This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft File: D1IdJpUmx67jjk-yRUsvCH9p_rc.mft (raw, json) Hash identifier: /ioAiDyMQy4tmn0eYu1Qns7IKGizM5Dngy+EHfHpCBY= Subject key identifier: 29:1A:BD:8D:45:E9:1B:73:43:EF:0A:C6:2D:30:BA:BE:D6:31:62:7B Authority key identifier: 0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7 Certificate issuer: /CN=0f521d269526c7aee38e4fb2454b2f087f69feb7 Certificate serial: 019BF763E0E1E8399800160AAA53802C77FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft Manifest number: 07D3 Signing time: Sun 25 Jan 2026 23:01:16 +0000 Manifest this update: Sun 25 Jan 2026 23:01:16 +0000 Manifest next update: Mon 26 Jan 2026 23:01:16 +0000 Files and hashes: 1: 79yWfe1C0oJyorvH1Ndj5_ksS2E.roa (hash: VEEzicoUwIVdfyy7u/W5/zZAs5snmAOXbsnXFY4gVR0=) 2: D1IdJpUmx67jjk-yRUsvCH9p_rc.crl (hash: Kx6tYwNM3GsQ2bPT56MQCxhBKIKNIhZwkqLyq3JD2c8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:e0:e1:e8:39:98:00:16:0a:aa:53:80:2c:77:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f521d269526c7aee38e4fb2454b2f087f69feb7 Validity Not Before: Jan 25 23:01:16 2026 GMT Not After : Jan 26 23:01:16 2026 GMT Subject: CN=291abd8d45e91b7343ef0ac62d30babed631627b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bf:5c:5e:82:bf:7a:92:a9:4e:6f:60:74:bd: 28:a1:3a:56:90:27:5e:ea:01:9a:08:fa:ba:0f:35: a5:87:37:b7:b7:e3:33:af:bc:6a:85:bf:25:45:98: 58:36:ab:04:34:49:a5:c9:15:c5:e2:36:5c:6b:2b: 44:f2:1c:fe:bb:0a:d5:36:fe:a7:27:3b:fc:d8:ab: d8:42:53:f1:10:84:d8:71:c3:5d:2b:98:ba:8c:18: ce:72:64:7c:cc:77:35:43:72:66:59:b5:e4:58:b4: 47:b2:20:49:ce:69:8c:2c:43:14:cb:43:14:ba:30: 5f:40:5f:9d:9a:08:62:bf:c5:9f:b3:2e:75:47:d5: de:0d:cf:e6:76:4b:4c:fe:b3:5b:20:76:56:82:a7: f0:e0:8f:ca:81:32:94:f0:d9:32:f3:6e:3f:1b:bf: 9b:40:4b:a1:73:39:c9:25:c2:2f:80:4f:07:08:02: 8f:4e:19:f5:68:bf:ad:f9:f6:fa:22:ac:8e:a2:8f: 42:0e:5a:81:4a:2b:b0:31:09:88:fa:41:1d:b2:ed: 20:aa:b2:19:0c:a3:7d:92:a7:98:05:af:6f:84:54: ad:32:c7:7f:d2:76:a7:52:92:08:60:a1:9c:57:6c: bc:af:22:7b:9f:00:ff:e5:93:5b:e9:b0:c7:c5:bf: 41:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1A:BD:8D:45:E9:1B:73:43:EF:0A:C6:2D:30:BA:BE:D6:31:62:7B X509v3 Authority Key Identifier: keyid:0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:99:0b:ea:4f:2b:00:cb:33:7d:75:f0:12:80:5f:d8:64:41: 13:82:9a:13:f9:54:7d:9d:7d:1b:26:05:ec:34:0d:91:3e:bb: 