This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft File: D5uga20iZz9_ez0PiJ9HIEQbbgw.mft (raw, json) Hash identifier: wfbIC0uZdL0Fz6mUvw4q+cfiue0te+2uh5dRuCEg6C0= Subject key identifier: A6:AC:8F:7B:AE:12:01:72:80:F2:D9:69:38:8C:1B:65:E6:9A:CF:C0 Authority key identifier: 0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C Certificate issuer: /CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c Certificate serial: 019BF619B46AF35853293A641321446ACA8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft Manifest number: 0799 Signing time: Sun 25 Jan 2026 17:00:38 +0000 Manifest this update: Sun 25 Jan 2026 17:00:38 +0000 Manifest next update: Mon 26 Jan 2026 17:00:38 +0000 Files and hashes: 1: 5XJcsA0Yt7Zdff_LSEdl66W_iVs.roa (hash: b2S+2HR2gX8LbhzerywHZG+Oq0Xjm9O6862mVOPJiR0=) 2: D5uga20iZz9_ez0PiJ9HIEQbbgw.crl (hash: pIDMdt18tiZ7zG2kkXRrsWiOujFWlmrhRBLOELOTQGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:b4:6a:f3:58:53:29:3a:64:13:21:44:6a:ca:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c Validity Not Before: Jan 25 17:00:38 2026 GMT Not After : Jan 26 17:00:38 2026 GMT Subject: CN=a6ac8f7bae12017280f2d969388c1b65e69acfc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c6:17:ae:3e:1a:a4:36:37:7f:dd:eb:b2:92: 9c:22:88:4b:51:ea:e5:aa:f4:6f:7c:c8:9e:59:c6: 82:d6:f0:f5:63:43:df:da:1d:76:54:3a:af:69:a8: f0:61:b2:f9:a6:25:de:15:b4:58:a8:53:fb:d5:00: e9:35:aa:bc:24:28:c6:db:76:38:9d:17:db:f2:2c: dc:e8:fd:97:6c:bb:5c:2f:97:6a:f3:89:56:f5:60: c5:05:20:e4:5a:82:01:f4:34:d9:e7:33:90:d2:c0: 1e:48:a2:5c:14:f6:e3:45:21:79:30:66:97:7f:73: 95:54:bc:e3:fe:c1:c9:dd:2b:9d:7d:5a:89:c0:98: 36:83:04:f6:94:5e:34:89:bc:d5:67:4b:d8:8c:2d: 04:33:32:e4:28:0d:a9:38:e1:a6:00:93:08:f5:64: 84:59:ef:26:51:dc:5f:51:81:8a:5c:50:5b:01:12: 84:26:b4:bc:68:02:10:68:62:4b:af:92:7b:89:4e: 34:ed:7a:a7:5e:8e:43:07:8d:df:ea:e0:fd:ad:e4: 5b:32:02:ca:a5:06:69:b6:bb:b9:ff:7a:79:61:fe: 12:9e:f1:33:a5:ed:71:9f:18:c2:6d:21:6a:d2:88: 9d:39:81:ab:96:18:4e:66:f6:29:78:11:3c:91:20: 5e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AC:8F:7B:AE:12:01:72:80:F2:D9:69:38:8C:1B:65:E6:9A:CF:C0 X509v3 Authority Key Identifier: keyid:0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:50:b3:c2:33:46:c4:2f:d1:12:d8:8f:b9:cd:8e:45:38:b9: e3:d8:a7:fe:89:60:db:fc:d5:f1:76:b6:6d:3c:6f:fb:70:86: 6a:44:43:55:3f:c4:f3:c4:8d:24:27:d0:19:84:1d:1a:5f:aa: 93:93:af:b7:82:17:fd:30:e7:ce:cb:cd:1f:48:db:6e:e6:46: f2:29:a9:78:b3:17:4b:60:8d:54:51:b4:eb:b9:dd:e9:47:e7: 3c:ff:04:8e:5e:e1:05:ab:0f:7c:e5:83:e3:45:e1:f1:30:13: 0e:2b:c1:4e:43:f3:b2:a3:a3:50:3f:04:67:3b:74:72:a4:57: ef:19:b0:26:56:c6:9f:57:b8:4d:e2:01:62:cb:71:57:3e:4e: 71:e0:93:e4:c6:22:4c:de:9d:d1:29:34:12:f7:7e:fd:04:1c: 38:7a:8e:23:15:14:e0:b6:98:6d:df:79:8a:70:23:73:04:fb: b8:83:74:b6:8a:53:2c:7a:5f:24:4c:2a:30:90:3b:b7:88:c8: ce:84:49:85:59:8e:0e:6e:0d:39:46:2e:66:99:d1:f1:42:db: 89:e2:e9:43:2a:9c:d6:57:6a:0c:e7:a0:a3:d4:b7:d0:fd:35: 94:b0:40:15:a2:4b:ba:74:51:71:97:bd:87:81:c4:7b:9b:29: 75:03:be:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GbRq81hTKTpkEyFEasqOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOWJhMDZiNmQyMjY3M2Y3ZjdiM2QwZjg4OWY0NzIwNDQx YjZlMGMwHhcNMjYwMTI1MTcwMDM4WhcNMjYwMTI2MTcwMDM4WjAzMTEwLwYDVQQD EyhhNmFjOGY3YmFlMTIwMTcyODBmMmQ5NjkzODhjMWI2NWU2OWFjZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMYXrj4apDY3f93rspKcIohLUerl qvRvfMieWcaC1vD1Y0Pf2h12VDqvaajwYbL5piXeFbRYqFP71QDpNaq8JCjG23Y4 nRfb8izc6P2XbLtcL5dq84lW9WDFBSDkWoIB9DTZ5zOQ0sAeSKJcFPbjRSF5MGaX f3OVVLzj/sHJ3SudfVqJwJg2gwT2lF40ibzVZ0vYjC0EMzLkKA2pOOGmAJMI9WSE We8mUdxfUYGKXFBbARKEJrS8aAIQaGJLr5J7iU407XqnXo5DB43f6uD9reRbMgLK pQZptru5/3p5Yf4SnvEzpe1xnxjCbSFq0oidOYGrlhhOZvYpeBE8kSBevQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKasj3uuEgFygPLZaTiMG2Xmms/AMB8GA1UdIwQY MBaAFA+boGttImc/f3s9D4ifRyBEG24MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zN2M4ZmYtMTg3Zi00ZDkxLWI0ZDYt MTM2NjU2YTNlZGU3LzEvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zN2M4ZmYtMTg3Zi00ZDkxLWI0ZDYtMTM2NjU2YTNlZGU3 LzEvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAelCzwjNG xC/REtiPuc2ORTi549in/olg2/zV8Xa2bTxv+3CGakRDVT/E88SNJCfQGYQdGl+q k5Ovt4IX/TDnzsvNH0jbbuZG8impeLMXS2CNVFG067nd6UfnPP8Ejl7hBasPfOWD 40Xh8TATDivBTkPzsqOjUD8EZzt0cqRX7xmwJlbGn1e4TeIBYstxVz5OceCT5MYi TN6d0Sk0Evd+/QQcOHqOIxUU4LaYbd95inAjcwT7uIN0topTLHpfJEwqMJA7t4jI zoRJhVmODm4NOUYuZpnR8ULbieLpQyqc1ldqDOego9S30P01lLBAFaJLunRRcZe9 h4HEe5spdQO+og== -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:23 2026 by rpki-client