This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft File: DX08coAiI1d4gNOPBIyBiRImQDs.mft (raw, json) Hash identifier: fpMPXuBoc8QR3UqJ6s1xDxlrLEx4fm0IOc8+pyGkgJU= Subject key identifier: E4:D0:B2:9A:18:73:96:5C:95:F3:06:42:6F:70:A1:1C:3A:45:45:5F Authority key identifier: 0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B Certificate issuer: /CN=0d7d3c72802223577880d38f048c81891226403b Certificate serial: 019BF6F5A4524F80883A399A5A82443F1F08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft Manifest number: 0C4A Signing time: Sun 25 Jan 2026 21:00:52 +0000 Manifest this update: Sun 25 Jan 2026 21:00:52 +0000 Manifest next update: Mon 26 Jan 2026 21:00:52 +0000 Files and hashes: 1: DX08coAiI1d4gNOPBIyBiRImQDs.crl (hash: 9X4HfOILJhCaJL6OofhagWoyJyHcgUCqZnc3B3OzCSY=) 2: rmlQHSPR8QbJ4-lSxSii48UeNZs.roa (hash: xz18D6VTlXYgx+ypy0VFWQBhdsBWNVKOCFQd2upOGqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:a4:52:4f:80:88:3a:39:9a:5a:82:44:3f:1f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7d3c72802223577880d38f048c81891226403b Validity Not Before: Jan 25 21:00:52 2026 GMT Not After : Jan 26 21:00:52 2026 GMT Subject: CN=e4d0b29a1873965c95f306426f70a11c3a45455f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d1:84:38:2a:a2:51:5a:f5:46:16:71:0e:df: e5:61:9c:b4:c1:b2:e9:0e:ec:8a:b7:2d:91:eb:7e: 08:e7:d5:83:a1:d5:8c:dd:b4:f1:4b:aa:c6:91:da: d9:83:0c:fb:af:50:d0:d5:56:0b:c9:eb:4e:1b:cb: ce:6a:b7:6c:eb:e2:22:f0:0d:bd:ac:4e:ab:b8:64: d5:b9:bd:b0:a9:7e:83:40:49:91:a3:61:55:8a:04: db:a9:eb:55:0b:1c:8d:6f:97:9d:3c:61:19:30:1a: 97:9c:b1:4c:79:82:c2:75:2b:24:f6:70:72:89:6a: 43:1f:cd:ce:6d:19:e9:10:c6:f1:61:0e:fe:c0:34: 28:0a:f6:9a:e3:f5:bf:ba:b4:71:af:3c:28:49:a7: fd:71:31:03:7b:23:7b:b6:36:bc:0f:9f:a6:97:e0: 52:3c:9e:ef:32:41:a8:4d:75:aa:d3:12:02:84:d7: 49:4c:fe:09:59:13:4a:c9:88:06:6f:4d:77:6f:be: 46:37:40:b5:9a:85:c4:1f:77:05:30:47:99:31:fb: 95:63:f4:74:49:3d:22:ae:04:57:ee:c7:4b:b1:19: 6c:5d:02:ce:93:d8:4c:ae:fb:65:3e:f2:06:9f:2a: 5f:66:84:69:03:d4:f1:ae:8d:8b:3c:fe:69:aa:27: 46:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D0:B2:9A:18:73:96:5C:95:F3:06:42:6F:70:A1:1C:3A:45:45:5F X509v3 Authority Key Identifier: keyid:0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7d:92:2d:35:06:11:3a:dd:d8:7e:9f:64:f4:6c:ce:3a:9f: 31:8e:4d:3e:5c:66:54:48:e5:06:a4:e0:83:4f:8b:c8:eb:11: 