This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft File: 2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json) Hash identifier: Pif46y3e0mgCaULem99mubvpSnRpD02dBh4cg0xP7oc= Subject key identifier: 2D:50:20:24:41:5E:EF:74:16:AC:45:CA:FF:72:1A:4B:FB:0A:F8:43 Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43 Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243 Certificate serial: 019BF6F5966AC1C174B1AD05D22C674A29B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft Manifest number: 17F3 Signing time: Sun 25 Jan 2026 21:00:48 +0000 Manifest this update: Sun 25 Jan 2026 21:00:48 +0000 Manifest next update: Mon 26 Jan 2026 21:00:48 +0000 Files and hashes: 1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: /Pz0m3aHk8cZV54xph7cYG1hZy/JsS3pvOtc4bcl2cc=) 2: 4dJRxczuyNN9FNJF4v_Rx4xIMUU.roa (hash: UBgzb7hUFLCBP2y3aJjQr5Lt8UM6zM4uZ5rsYMA9dHY=) 3: GsIUpdelbYjW9He0Trh2nn-nCJo.roa (hash: W1f0OAwWbcszk++2k0xC55ekezko1dir/Xe9czNGlw0=) 4: mcac8XdaQu5k9ijr9gPdrLY_Eb0.roa (hash: hp3NcmZWHvHpXJbSqSb5HyI3zQ72qSQa7SF+rskCSvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:96:6a:c1:c1:74:b1:ad:05:d2:2c:67:4a:29:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243 Validity Not Before: Jan 25 21:00:48 2026 GMT Not After : Jan 26 21:00:48 2026 GMT Subject: CN=2d502024415eef7416ac45caff721a4bfb0af843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:08:ee:87:ca:fb:bd:ad:2a:ff:a7:23:80:71: 82:d0:f6:5f:7d:ed:51:b5:db:b2:e8:33:e7:5f:10: c3:62:85:4a:c7:75:1e:28:3a:a1:1e:ae:09:48:e6: 23:c9:a4:a9:5c:04:f5:8c:26:78:da:cd:93:66:0a: cb:12:f2:b5:e1:f3:f1:8a:a2:67:7b:c9:55:a6:5e: 88:ef:23:28:09:f8:5c:37:25:c4:b8:cb:69:9c:57: 5a:81:86:a6:79:5e:ba:d6:b2:43:b0:69:74:51:b2: cc:28:40:1d:1e:16:2d:bd:1a:40:b0:60:4e:3f:91: c2:9f:75:04:ec:c6:d7:ef:9c:c5:05:bf:6c:70:1b: e1:bd:c3:3a:03:50:09:44:40:66:49:15:e0:ef:1f: 8a:91:e7:c2:ff:27:0d:33:44:60:69:2a:82:70:2a: f8:cf:47:5c:d0:ff:1e:9d:2a:e2:db:91:c5:03:2c: b1:ed:20:02:04:0b:75:43:44:3b:65:a0:53:60:ab: 1e:40:b8:08:a3:d1:f0:72:33:1b:29:b6:d3:43:b5: dc:62:0a:99:86:d3:6f:78:d6:bd:38:50:8e:31:37: 6f:67:e7:99:18:a8:84:91:10:48:75:2a:f0:8f:a3: 25:25:c8:82:3e:f1:aa:af:2b:1b:42:2e:aa:97:df: b2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:50:20:24:41:5E:EF:74:16:AC:45:CA:FF:72:1A:4B:FB:0A:F8:43 X509v3 Authority Key Identifier: keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:5a:ea:d9:01:35:54:2e:b7:89:2e:ad:8c:7a:19:e8:7a:99: 75:78:83:ef:96:79:52:51:56:c6:f8:e3:b0:32:06:3a:11:4e: f3:5b:d6:ff:4d:b5:dc:4f:d6:de:ea:62:dc:71:e2:c3:93:26: 8c:4a:1c:ab:3e:eb:e5:e7:e8:44:f0:b1:e7:63:b4:2d:2a:e3: a1:ee:3e:32:82:9d:e5:29:af:10:e8:da:b0:11:d0:bb:cd:c6: ad:6a:58:a2:d4:f8:a3:fb:29:18:82:f7:62:a8:a2:b2:5d:68: 4d:96:01:16:58:57:64:6d:09:3e:ab:b7:a4:53:d0:bd:7f:4c: 65:b4:9d:38:e3:6d:2b:63:92:5a:3b:3e:5d:3b:30:11:38:3f: c3:46:47:72:a1:61:86:b9:de:33:34:9b:52:43:aa:45:1a:cf: 8a:91:3d:4b:67:2f:c0:0b:64:10:bf:d0:11:aa:f3:ee:bf:67: 63:16:9d:3d:3e:eb:c4:87:cd:b0:fa:36:05:7b:54:55:aa:bb: 52:db:88:df:2b:b1:97:51:d4:13:12:af:13:d7:8c:eb:c5:88: 04:f3:28:fb:23:40:02:e0:ef:35:0d:81:e5:69:c3:23:9d:fa: 33:18:44:48:11:da:a2:a8:5d:65:bc:ce:95:f1:94:e7:9f:91: 23:1c:64:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29ZZqwcF0sa0F0ixnSimzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTBjYTdjMWUwZThhMWM3YWQwMmQwYmI4MjhiNDExODhh ZTUyNDMwHhcNMjYwMTI1MjEwMDQ4WhcNMjYwMTI2MjEwMDQ4WjAzMTEwLwYDVQQD EygyZDUwMjAyNDQxNWVlZjc0MTZhYzQ1Y2FmZjcyMWE0YmZiMGFmODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ajuh8r7va0q/6cjgHGC0PZffe1R tduy6DPnXxDDYoVKx3UeKDqhHq4JSOYjyaSpXAT1jCZ42s2TZgrLEvK14fPxiqJn e8lVpl6I7yMoCfhcNyXEuMtpnFdagYameV661rJDsGl0UbLMKEAdHhYtvRpAsGBO P5HCn3UE7MbX75zFBb9scBvhvcM6A1AJREBmSRXg7x+KkefC/ycNM0RgaSqCcCr4 z0dc0P8enSri25HFAyyx7SACBAt1Q0Q7ZaBTYKseQLgIo9HwcjMbKbbTQ7XcYgqZ htNveNa9OFCOMTdvZ+eZGKiEkRBIdSrwj6MlJciCPvGqrysbQi6ql9+yRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1QICRBXu90FqxFyv9yGkv7CvhDMB8GA1UdIwQY MBaAFNvgynweDoocetAtC7gotBGIrlJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMt NGY5MTEyZWRlOTY4LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMtNGY5MTEyZWRlOTY4 LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFrq2QE1 VC63iS6tjHoZ6HqZdXiD75Z5UlFWxvjjsDIGOhFO81vW/0213E/W3upi3HHiw5Mm jEocqz7r5efoRPCx52O0LSrjoe4+MoKd5SmvEOjasBHQu83GrWpYotT4o/spGIL3 Yqiisl1oTZYBFlhXZG0JPqu3pFPQvX9MZbSdOONtK2OSWjs+XTswETg/w0ZHcqFh hrneMzSbUkOqRRrPipE9S2cvwAtkEL/QEarz7r9nYxadPT7rxIfNsPo2BXtUVaq7 UtuI3yuxl1HUExKvE9eM68WIBPMo+yNAAuDvNQ2B5WnDI536MxhESBHaoqhdZbzO lfGU55+RIxxkuw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:29 2026 by rpki-client