This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft File: DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft (raw, json) Hash identifier: YBo2VjzE/nyTnH8N+CweQa+I8f4eAZ8GtRqSFkEGyKQ= Subject key identifier: 03:C0:3B:A8:98:5B:8C:41:03:EB:03:33:0A:97:24:69:51:28:94:B3 Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C Certificate issuer: /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c Certificate serial: 019BF27428DBE0D8EA419F15A5F966FEBEA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 00:00:57 +0000 Manifest this update: Sun 25 Jan 2026 00:00:57 +0000 Manifest next update: Mon 26 Jan 2026 00:00:57 +0000 Files and hashes: 1: D32i6_dCWTSsyvln6Op_fVc7ifQ.roa (hash: Al7b3A0tyoRmZ6j5Fdgg5aD1e2Ddf8niF7ufLQSci6A=) 2: DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl (hash: P7Y2mChAy3z8AySO3km6l+6sZGVOjT/Q+FBw2iyKjKc=) 3: cRdmmZiNILryID4MaoZH-egP0Pc.roa (hash: Tc3P5pw52D848VbuoEwG61qEEaFgbEGdqefrzUmOWZA=) 4: dO_oeTKff3dNZT_GL6N0iMSDLeA.roa (hash: U9kjCpU+QQfnTA2jCeD/iAdC4QIXldj/AsRqVA98Jco=) 5: hKslTlGWTrYnNFRq7nm02w7iSks.roa (hash: hx/Lg8Qct01wevwfLicpLCIZWwNva1xX/icDKHDKOOo=) 6: qsPJeU-C_65tmjEWpGQYQUIEajo.roa (hash: 1cn7hAG7OagxW4P/nzGgq4cV1HKNDko3iBj1s+1Q88U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:74:28:db:e0:d8:ea:41:9f:15:a5:f9:66:fe:be:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c Validity Not Before: Jan 25 00:00:57 2026 GMT Not After : Jan 26 00:00:57 2026 GMT Subject: CN=03c03ba8985b8c4103eb03330a972469512894b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8b:dc:b9:cb:8a:c1:33:d7:31:8d:3d:b3:9d: 84:93:e1:9c:1f:ef:fe:6c:28:ae:77:eb:b9:a9:d1: 85:3e:97:90:6f:9e:da:ae:e1:20:34:b2:ee:43:ad: a8:29:d3:7e:d0:72:3c:20:8d:e1:b8:e5:3b:28:91: f6:dc:b1:73:6e:e7:b5:c3:c2:3a:33:81:15:f1:44: 88:de:57:41:eb:6b:00:4b:46:7e:2a:85:bd:91:57: 20:6b:2e:e4:ec:af:8d:63:63:df:af:19:2e:4f:27: 93:ae:57:81:9e:d3:77:ca:ed:ea:ac:a2:fb:0e:b9: 9f:67:48:9c:f3:44:28:e8:fe:53:df:21:c9:21:94: 6c:d3:8d:0c:75:3f:f6:41:1e:d8:9c:4d:8f:21:2f: 71:84:2e:56:f0:7b:36:58:4f:aa:19:dc:d0:0c:49: a5:8d:55:fb:78:6f:08:d5:2f:8f:9d:89:7a:4f:d3: bf:e1:bd:d0:a8:f9:32:ce:eb:58:5b:33:8e:d7:dc: 8f:97:42:aa:e3:05:8e:4b:40:9d:6c:31:e1:89:47: e5:02:7c:6e:25:f4:d8:35:69:d4:b4:fd:8a:6c:14: 6e:2b:5a:10:4e:1f:f3:16:d9:d8:ca:78:0b:38:08: c4:75:08:4c:14:88:83:b6:71:16:df:1e:41:3a:66: 35:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C0:3B:A8:98:5B:8C:41:03:EB:03:33:0A:97:24:69:51:28:94:B3 X509v3 Authority Key Identifier: keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:2b:86:68:c9:3e:90:cd:43:d1:98:d1:e9:b1:85:99:2d:53: fe:4a:3a:51:f4:fc:4d:a0:a8:dc:67:40:0a:45:08:77:d5:7f: d4:80:96:1e:68:0c:51:98:ca:6f:ed:71:7a:36:50:f4:5e:26: dc:ad:2c:41:fd:8d:68:98:69:6d:4d:71:86:51:70:e1:46:2a: c1:97:a5:b9:35:eb:8b:c6:3a:66:e4:50:c9:a6:55:e2:13:94: 9e:65:92:6e:07:92:9a:76:ae:bb:d6:57:69:ad:90:13:9d:40: d7:d6:ec:c1:1d:b1:78:36:f3:73:75:29:04:85:b2:9c:12:c8: d0:35:9d:f4:a6:2c:48:dc:c6:95:02:15:00:4e:a5:df:92:db: 94:a6:23:b6:7f:35:bc:a5:66:4d:6c:9b:75:7f:a4:d2:ea:20: a1:0f:ef:f2:60:7b:bb:75:17:2c:c8:b3:26:a2:dc:43:a0:61: df:8a:4f:cf:e2:2a:30:d0:eb:37:68:6f:64:f6:1a:84:b9:c1: 29:ee:7c:be:44:d4:e9:06:5b:81:6e:0e:cb:c7:f9:c8:e5:8f: ea:ac:4a:d5:8e:99:9b:ca:af:03:d6:51:22:2e:e6:5f:02:56: 93:97:25:08:39:d0:2e:63:f6:30:6e:3b:59:7a:e4:35:e5:94: 06:0c:ec:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvydCjb4NjqQZ8Vpflm/r6oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMGIwZGNiNmFkMGNhODE2ZDJiZDIwNGUxM2YxZWFmMTEw NDI3NGMwHhcNMjYwMTI1MDAwMDU3WhcNMjYwMTI2MDAwMDU3WjAzMTEwLwYDVQQD EygwM2MwM2JhODk4NWI4YzQxMDNlYjAzMzMwYTk3MjQ2OTUxMjg5NGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YvcucuKwTPXMY09s52Ek+GcH+/+ bCiud+u5qdGFPpeQb57aruEgNLLuQ62oKdN+0HI8II3huOU7KJH23LFzbue1w8I6 M4EV8USI3ldB62sAS0Z+KoW9kVcgay7k7K+NY2PfrxkuTyeTrleBntN3yu3qrKL7 DrmfZ0ic80Qo6P5T3yHJIZRs040MdT/2QR7YnE2PIS9xhC5W8Hs2WE+qGdzQDEml jVX7eG8I1S+PnYl6T9O/4b3QqPkyzutYWzOO19yPl0Kq4wWOS0CdbDHhiUflAnxu JfTYNWnUtP2KbBRuK1oQTh/zFtnYyngLOAjEdQhMFIiDtnEW3x5BOmY1HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPAO6iYW4xBA+sDMwqXJGlRKJSzMB8GA1UdIwQY MBaAFA4LDctq0MqBbSvSBOE/Hq8RBCdMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMt N2ZlMzk1MWE3MzViLzEvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMtN2ZlMzk1MWE3MzVi LzEvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXyuGaMk+ kM1D0ZjR6bGFmS1T/ko6UfT8TaCo3GdACkUId9V/1ICWHmgMUZjKb+1xejZQ9F4m 3K0sQf2NaJhpbU1xhlFw4UYqwZeluTXri8Y6ZuRQyaZV4hOUnmWSbgeSmnauu9ZX aa2QE51A19bswR2xeDbzc3UpBIWynBLI0DWd9KYsSNzGlQIVAE6l35LblKYjtn81 vKVmTWybdX+k0uogoQ/v8mB7u3UXLMizJqLcQ6Bh34pPz+IqMNDrN2hvZPYahLnB Ke58vkTU6QZbgW4Oy8f5yOWP6qxK1Y6Zm8qvA9ZRIi7mXwJWk5clCDnQLmP2MG47 WXrkNeWUBgzslw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:27:33 2026 by rpki-client