This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft File: dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json) Hash identifier: TuKX3xK/vSjzCh1lMufACAcDSGc+Tt5vVO7seK4xBy8= Subject key identifier: 3A:B9:70:B4:5A:C9:95:57:71:43:03:15:DB:E7:6F:56:DE:25:80:AB Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9 Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9 Certificate serial: 019BF5076A0D49F6E0847160CF850B91A8F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft Manifest number: 0FE2 Signing time: Sun 25 Jan 2026 12:01:02 +0000 Manifest this update: Sun 25 Jan 2026 12:01:02 +0000 Manifest next update: Mon 26 Jan 2026 12:01:02 +0000 Files and hashes: 1: HgxRtI8mHBIWNfue_bJ47nUYGP0.roa (hash: bgpVojxuZ6rTw2rXwp7zmtHnPtbsDYtb7lQYehRuEhE=) 2: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: savO8px7BhweUL7OVH8i5ZwnW3I0Xs2bIWkYFS++z90=) 3: x3r5MAGnwo9sJOqgqq7L5j88SZc.roa (hash: PdGQVPWLQTL/E0T0LOBkbwg2HWh9KKOf2sd5PHKTZpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:6a:0d:49:f6:e0:84:71:60:cf:85:0b:91:a8:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9 Validity Not Before: Jan 25 12:01:02 2026 GMT Not After : Jan 26 12:01:02 2026 GMT Subject: CN=3ab970b45ac9955771430315dbe76f56de2580ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:67:e8:aa:23:c1:fa:da:e6:6d:7e:12:95:1f: 15:69:5e:84:6b:f5:b3:78:22:f3:39:bd:fc:a4:cd: 95:a2:ec:ce:6f:9d:65:a7:c6:b0:36:fb:b7:b2:bd: 5a:fb:2b:72:81:6a:b0:4d:1e:eb:c7:b6:10:d9:f6: e9:d0:5f:6f:d7:51:40:2f:08:1e:b6:8b:26:b3:a5: 80:d3:5b:3a:8d:4e:39:e1:69:85:b1:25:bb:44:b5: a1:9c:2b:5c:12:cc:bd:0c:6b:1e:22:e6:5c:56:93: 79:a2:04:c0:c1:e4:bd:df:c4:18:0b:d3:b3:f7:e2: 38:26:0e:7c:84:61:2d:b3:25:a1:af:ca:ee:d1:5b: a7:4e:70:c1:d3:2f:be:81:95:d5:d4:d2:28:2b:c3: 9a:53:4e:af:3b:99:d4:5b:85:3c:7a:69:8c:34:76: d8:11:5f:0f:12:a9:35:a0:ae:db:68:f0:b7:a6:51: 43:c0:a9:63:c7:07:74:58:54:47:af:73:3a:dc:eb: 4a:96:b9:33:99:f8:0c:cf:3d:0e:0b:1b:e5:2a:84: 97:28:db:67:db:95:84:dd:62:79:df:ac:5e:8d:be: 70:77:e9:72:d7:90:01:ae:1f:be:c2:2e:d0:47:69: 2e:39:17:51:17:6c:25:aa:da:fc:1e:20:18:db:c9: 52:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B9:70:B4:5A:C9:95:57:71:43:03:15:DB:E7:6F:56:DE:25:80:AB X509v3 Authority Key Identifier: keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c7:48:71:f7:3c:e3:a4:df:fa:01:25:3d:3a:f6:61:a3:00: c4:dc:43:b6:af:71:69:ef:9f:62:a4:7e:43:27:76:de:c8:22: b5:27:75:17:fd:21:7f:35:ef:db:1d:db:f0:59:5b:5e:6f:dd: fb:b0:98:65:1f:81:a4:a3:17:df:d0:41:ae:69:ea:18:e6:7a: 60:57:ae:2d:48:be:8a:7a:a0:c7:c3:b4:dd:9f:14:f4:d0:ab: ca:ad:06:73:c7:77:59:39:70:f9:f0:6f:4c:e1:d9:71:ef:5e: 46:f3:c0:b4:0a:81:ac:c8:8d:34:3e:3f:e0:34:7e:4b:0c:5b: b6:88:d1:9d:f5:63:c7:f2:73:21:8a:57:19:bc:c3:ea:ab:37: 71:34:ba:8c:7f:ae:f0:28:bb:a4:5e:fe:74:e8:fe:ca:7f:37: 9a:2e:c5:cb:9d:81:c0:5c:44:da:9f:ff:cf:de:d9:dc:24:cb: e8:22:81:e2:61:57:30:76:04:fb:82:13:f2:fa:e5:0d:47:69: 16:8b:f8:b6:9a:f3:6d:c2:98:a3:7d:c4:ca:8d:3f:6d:5c:28: 21:ac:69:64:39:1c:39:2e:fd:54:43:d2:c8:5e:fc:ba:fc:09: c9:f9:18:e0:d1:e2:b2:5f:ff:79:53:d6:f8:24:8b:c9:dc:90: ac:21:ac:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B2oNSfbghHFgz4ULkaj3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2MxNzY2ZmJiZGNmZjY4YmJjMzRhM2M2YmU2OWEwYzhh MDNhYjkwHhcNMjYwMTI1MTIwMTAyWhcNMjYwMTI2MTIwMTAyWjAzMTEwLwYDVQQD EygzYWI5NzBiNDVhYzk5NTU3NzE0MzAzMTVkYmU3NmY1NmRlMjU4MGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWfoqiPB+trmbX4SlR8VaV6Ea/Wz eCLzOb38pM2VouzOb51lp8awNvu3sr1a+ytygWqwTR7rx7YQ2fbp0F9v11FALwge tosms6WA01s6jU454WmFsSW7RLWhnCtcEsy9DGseIuZcVpN5ogTAweS938QYC9Oz 9+I4Jg58hGEtsyWhr8ru0VunTnDB0y++gZXV1NIoK8OaU06vO5nUW4U8emmMNHbY EV8PEqk1oK7baPC3plFDwKljxwd0WFRHr3M63OtKlrkzmfgMzz0OCxvlKoSXKNtn 25WE3WJ536xejb5wd+ly15ABrh++wi7QR2kuORdRF2wlqtr8HiAY28lS9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDq5cLRayZVXcUMDFdvnb1beJYCrMB8GA1UdIwQY MBaAFHZ8F2b7vc/2i7w0o8a+aaDIoDq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQt MzU2OGUxZDI5ZDRhLzEvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQtMzU2OGUxZDI5ZDRh LzEvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsdIcfc8 46Tf+gElPTr2YaMAxNxDtq9xae+fYqR+Qyd23sgitSd1F/0hfzXv2x3b8FlbXm/d +7CYZR+BpKMX39BBrmnqGOZ6YFeuLUi+inqgx8O03Z8U9NCryq0Gc8d3WTlw+fBv TOHZce9eRvPAtAqBrMiNND4/4DR+SwxbtojRnfVjx/JzIYpXGbzD6qs3cTS6jH+u 8Ci7pF7+dOj+yn83mi7Fy52BwFxE2p//z97Z3CTL6CKB4mFXMHYE+4IT8vrlDUdp Fov4tprzbcKYo33Eyo0/bVwoIaxpZDkcOS79VEPSyF78uvwJyfkY4NHisl//eVPW +CSLydyQrCGsFA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:42:44 2026 by rpki-client