28:e2:b5:29:f0:ab:81:54:c7:ce:f6:b8:b3:bd:68:9e:ff:5b: 6e:06:22:3c:15:dc:6a:61:c8:33:5f:97:15:0d:77:5c:c1:80: 36:e0:f7:05:80:71:81:81:da:f5:8e:8f:89:07:d9:af:76:9c: 80:7f:6c:ba:b4:b0:b2:8f:f4:28:b6:6a:8d:e0:60:65:b5:54: db:b9:8f:7a:2a:f3:47:f1:34:45:10:1c:d9:26:36:26:37:6b: df:35:46:3f:6d:6b:62:8d:76:47:ae:00:15:b5:9b:f4:da:d4: 77:8b:81:b6:d3:dd:b5:6d:08:94:5f:84:aa:61:bd:a9:c8:c0: 3e:ea:61:72:1e:24:40:5d:35:d7:6e:e8:5b:30:6d:66:98:5f: 5e:fd:76:36:f6:7f:dd:8d:43:31:e3:cd:46:4e:07:bc:aa:ae: c1:44:60:c6:08:68:cd:d2:98:e9:10:f8:cb:ad:4e:29:c9:43: d9:27:15:3e:0f:3c:74:0d:a5:c8:b5:3d:7e:a3:11:cb:19:64: ea:1e:65:57:01:77:44:0d:ab:4b:2c:f9:93:57:9d:78:d2:22: a1:aa:c3:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29aRST4CIOjmaWoJEPx8IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkN2QzYzcyODAyMjIzNTc3ODgwZDM4ZjA0OGM4MTg5MTIy NjQwM2IwHhcNMjYwMTI1MjEwMDUyWhcNMjYwMTI2MjEwMDUyWjAzMTEwLwYDVQQD EyhlNGQwYjI5YTE4NzM5NjVjOTVmMzA2NDI2ZjcwYTExYzNhNDU0NTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNGEOCqiUVr1RhZxDt/lYZy0wbLp DuyKty2R634I59WDodWM3bTxS6rGkdrZgwz7r1DQ1VYLyetOG8vOards6+Ii8A29 rE6ruGTVub2wqX6DQEmRo2FVigTbqetVCxyNb5edPGEZMBqXnLFMeYLCdSsk9nBy iWpDH83ObRnpEMbxYQ7+wDQoCvaa4/W/urRxrzwoSaf9cTEDeyN7tja8D5+ml+BS PJ7vMkGoTXWq0xIChNdJTP4JWRNKyYgGb013b75GN0C1moXEH3cFMEeZMfuVY/R0 ST0irgRX7sdLsRlsXQLOk9hMrvtlPvIGnypfZoRpA9Txro2LPP5pqidGywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTQspoYc5ZclfMGQm9woRw6RUVfMB8GA1UdIwQY MBaAFA19PHKAIiNXeIDTjwSMgYkSJkA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFgwOGNvQWlJMWQ0Z05PUEJJeUJpUkltUURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80MGU2NTUtYTJhYy00MjUyLTk0Mzct ODY0ZmRiYzc5NzcwLzEvRFgwOGNvQWlJMWQ0Z05PUEJJeUJpUkltUURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi80MGU2NTUtYTJhYy00MjUyLTk0MzctODY0ZmRiYzc5Nzcw LzEvRFgwOGNvQWlJMWQ0Z05PUEJJeUJpUkltUURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX32SLTUG ETrd2H6fZPRszjqfMY5NPlxmVEjlBqTgg0+LyOsRKOK1KfCrgVTHzva4s71onv9b bgYiPBXcamHIM1+XFQ13XMGANuD3BYBxgYHa9Y6PiQfZr3acgH9surSwso/0KLZq jeBgZbVU27mPeirzR/E0RRAc2SY2Jjdr3zVGP21rYo12R64AFbWb9NrUd4uBttPd tW0IlF+EqmG9qcjAPuphch4kQF01127oWzBtZphfXv12NvZ/3Y1DMePNRk4HvKqu wURgxghozdKY6RD4y61OKclD2ScVPg88dA2lyLU9fqMRyxlk6h5lVwF3RA2rSyz5 k1edeNIioarDvA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:31:59 2026 by rpki-client