This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft File: DNszEee1KoxC8GUP9DwPyE0yDxY.mft (raw, json) Hash identifier: GVFcXILzatJcC2fv8MKM08cSHIpHOYNtkSHsTppO18M= Subject key identifier: D1:6E:85:C9:6B:6F:A4:56:EC:D9:71:10:C6:2A:32:63:FC:F1:77:50 Authority key identifier: 0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16 Certificate issuer: /CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16 Certificate serial: 019BF9521AD1E53BD3924DBC029B1DA20800 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft Manifest number: 3C Signing time: Mon 26 Jan 2026 08:01:06 +0000 Manifest this update: Mon 26 Jan 2026 08:01:06 +0000 Manifest next update: Tue 27 Jan 2026 08:01:06 +0000 Files and hashes: 1: DNszEee1KoxC8GUP9DwPyE0yDxY.crl (hash: wUavAKmRAVzukG66jsMiGm2/jKMu5bOliubnSX3yzdo=) 2: KkZ9T-InsQon19zi2pp0iLPe7uw.asa (hash: PxN+SD6/SnkXuWBprhfsz0XFK1K5PUh2KfS43HH5dtw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:52:1a:d1:e5:3b:d3:92:4d:bc:02:9b:1d:a2:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16 Validity Not Before: Jan 26 08:01:06 2026 GMT Not After : Jan 27 08:01:06 2026 GMT Subject: CN=d16e85c96b6fa456ecd97110c62a3263fcf17750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:78:7d:31:a6:2f:c1:8c:78:f6:a7:64:11:88: e7:5a:40:63:10:99:5b:d9:37:b6:ac:9c:6c:85:4a: b7:53:2d:a0:9b:83:76:ea:05:39:67:34:e7:c5:dc: 11:b8:dd:0d:93:b6:9c:3b:29:b0:f0:39:a6:5c:5e: ae:92:b1:9d:8e:99:f9:83:bd:62:0b:d1:d8:5a:ed: 6e:b9:84:81:70:63:41:45:ac:aa:14:22:06:ef:d1: 8b:67:b0:d4:da:22:4a:f1:3b:58:68:8f:ac:af:6b: 95:19:77:55:39:3d:06:ff:17:f1:1c:8f:cf:90:c9: fe:3a:35:65:35:d8:c4:3c:3e:04:0d:e6:94:19:b4: c9:5f:d1:3d:aa:f7:e2:42:cc:4f:da:23:ae:26:04: dd:e9:f0:77:02:bc:c7:1e:82:d5:fd:f7:26:a7:66: 55:be:1d:2e:42:64:25:a3:de:4d:99:5a:96:91:d8: e3:ec:a6:21:c6:1a:8b:b3:01:a7:15:2a:b8:e7:93: e0:01:35:01:3c:2d:5b:76:5a:2a:d7:0c:b0:46:86: 62:b3:74:35:6b:0a:fd:8f:83:6c:48:2f:4c:30:85: 15:b8:a9:0b:d7:69:61:fd:9e:f1:ba:46:fa:c7:96: e4:8d:63:cf:19:5d:8a:12:41:db:0a:6c:62:11:41: 75:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6E:85:C9:6B:6F:A4:56:EC:D9:71:10:C6:2A:32:63:FC:F1:77:50 X509v3 Authority Key Identifier: keyid:0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:83:77:5d:95:28:51:1b:41:d2:42:34:e4:81:7d:5f:42:65: 63:11:3d:80:fb:1e:14:dc:3d:2a:b1:d7:76:7c:79:d2:2f:01: 