This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json) Hash identifier: ENoIfWPzlEG3KAVix3okN2/TPw1t8rXrtcC/zJaYn2s= Subject key identifier: 7D:57:98:5C:58:7B:5E:6D:AE:A2:E5:C9:2D:02:65:74:AE:07:D8:F6 Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25 Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725 Certificate serial: 019BF6F585D47CE910372A7FC392173D94DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft Manifest number: 17FD Signing time: Sun 25 Jan 2026 21:00:44 +0000 Manifest this update: Sun 25 Jan 2026 21:00:44 +0000 Manifest next update: Mon 26 Jan 2026 21:00:44 +0000 Files and hashes: 1: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: wQ03Iyl6QFZj97bHhQ50xOb6i/QRoc1221LI1UlVRKM=) 2: Rn6gBvYPX3hQXv1hSbp5uIqfLTU.roa (hash: s2MjAbFmZskhe8c8syDINl1Qg2IP1alqQzWM8hgpGaM=) 3: TlxudI56qO6of0dAIoNLmCi7I34.roa (hash: B3yUGQlhYhc7VNecnPXWnG2paPKfqBVLLURsN83ieM0=) 4: bBRHEbBLhbg9wCsS_iJI_qQCtmU.roa (hash: OVMMAYB5tWUbOWSKmmoDK0ZdfXUXKleZ2dlScSPtSDQ=) 5: cYkdq7RvTgo2pKuXFLBexq9t3Ok.roa (hash: WW1sV/JlbJIiOPshgqbWE3XdqcXrSGfYrIMBmLnGHOI=) 6: he4JY2N5j1RFVekn19UcBublhH4.roa (hash: zGU9xsq9X0zM4oIz4ddypQ8oes1HfykPzY/Z6pokZvs=) 7: ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa (hash: nRolxWCEegQPS3m6t9UXAzzNjfiOdo+TR28a/j2xZSo=) 8: z6aB_tk9HXWBZFMdk6CTGtazxPg.roa (hash: 8IbY39xTjqBHsVFai4Fj5PzkqHzZhOmpMa5oZHBzBMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:85:d4:7c:e9:10:37:2a:7f:c3:92:17:3d:94:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725 Validity Not Before: Jan 25 21:00:44 2026 GMT Not After : Jan 26 21:00:44 2026 GMT Subject: CN=7d57985c587b5e6daea2e5c92d026574ae07d8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8f:3a:e9:11:5e:87:46:0a:f4:7a:63:ca:b7: 54:11:a9:bf:4e:3b:fc:04:64:d0:f9:76:90:3a:4c: ca:e9:e6:18:c3:70:b0:61:6d:cd:a8:c7:27:84:4c: 32:78:c3:3c:ec:f2:4a:1c:45:a9:64:88:c2:f7:78: c0:ff:c8:41:f5:ac:47:35:d5:b0:67:ec:4e:40:55: 48:07:ee:48:db:da:a7:c7:a5:4f:48:6a:fe:6e:a1: 6d:1a:a1:d5:e4:4a:1b:98:74:3b:bd:a7:f5:d4:e2: cd:cc:aa:09:4c:4d:96:61:45:45:ba:b3:43:71:81: fa:91:2b:e6:ac:f5:50:bc:2a:3a:de:e8:58:6b:15: 14:5d:89:d2:00:15:39:5a:06:6e:b3:32:83:8e:c7: 30:34:c6:31:58:0d:a4:8d:89:12:9d:1a:f9:53:9a: ff:94:51:ac:87:2d:e0:e6:e6:ba:84:98:d1:63:f9: 3c:cb:69:db:55:55:bd:5e:8c:63:78:cf:fe:d6:ae: 19:74:4c:a7:52:3b:0b:7e:3c:2e:d9:d8:3c:06:88: f9:59:81:0c:ac:11:40:5a:71:8f:0e:a4:be:4a:29: 0d:0a:5a:74:ad:ff:05:40:23:eb:21:61:5e:af:4e: 