This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft File: dzDRbvGVhk8NvoqGca-2N2g7djs.mft (raw, json) Hash identifier: b7KycWztT0+pWIsat2G3Gwv5+lwy/QgS4roq9/NwpzM= Subject key identifier: 8E:46:C4:9B:62:BE:25:80:14:AD:CF:A1:D3:52:0A:7A:34:CA:A3:99 Authority key identifier: 77:30:D1:6E:F1:95:86:4F:0D:BE:8A:86:71:AF:B6:37:68:3B:76:3B Certificate issuer: /CN=7730d16ef195864f0dbe8a8671afb637683b763b Certificate serial: 019BF988D4C90D3B78F875033826B49F8ECF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft Manifest number: 0108 Signing time: Mon 26 Jan 2026 09:00:52 +0000 Manifest this update: Mon 26 Jan 2026 09:00:52 +0000 Manifest next update: Tue 27 Jan 2026 09:00:52 +0000 Files and hashes: 1: dzDRbvGVhk8NvoqGca-2N2g7djs.crl (hash: mNq5scH+IptkFExq2/oc4hADPFQcucFKbw0w9BpL2sA=) 2: o2VO5oX-mcICPglQ6TuJXF-puG0.roa (hash: QGvRH3mpnPRRYbJ9WRorNDsxj8CF3Y8SPJsGxZhiJ6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:88:d4:c9:0d:3b:78:f8:75:03:38:26:b4:9f:8e:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7730d16ef195864f0dbe8a8671afb637683b763b Validity Not Before: Jan 26 09:00:52 2026 GMT Not After : Jan 27 09:00:52 2026 GMT Subject: CN=8e46c49b62be258014adcfa1d3520a7a34caa399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2c:12:fb:79:59:7c:5c:bd:93:e5:6a:fc:68: 81:37:85:2d:cb:4d:44:cd:58:28:00:b5:1b:14:77: 65:bd:9c:3f:e7:59:13:3a:ae:9b:f4:7b:66:31:9a: 96:a2:94:fa:9b:b3:cb:cc:08:50:8f:51:5e:88:aa: fc:96:89:c0:9a:1f:78:df:4d:72:9d:3a:e1:56:a8: c1:e9:f4:c6:8a:ec:a0:a9:32:8b:40:cd:4c:ef:91: 18:e7:ca:ed:9e:3a:9c:ce:67:0d:b4:97:e9:97:8d: 22:15:61:ae:da:82:fd:e3:29:f6:50:82:79:82:a6: 4b:b2:ec:3c:00:6a:3d:ac:7d:bb:21:67:49:aa:25: c4:43:d2:17:0f:f2:fa:6f:0e:34:df:13:97:44:6b: 20:f1:d9:71:2d:c9:4b:de:7c:89:35:81:f5:96:1e: f6:1a:a9:82:82:b8:88:04:7e:f5:4c:25:20:18:b4: a0:6a:84:a4:95:36:0a:e5:c8:24:f4:94:63:a3:6d: c7:03:ac:47:8f:f8:55:96:6f:40:75:67:91:84:3d: dd:8f:ca:74:41:2d:d2:eb:5e:03:30:d2:1b:12:b2: 96:01:7e:90:ae:cd:99:8c:b4:78:f7:5a:db:cc:0d: 53:73:2d:a6:a4:ed:42:4e:59:64:a3:a6:c7:b3:e2: db:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:46:C4:9B:62:BE:25:80:14:AD:CF:A1:D3:52:0A:7A:34:CA:A3:99 X509v3 Authority Key Identifier: keyid:77:30:D1:6E:F1:95:86:4F:0D:BE:8A:86:71:AF:B6:37:68:3B:76:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:63:90:00:39:5f:f7:49:fd:28:67:35:61:b6:db:9b:d5:e6: 