This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft File: dYDRZWm7JKMo4ntH99dRZZcl3vs.mft (raw, json) Hash identifier: j4lklNi/137xY6eQGRZn5HQ7cIr9JEs3zdqhvySoifE= Subject key identifier: 0F:D3:0D:6A:58:E6:EB:F3:07:ED:0F:8C:96:03:D5:0F:89:F1:3D:23 Authority key identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB Certificate issuer: /CN=7580d16569bb24a328e27b47f7d751659725defb Certificate serial: 019BF4D0226D10B77D575DE62534BFAD514F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 11:00:39 +0000 Manifest this update: Sun 25 Jan 2026 11:00:39 +0000 Manifest next update: Mon 26 Jan 2026 11:00:39 +0000 Files and hashes: 1: ECrRKyyp-LiX1od5u6h9jQbQyd8.roa (hash: G+0jVdYZJlndG8ZNfCVw49ceooT9pB50RNi/efo30+s=) 2: dYDRZWm7JKMo4ntH99dRZZcl3vs.crl (hash: asTX3q+KWdnNshL/IGWi6hmpZ/SdRkwGFkR7St9kq4M=) 3: y86tnmPuqWIsHAopUuOyTE-DfXY.roa (hash: ddB2+/l7hkyocSFaIWWx4fEn6FSZzUu/NIcm47CrJmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:22:6d:10:b7:7d:57:5d:e6:25:34:bf:ad:51:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7580d16569bb24a328e27b47f7d751659725defb Validity Not Before: Jan 25 11:00:39 2026 GMT Not After : Jan 26 11:00:39 2026 GMT Subject: CN=0fd30d6a58e6ebf307ed0f8c9603d50f89f13d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:f7:7d:f6:ad:1f:1f:e5:1e:e5:45:18:bc:84: 22:9b:5c:27:9e:21:22:99:a6:6f:dc:53:9a:98:2a: 03:38:cd:ad:cf:24:15:58:fc:3b:5c:cc:45:17:44: 21:be:f3:02:01:1d:61:20:6e:ad:6e:23:3e:a0:08: c4:78:e1:fc:2e:b4:0f:93:1b:5a:fb:cf:08:9d:5b: 48:9f:a0:49:1e:a4:f9:05:47:2b:5a:8a:4f:c2:d2: 70:c6:dc:17:ad:e9:48:df:c2:2e:bb:71:01:78:be: 3c:66:c0:24:f2:ef:fe:64:16:11:e6:fe:40:eb:e6: e2:15:98:40:08:db:dd:9e:a2:a3:6a:0c:75:42:76: 56:39:4d:b3:4c:e5:49:44:e0:24:3c:58:b4:41:04: ee:32:6e:d2:e3:64:c2:a5:4f:e6:8e:1a:91:39:de: f2:a8:49:fc:06:20:0e:21:7a:69:47:ff:99:32:ef: 1b:99:d8:16:83:d0:e2:46:04:4f:29:58:b7:fe:89: f3:c0:55:a9:74:cf:ca:56:3e:50:a7:66:b7:db:5b: f3:21:22:16:21:71:80:4e:06:6e:8e:6c:4f:9c:33: 3d:aa:e7:95:22:19:60:49:db:b5:01:68:ff:53:81: f5:f6:0c:1b:0e:1b:ce:73:24:82:04:65:c5:9a:70: 3c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D3:0D:6A:58:E6:EB:F3:07:ED:0F:8C:96:03:D5:0F:89:F1:3D:23 X509v3 Authority Key Identifier: keyid:75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:1b:e8:60:a8:9c:1f:94:a8:0f:89:8f:9a:b6:d1:e5:29:e8: 74:33:b9:f5:ee:c3:c3:78:16:3c:c2:35:ce:09:6e:9f:26:84: 