This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft File: dixgr01zclhFzq8Le1hed1cGaWU.mft (raw, json) Hash identifier: gbHXI6zMctnDRlwqfNt8MfMq+TALtvK/O8cLQ1lM1KE= Subject key identifier: 64:14:FF:AE:43:D8:FA:B0:A7:12:1B:45:A4:79:EB:C0:EC:3C:22:72 Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65 Certificate issuer: /CN=762c60af4d73725845ceaf0b7b585e7757066965 Certificate serial: 019BF651171D483D57D9948B529D237769EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 18:01:07 +0000 Manifest this update: Sun 25 Jan 2026 18:01:07 +0000 Manifest next update: Mon 26 Jan 2026 18:01:07 +0000 Files and hashes: 1: 13ja1cIxS4cK0b0RY3CC1WL6GYs.roa (hash: c+J6Q65ZscwsVoYSvT1zs/WDV1dPfYCmK+qupBgYe50=) 2: 9OSGu-CL3eoRiBIUAPN11BJFt2o.roa (hash: jKTEcw4I25lyqC0/LKz20znUmkmfgUVEV6D5UsdJUAo=) 3: RtgqAojptg3yfsTJ-oga_8isRto.roa (hash: eyQYoF7t82yY3YtM/1jPPLvEjYoo8YlLinObPAQcXHA=) 4: X6IQ-q68Lu6Sm7ozgn09iKo2xDc.roa (hash: 1oM0JFaG4XNcO5zFMn1eRQw1lAJ0Or0fahaPut34poU=) 5: _1hB8H52OK9tZ7oTDVioeT82qgM.roa (hash: 7T2hoZDj4U/8s/AFME6VJZzf9NWdP3HcXbeV7H9Xusw=) 6: dixgr01zclhFzq8Le1hed1cGaWU.crl (hash: z+UODf4TilZuNTrbfPlK3Y504Le878P5rD6zPNO5geU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:17:1d:48:3d:57:d9:94:8b:52:9d:23:77:69:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965 Validity Not Before: Jan 25 18:01:07 2026 GMT Not After : Jan 26 18:01:07 2026 GMT Subject: CN=6414ffae43d8fab0a7121b45a479ebc0ec3c2272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:53:09:e8:81:56:5e:fd:19:81:0f:36:8b:b4: 07:82:9d:35:78:c6:29:19:6b:02:b1:3c:b8:32:65: 70:31:63:1b:6f:40:d5:5a:75:da:94:46:25:26:6b: 8c:20:b9:11:1e:f5:0c:60:f9:26:15:a0:10:a4:7b: b4:b4:e0:c2:36:99:ab:77:8f:fe:19:56:43:d8:19: 5a:7f:26:64:e8:66:be:79:16:59:fe:05:41:25:60: 28:9b:14:8f:8d:ab:d0:92:87:25:74:db:a5:01:30: 07:2e:1d:67:9e:dc:55:e1:a9:d2:58:be:d6:43:ab: 05:6e:8d:0b:ed:b7:b0:0e:12:6c:7a:5c:a9:a5:77: ac:d7:a1:e2:13:08:44:7f:f2:2b:71:14:f6:39:56: cc:df:4d:96:66:7e:7b:aa:09:72:e3:04:17:58:3c: 60:9e:d7:cf:a6:42:76:e4:b2:1e:8a:ac:82:59:70: 4b:cc:53:3c:a8:ec:c4:cf:3e:7d:f4:d4:f3:10:09: 94:66:7c:ef:d2:d2:e3:ed:89:0d:7e:48:75:17:02: e5:b4:fc:7a:33:a3:4b:32:f4:a1:2f:57:ff:d9:b8: a5:1f:22:76:42:62:ed:f7:db:0d:d7:15:c7:7a:d8: 82:92:ee:27:e4:10:1b:62:56:39:8b:42:38:31:28: 7e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:14:FF:AE:43:D8:FA:B0:A7:12:1B:45:A4:79:EB:C0:EC:3C:22:72 