This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft File: DJpALskLW0dezJv0scZrI4ITIU4.mft (raw, json) Hash identifier: 7q/3BevayGaXeu2lbR8vKwvYDx7co7z9NCOfDVdj6L0= Subject key identifier: 6B:CA:F1:67:4A:DD:B9:2B:79:43:39:F2:78:5E:01:47:D4:F1:0F:CF Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E Certificate issuer: /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e Certificate serial: 019BF7D22C928DA188A1EB4EE82CD2865AF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 01:01:44 +0000 Manifest this update: Mon 26 Jan 2026 01:01:44 +0000 Manifest next update: Tue 27 Jan 2026 01:01:44 +0000 Files and hashes: 1: DJpALskLW0dezJv0scZrI4ITIU4.crl (hash: trGBQ3IMOACRzNcp/YMycIbkA/JXzpYS/OW4iYb2pWo=) 2: Q_aD8H2Bg8D8Fk8p2Skkp_ucG04.roa (hash: szSEbM4DLAElR41izkoZqU673B1zp52SKgEtUZLpn2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:2c:92:8d:a1:88:a1:eb:4e:e8:2c:d2:86:5a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e Validity Not Before: Jan 26 01:01:44 2026 GMT Not After : Jan 27 01:01:44 2026 GMT Subject: CN=6bcaf1674addb92b794339f2785e0147d4f10fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:c8:c0:87:0a:37:b1:70:12:fd:95:a3:bd: 09:83:72:17:c0:52:21:ec:ae:3b:8e:cc:fb:9a:10: 1f:ff:d7:6d:67:35:fe:8b:69:b7:8e:86:b3:83:8f: e3:f7:24:a4:a1:f8:9b:f3:62:5b:b0:36:06:47:51: f9:bd:12:78:73:9a:5b:3c:1c:c9:3a:52:4d:15:93: 37:64:44:e8:66:01:e1:82:05:8a:c9:55:9a:85:e9: 13:2b:49:83:96:ea:fb:0b:f2:76:f5:06:f9:2e:28: b7:0b:a1:ff:33:b4:81:b2:c3:17:73:28:e4:83:91: 46:c0:39:15:fd:04:e6:5f:9d:9b:40:73:22:c6:8e: 6b:aa:6a:03:b6:17:3e:8f:1b:96:8c:10:7f:4d:18: dc:df:aa:43:de:ac:cb:c5:6c:b2:4d:bd:63:6f:60: a1:c2:ec:e1:40:27:1e:c9:68:99:ef:1c:bd:d4:3e: 1a:9f:0b:d4:4e:09:93:07:f9:4f:03:88:6b:a6:86: 66:fa:3a:cf:10:ad:96:a6:3b:fd:d6:e3:90:b1:71: ba:1e:87:f5:fb:94:9a:dd:50:7c:af:b6:de:cd:0b: 9a:54:c9:62:1e:bd:9e:4d:6d:78:ec:68:13:9b:1c: 94:d1:48:b1:5e:3b:28:a2:1d:2f:5f:3a:ed:52:ae: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CA:F1:67:4A:DD:B9:2B:79:43:39:F2:78:5E:01:47:D4:F1:0F:CF X509v3 Authority Key Identifier: keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:7d:3a:62:15:54:c1:6f:74:f5:38:a2:59:30:9e:3b:c0:4c: c5:1d:41:96:cd:83:31:4c:2b:a1:f3:68:38:17:70:28:83:38: 34:8a:b5:e1:b6:5c:c6:99:b9:e6:6d:dc:d0:4e:54:1c:80:a5: 8b:dc:d3:b7:38:6a:a8:c7:e6:74:92:34:21:4a:90:9a:82:06: 36:26:4f:33:29:a7:f9:7f:42:8e:c0:5b:27:59:0c:a2:16:99: 05:11:12:54:93:f0:ce:a6:c7:65:da:3f:92:e5:5a:04:f6:6d: 8a:d9:cf:40:62:20:74:ff:0c:a2:47:a1:83:4b:98:1b:70:5b: 08:0b:37:70:62:73:20:8c:fa:6b:63:65:fb:10:09:15:e9:7c: 09:ac:b7:17:9f:db:33:ea:49:da:aa:c5:eb:7a:a1:93:d6:09: ba:b3:4c:28:4b:b7:1e:c9:c1:91:cc:ef:ed:36:58:f8:b9:38: 49:0a:85:a8:16:99:af:31:b0:db:aa:8e:e6:f8:85:eb:9d:94: ba:06:9a:77:af:b9:16:94:8c:ad:a4:0b:3a:ae:8a:50:8f:f2: 16:f4:af:1d:bc:7c:8b:c3:70:ce:86:ca:e5:c9:45:5a:80:da: cd:42:7e:cb:1e:2d:7f:d8:d6:c5:6d:01:ae:73:ff:d8:86:0c: ae:2b:1d:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30iySjaGIoetO6CzShlryMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOWE0MDJlYzkwYjViNDc1ZWNjOWJmNGIxYzY2YjIzODIx MzIxNGUwHhcNMjYwMTI2MDEwMTQ0WhcNMjYwMTI3MDEwMTQ0WjAzMTEwLwYDVQQD Eyg2YmNhZjE2NzRhZGRiOTJiNzk0MzM5ZjI3ODVlMDE0N2Q0ZjEwZmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncLIwIcKN7FwEv2Vo70Jg3IXwFIh 7K47jsz7mhAf/9dtZzX+i2m3joazg4/j9ySkofib82JbsDYGR1H5vRJ4c5pbPBzJ OlJNFZM3ZEToZgHhggWKyVWahekTK0mDlur7C/J29Qb5Lii3C6H/M7SBssMXcyjk g5FGwDkV/QTmX52bQHMixo5rqmoDthc+jxuWjBB/TRjc36pD3qzLxWyyTb1jb2Ch wuzhQCceyWiZ7xy91D4anwvUTgmTB/lPA4hrpoZm+jrPEK2Wpjv91uOQsXG6Hof1 +5Sa3VB8r7bezQuaVMliHr2eTW147GgTmxyU0UixXjsooh0vXzrtUq60RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvK8WdK3bkreUM58nheAUfU8Q/PMB8GA1UdIwQY MBaAFAyaQC7JC1tHXsyb9LHGayOCEyFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iMGY3YmYtNjg0NC00YmE0LWIzM2Qt Nzc4NjlhNmJmZTU0LzEvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9iMGY3YmYtNjg0NC00YmE0LWIzM2QtNzc4NjlhNmJmZTU0 LzEvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANH06YhVU wW909TiiWTCeO8BMxR1Bls2DMUwrofNoOBdwKIM4NIq14bZcxpm55m3c0E5UHICl i9zTtzhqqMfmdJI0IUqQmoIGNiZPMymn+X9CjsBbJ1kMohaZBRESVJPwzqbHZdo/ kuVaBPZtitnPQGIgdP8Mokehg0uYG3BbCAs3cGJzIIz6a2Nl+xAJFel8Cay3F5/b M+pJ2qrF63qhk9YJurNMKEu3HsnBkczv7TZY+Lk4SQqFqBaZrzGw26qO5viF652U ugaad6+5FpSMraQLOq6KUI/yFvSvHbx8i8NwzobK5clFWoDazUJ+yx4tf9jWxW0B rnP/2IYMrisd3Q== -----END CERTIFICATE-----Generated at Mon Jan 26 07:46:55 2026 by rpki-client