This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft File: djLJDvGdK9b2aKSCbi0NFWNelH0.mft (raw, json) Hash identifier: 5JS2EZ3Wvqz9ujCxMQGWsUZH1YRcrVtQ06V/q7eR0Y8= Subject key identifier: 56:F9:3B:0F:CE:9F:42:8F:E8:66:EB:3D:C4:88:04:10:E1:5F:77:73 Authority key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D Certificate issuer: /CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d Certificate serial: 019BF619C5D145ADF848C2059FA89B6054C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 17:00:42 +0000 Manifest this update: Sun 25 Jan 2026 17:00:42 +0000 Manifest next update: Mon 26 Jan 2026 17:00:42 +0000 Files and hashes: 1: djLJDvGdK9b2aKSCbi0NFWNelH0.crl (hash: YbW10i3UGKO+wmt/kiXrTBnokn6MeUdILPevyQ6YdSE=) 2: wh_PCPds1RwG_9tgWaa95lJUo8U.roa (hash: EEiVZ8EA5GDTXxuFdvW1T5/BRNMZ0ByEGciAuKi2zOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:c5:d1:45:ad:f8:48:c2:05:9f:a8:9b:60:54:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d Validity Not Before: Jan 25 17:00:42 2026 GMT Not After : Jan 26 17:00:42 2026 GMT Subject: CN=56f93b0fce9f428fe866eb3dc4880410e15f7773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:f8:95:08:3b:70:6d:49:90:a3:90:4c:c9:75: 02:56:68:b0:1c:d3:bd:ba:13:9e:bf:60:16:fd:4e: 91:ef:54:24:a4:4a:12:1e:e4:cd:76:99:2a:e9:5c: 84:c4:f9:2d:34:6f:1a:c0:03:78:7c:b4:be:ff:c4: f7:5c:09:00:1a:28:ef:19:e2:48:79:a0:40:e8:2b: e9:c3:20:ae:6b:0e:8e:17:16:58:15:9f:7c:00:91: 9d:64:e2:0d:9d:cb:43:84:67:78:59:f4:1e:c6:5a: 0e:c2:7d:84:f7:42:de:ff:90:03:68:d2:cb:c8:3b: b8:50:cc:de:3b:b5:00:02:a7:11:4e:6f:b5:46:d6: c3:0f:8a:f6:91:c7:2a:c5:89:14:6c:91:08:2c:bc: a9:a4:98:28:60:a2:ad:17:01:09:39:4d:e3:8b:d9: 3d:7b:d2:fd:e9:e5:01:30:86:0a:62:55:33:05:7a: 89:23:f0:ee:b5:87:36:e1:be:56:10:36:c1:4a:24: 03:60:58:37:6a:16:85:99:40:97:a3:06:71:34:9d: dc:81:10:a2:16:c4:67:f9:b0:71:cc:f5:1c:0b:dc: b8:63:b9:77:9f:98:7b:85:c6:5a:74:d4:d4:db:30: b5:ca:96:13:19:1b:fe:ec:09:f7:5c:e0:d2:4e:11: 8b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F9:3B:0F:CE:9F:42:8F:E8:66:EB:3D:C4:88:04:10:E1:5F:77:73 X509v3 Authority Key Identifier: keyid:76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d0:0f:8b:10:38:9c:2b:49:04:9a:08:9a:6b:4f:0f:ec:20: 14:34:03:3e:fd:e5:cb:4d:57:08:50:3d:48:8e:f0:cb:99:f6: 1e:a5:4c:bb:9b:0d:38:7d:72:ac:25:20:1c:f3:3d:e9:cd:5d: 