This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft File: dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft (raw, json) Hash identifier: aWh/C2j12bZ2eV/Z4S2vp9TZWvhfC+7+QzGarAZ/VZ4= Subject key identifier: 79:B4:3A:86:5D:D9:0D:4F:F9:6D:8D:8F:72:62:12:0E:0F:B8:33:C8 Authority key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62 Certificate issuer: /CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62 Certificate serial: 019BF4D08D5065F67CE1768FB62C345E2606 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft Manifest number: 0ADE Signing time: Sun 25 Jan 2026 11:01:06 +0000 Manifest this update: Sun 25 Jan 2026 11:01:06 +0000 Manifest next update: Mon 26 Jan 2026 11:01:06 +0000 Files and hashes: 1: dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl (hash: HtRGVoeUCo0JFzjOPYU9f3bXq1iAwZkxw8Q8MSnq8QA=) 2: urvvaO540p5lCG-661I_LYSazhQ.roa (hash: OYiQT7PXJGef2AODl6kFsbHiALBw8riu/71BAiKYr70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:8d:50:65:f6:7c:e1:76:8f:b6:2c:34:5e:26:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62 Validity Not Before: Jan 25 11:01:06 2026 GMT Not After : Jan 26 11:01:06 2026 GMT Subject: CN=79b43a865dd90d4ff96d8d8f7262120e0fb833c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e7:13:95:31:fc:92:45:f6:cd:ca:75:9c:cb: 3c:18:ac:29:38:56:5a:d4:05:c3:9e:42:ae:00:d5: 41:16:16:c9:cd:6b:5d:60:3d:bc:60:55:b9:ad:09: e9:0e:9d:75:d5:ab:eb:05:93:e9:d9:e6:a9:b2:8e: 48:61:f6:46:9d:75:3f:66:41:1d:11:a8:6a:e9:56: 2a:f5:bf:06:85:94:0b:b6:24:18:80:ad:6c:fe:27: de:17:5e:91:3c:90:67:69:6c:e2:ba:0c:55:ed:47: b0:5e:f6:30:30:9a:2f:4e:ae:8e:bd:fd:1a:8e:f4: 91:64:b8:6d:7a:71:68:ab:d0:cf:63:bf:84:b0:f8: 5d:dc:fe:b5:01:aa:c2:ee:a1:90:3c:13:80:f0:ec: 75:ee:e3:e7:58:a7:7b:60:05:04:27:6a:fc:a6:ea: b5:6f:19:47:72:1e:67:62:e6:2c:0f:ae:ea:f8:6a: 00:09:30:b0:21:ea:13:d6:75:d2:c5:c5:09:7d:52: ec:15:93:b2:29:47:53:ae:4e:84:9f:26:9d:20:fe: 7d:bf:3d:0b:fa:25:17:d7:11:19:dc:60:38:a6:c8: 64:3c:ee:d4:56:f2:7d:c2:ed:c3:04:b7:6e:0e:d9: 1d:99:60:7e:25:8d:cc:d8:d6:cb:85:fa:59:e7:0a: bf:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B4:3A:86:5D:D9:0D:4F:F9:6D:8D:8F:72:62:12:0E:0F:B8:33:C8 X509v3 Authority Key Identifier: keyid:74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ee:8b:ba:83:00:56:3b:88:dc:58:79:dd:71:91:a2:31:ca: c5:dd:8d:ee:10:51:09:a8:6b:bc:66:80:be:42:c5:93:e7:24: 92:f8:4d:14:08:b1:fa:1c:0c:36:c5:08:ea:b1:f3:c2:2e:e1: 47:d3:7d:b9:f5:5f:40:4f:f7:bf:ca:68:7a:7d:91:cb:79:bc: 96:60:82:4b:0c:7d:bc:df:11:fc:68:96:2e:48:dc:99:35:b1: f9:e5:1f:f0:4c:9c:5a:7c:85:44:66:4d:fd:5f:3f:76:42:9d: 8d:41:c5:68:f7:26:f5:86:fe:13:01:d5:9d:65:1d:27:ff:f9: c0:44:56:27:2b:9d:b4:18:93:67:dd:17:7b:4d:01:05:3e:d3: bc:5a:5d:a6:2e:0b:4a:36:18:a0:5f:ef:bb:2f:b8:bb:6c:ff: 5d:9c:51:68:a9:5f:d6:01:62:b7:c6:35:dc:83:46:4a:5d:47: 1d:23:16:40:4a:85:d4:91:07:40:d0:80:31:d1:98:c8:1b:d2: 80:ac:4b:a6:1d:bf:41:3f:47:f2:97:7b:cf:ef:e6:16:c7:69: fc:56:8a:f8:2d:53:4f:d4:36:61:aa:ea:c0:f8:42:b2:8a:23: 3c:b7:e9:84:ae:b5:fb:88:91:96:23:5b:31:99:db:8e:23:cd: 37:ff:3f:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00I1QZfZ84XaPtiw0XiYGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YmYwN2YwNGNjNzZhOTBhZDk3ZjlmMTc0OWZhYmNmMDVj MzVkNjIwHhcNMjYwMTI1MTEwMTA2WhcNMjYwMTI2MTEwMTA2WjAzMTEwLwYDVQQD Eyg3OWI0M2E4NjVkZDkwZDRmZjk2ZDhkOGY3MjYyMTIwZTBmYjgzM2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOcTlTH8kkX2zcp1nMs8GKwpOFZa 1AXDnkKuANVBFhbJzWtdYD28YFW5rQnpDp111avrBZPp2eapso5IYfZGnXU/ZkEd Eahq6VYq9b8GhZQLtiQYgK1s/ifeF16RPJBnaWziugxV7UewXvYwMJovTq6Ovf0a jvSRZLhtenFoq9DPY7+EsPhd3P61AarC7qGQPBOA8Ox17uPnWKd7YAUEJ2r8puq1 bxlHch5nYuYsD67q+GoACTCwIeoT1nXSxcUJfVLsFZOyKUdTrk6EnyadIP59vz0L +iUX1xEZ3GA4pshkPO7UVvJ9wu3DBLduDtkdmWB+JY3M2NbLhfpZ5wq/vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHm0OoZd2Q1P+W2Nj3JiEg4PuDPIMB8GA1UdIwQY MBaAFHS/B/BMx2qQrZf58XSfq88Fw11iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hMGIzOTUtNjFmZi00NTdkLThmZjgt ZWMwODQxMzdlMjQyLzEvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hMGIzOTUtNjFmZi00NTdkLThmZjgtZWMwODQxMzdlMjQy LzEvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+6LuoMA VjuI3Fh53XGRojHKxd2N7hBRCahrvGaAvkLFk+ckkvhNFAix+hwMNsUI6rHzwi7h R9N9ufVfQE/3v8poen2Ry3m8lmCCSwx9vN8R/GiWLkjcmTWx+eUf8EycWnyFRGZN /V8/dkKdjUHFaPcm9Yb+EwHVnWUdJ//5wERWJyudtBiTZ90Xe00BBT7TvFpdpi4L SjYYoF/vuy+4u2z/XZxRaKlf1gFit8Y13INGSl1HHSMWQEqF1JEHQNCAMdGYyBvS gKxLph2/QT9H8pd7z+/mFsdp/FaK+C1TT9Q2YarqwPhCsoojPLfphK61+4iRliNb MZnbjiPNN/8/sQ== -----END CERTIFICATE-----Generated at Sun Jan 25 18:57:43 2026 by rpki-client