16:c8:c4:17:d8:d3:04:bb:77:6a:66:d6:c6:09:64:e1:86:87: cb:b2:a0:ee:52:95:30:91:c4:64:2c:37:81:b7:49:d7:f4:8e: a2:94:a2:c4:3b:e5:7b:5c:dd:f1:7e:44:bb:4e:4a:fc:9d:f4: fa:b3:90:20:21:37:6f:a2:8e:72:7c:9f:63:ec:b2:e2:24:a7: 55:b2:92:b1:77:88:27:45:22:93:d5:93:6f:09:ce:2e:f7:26: 32:61:38:e3:d0:b8:3f:b0:84:2a:02:92:64:01:8e:13:87:2b: 91:3c:e8:f1:6f:a9:26:27:af:de:f3:bc:4f:66:fa:4e:4a:22: 79:1b:f1:c3:af:40:6b:ea:60:34:a2:72:69:6a:32:83:ba:89: 4f:90:f6:5e:9d:2d:44:bb:67:d8:b8:41:61:7b:0d:b1:c5:13: 80:94:13:9c:5c:84:43:f7:ff:83:7f:1e:2e:b1:70:cd:60:4b: b6:46:42:8d:d4:ee:9e:2e:58:56:96:0c:df:5b:6e:5f:96:7c: 40:9d:3b:9a:fd:17:0a:aa:a5:f2:41:5b:85:87:f8:3a:a9:3a: 47:4b:6c:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y+Dh6DmYABYKqlOALHf+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNTIxZDI2OTUyNmM3YWVlMzhlNGZiMjQ1NGIyZjA4N2Y2 OWZlYjcwHhcNMjYwMTI1MjMwMTE2WhcNMjYwMTI2MjMwMTE2WjAzMTEwLwYDVQQD EygyOTFhYmQ4ZDQ1ZTkxYjczNDNlZjBhYzYyZDMwYmFiZWQ2MzE2MjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr9cXoK/epKpTm9gdL0ooTpWkCde 6gGaCPq6DzWlhze3t+Mzr7xqhb8lRZhYNqsENEmlyRXF4jZcaytE8hz+uwrVNv6n Jzv82KvYQlPxEITYccNdK5i6jBjOcmR8zHc1Q3JmWbXkWLRHsiBJzmmMLEMUy0MU ujBfQF+dmghiv8Wfsy51R9XeDc/mdktM/rNbIHZWgqfw4I/KgTKU8Nky824/G7+b QEuhcznJJcIvgE8HCAKPThn1aL+t+fb6IqyOoo9CDlqBSiuwMQmI+kEdsu0gqrIZ DKN9kqeYBa9vhFStMsd/0nanUpIIYKGcV2y8ryJ7nwD/5ZNb6bDHxb9BhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkavY1F6RtzQ+8Kxi0wur7WMWJ7MB8GA1UdIwQY MBaAFA9SHSaVJseu445PskVLLwh/af63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDFJZEpwVW14NjdqamsteVJVc3ZDSDlwX3JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8zMDdiZmYtMWViMS00NzAxLWFjNmIt YzFlYjAxMTBiZDNhLzEvRDFJZEpwVW14NjdqamsteVJVc3ZDSDlwX3JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8zMDdiZmYtMWViMS00NzAxLWFjNmItYzFlYjAxMTBiZDNh LzEvRDFJZEpwVW14NjdqamsteVJVc3ZDSDlwX3JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5kL6k8r AMszfXXwEoBf2GRBE4KaE/lUfZ19GyYF7DQNkT67FsjEF9jTBLt3ambWxglk4YaH y7Kg7lKVMJHEZCw3gbdJ1/SOopSixDvle1zd8X5Eu05K/J30+rOQICE3b6KOcnyf Y+yy4iSnVbKSsXeIJ0Uik9WTbwnOLvcmMmE449C4P7CEKgKSZAGOE4crkTzo8W+p Jiev3vO8T2b6TkoieRvxw69Aa+pgNKJyaWoyg7qJT5D2Xp0tRLtn2LhBYXsNscUT gJQTnFyEQ/f/g38eLrFwzWBLtkZCjdTuni5YVpYM31tuX5Z8QJ07mv0XCqql8kFb hYf4Oqk6R0tsKw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:50:41 2026 by rpki-client