This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json) Hash identifier: 7weZiuEwz/kYd4raN3/x8lMsvHaDKPB4fr8XKhiMcLM= Subject key identifier: 4A:AD:87:C1:7F:CB:2C:2E:4C:D8:50:9C:09:AD:1E:C7:63:46:B5:CF Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38 Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838 Certificate serial: 019BF72C8B7F07DDECB954B32AA2F78AA3FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft Manifest number: 097F Signing time: Sun 25 Jan 2026 22:00:49 +0000 Manifest this update: Sun 25 Jan 2026 22:00:49 +0000 Manifest next update: Mon 26 Jan 2026 22:00:49 +0000 Files and hashes: 1: Caiwf_QYVrjuMQk3SKwJbOdkL1I.roa (hash: 5fx/cD2u1bFDALyIAFqy2QpBhB4xdpPsEpLHocGA9Q4=) 2: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: XcmtcRKsJ4EJIw13QF7TdMXXwxbFZGGtm4gRdCAV/f8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:8b:7f:07:dd:ec:b9:54:b3:2a:a2:f7:8a:a3:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838 Validity Not Before: Jan 25 22:00:49 2026 GMT Not After : Jan 26 22:00:49 2026 GMT Subject: CN=4aad87c17fcb2c2e4cd8509c09ad1ec76346b5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:05:b3:c4:12:b8:2f:89:f7:e4:b0:89:c5:3a: 6c:8e:8e:8b:63:2d:ef:ad:65:cb:1c:e4:40:90:46: 33:e8:d4:ee:72:d4:5a:3e:8a:46:4e:1b:76:04:00: 9e:61:37:f1:78:87:31:26:6b:3b:58:c5:e9:5e:8b: e7:e6:5c:19:a1:87:34:91:1b:5b:d6:d8:c1:bb:39: 5c:97:18:fc:2c:9c:81:59:d1:29:95:9c:d4:2f:43: f8:84:18:1e:47:1c:de:87:72:28:27:13:b1:b3:51: bb:3c:d9:4c:20:30:30:b1:87:2f:36:48:77:5e:50: d8:e6:53:79:52:5c:f3:9c:63:f4:de:59:bb:5e:8c: 43:57:fc:fa:74:9c:b4:a8:fd:41:fe:2e:6c:9e:5c: 80:74:51:42:f5:c9:67:eb:e4:eb:60:81:dc:60:e1: 70:98:6b:37:7a:e3:d2:fd:37:f0:ef:7e:48:97:f9: dd:13:b9:06:fc:9c:2c:27:d4:37:00:19:d7:0a:10: 09:59:84:0f:cd:02:f0:30:9c:40:0e:7f:87:d8:f9: 04:ac:f9:58:23:01:56:c8:da:fa:0d:87:c3:d6:c6: 34:6c:c8:a9:78:2b:e4:20:f5:cb:ba:ee:d1:2b:15: 24:9a:ce:1e:d9:3a:aa:20:57:e3:0d:46:f5:75:c3: db:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AD:87:C1:7F:CB:2C:2E:4C:D8:50:9C:09:AD:1E:C7:63:46:B5:CF X509v3 Authority Key Identifier: keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:9a:f0:d6:12:da:1a:b8:aa:da:04:73:cb:57:80:14:81:cf: d2:62:ac:7c:7c:69:8d:ea:09:9c:3a:7a:f6:0c:3f:14:54:4e: 28:2e:e9:5c:d5:27:8f:64:03:d8:ea:2a:7d:8d:2d:d8:1c:06: 81:59:d7:9a:d5:65:92:82:90:2d:2c:b9:51:36:ec:08:f1:98: 11:80:76:86:af:25:11:eb:8d:54:9e:7e:62:02:91:32:4d:d7: 81:65:5d:87:c6:86:3d:d3:58:ec:27:98:9c:fd:79:18:4f:e2: 81:63:57:af:76:30:59:a6:47:54:cb:01:fc:1e:e1:af:49:12: b2:54:b5:19:5d:70:1e:7a:a7:c5:7d:2a:87:59:2c:07:07:d6: 83:2e:c3:bb:b6:d7:ec:42:95:a7:18:47:76:dc:6f:f2:b2:15: af:7d:48:e3:27:59:da:6a:6d:16:c1:4d:6f:e0:1f:00:ea:f9: 3e:99:cd:eb:93:f5:65:cd:06:47:9f:74:44:83:de:74:49:89: 10:1f:e0:49:db:49:b1:b9:cb:f3:50:f0:60:09:78:38:50:1e: b1:da:ed:ce:76:35:1a:c8:ec:5b:fb:a2:69:51:e0:a3:c9:e4: 89:ba:1d:e2:2d:46:4f:b2:1a:64:ba:de:a8:81:4c:8b:9e:98: 7e:46:78:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LIt/B93suVSzKqL3iqP+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0N2FhZTVkMjRiMGM5N2E0MjAzMWYzNTEwYTE0ZTJmOTVi YmQ4MzgwHhcNMjYwMTI1MjIwMDQ5WhcNMjYwMTI2MjIwMDQ5WjAzMTEwLwYDVQQD Eyg0YWFkODdjMTdmY2IyYzJlNGNkODUwOWMwOWFkMWVjNzYzNDZiNWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QWzxBK4L4n35LCJxTpsjo6LYy3v rWXLHORAkEYz6NTuctRaPopGTht2BACeYTfxeIcxJms7WMXpXovn5lwZoYc0kRtb 1tjBuzlclxj8LJyBWdEplZzUL0P4hBgeRxzeh3IoJxOxs1G7PNlMIDAwsYcvNkh3 XlDY5lN5UlzznGP03lm7XoxDV/z6dJy0qP1B/i5snlyAdFFC9cln6+TrYIHcYOFw mGs3euPS/Tfw735Il/ndE7kG/JwsJ9Q3ABnXChAJWYQPzQLwMJxADn+H2PkErPlY IwFWyNr6DYfD1sY0bMipeCvkIPXLuu7RKxUkms4e2TqqIFfjDUb1dcPbxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqth8F/yywuTNhQnAmtHsdjRrXPMB8GA1UdIwQY MBaAFHR6rl0ksMl6QgMfNRChTi+Vu9g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9mNDFmYmYtNGU4ZC00YWFhLTlkYjEt NjI2YmJmZWUwYjMxLzEvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9mNDFmYmYtNGU4ZC00YWFhLTlkYjEtNjI2YmJmZWUwYjMx LzEvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZrw1hLa Griq2gRzy1eAFIHP0mKsfHxpjeoJnDp69gw/FFROKC7pXNUnj2QD2OoqfY0t2BwG gVnXmtVlkoKQLSy5UTbsCPGYEYB2hq8lEeuNVJ5+YgKRMk3XgWVdh8aGPdNY7CeY nP15GE/igWNXr3YwWaZHVMsB/B7hr0kSslS1GV1wHnqnxX0qh1ksBwfWgy7Du7bX 7EKVpxhHdtxv8rIVr31I4ydZ2mptFsFNb+AfAOr5PpnN65P1Zc0GR590RIPedEmJ EB/gSdtJsbnL81DwYAl4OFAesdrtznY1GsjsW/uiaVHgo8nkibod4i1GT7IaZLre qIFMi56YfkZ4UQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:47:31 2026 by rpki-client