This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft File: 2DO_oBS5GS8nAKyvbyedvvigr_I.mft (raw, json) Hash identifier: V1jPp/Ttb4KNIYoQdjdz4FOuxpfv/vzDIMltBzpCR5g= Subject key identifier: 2F:7E:D6:08:E9:07:1D:E5:71:87:29:69:08:1A:B2:F3:C4:6F:2C:70 Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2 Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2 Certificate serial: 019BF6BEE603563CE31DA722D50BEFFF9DFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 20:01:04 +0000 Manifest this update: Sun 25 Jan 2026 20:01:04 +0000 Manifest next update: Mon 26 Jan 2026 20:01:04 +0000 Files and hashes: 1: 2DO_oBS5GS8nAKyvbyedvvigr_I.crl (hash: tE2N2xLf030HvwaqB9PVoKebjdoGlMHpQMEbwln8XvA=) 2: 7Vc6GyFzlJHyTewvOkdwJkLS-9s.asa (hash: HPQdXwyp3J2HnbICqRn22xILcDG/y13SiXtWcNiXZ2k=) 3: QctoD9ranLBEP2UiaUJlWbkv5bc.roa (hash: x+yFAg7UwJjgCBv8Ws9qAi3y7N30iaQWEU6rOz2fDDg=) 4: srIV1AuGFcZV-KVIqPeVy-EHaLM.roa (hash: qPVoRvMwu0PTo3ZkogwOofWVPVdFkz/LzD3EZBXJUOQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:e6:03:56:3c:e3:1d:a7:22:d5:0b:ef:ff:9d:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2 Validity Not Before: Jan 25 20:01:04 2026 GMT Not After : Jan 26 20:01:04 2026 GMT Subject: CN=2f7ed608e9071de571872969081ab2f3c46f2c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:66:1a:32:98:52:59:ed:b7:2c:7c:ec:98:69: 50:29:91:1a:d9:64:f7:1c:db:49:12:38:2a:5c:42: 2a:1a:98:a0:87:34:22:7b:44:40:7c:9f:1d:2e:8f: a1:9f:21:0e:c3:6f:f9:45:fd:a9:6a:b7:92:51:17: 39:62:8a:b4:f7:fc:3d:99:2c:b5:4f:19:5e:ac:26: 3a:50:42:79:ac:d5:56:0d:19:4f:31:50:eb:95:74: 57:ea:20:49:d5:21:54:05:63:f8:7b:c0:87:67:d0: 4c:07:f5:2c:be:9e:b5:8c:c3:3d:e9:2b:52:c6:45: 7b:8d:1c:b4:43:c0:33:ff:47:4b:a4:94:1f:3f:ff: 17:78:8e:99:45:10:56:9e:bb:a5:b0:11:c2:20:1a: e9:38:88:62:b4:4c:58:b7:73:2e:7c:68:e3:60:6b: 8a:6d:b2:4e:c2:08:05:fa:79:d7:f5:94:47:83:ce: 33:90:1c:d8:19:55:3a:5d:dc:c2:1b:fa:7a:af:8b: 03:2f:be:36:71:38:bd:02:e5:b4:5b:d9:a2:fc:dc: 2e:76:ef:cb:bc:9c:33:89:dc:59:95:3a:2d:15:21: 80:a8:a7:fe:d2:07:93:2b:6c:0d:16:6e:63:24:72: c1:9a:fa:60:8e:31:53:a0:bc:04:55:94:16:76:1d: ab:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7E:D6:08:E9:07:1D:E5:71:87:29:69:08:1A:B2:F3:C4:6F:2C:70 X509v3 Authority Key Identifier: keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:79:21:5f:3e:ee:e3:a9:85:e9:0a:c8:51:cd:52:64:fb:a4: 