This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json) Hash identifier: S59/185u8GU3x/M2DHOHElGeS/I4R2BmYkvqR4fqocg= Subject key identifier: EF:C4:33:24:38:94:97:A5:D8:CB:CE:A1:41:2B:83:87:5E:6A:A7:3D Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a Certificate serial: 019BF57578CBEF57338DD5CA4FA0749E3092 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft Manifest number: 084F Signing time: Sun 25 Jan 2026 14:01:15 +0000 Manifest this update: Sun 25 Jan 2026 14:01:15 +0000 Manifest next update: Mon 26 Jan 2026 14:01:15 +0000 Files and hashes: 1: DQYoTEX-x8cjYmvb3bOaTtlqK-o.roa (hash: kvQYDQBkZ3WehVJeMmEkmsNV2/eI8PigHmwQeG9g+Eg=) 2: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: PwqeYgzF/MmQUSfbrwSuTfMlsMojqjVuKOn/qHFKq3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:78:cb:ef:57:33:8d:d5:ca:4f:a0:74:9e:30:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a Validity Not Before: Jan 25 14:01:15 2026 GMT Not After : Jan 26 14:01:15 2026 GMT Subject: CN=efc43324389497a5d8cbcea1412b83875e6aa73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:16:d2:58:98:4b:2b:36:06:ba:7d:f1:54:08: ab:22:5d:1f:01:8d:47:41:17:84:1e:07:76:b1:56: 26:3a:81:31:78:de:82:60:60:a4:b9:1f:f5:74:24: 2c:72:f1:7e:37:4b:81:44:63:ab:68:09:ac:d9:5c: e6:26:80:84:01:f5:86:8a:26:b8:d2:0a:07:75:7b: ef:e8:9d:9d:ad:6c:bf:70:82:23:6e:1f:f7:e0:de: f2:98:1d:16:ce:cb:18:ae:52:fe:c7:dd:54:07:b9: 22:14:95:cf:6c:89:67:1e:34:3b:3a:4a:36:6b:56: ac:0e:5e:28:1b:31:82:69:f5:4f:05:07:a4:b3:ab: 2b:7d:11:e9:9d:04:72:47:07:e8:16:cc:54:6c:aa: 6e:41:df:1d:0b:6b:c2:de:54:04:3f:d0:dd:e4:2f: c6:0d:83:b2:13:51:6d:fd:0f:0d:34:b7:a0:5b:30: b8:ea:63:42:37:71:c2:6c:0d:f1:7c:bb:5e:cc:89: 52:de:0a:d6:ec:42:6f:c2:bd:85:82:9d:3a:1f:b2: 60:3d:ff:c0:89:6d:af:6f:2f:9e:24:cb:3c:ab:cc: 25:9a:f0:41:ca:66:57:65:2e:a8:27:a6:06:c9:7c: a9:8d:8b:82:8e:9e:a9:e4:92:03:c4:e0:3f:a4:09: 95:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C4:33:24:38:94:97:A5:D8:CB:CE:A1:41:2B:83:87:5E:6A:A7:3D X509v3 Authority Key Identifier: keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:22:0c:13:f1:c8:e6:b3:21:31:28:c8:2e:83:e8:a3:87:9a: 51:76:da:d7:9b:a3:9a:ea:14:64:47:56:e4:ae:1d:a7:92:4a: 64:de:5a:f1:1f:8b:81:62:3d:e5:18:00:1c:45:c0:c1:0e:de: 83:5e:a8:fd:1a:ba:34:36:e4:17:09:a6:9b:74:e3:d2:5f:f6: c8:f3:9c:ef:1e:48:81:12:cd:9a:15:99:71:0b:cb:a4:9a:66: bf:fd:ed:eb:1f:8b:99:50:a6:fb:d3:67:65:75:0b:f0:ba:48: 82:bc:5e:dc:f7:2d:4d:8e:94:82:99:9c:43:a5:c2:35:a1:b0: 2d:bf:fe:23:da:21:7c:3a:17:1c:b3:d3:e7:54:57:36:14:54: 00:d2:b9:55:ef:54:9b:54:b8:eb:c3:e5:16:d8:63:19:8a:6b: 02:ba:3d:47:3d:4a:08:db:39:5d:01:51:e5:fd:07:98:e5:5d: 3e:e8:4e:d2:19:93:3c:44:1d:95:6f:3a:8b:65:4c:a7:3a:f4: f8:41:ee:64:07:c1:d7:7f:c0:86:a0:1b:4b:97:ca:8a:6d:1b: d4:e1:e0:d4:e0:2a:16:f3:c7:9d:9c:5e:6b:b4:36:1e:a9:94: 53:fa:7b:19:9b:fe:ae:f2:81:d3:07:dc:4b:08:68:76:f9:68: 07:6b:00:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dXjL71czjdXKT6B0njCSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjM2FiNTVkNTc1MDljYmZhZTc5OGJkNzFhYWEyM2IzNDQ0 ZDhlNWEwHhcNMjYwMTI1MTQwMTE1WhcNMjYwMTI2MTQwMTE1WjAzMTEwLwYDVQQD EyhlZmM0MzMyNDM4OTQ5N2E1ZDhjYmNlYTE0MTJiODM4NzVlNmFhNzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xbSWJhLKzYGun3xVAirIl0fAY1H QReEHgd2sVYmOoExeN6CYGCkuR/1dCQscvF+N0uBRGOraAms2VzmJoCEAfWGiia4 0goHdXvv6J2drWy/cIIjbh/34N7ymB0WzssYrlL+x91UB7kiFJXPbIlnHjQ7Oko2 a1asDl4oGzGCafVPBQeks6srfRHpnQRyRwfoFsxUbKpuQd8dC2vC3lQEP9Dd5C/G DYOyE1Ft/Q8NNLegWzC46mNCN3HCbA3xfLtezIlS3grW7EJvwr2Fgp06H7JgPf/A iW2vby+eJMs8q8wlmvBBymZXZS6oJ6YGyXypjYuCjp6p5JIDxOA/pAmVAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/EMyQ4lJel2MvOoUErg4deaqc9MB8GA1UdIwQY MBaAFPw6tV1XUJy/rnmL1xqqI7NETY5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYt MGM0NTIxOGU3OTgxLzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYtMGM0NTIxOGU3OTgx LzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECIME/HI 5rMhMSjILoPoo4eaUXba15ujmuoUZEdW5K4dp5JKZN5a8R+LgWI95RgAHEXAwQ7e g16o/Rq6NDbkFwmmm3Tj0l/2yPOc7x5IgRLNmhWZcQvLpJpmv/3t6x+LmVCm+9Nn ZXUL8LpIgrxe3PctTY6UgpmcQ6XCNaGwLb/+I9ohfDoXHLPT51RXNhRUANK5Ve9U m1S468PlFthjGYprAro9Rz1KCNs5XQFR5f0HmOVdPuhO0hmTPEQdlW86i2VMpzr0 +EHuZAfB13/AhqAbS5fKim0b1OHg1OAqFvPHnZxea7Q2HqmUU/p7GZv+rvKB0wfc SwhodvloB2sAGA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:35:06 2026 by rpki-client