41:f7:bc:19:e2:15:f2:23:20:c0:1f:7b:89:36:ac:96:de:16: c9:7d:ec:e2:b0:ed:cf:67:d1:5d:d8:8b:cb:13:ea:33:8b:1c: 90:cf:84:2e:0c:e1:8d:35:44:d2:cd:e4:8c:26:5f:9b:5b:a5: 9b:ae:9f:41:cd:22:50:ca:b0:d9:f3:30:50:10:da:26:98:1b: 80:93:80:d3:d3:3c:fe:b9:13:b2:34:1a:af:a7:58:4d:1c:1e: 8a:b5:15:f7:75:ba:e0:7a:9c:a1:4d:cd:37:1a:fe:71:17:3c: 2e:4b:4b:10:72:1a:4b:57:df:0b:3a:d7:96:08:27:25:6f:37: 39:73:b7:f3:12:05:1a:9a:43:7b:e0:42:4a:27:a6:7b:a9:3f: 7d:99:18:e4:91:7f:5b:0c:19:95:bf:60:f9:d5:a0:a3:5d:40: 84:1e:4d:56:f0:d5:db:1f:0b:51:cd:d1:d6:93:8c:b7:c5:89: fb:c7:04:e7:b5:cc:3d:4f:89:c3:ff:28:c4:12:7f:18:c8:d5: 08:61:93:1a:02:a4:c0:8e:1f:9e:7d:bc:f5:b5:25:ac:82:db: 2f:34:33:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UhrR5TvTkk28ApsdoggAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZGIzMzExZTdiNTJhOGM0MmYwNjUwZmY0M2MwZmM4NGQz MjBmMTYwHhcNMjYwMTI2MDgwMTA2WhcNMjYwMTI3MDgwMTA2WjAzMTEwLwYDVQQD EyhkMTZlODVjOTZiNmZhNDU2ZWNkOTcxMTBjNjJhMzI2M2ZjZjE3NzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnh9MaYvwYx49qdkEYjnWkBjEJlb 2Te2rJxshUq3Uy2gm4N26gU5ZzTnxdwRuN0Nk7acOymw8DmmXF6ukrGdjpn5g71i C9HYWu1uuYSBcGNBRayqFCIG79GLZ7DU2iJK8TtYaI+sr2uVGXdVOT0G/xfxHI/P kMn+OjVlNdjEPD4EDeaUGbTJX9E9qvfiQsxP2iOuJgTd6fB3ArzHHoLV/fcmp2ZV vh0uQmQlo95NmVqWkdjj7KYhxhqLswGnFSq455PgATUBPC1bdloq1wywRoZis3Q1 awr9j4NsSC9MMIUVuKkL12lh/Z7xukb6x5bkjWPPGV2KEkHbCmxiEUF1zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFuhclrb6RW7NlxEMYqMmP88XdQMB8GA1UdIwQY MBaAFAzbMxHntSqMQvBlD/Q8D8hNMg8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE5zekVlZTFLb3hDOEdVUDlEd1B5RTB5RHhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xYTc5OGYtOTQ4OS00ZTFmLWI4Yjct MWM5Y2VmOWQ4ODJmLzEvRE5zekVlZTFLb3hDOEdVUDlEd1B5RTB5RHhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8xYTc5OGYtOTQ4OS00ZTFmLWI4YjctMWM5Y2VmOWQ4ODJm LzEvRE5zekVlZTFLb3hDOEdVUDlEd1B5RTB5RHhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIN3XZUo URtB0kI05IF9X0JlYxE9gPseFNw9KrHXdnx50i8BQfe8GeIV8iMgwB97iTaslt4W yX3s4rDtz2fRXdiLyxPqM4sckM+ELgzhjTVE0s3kjCZfm1ulm66fQc0iUMqw2fMw UBDaJpgbgJOA09M8/rkTsjQar6dYTRweirUV93W64HqcoU3NNxr+cRc8LktLEHIa S1ffCzrXlggnJW83OXO38xIFGppDe+BCSieme6k/fZkY5JF/WwwZlb9g+dWgo11A hB5NVvDV2x8LUc3R1pOMt8WJ+8cE57XMPU+Jw/8oxBJ/GMjVCGGTGgKkwI4fnn28 9bUlrILbLzQzFw== -----END CERTIFICATE-----Generated at Mon Jan 26 13:25:17 2026 by rpki-client