5c:68:de:b9:b9:c1:bc:3e:09:a6:0c:d0:ba:4f:9b:a3:21:84: 90:93:99:02:a3:c0:93:21:31:7a:2f:f9:4c:c7:02:e6:79:66: 32:3b:00:ab:c1:a9:d3:b1:5f:37:44:01:eb:55:dc:51:5e:05: 64:9b:9e:39:a6:6d:b3:7b:96:ab:6d:9c:9b:45:cb:08:1c:84: 7e:9f:f5:3c:db:eb:64:60:27:df:c5:bd:ee:b9:8d:6a:19:eb: 27:5e:67:98:25:d7:1a:44:65:8d:b2:ad:55:a3:7b:7a:51:48: 7e:2f:3d:db:ad:ab:32:54:f4:f0:6f:8e:44:90:27:dc:c3:c7: d0:3f:1d:d6:77:b5:97:9a:db:b2:5f:e9:71:54:fa:ec:79:a4: 09:b4:44:01:3a:51:14:17:1f:20:1a:57:71:32:ab:12:6e:7a: 84:a0:c9:8a:10:69:f9:e7:d0:b6:92:00:33:92:2d:0a:4c:9d: 09:fd:68:5c:d8:8d:3f:ba:b3:57:c0:3b:51:d0:e3:1b:03:ce: d2:fc:cc:f3:31:b2:76:c4:9e:21:5f:c6:3a:b1:13:d0:c4:68: 8d:f5:b4:cf:fa:4e:ac:19:79:3c:e6:44:21:d2:d0:57:f1:ca: ac:9d:08:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vuYDVjzjHaci1Qvv/53/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MzNiZmEwMTRiOTE5MmYyNzAwYWNhZjZmMjc5ZGJlZjhh MGFmZjIwHhcNMjYwMTI1MjAwMTA0WhcNMjYwMTI2MjAwMTA0WjAzMTEwLwYDVQQD EygyZjdlZDYwOGU5MDcxZGU1NzE4NzI5NjkwODFhYjJmM2M0NmYyYzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGYaMphSWe23LHzsmGlQKZEa2WT3 HNtJEjgqXEIqGpighzQie0RAfJ8dLo+hnyEOw2/5Rf2pareSURc5Yoq09/w9mSy1 TxlerCY6UEJ5rNVWDRlPMVDrlXRX6iBJ1SFUBWP4e8CHZ9BMB/Usvp61jMM96StS xkV7jRy0Q8Az/0dLpJQfP/8XeI6ZRRBWnrulsBHCIBrpOIhitExYt3MufGjjYGuK bbJOwggF+nnX9ZRHg84zkBzYGVU6XdzCG/p6r4sDL742cTi9AuW0W9mi/Nwudu/L vJwzidxZlTotFSGAqKf+0geTK2wNFm5jJHLBmvpgjjFToLwEVZQWdh2rmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9+1gjpBx3lcYcpaQgasvPEbyxwMB8GA1UdIwQY MBaAFNgzv6AUuRkvJwCsr28nnb74oK/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80MTE2OTYtOTNiZS00NmJhLThlOTEt NWMwMTdiZDQzNjYzLzEvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi80MTE2OTYtOTNiZS00NmJhLThlOTEtNWMwMTdiZDQzNjYz LzEvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHkhXz7u 46mF6QrIUc1SZPukXGjeubnBvD4JpgzQuk+boyGEkJOZAqPAkyExei/5TMcC5nlm MjsAq8Gp07FfN0QB61XcUV4FZJueOaZts3uWq22cm0XLCByEfp/1PNvrZGAn38W9 7rmNahnrJ15nmCXXGkRljbKtVaN7elFIfi89262rMlT08G+ORJAn3MPH0D8d1ne1 l5rbsl/pcVT67HmkCbREATpRFBcfIBpXcTKrEm56hKDJihBp+efQtpIAM5ItCkyd Cf1oXNiNP7qzV8A7UdDjGwPO0vzM8zGydsSeIV/GOrET0MRojfW0z/pOrBl5POZE IdLQV/HKrJ0IxA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:44:43 2026 by rpki-client