X509v3 Authority Key Identifier: keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:4f:0c:0e:c3:3d:4a:1c:cf:83:84:6f:e6:6f:f6:d7:7e:66: 06:ad:9f:b2:5e:5e:a4:d1:2a:c0:6f:88:55:b5:03:d2:0a:91: 8c:2e:75:a1:de:f4:37:1a:99:94:fb:05:14:67:7b:10:f3:f1: b1:9d:82:26:88:d8:0f:26:34:39:21:cc:ff:0b:2e:45:73:0f: df:53:dd:83:70:37:d2:bd:a3:e4:bf:f5:dc:1d:47:58:cf:9c: c8:5b:a6:82:19:37:35:23:7a:5b:98:a1:25:5d:cd:6a:6d:ce: 32:5b:f8:18:b4:9a:58:71:0b:58:92:f6:f6:03:f3:5b:02:44: 68:de:ea:90:d8:ae:b5:3f:b3:45:52:7d:3f:21:cb:27:9a:45: f1:c8:42:09:47:3f:8a:c9:8b:05:20:f1:67:67:6e:42:04:87: b7:d9:f6:36:32:e8:f9:63:d9:ad:f8:7d:68:94:13:6c:6f:d7: b5:26:81:92:69:1a:24:1c:ef:a6:ce:6f:7f:22:7a:77:f1:15: 83:e5:87:74:fd:bb:ca:15:5a:02:e8:5b:95:46:21:be:b2:e7: f5:fd:af:2e:f8:8d:33:28:56:2e:9a:ef:d9:db:1d:12:9c:75: 55:21:65:bd:b5:04:e6:6a:91:ed:d4:04:a0:b3:10:d6:e3:b6: 84:03:ee:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2URcdSD1X2ZSLUp0jd2nvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MmM2MGFmNGQ3MzcyNTg0NWNlYWYwYjdiNTg1ZTc3NTcw NjY5NjUwHhcNMjYwMTI1MTgwMTA3WhcNMjYwMTI2MTgwMTA3WjAzMTEwLwYDVQQD Eyg2NDE0ZmZhZTQzZDhmYWIwYTcxMjFiNDVhNDc5ZWJjMGVjM2MyMjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VMJ6IFWXv0ZgQ82i7QHgp01eMYp GWsCsTy4MmVwMWMbb0DVWnXalEYlJmuMILkRHvUMYPkmFaAQpHu0tODCNpmrd4/+ GVZD2BlafyZk6Ga+eRZZ/gVBJWAomxSPjavQkocldNulATAHLh1nntxV4anSWL7W Q6sFbo0L7bewDhJselyppXes16HiEwhEf/IrcRT2OVbM302WZn57qgly4wQXWDxg ntfPpkJ25LIeiqyCWXBLzFM8qOzEzz599NTzEAmUZnzv0tLj7YkNfkh1FwLltPx6 M6NLMvShL1f/2bilHyJ2QmLt99sN1xXHetiCku4n5BAbYlY5i0I4MSh+7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQU/65D2PqwpxIbRaR568DsPCJyMB8GA1UdIwQY MBaAFHYsYK9Nc3JYRc6vC3tYXndXBmllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNmEwMmUtMDE0Ni00NGE2LTlkZmMt ZDQyMDlmYzdmM2M5LzEvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9lNmEwMmUtMDE0Ni00NGE2LTlkZmMtZDQyMDlmYzdmM2M5 LzEvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX08MDsM9 ShzPg4Rv5m/2135mBq2fsl5epNEqwG+IVbUD0gqRjC51od70NxqZlPsFFGd7EPPx sZ2CJojYDyY0OSHM/wsuRXMP31Pdg3A30r2j5L/13B1HWM+cyFumghk3NSN6W5ih JV3Nam3OMlv4GLSaWHELWJL29gPzWwJEaN7qkNiutT+zRVJ9PyHLJ5pF8chCCUc/ ismLBSDxZ2duQgSHt9n2NjLo+WPZrfh9aJQTbG/XtSaBkmkaJBzvps5vfyJ6d/EV g+WHdP27yhVaAuhblUYhvrLn9f2vLviNMyhWLprv2dsdEpx1VSFlvbUE5mqR7dQE oLMQ1uO2hAPuug== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:17 2026 by rpki-client