01:b1:68:f0:2c:8a:a6:af:3f:52:34:63:23:58:a9:bc:d0:11: 89:9d:52:ef:75:31:dc:6b:df:ae:3d:42:6e:3d:2f:4a:3e:a9: e5:20:5a:b4:b9:e1:52:cd:66:7b:c0:67:0c:6b:fd:5d:de:8e: 32:cf:95:2d:cf:9f:10:86:4d:51:d9:df:52:bd:1c:87:9c:5a: 36:3d:2e:ab:63:7f:7f:5e:38:2c:ac:2d:00:33:e3:36:dc:3a: 9f:47:53:92:51:6e:9d:e5:94:36:67:47:ac:28:4f:89:a8:82: 02:96:6b:e0:d6:5a:f4:51:c1:c3:03:ff:4a:ab:bf:e3:3d:85: c0:85:d6:fa:79:8a:c3:08:ac:b0:10:ab:f1:13:f2:a8:d8:41: 1e:91:6d:db:c0:4f:df:6c:1c:0e:7b:92:e0:68:4f:91:e2:75: 3c:06:ed:7e:d5:14:08:70:13:fd:b1:6f:79:a0:99:05:d1:ac: d4:5f:94:0f:27:34:bd:92:18:57:ce:ac:e9:6c:8c:9a:0b:fc: dc:79:98:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GcXRRa34SMIFn6ibYFTEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MzJjOTBlZjE5ZDJiZDZmNjY4YTQ4MjZlMmQwZDE1NjM1 ZTk0N2QwHhcNMjYwMTI1MTcwMDQyWhcNMjYwMTI2MTcwMDQyWjAzMTEwLwYDVQQD Eyg1NmY5M2IwZmNlOWY0MjhmZTg2NmViM2RjNDg4MDQxMGUxNWY3NzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/fiVCDtwbUmQo5BMyXUCVmiwHNO9 uhOev2AW/U6R71QkpEoSHuTNdpkq6VyExPktNG8awAN4fLS+/8T3XAkAGijvGeJI eaBA6CvpwyCuaw6OFxZYFZ98AJGdZOINnctDhGd4WfQexloOwn2E90Le/5ADaNLL yDu4UMzeO7UAAqcRTm+1RtbDD4r2kccqxYkUbJEILLyppJgoYKKtFwEJOU3ji9k9 e9L96eUBMIYKYlUzBXqJI/DutYc24b5WEDbBSiQDYFg3ahaFmUCXowZxNJ3cgRCi FsRn+bBxzPUcC9y4Y7l3n5h7hcZadNTU2zC1ypYTGRv+7An3XODSThGL+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFb5Ow/On0KP6GbrPcSIBBDhX3dzMB8GA1UdIwQY MBaAFHYyyQ7xnSvW9mikgm4tDRVjXpR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGpMSkR2R2RLOWIyYUtTQ2JpME5GV05lbEgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC85ODQ0Y2QtMjRmOC00ZTUyLWI0MmIt YzdiZjAyMWVlNjY0LzEvZGpMSkR2R2RLOWIyYUtTQ2JpME5GV05lbEgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC85ODQ0Y2QtMjRmOC00ZTUyLWI0MmItYzdiZjAyMWVlNjY0 LzEvZGpMSkR2R2RLOWIyYUtTQ2JpME5GV05lbEgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9APixA4 nCtJBJoImmtPD+wgFDQDPv3ly01XCFA9SI7wy5n2HqVMu5sNOH1yrCUgHPM96c1d AbFo8CyKpq8/UjRjI1ipvNARiZ1S73Ux3Gvfrj1Cbj0vSj6p5SBatLnhUs1me8Bn DGv9Xd6OMs+VLc+fEIZNUdnfUr0ch5xaNj0uq2N/f144LKwtADPjNtw6n0dTklFu neWUNmdHrChPiaiCApZr4NZa9FHBwwP/Squ/4z2FwIXW+nmKwwissBCr8RPyqNhB HpFt28BP32wcDnuS4GhPkeJ1PAbtftUUCHAT/bFveaCZBdGs1F+UDyc0vZIYV86s 6WyMmgv83HmYoA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:28 2026 by rpki-client