1b:2c:90:af:a4:ef:20:ae:89:6b:f0:ed:85:5c:5f:d1:bd:97: 78:61:cc:2e:f0:c2:dc:2c:1a:f4:60:a7:2e:34:b9:e0:2c:2c: d2:dc:6e:36:de:7a:11:51:39:d6:ea:40:cf:92:e0:0c:b6:19: 83:73:6f:5a:d3:13:62:95:5d:7a:f7:04:9b:61:44:5b:f1:07: 63:ac:03:f4:41:d8:fc:b4:52:ab:37:85:e4:6a:00:da:ba:45: 20:47:2e:6c:07:94:52:94:a8:37:19:7c:1c:5d:de:04:07:18: 79:02:85:30:67:21:c4:db:cb:f8:d3:17:20:f7:a0:d7:75:70: 5e:0a:df:42:da:32:4e:a6:82:9b:d3:38:84:85:cd:40:67:11: f8:56:f4:9d:87:c1:e5:48:d2:85:44:47:eb:85:f0:f2:dd:f9: 74:f2:34:78:68:7a:b8:8c:4f:45:c8:52:45:6e:c9:eb:c1:86: 3c:aa:cb:d3:cb:f9:d8:1e:e0:0f:68:12:c8:96:74:b8:b2:7e: 6e:12:db:d3:9b:67:76:68:69:1d:05:fa:39:cd:f4:81:fa:88: 01:d4:7c:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00CJtELd9V13mJTS/rVFPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ODBkMTY1NjliYjI0YTMyOGUyN2I0N2Y3ZDc1MTY1OTcy NWRlZmIwHhcNMjYwMTI1MTEwMDM5WhcNMjYwMTI2MTEwMDM5WjAzMTEwLwYDVQQD EygwZmQzMGQ2YTU4ZTZlYmYzMDdlZDBmOGM5NjAzZDUwZjg5ZjEzZDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vd99q0fH+Ue5UUYvIQim1wnniEi maZv3FOamCoDOM2tzyQVWPw7XMxFF0QhvvMCAR1hIG6tbiM+oAjEeOH8LrQPkxta +88InVtIn6BJHqT5BUcrWopPwtJwxtwXrelI38Iuu3EBeL48ZsAk8u/+ZBYR5v5A 6+biFZhACNvdnqKjagx1QnZWOU2zTOVJROAkPFi0QQTuMm7S42TCpU/mjhqROd7y qEn8BiAOIXppR/+ZMu8bmdgWg9DiRgRPKVi3/onzwFWpdM/KVj5Qp2a321vzISIW IXGATgZujmxPnDM9queVIhlgSdu1AWj/U4H19gwbDhvOcySCBGXFmnA81QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/TDWpY5uvzB+0PjJYD1Q+J8T0jMB8GA1UdIwQY MBaAFHWA0WVpuySjKOJ7R/fXUWWXJd77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFlEUlpXbTdKS01vNG50SDk5ZFJaWmNsM3ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xYTE4ZGUtZWZiZC00MWI1LWIzMzYt NzlmYmQzODVhNTUwLzEvZFlEUlpXbTdKS01vNG50SDk5ZFJaWmNsM3ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8xYTE4ZGUtZWZiZC00MWI1LWIzMzYtNzlmYmQzODVhNTUw LzEvZFlEUlpXbTdKS01vNG50SDk5ZFJaWmNsM3ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxvoYKic H5SoD4mPmrbR5SnodDO59e7Dw3gWPMI1zglunyaEGyyQr6TvIK6Ja/DthVxf0b2X eGHMLvDC3Cwa9GCnLjS54Cws0txuNt56EVE51upAz5LgDLYZg3NvWtMTYpVdevcE m2FEW/EHY6wD9EHY/LRSqzeF5GoA2rpFIEcubAeUUpSoNxl8HF3eBAcYeQKFMGch xNvL+NMXIPeg13VwXgrfQtoyTqaCm9M4hIXNQGcR+Fb0nYfB5UjShURH64Xw8t35 dPI0eGh6uIxPRchSRW7J68GGPKrL08v52B7gD2gSyJZ0uLJ+bhLb05tndmhpHQX6 Oc30gfqIAdR88w== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:01 2026 by rpki-client