This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json) Hash identifier: yBvHr23EVu6is3G8kgeyWy5YgO2DzjBcSRFgYm3Z+oc= Subject key identifier: F5:1E:6D:84:1E:13:D9:93:5C:38:F5:03:A7:07:01:21:03:90:42:11 Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f Certificate serial: 019BFBAE0A94D71B0D3E3D071091B65BE1B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft Manifest number: 0128 Signing time: Mon 26 Jan 2026 19:00:45 +0000 Manifest this update: Mon 26 Jan 2026 19:00:45 +0000 Manifest next update: Tue 27 Jan 2026 19:00:45 +0000 Files and hashes: 1: 5J389UyqW1b94uh4FuAIuqwlPUA.roa (hash: aw+kCmWxUaXaIpH7kpNdjRvksPfxjNXmAFu1gmqQxDA=) 2: cVEXe3iItcs_ytuvCM3LzRLl4Hc.roa (hash: 0Mhpsego3oBlftLGeLis3rtKxmokj6hoesUfbRFFHng=) 3: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: SJHfUEm7JlgYojEBLhrCkyQofDzh8GcXByAKlYr73dw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:0a:94:d7:1b:0d:3e:3d:07:10:91:b6:5b:e1:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f Validity Not Before: Jan 26 19:00:45 2026 GMT Not After : Jan 27 19:00:45 2026 GMT Subject: CN=f51e6d841e13d9935c38f503a707012103904211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c1:1d:10:b7:cc:11:9a:61:a0:ca:7c:58:80: 8b:1b:02:88:ff:df:18:05:58:86:95:95:b8:6e:9c: 7b:01:7a:ab:a1:1d:98:47:b5:4b:da:c2:92:35:83: 03:9a:4d:7c:53:ab:fc:e9:55:be:09:30:92:a1:ee: 46:4e:65:01:a4:90:8d:9b:52:00:df:0a:2e:fd:22: a5:c8:a8:32:a6:fc:15:2b:4a:3a:a4:3f:45:46:72: 93:7e:8c:84:a7:61:4b:c5:a7:da:e0:47:5d:e0:9b: da:54:2f:b2:86:1e:ca:3e:f5:45:d4:f8:0d:94:d6: 5d:9e:05:93:e7:9a:24:63:b4:e7:6b:62:a8:81:df: ce:0f:06:d6:8e:f3:e4:01:02:e5:56:c5:3e:52:1c: 73:cf:3f:a2:04:43:0d:a4:82:8a:b3:32:18:89:b2: 79:77:4a:4a:2f:5a:7d:03:87:02:11:aa:43:7d:c4: 90:34:0f:9d:9e:f3:40:a6:5f:5a:4e:ac:97:57:fb: 7d:14:34:89:e1:4a:e2:b4:31:e0:63:00:db:8e:55: 1f:ed:40:f3:43:b1:94:fc:97:34:33:5d:04:27:12: dc:5a:b1:ca:3b:30:c4:09:d2:4c:21:48:37:69:6c: 23:ab:3b:04:c5:66:f7:e2:15:d1:cb:89:2d:43:9e: 61:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1E:6D:84:1E:13:D9:93:5C:38:F5:03:A7:07:01:21:03:90:42:11 X509v3 Authority Key Identifier: keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:5b:34:d8:21:a0:18:55:e4:27:4c:eb:69:34:93:87:6b:43: e2:75:00:e4:bd:7d:25:9b:80:fe:9a:7b:54:1a:3b:df:6e:e9: 11:01:73:61:5e:72:20:99:9f:20:31:f5:73:d7:15:dc:44:67: 6a:d3:40:ea:60:7d:1b:c4:c0:ec:5e:e7:b8:d4:4a:ba:4b:78: 55:d4:21:e6:3b:5a:7c:1b:9d:d3:bb:d3:7e:b2:31:38:98:08: c0:16:01:3d:43:59:f2:07:61:8c:ed:99:ab:ad:19:69:44:58: 01:4b:4e:df:15:7a:4c:86:70:59:6f:8b:4b:ae:01:84:f1:d4: 00:23:66:9c:c1:77:a5:64:35:f0:51:26:07:b6:4e:9d:48:87: a4:a0:29:11:2b:87:d9:f3:b8:05:67:5b:e1:fd:f3:cf:16:6f: 69:cf:32:3f:0a:a8:80:2d:44:fe:b0:45:28:0f:fe:16:4d:5c: 53:29:9d:d4:ec:4d:fb:65:b6:11:7b:b1:38:d5:fd:83:9a:73: c2:0c:c9:db:6f:dc:a0:11:9b:f1:4f:7b:08:e4:79:c6:55:12: c3:1c:80:9a:e5:3a:11:bd:a9:3b:94:7e:2e:d5:2b:61:e2:eb: d5:21:9b:e4:12:d0:86:27:41:89:08:87:89:6d:6a:0b:a9:7e: 1b:71:16:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rgqU1xsNPj0HEJG2W+GxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZjUyODZlZTM4NTU5YmRkOTg5Yzc2NGY1YTY0NzQzNDdi MDNiNmYwHhcNMjYwMTI2MTkwMDQ1WhcNMjYwMTI3MTkwMDQ1WjAzMTEwLwYDVQQD EyhmNTFlNmQ4NDFlMTNkOTkzNWMzOGY1MDNhNzA3MDEyMTAzOTA0MjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMEdELfMEZphoMp8WICLGwKI/98Y BViGlZW4bpx7AXqroR2YR7VL2sKSNYMDmk18U6v86VW+CTCSoe5GTmUBpJCNm1IA 3wou/SKlyKgypvwVK0o6pD9FRnKTfoyEp2FLxafa4Edd4JvaVC+yhh7KPvVF1PgN lNZdngWT55okY7Tna2Kogd/ODwbWjvPkAQLlVsU+Uhxzzz+iBEMNpIKKszIYibJ5 d0pKL1p9A4cCEapDfcSQNA+dnvNApl9aTqyXV/t9FDSJ4UritDHgYwDbjlUf7UDz Q7GU/Jc0M10EJxLcWrHKOzDECdJMIUg3aWwjqzsExWb34hXRy4ktQ55hDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUebYQeE9mTXDj1A6cHASEDkEIRMB8GA1UdIwQY MBaAFHX1KG7jhVm92YnHZPWmR0NHsDtvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yOWJmNjEtZmRjOC00OWU2LTg0ZDkt MDM4NTM0OWZmMWU4LzEvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8yOWJmNjEtZmRjOC00OWU2LTg0ZDktMDM4NTM0OWZmMWU4 LzEvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtVs02CGg GFXkJ0zraTSTh2tD4nUA5L19JZuA/pp7VBo7327pEQFzYV5yIJmfIDH1c9cV3ERn atNA6mB9G8TA7F7nuNRKukt4VdQh5jtafBud07vTfrIxOJgIwBYBPUNZ8gdhjO2Z q60ZaURYAUtO3xV6TIZwWW+LS64BhPHUACNmnMF3pWQ18FEmB7ZOnUiHpKApESuH 2fO4BWdb4f3zzxZvac8yPwqogC1E/rBFKA/+Fk1cUymd1OxN+2W2EXuxONX9g5pz wgzJ22/coBGb8U97COR5xlUSwxyAmuU6Eb2pO5R+LtUrYeLr1SGb5BLQhidBiQiH iW1qC6l+G3EWlQ== -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:13 2026 by rpki-client