9a:72:bc:41:74:fa:a5:1d:d0:b2:09:ff:dd:af:64: 8f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:57:98:5C:58:7B:5E:6D:AE:A2:E5:C9:2D:02:65:74:AE:07:D8:F6 X509v3 Authority Key Identifier: keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:34:5b:b5:5a:f1:3f:43:3c:e2:92:07:4d:74:aa:e6:38:e1: 3e:2c:0b:4c:22:ad:7d:df:40:3f:93:16:a6:b9:67:2f:6c:5f: a2:83:85:53:ff:61:fa:ed:a9:47:2b:3a:6f:b3:58:04:70:59: 9e:39:5b:66:68:cf:c4:23:9d:a3:3d:21:41:00:c8:d9:b2:44: d3:8a:e2:f2:72:98:a2:0a:56:0c:ca:e7:74:d5:26:ef:3c:3d: 2b:17:6d:50:ff:95:af:aa:c0:f4:fd:da:05:97:d9:db:f8:f9: 22:14:df:f4:a3:6f:33:69:5e:fc:94:f2:a3:03:02:65:94:9a: 8a:e1:b1:97:6b:fc:77:bf:36:4f:3d:9c:de:1c:0e:3b:a3:9d: c7:87:55:84:c0:31:ef:2b:22:d3:36:d5:30:3b:5f:bc:03:49: 11:d0:6c:c1:4b:d7:34:d4:51:9e:b2:42:e2:78:a0:be:7f:0f: fd:53:a0:d0:a1:4f:f3:41:4b:55:77:57:cd:ac:58:2e:e0:88: ab:e1:a6:d7:9e:63:92:0c:71:8f:f1:97:e9:46:5d:45:d2:db: 8d:3a:53:8d:89:c1:2d:72:c2:00:f6:92:74:f0:03:14:0e:e7: 01:ed:be:b5:34:ad:9b:d1:c9:5e:6d:0c:43:20:3b:7e:72:95: ad:ad:e3:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29YXUfOkQNyp/w5IXPZTeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZmI2NDVmMTM0ZjRmZGFkYTQ1ZTcwYmNmY2Q5M2I4OTdk YmQ3MjUwHhcNMjYwMTI1MjEwMDQ0WhcNMjYwMTI2MjEwMDQ0WjAzMTEwLwYDVQQD Eyg3ZDU3OTg1YzU4N2I1ZTZkYWVhMmU1YzkyZDAyNjU3NGFlMDdkOGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY866RFeh0YK9HpjyrdUEam/Tjv8 BGTQ+XaQOkzK6eYYw3CwYW3NqMcnhEwyeMM87PJKHEWpZIjC93jA/8hB9axHNdWw Z+xOQFVIB+5I29qnx6VPSGr+bqFtGqHV5EobmHQ7vaf11OLNzKoJTE2WYUVFurND cYH6kSvmrPVQvCo63uhYaxUUXYnSABU5WgZuszKDjscwNMYxWA2kjYkSnRr5U5r/ lFGshy3g5ua6hJjRY/k8y2nbVVW9XoxjeM/+1q4ZdEynUjsLfjwu2dg8Boj5WYEM rBFAWnGPDqS+SikNClp0rf8FQCPrIWFer06acrxBdPqlHdCyCf/dr2SPmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1XmFxYe15trqLlyS0CZXSuB9j2MB8GA1UdIwQY MBaAFNr7ZF8TT0/a2kXnC8/Nk7iX29clMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2Et NmJhMGEwY2UwMWVkLzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2EtNmJhMGEwY2UwMWVk LzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDRbtVrx P0M84pIHTXSq5jjhPiwLTCKtfd9AP5MWprlnL2xfooOFU/9h+u2pRys6b7NYBHBZ njlbZmjPxCOdoz0hQQDI2bJE04ri8nKYogpWDMrndNUm7zw9KxdtUP+Vr6rA9P3a BZfZ2/j5IhTf9KNvM2le/JTyowMCZZSaiuGxl2v8d782Tz2c3hwOO6Odx4dVhMAx 7ysi0zbVMDtfvANJEdBswUvXNNRRnrJC4nigvn8P/VOg0KFP80FLVXdXzaxYLuCI q+Gm155jkgxxj/GX6UZdRdLbjTpTjYnBLXLCAPaSdPADFA7nAe2+tTStm9HJXm0M QyA7fnKVra3jQA== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:43 2026 by rpki-client