL2+voSr7DJpsGusMB8GA1UdIwQY MBaAFNvX/FBUgoferqfOkgmeR6BKcNRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjlmOFVGU0NoOTZ1cDg2U0NaNUhvRXB3MUZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82MDZlYTktNDgzNC00YjYzLTllMGEt ZjI1NjA0YzRiZTgyLzEvMjlmOFVGU0NoOTZ1cDg2U0NaNUhvRXB3MUZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS82MDZlYTktNDgzNC00YjYzLTllMGEtZjI1NjA0YzRiZTgy LzEvMjlmOFVGU0NoOTZ1cDg2U0NaNUhvRXB3MUZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIdED79L PubMdyVD5sIQU/OS/3nom7DWVMiFG23snohxN7UoYyfAjj2ogUcgZuzQHiq/G0LH CxRdw7NU/ZHvPu179GK+fY1gsKXw9eZ2ORVvKm8Ge6bEsNwqvTEjsmlEvfF1DxlG 7vtI+px13LGdClo39jL31isMfKmBpL/IPZLcqq4kF+FFOOatW498i550iVXAt2ml YpGrA/wbjz5GuUIPC71R1sljuBcudkkrf/1YXuWaes6p21HhiT4aAltI9i18ptD+ D/PX9Rf7PIBrbk2vrAM8d3pStbLp9ljNLLs/V0uv/WaC3r9NmN0VmrustN5Ff/Oa o5T9Cef6iQHBuA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:55:13 2026 by rpki-client