This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json) Hash identifier: bKZgPIugT30hyEMapyvFZkA4eDb/2nnZAKiBSd6N3Us= Subject key identifier: A5:D3:11:ED:2C:B4:0A:ED:BD:24:D3:7E:1B:27:80:3A:D5:CC:9B:D7 Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96 Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496 Certificate serial: 019BF3F592664DAFFEF720557D97DE7F3D69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 07:01:55 +0000 Manifest this update: Sun 25 Jan 2026 07:01:55 +0000 Manifest next update: Mon 26 Jan 2026 07:01:55 +0000 Files and hashes: 1: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: 3RvgZOqcAn9C9QoRsJMYuLS/CoJ7uKgJh3y5Lh8kaf0=) 2: qMa40C2bwbsuAhlKHVj7zBev3Sk.roa (hash: Q1yI4h86YGsQR3DwWZlfSBoYmM0cIR/AXm0wW8+aF5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:92:66:4d:af:fe:f7:20:55:7d:97:de:7f:3d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496 Validity Not Before: Jan 25 07:01:55 2026 GMT Not After : Jan 26 07:01:55 2026 GMT Subject: CN=a5d311ed2cb40aedbd24d37e1b27803ad5cc9bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ef:3e:c6:a2:90:50:95:11:7d:1f:74:1e:e9: 8c:e8:8b:2f:ed:e3:cd:3f:a1:b9:23:3c:34:a3:4f: a0:5d:d3:92:b8:f9:99:c9:e4:5a:b7:4a:e3:fa:ba: 54:f2:73:d2:a4:88:c4:40:2d:ed:df:54:9e:0c:08: c8:80:b9:19:5f:e5:5b:fd:bb:5d:ae:67:cf:fe:1d: 77:b1:87:04:53:a1:12:74:d0:8e:8e:fe:da:a0:d8: 9e:6b:40:cb:dc:40:8c:d8:25:e8:3a:42:dd:7d:08: 60:dd:93:1b:45:cc:3c:b3:bb:90:56:7e:5f:0e:ab: 0c:12:81:65:ae:37:83:b1:5c:fa:b1:b2:0e:a6:1e: e0:b1:db:0f:55:6a:d2:55:a7:5b:c9:d9:1b:e3:39: 36:37:47:db:9b:bb:d5:78:00:c7:88:ed:5f:ea:ba: 79:6c:b2:42:5d:ee:41:03:5e:1a:53:f0:e1:68:dd: d8:8c:41:e0:66:d0:45:8c:e6:f1:89:0c:2e:29:ef: b0:de:a2:51:78:f5:d2:31:fe:3e:15:aa:c6:c0:1d: c3:b2:ba:9d:2f:22:0d:1b:7c:1d:a7:21:75:f7:fc: 4b:39:4c:d4:dd:8a:e1:c1:8c:ce:09:87:11:ba:68: 6a:d4:87:60:5d:a5:17:fb:fb:5e:59:26:83:56:58: 23:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D3:11:ED:2C:B4:0A:ED:BD:24:D3:7E:1B:27:80:3A:D5:CC:9B:D7 X509v3 Authority Key Identifier: keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:c3:80:64:b8:e4:7f:70:a1:87:77:74:a9:b3:92:38:5a:05: 99:1d:3d:b2:cc:35:5b:50:85:53:4b:9f:f2:f8:7a:39:37:58: ca:ee:9b:98:37:13:0e:64:e0:13:70:57:98:86:c6:04:38:88: 3b:3f:8e:90:96:c9:84:86:97:01:d8:13:0f:ec:95:b0:fb:a1: 70:b3:a4:91:6f:d7:07:bc:94:cf:86:86:d2:b4:d0:b1:c9:95: bf:ae:9a:82:88:a2:7f:f4:43:dc:ac:ad:7f:24:7a:43:bc:1d: 86:7a:9f:c1:84:53:89:e1:a3:eb:60:8b:e3:8c:52:a3:96:d6: 73:33:f8:d4:05:78:25:5b:6f:33:9e:1d:88:e0:f3:4b:cb:8d: e1:1d:f3:ef:48:b1:d7:0e:a1:d5:a2:4f:88:00:20:1f:c7:1b: bf:97:06:61:75:69:9f:64:1a:fb:03:11:ed:3e:11:9d:dd:db: 42:f0:32:b5:f1:d2:0b:04:09:6f:0d:42:55:fb:05:81:90:53: 9e:0a:8e:0c:42:2d:2f:98:b8:5f:81:8e:d0:dd:f7:39:e7:d7: 05:93:f3:ff:a4:51:7c:f2:b1:00:1b:ef:69:df:99:6f:c6:be: c7:b6:6b:d4:2e:d0:cd:0a:e3:c4:f7:62:d8:7f:b0:56:b1:62: b0:f7:29:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9ZJmTa/+9yBVfZfefz1pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MTA3MjkyMGQ4YzlhMmI0MGViM2EwNDVmMWYyYTZlMzM0 YTQ0OTYwHhcNMjYwMTI1MDcwMTU1WhcNMjYwMTI2MDcwMTU1WjAzMTEwLwYDVQQD EyhhNWQzMTFlZDJjYjQwYWVkYmQyNGQzN2UxYjI3ODAzYWQ1Y2M5YmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe8+xqKQUJURfR90HumM6Isv7ePN P6G5Izw0o0+gXdOSuPmZyeRat0rj+rpU8nPSpIjEQC3t31SeDAjIgLkZX+Vb/btd rmfP/h13sYcEU6ESdNCOjv7aoNiea0DL3ECM2CXoOkLdfQhg3ZMbRcw8s7uQVn5f DqsMEoFlrjeDsVz6sbIOph7gsdsPVWrSVadbydkb4zk2N0fbm7vVeADHiO1f6rp5 bLJCXe5BA14aU/DhaN3YjEHgZtBFjObxiQwuKe+w3qJRePXSMf4+FarGwB3Dsrqd LyING3wdpyF19/xLOUzU3YrhwYzOCYcRumhq1IdgXaUX+/teWSaDVlgj2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXTEe0stArtvSTTfhsngDrVzJvXMB8GA1UdIwQY MBaAFHcQcpINjJorQOs6BF8fKm4zSkSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHhCeWtnMk1taXRBNnpvRVh4OHFiak5LUkpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC85ZWMxMzQtZjA0Zi00NDIzLThiZTUt N2Y1ZTE3NTlmODRlLzEvZHhCeWtnMk1taXRBNnpvRVh4OHFiak5LUkpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC85ZWMxMzQtZjA0Zi00NDIzLThiZTUtN2Y1ZTE3NTlmODRl LzEvZHhCeWtnMk1taXRBNnpvRVh4OHFiak5LUkpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMOAZLjk f3Chh3d0qbOSOFoFmR09ssw1W1CFU0uf8vh6OTdYyu6bmDcTDmTgE3BXmIbGBDiI Oz+OkJbJhIaXAdgTD+yVsPuhcLOkkW/XB7yUz4aG0rTQscmVv66agoiif/RD3Kyt fyR6Q7wdhnqfwYRTieGj62CL44xSo5bWczP41AV4JVtvM54diODzS8uN4R3z70ix 1w6h1aJPiAAgH8cbv5cGYXVpn2Qa+wMR7T4Rnd3bQvAytfHSCwQJbw1CVfsFgZBT ngqODEItL5i4X4GO0N33OefXBZPz/6RRfPKxABvvad+Zb8a+x7Zr1C7QzQrjxPdi 2H+wVrFisPcpXA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:27:03 2026 by rpki-client