This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft File: Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft (raw, json) Hash identifier: 0zehvk+FmnYNE6zyGZc0rp/KaMAEHuWQ/m+9ATEcQEc= Subject key identifier: 83:B5:78:18:02:37:2F:7F:33:5F:3B:DC:9D:42:37:E9:9B:1D:85:D7 Authority key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C Certificate issuer: /CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c Certificate serial: 019BF72CEB779563F8AA3DC9ACC2973A91C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 22:01:14 +0000 Manifest this update: Sun 25 Jan 2026 22:01:14 +0000 Manifest next update: Mon 26 Jan 2026 22:01:14 +0000 Files and hashes: 1: Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl (hash: guyd7BFQTdsqKITDYuAFiIdG7TFnGBgKoEzv55hk8pU=) 2: dLnEEciYoxf4zHYKdVd3Cs6UXwE.roa (hash: fuSsuZb+gCHUO48DwmuXqWY4VCL5Q795gkNmczjB/Fk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:eb:77:95:63:f8:aa:3d:c9:ac:c2:97:3a:91:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c Validity Not Before: Jan 25 22:01:14 2026 GMT Not After : Jan 26 22:01:14 2026 GMT Subject: CN=83b5781802372f7f335f3bdc9d4237e99b1d85d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f5:be:6b:df:6b:f2:19:0d:ff:17:61:05:ee: 36:b7:6f:83:2e:22:31:f5:01:02:11:38:26:4b:e4: f8:e6:20:43:c2:8a:59:a0:da:15:6d:7a:cb:f2:ef: 42:b5:09:a4:f7:f6:1d:e0:c6:45:07:8f:a6:87:94: e1:d5:d8:38:a8:5e:31:35:d2:e4:fd:55:85:5b:11: 73:5e:d8:5d:dd:e7:1c:65:8f:4e:b9:55:5d:79:47: cf:d2:df:34:92:d4:aa:1e:bd:15:39:3a:bf:e4:2f: 07:63:22:aa:b9:14:dc:42:20:3d:0a:d2:a7:55:c2: 78:a7:14:ab:ce:7a:c6:f3:85:69:bd:fd:c5:23:1f: be:3d:e8:90:10:16:66:cc:04:70:df:12:2e:92:ba: ea:1b:3d:b6:2a:7e:9a:6b:ac:0a:ec:6b:0a:9a:e2: ef:04:89:f2:67:f4:df:41:52:ca:df:d4:42:06:63: 28:cd:ea:9b:fe:22:fc:58:c9:e5:e1:39:ac:ab:4f: b3:cb:69:55:8c:38:4d:f5:f0:98:0c:05:13:c7:22: 0f:67:b3:16:ce:15:5f:0a:44:0e:0a:8a:ca:96:51: 99:00:7d:32:88:fc:ee:1b:93:54:00:72:c8:b2:49: cf:fa:5d:1c:b1:b5:33:1e:95:03:5c:8a:f1:c3:84: 5a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B5:78:18:02:37:2F:7F:33:5F:3B:DC:9D:42:37:E9:9B:1D:85:D7 X509v3 Authority Key Identifier: keyid:0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:61:20:c4:68:96:01:09:f7:3b:cb:3a:c5:b4:31:6e:51:84: 81:0f:e6:9f:3c:b5:63:8b:23:af:35:2b:4c:b8:71:05:ed:e8: 59:23:8a:bc:b8:98:6c:52:4d:d4:42:1d:f4:bb:ca:dd:bd:c1: 54:fd:86:cb:5f:a0:88:86:e0:e5:7b:96:55:e0:b9:b2:90:f9: 3a:15:8f:e1:af:20:b7:6f:7c:6f:72:8e:0f:0e:ad:8d:72:6c: 10:fd:3e:e4:03:a6:2a:da:60:dd:bc:11:57:f0:ba:27:64:1c: 6a:72:cf:97:46:ed:89:38:88:c0:eb:5b:71:5e:27:55:da:a5: e0:0a:07:f9:b5:bf:68:8d:85:7f:e9:33:fa:a4:87:cb:3d:67: da:fb:9e:c2:7b:70:20:23:59:b9:95:f6:b5:98:2c:cd:91:7f: 4a:e2:cd:81:5a:e4:01:0d:d9:cc:eb:ac:98:0d:4b:39:ea:03: e4:72:e8:81:fa:6b:56:f7:50:d1:7f:5b:bc:1c:a1:80:95:f8: f5:09:bb:5f:cf:da:a3:1b:46:6e:f3:dd:70:4d:db:ee:7e:0f: fc:4e:08:98:fb:e7:36:0f:cd:ba:83:d3:27:a6:bf:9a:86:73: 94:3d:c0:18:05:15:07:f4:79:36:e8:0b:6f:8c:ea:6e:f3:e6: 71:83:87:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LOt3lWP4qj3JrMKXOpHIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmM2YxMzMyY2ZmMDViMjJhM2E2NmE2ZDRjMzQ4ZmJjMDFk ZTExNWMwHhcNMjYwMTI1MjIwMTE0WhcNMjYwMTI2MjIwMTE0WjAzMTEwLwYDVQQD Eyg4M2I1NzgxODAyMzcyZjdmMzM1ZjNiZGM5ZDQyMzdlOTliMWQ4NWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vW+a99r8hkN/xdhBe42t2+DLiIx 9QECETgmS+T45iBDwopZoNoVbXrL8u9CtQmk9/Yd4MZFB4+mh5Th1dg4qF4xNdLk /VWFWxFzXthd3eccZY9OuVVdeUfP0t80ktSqHr0VOTq/5C8HYyKquRTcQiA9CtKn VcJ4pxSrznrG84Vpvf3FIx++PeiQEBZmzARw3xIukrrqGz22Kn6aa6wK7GsKmuLv BInyZ/TfQVLK39RCBmMozeqb/iL8WMnl4Tmsq0+zy2lVjDhN9fCYDAUTxyIPZ7MW zhVfCkQOCorKllGZAH0yiPzuG5NUAHLIsknP+l0csbUzHpUDXIrxw4RaUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIO1eBgCNy9/M1873J1CN+mbHYXXMB8GA1UdIwQY MBaAFA8/EzLP8Fsio6ZqbUw0j7wB3hFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHo4VE1zX3dXeUtqcG1wdFREU1B2QUhlRVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81MjNiOTUtM2RkYy00ODE4LTkyNjUt ZGFhZjI5MjExOTQ5LzEvRHo4VE1zX3dXeUtqcG1wdFREU1B2QUhlRVZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi81MjNiOTUtM2RkYy00ODE4LTkyNjUtZGFhZjI5MjExOTQ5 LzEvRHo4VE1zX3dXeUtqcG1wdFREU1B2QUhlRVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2EgxGiW AQn3O8s6xbQxblGEgQ/mnzy1Y4sjrzUrTLhxBe3oWSOKvLiYbFJN1EId9LvK3b3B VP2Gy1+giIbg5XuWVeC5spD5OhWP4a8gt298b3KODw6tjXJsEP0+5AOmKtpg3bwR V/C6J2QcanLPl0btiTiIwOtbcV4nVdql4AoH+bW/aI2Ff+kz+qSHyz1n2vuewntw ICNZuZX2tZgszZF/SuLNgVrkAQ3ZzOusmA1LOeoD5HLogfprVvdQ0X9bvByhgJX4 9Qm7X8/aoxtGbvPdcE3b7n4P/E4ImPvnNg/NuoPTJ6a/moZzlD3AGAUVB/R5NugL b4zqbvPmcYOHbw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:46:24 2026 by rpki-client