This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft File: DMgShJHbEyzPzYKt5wDeswayFho.mft (raw, json) Hash identifier: sPsT5OecXk/gNlJYiDTuiVRdRxhGop5bTx1z6XbEw5g= Subject key identifier: F8:D5:F7:AB:72:7E:7A:B7:55:3A:B8:FD:FA:EB:9D:3C:D1:C0:19:31 Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a Certificate serial: 019BF5E2E49F0578219BA9156B1530D3B80A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 16:00:46 +0000 Manifest this update: Sun 25 Jan 2026 16:00:46 +0000 Manifest next update: Mon 26 Jan 2026 16:00:46 +0000 Files and hashes: 1: DMgShJHbEyzPzYKt5wDeswayFho.crl (hash: zlmfEritiflWhnQ+UfBUhNp1dJBj7MxAYo/Nh/XCDR0=) 2: nLPrlrzFQJke2w0nSv6P6BPs3rs.roa (hash: lHcs6pM3E3th/X7lArO6Gv/GZjzfkX92Szx3cqmHxMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e2:e4:9f:05:78:21:9b:a9:15:6b:15:30:d3:b8:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a Validity Not Before: Jan 25 16:00:46 2026 GMT Not After : Jan 26 16:00:46 2026 GMT Subject: CN=f8d5f7ab727e7ab7553ab8fdfaeb9d3cd1c01931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:df:72:75:6f:46:0f:c7:8d:e9:59:19:4b:66: d6:d7:d8:89:ae:56:7b:94:a3:f4:c1:d9:1d:b1:66: 3e:49:d3:32:d5:64:65:d4:c8:1e:cb:31:2a:07:86: 0d:a4:94:42:24:df:9e:ed:f8:c9:5f:75:f5:01:9b: fa:25:15:26:c1:a3:14:50:dd:58:57:e0:84:f4:29: ff:e2:7b:db:e3:ec:a3:c0:82:71:60:31:56:99:b4: 1c:a9:d7:51:36:ac:cd:e6:ae:0d:39:78:57:1c:9f: 88:c1:7e:38:00:2e:64:52:ff:e8:a2:99:37:d4:35: 4b:1c:d2:00:1e:3c:11:5c:b1:37:f1:5d:d1:48:37: d9:d9:f4:d7:27:a9:a6:1d:71:3f:5c:17:9a:5f:cd: 14:f6:63:91:a7:43:92:57:bd:96:7b:0e:cb:bb:1f: d0:b4:99:61:c4:e7:8d:ab:58:f8:f5:8c:a0:3b:50: 2f:fc:cd:d5:f6:de:40:85:76:99:88:b2:6c:cf:7c: 3a:36:ca:bc:61:98:d7:0a:17:4d:db:0c:f0:e5:45: 99:78:fe:38:fe:88:ce:b5:08:c4:10:7a:29:70:10: 47:eb:dc:18:bc:32:93:a6:48:d4:eb:f8:2f:d5:fa: 30:f2:61:4d:69:40:f8:e0:64:27:9d:84:0a:5d:ef: 51:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D5:F7:AB:72:7E:7A:B7:55:3A:B8:FD:FA:EB:9D:3C:D1:C0:19:31 X509v3 Authority Key Identifier: keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:2b:c2:48:71:17:73:8c:e5:cf:c0:4c:df:f2:2f:3c:fb:91: 76:17:17:99:f1:8a:f3:07:6f:f2:36:54:dd:fe:c5:ca:57:27: 73:78:94:a4:52:83:f3:7b:db:8a:38:52:1f:7a:ea:d7:5e:ca: d9:36:12:05:53:33:cd:62:2a:5a:89:13:89:5d:06:31:b8:68: b9:7e:d9:38:fd:89:b3:bf:c3:76:73:91:89:b4:e1:ce:29:cd: 47:73:68:63:14:87:3c:fc:a3:08:d1:f4:ff:ee:43:2d:82:63: 4e:50:75:69:17:47:71:0b:13:d7:a0:2e:ea:e7:f0:18:72:67: a3:f3:e8:d9:a2:56:64:26:03:60:6d:76:c8:50:77:f2:a7:1c: 59:0a:ff:c1:0e:5b:9c:88:ef:6b:ce:fe:59:63:98:55:9e:b9: f3:63:18:74:d1:01:5c:ff:b8:9d:c5:b2:71:96:05:ac:9a:45: af:e2:7e:2c:63:45:27:87:94:c7:d2:a0:df:3b:97:fb:6f:bf: ea:66:b5:f2:26:5f:87:b2:1b:5d:83:b8:e4:2c:3d:da:38:24: 9b:8a:e7:a7:d3:c1:27:89:91:94:8f:68:64:99:2e:e0:29:e5: 3e:e9:2e:5a:f7:b7:52:fd:73:cc:c1:60:f8:52:ad:b8:51:2f: c7:a9:66:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14uSfBXghm6kVaxUw07gKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYzgxMjg0OTFkYjEzMmNjZmNkODJhZGU3MDBkZWIzMDZi MjE2MWEwHhcNMjYwMTI1MTYwMDQ2WhcNMjYwMTI2MTYwMDQ2WjAzMTEwLwYDVQQD EyhmOGQ1ZjdhYjcyN2U3YWI3NTUzYWI4ZmRmYWViOWQzY2QxYzAxOTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN9ydW9GD8eN6VkZS2bW19iJrlZ7 lKP0wdkdsWY+SdMy1WRl1MgeyzEqB4YNpJRCJN+e7fjJX3X1AZv6JRUmwaMUUN1Y V+CE9Cn/4nvb4+yjwIJxYDFWmbQcqddRNqzN5q4NOXhXHJ+IwX44AC5kUv/oopk3 1DVLHNIAHjwRXLE38V3RSDfZ2fTXJ6mmHXE/XBeaX80U9mORp0OSV72Wew7Lux/Q tJlhxOeNq1j49YygO1Av/M3V9t5AhXaZiLJsz3w6Nsq8YZjXChdN2wzw5UWZeP44 /ojOtQjEEHopcBBH69wYvDKTpkjU6/gv1fow8mFNaUD44GQnnYQKXe9RPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjV96tyfnq3VTq4/frrnTzRwBkxMB8GA1UdIwQY MBaAFAzIEoSR2xMsz82CrecA3rMGshYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYzNmNTMtMWJhYi00ZDMyLTgzODAt ZDU5MTA4YjU3MjE0LzEvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yYzNmNTMtMWJhYi00ZDMyLTgzODAtZDU5MTA4YjU3MjE0 LzEvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCvCSHEX c4zlz8BM3/IvPPuRdhcXmfGK8wdv8jZU3f7Fylcnc3iUpFKD83vbijhSH3rq117K 2TYSBVMzzWIqWokTiV0GMbhouX7ZOP2Js7/DdnORibThzinNR3NoYxSHPPyjCNH0 /+5DLYJjTlB1aRdHcQsT16Au6ufwGHJno/Po2aJWZCYDYG12yFB38qccWQr/wQ5b nIjva87+WWOYVZ6582MYdNEBXP+4ncWycZYFrJpFr+J+LGNFJ4eUx9Kg3zuX+2+/ 6ma18iZfh7IbXYO45Cw92jgkm4rnp9PBJ4mRlI9oZJku4CnlPukuWve3Uv1zzMFg +FKtuFEvx6lmtg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:17 2026 by rpki-client