3e:e7:84:d8:e3:f5:0c:a5:f4:7a:59:ee:d1:35:ec:8f:e8:c2: 3e:08:c0:f6:c4:18:a3:4c:76:27:7e:31:61:25:1e:9f:26:cb: b8:92:ca:6e:e6:c7:bd:bd:1d:5d:5d:8a:84:5b:4a:b0:7a:51: 93:ac:be:27:0e:87:9b:db:96:78:e6:13:f7:16:a4:37:f6:9d: 64:10:4d:19:74:4a:6d:5b:6b:f0:8a:f7:7c:bc:82:4f:30:8d: 66:79:9d:36:b0:6e:6b:ce:2d:b7:18:e2:76:79:6f:cb:45:99: 74:50:f9:d3:03:b8:78:42:06:f4:6b:f6:e5:39:ca:62:d4:7d: 1b:2f:2b:15:b6:80:ff:ed:7a:4b:7b:a4:f4:c8:c3:19:12:eb: db:31:0b:4b:22:12:d2:ef:ab:5b:a1:b7:d6:ca:8a:95:8e:9c: 0c:70:03:6b:e7:22:89:af:0c:2c:8d:d5:68:14:9f:ea:6f:ac: 9d:f9:6b:1e:79:ad:d5:b5:5a:90:3a:6f:9f:b3:3f:b4:24:3a: cb:01:c3:cc:3b:07:74:9f:54:3f:33:3a:7f:d8:32:bf:f7:cb: ee:78:e9:be:f1:17:cf:3f:a0:a0:66:ee:b3:74:48:12:47:5c: 35:81:3f:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iNTJDTt4+HUDOCa0n47PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzBkMTZlZjE5NTg2NGYwZGJlOGE4NjcxYWZiNjM3Njgz Yjc2M2IwHhcNMjYwMTI2MDkwMDUyWhcNMjYwMTI3MDkwMDUyWjAzMTEwLwYDVQQD Eyg4ZTQ2YzQ5YjYyYmUyNTgwMTRhZGNmYTFkMzUyMGE3YTM0Y2FhMzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArywS+3lZfFy9k+Vq/GiBN4Uty01E zVgoALUbFHdlvZw/51kTOq6b9HtmMZqWopT6m7PLzAhQj1FeiKr8lonAmh94301y nTrhVqjB6fTGiuygqTKLQM1M75EY58rtnjqczmcNtJfpl40iFWGu2oL94yn2UIJ5 gqZLsuw8AGo9rH27IWdJqiXEQ9IXD/L6bw403xOXRGsg8dlxLclL3nyJNYH1lh72 GqmCgriIBH71TCUgGLSgaoSklTYK5cgk9JRjo23HA6xHj/hVlm9AdWeRhD3dj8p0 QS3S614DMNIbErKWAX6Qrs2ZjLR491rbzA1Tcy2mpO1CTllko6bHs+Lb0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5GxJtiviWAFK3PodNSCno0yqOZMB8GA1UdIwQY MBaAFHcw0W7xlYZPDb6KhnGvtjdoO3Y7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHpEUmJ2R1ZoazhOdm9xR2NhLTJOMmc3ZGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mY2Q4NTUtZmMyYy00NjBlLWJjZWEt OGQ3YzhhYzA2MjFhLzEvZHpEUmJ2R1ZoazhOdm9xR2NhLTJOMmc3ZGpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mY2Q4NTUtZmMyYy00NjBlLWJjZWEtOGQ3YzhhYzA2MjFh LzEvZHpEUmJ2R1ZoazhOdm9xR2NhLTJOMmc3ZGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2OQADlf 90n9KGc1Ybbbm9XmPueE2OP1DKX0elnu0TXsj+jCPgjA9sQYo0x2J34xYSUenybL uJLKbubHvb0dXV2KhFtKsHpRk6y+Jw6Hm9uWeOYT9xakN/adZBBNGXRKbVtr8Ir3 fLyCTzCNZnmdNrBua84ttxjidnlvy0WZdFD50wO4eEIG9Gv25TnKYtR9Gy8rFbaA /+16S3uk9MjDGRLr2zELSyIS0u+rW6G31sqKlY6cDHADa+ciia8MLI3VaBSf6m+s nflrHnmt1bVakDpvn7M/tCQ6ywHDzDsHdJ9UPzM6f9gyv/fL7njpvvEXzz+goGbu s3RIEkdcNYE/SQ== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:12 2026 by rpki-client