This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json) Hash identifier: 8fWroH4rzc9TjpXG+5yPz5z5s9VFW5vxX7d9LmeLN/w= Subject key identifier: F4:44:CC:EA:27:2B:69:8E:E7:FF:E3:0D:83:22:FC:10:FE:E6:AB:93 Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3 Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3 Certificate serial: 019BF7D1C19C978FD15E4FC57FA778CF0902 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 01:01:17 +0000 Manifest this update: Mon 26 Jan 2026 01:01:17 +0000 Manifest next update: Tue 27 Jan 2026 01:01:17 +0000 Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: DMdcVER5rXhV7arZPEE5yqtLGj4EFeL9WtJRiPzLDFQ=) 2: xRmmdqH1-j--sEXPtnNY3Z-R5Zo.roa (hash: 3OUa7VjiPRdUyQdSMo547+vkOocCdI86key02w1U7/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:c1:9c:97:8f:d1:5e:4f:c5:7f:a7:78:cf:09:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3 Validity Not Before: Jan 26 01:01:17 2026 GMT Not After : Jan 27 01:01:17 2026 GMT Subject: CN=f444ccea272b698ee7ffe30d8322fc10fee6ab93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a2:3d:d2:09:00:4f:ab:5c:8d:70:d9:2d:37: a4:fc:b6:f6:18:f3:f3:8f:a2:d9:bc:8b:41:db:d9: 06:46:10:f8:67:4c:3f:1b:13:22:a9:95:8b:c6:9e: a0:56:d7:01:d3:26:35:4c:f8:29:79:5b:86:ff:6d: 47:49:03:4e:88:a3:3c:4e:a5:e9:28:96:02:c5:06: 50:6c:3c:dd:7d:26:e7:74:d5:e2:ae:7e:1f:70:fa: 82:a1:57:07:6f:da:74:27:02:16:0b:22:ac:c3:58: f0:75:de:76:39:31:20:d0:9e:8c:a3:17:cc:f3:54: 3b:30:ff:20:88:3c:09:5e:6a:62:60:01:df:62:b7: 2c:dd:ce:d6:a1:90:5f:64:d3:fb:19:71:ff:17:32: 84:8f:1e:24:47:43:ec:cd:67:e0:8b:57:c4:92:4d: 7c:e6:db:4d:65:55:52:c2:7f:bf:50:70:4f:e7:c8: 02:51:cf:04:4a:e4:b9:49:87:60:51:96:04:03:08: cc:ef:7e:ab:5f:43:19:52:c1:51:90:47:c2:b8:24: af:53:da:c8:25:a2:91:6f:27:5f:96:06:f9:07:ea: 05:64:a4:70:68:e5:5a:b2:ff:28:22:f9:aa:d0:94: c2:5a:e9:f2:ba:e7:bb:f0:23:c9:d6:09:94:b8:22: df:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:44:CC:EA:27:2B:69:8E:E7:FF:E3:0D:83:22:FC:10:FE:E6:AB:93 X509v3 Authority Key Identifier: keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:38:d9:bd:85:cf:f6:df:79:9e:a8:53:72:7b:7e:32:d6:e4: 30:de:b6:85:be:fa:6b:45:10:e7:5a:43:de:69:7e:26:57:d2: 9f:b6:19:7c:49:96:23:ce:82:af:ab:92:ee:98:f0:07:b3:24: 93:63:55:d2:8f:3e:7c:e0:59:cb:a0:34:e0:63:87:1a:06:19: 1c:c9:3d:8e:2e:f1:a0:c0:9d:63:32:b0:31:19:3b:df:06:c8: e5:e1:c0:c6:8c:38:b5:02:67:2d:74:14:30:a4:b7:7f:34:bd: 11:bc:e0:2e:00:dd:81:0b:70:0b:d1:36:5f:fd:a6:f1:7a:23: 65:5d:de:d2:4a:9d:f0:57:da:93:53:74:bc:54:7c:e6:fc:ae: 60:4a:a1:98:57:67:1e:00:6f:9a:7d:a3:7b:5b:89:6b:38:e7: e4:54:4a:cb:7a:fb:d7:6f:81:42:13:b9:80:da:c1:fa:f1:27: c7:90:b0:82:c8:8d:30:f3:1f:8e:44:36:09:93:33:9f:85:29: 01:8c:51:3d:90:1e:ce:6a:b3:3a:cb:5a:d3:ed:1d:2f:28:f4: 83:7b:c5:c1:71:45:a6:bd:81:e9:4a:e3:25:47:04:8a:b6:ca: cd:bb:f0:83:c2:51:d3:63:51:fd:16:e9:df:3e:ee:da:15:8d: 38:64:15:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30cGcl4/RXk/Ff6d4zwkCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjYyNWJkZmZhOTQzN2RjMmI5NmQ4YWUwMjMxMDBiYzg4 ZTZmZTMwHhcNMjYwMTI2MDEwMTE3WhcNMjYwMTI3MDEwMTE3WjAzMTEwLwYDVQQD EyhmNDQ0Y2NlYTI3MmI2OThlZTdmZmUzMGQ4MzIyZmMxMGZlZTZhYjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaI90gkAT6tcjXDZLTek/Lb2GPPz j6LZvItB29kGRhD4Z0w/GxMiqZWLxp6gVtcB0yY1TPgpeVuG/21HSQNOiKM8TqXp KJYCxQZQbDzdfSbndNXirn4fcPqCoVcHb9p0JwIWCyKsw1jwdd52OTEg0J6MoxfM 81Q7MP8giDwJXmpiYAHfYrcs3c7WoZBfZNP7GXH/FzKEjx4kR0PszWfgi1fEkk18 5ttNZVVSwn+/UHBP58gCUc8ESuS5SYdgUZYEAwjM736rX0MZUsFRkEfCuCSvU9rI JaKRbydflgb5B+oFZKRwaOVasv8oIvmq0JTCWunyuue78CPJ1gmUuCLftwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPREzOonK2mO5//jDYMi/BD+5quTMB8GA1UdIwQY MBaAFAwmJb3/qUN9wrltiuAjEAvIjm/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENZbHZmLXBRMzNDdVcySzRDTVFDOGlPYi1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85Yzc4YjktZGEzOS00NTBmLWJiOTYt MDc4MDRhZmY0OTBmLzEvRENZbHZmLXBRMzNDdVcySzRDTVFDOGlPYi1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC85Yzc4YjktZGEzOS00NTBmLWJiOTYtMDc4MDRhZmY0OTBm LzEvRENZbHZmLXBRMzNDdVcySzRDTVFDOGlPYi1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTjZvYXP 9t95nqhTcnt+MtbkMN62hb76a0UQ51pD3ml+JlfSn7YZfEmWI86Cr6uS7pjwB7Mk k2NV0o8+fOBZy6A04GOHGgYZHMk9ji7xoMCdYzKwMRk73wbI5eHAxow4tQJnLXQU MKS3fzS9EbzgLgDdgQtwC9E2X/2m8XojZV3e0kqd8Ffak1N0vFR85vyuYEqhmFdn HgBvmn2je1uJazjn5FRKy3r712+BQhO5gNrB+vEnx5CwgsiNMPMfjkQ2CZMzn4Up AYxRPZAezmqzOsta0+0dLyj0g3vFwXFFpr2B6UrjJUcEirbKzbvwg8JR02NR/Rbp 3z7u2hWNOGQVMA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:52 2026 by rpki-client