This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft File: drtZ2KtKtSd87uX_CYIIQzBiex8.mft (raw, json) Hash identifier: dJ4+YQPKlIkxCAvGMvCTacxvb4D9n0Mk2hU8C6rZDRg= Subject key identifier: 09:B9:2F:F1:6D:E7:2D:CD:96:CF:41:D5:55:D8:A3:58:C6:43:68:24 Authority key identifier: 76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F Certificate issuer: /CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f Certificate serial: 019BF6BEE2A7E25EA72420E5C2397F6F7FE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft Manifest number: 029D Signing time: Sun 25 Jan 2026 20:01:03 +0000 Manifest this update: Sun 25 Jan 2026 20:01:03 +0000 Manifest next update: Mon 26 Jan 2026 20:01:03 +0000 Files and hashes: 1: drtZ2KtKtSd87uX_CYIIQzBiex8.crl (hash: oONawmFBGv/oL81FM3Ig4ifpkwe04bfVSzk3CHFc96g=) 2: lYVVRT8ck9hIF_wE0rPLM9h8sl4.roa (hash: nOQ76WC5KxHith3R9t77yLyg4sKQCt1T2XSdiC50P2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:e2:a7:e2:5e:a7:24:20:e5:c2:39:7f:6f:7f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f Validity Not Before: Jan 25 20:01:03 2026 GMT Not After : Jan 26 20:01:03 2026 GMT Subject: CN=09b92ff16de72dcd96cf41d555d8a358c6436824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e7:a4:81:52:e6:20:02:9e:e4:e3:37:6e:e6: ff:ac:d0:87:1f:38:e3:7b:67:ff:63:c8:0b:e7:91: 9d:80:1e:19:f2:63:11:ff:ac:25:fe:bf:5d:a7:bc: 0f:12:ce:c2:9c:8a:c4:c9:35:e8:2f:5a:09:36:fa: de:4e:71:58:15:41:eb:78:62:2a:64:82:24:2a:20: 5b:aa:1c:6b:47:b4:71:75:e5:e3:99:a4:50:e3:70: 1d:c7:72:73:57:34:43:1f:73:9a:93:de:79:41:3c: c6:cc:6d:97:1e:ca:98:a6:e0:ba:72:79:03:dc:60: 2e:8a:04:fa:c5:21:12:8a:7a:a9:f6:c2:09:5f:12: 50:86:1a:d4:a1:99:f2:04:4c:1b:4a:f5:1f:5d:94: 59:36:18:6a:9f:0f:e1:46:61:e7:2e:c3:a9:d7:4a: 82:d6:61:5d:3d:29:25:ff:2e:92:01:d6:35:36:ff: ad:21:6e:39:6e:68:99:49:51:a8:61:8c:5c:6b:7e: 4d:8f:4b:5a:b6:25:07:a7:d1:84:4b:d7:ca:6b:c8: d5:8a:8e:36:41:13:ae:91:53:c7:1e:99:14:38:81: 5a:25:2d:9a:a0:e8:8b:2a:05:c7:fc:31:41:82:58: f0:12:4e:54:7a:22:c7:dc:c7:20:f4:ed:b6:ce:ba: 56:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B9:2F:F1:6D:E7:2D:CD:96:CF:41:D5:55:D8:A3:58:C6:43:68:24 X509v3 Authority Key Identifier: keyid:76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ae:7c:96:3d:c5:17:b7:05:26:85:2a:b1:3b:90:7b:f8:ab: 88:a0:07:79:8f:9a:e4:1c:3d:b6:75:74:55:39:d0:e1:78:1c: 42:dc:1a:d9:1d:1d:ac:19:b5:f0:56:14:38:9b:3a:1c:b5:6f: fa:ce:56:3e:ce:c2:04:6a:9a:58:88:09:4d:2b:6e:96:53:58: 67:bd:fa:86:7f:6c:48:10:a8:42:ac:19:3a:74:d2:91:02:dd: 89:f4:49:37:81:f7:d3:a3:58:af:0f:8a:e0:0f:3a:00:71:07: dc:ec:f8:3b:64:9d:06:28:64:88:1d:8a:18:6e:d1:ae:ec:c2: 2e:ac:a0:b9:14:41:23:47:f6:5d:58:94:4c:ab:78:05:74:d6: 10:c0:55:dd:66:41:a2:b4:2f:5d:9d:78:66:71:2c:45:05:15: 69:d0:cc:f1:4e:67:ee:35:47:57:0e:37:f0:c7:17:d4:75:69: 1d:18:d4:c7:69:1a:a5:11:ba:fe:0b:3d:98:53:7c:0c:7a:eb: 73:6d:50:80:bf:6d:5f:12:81:b1:e7:b9:f3:12:13:06:22:a8: 1a:d2:8b:3a:d9:9d:6e:5e:47:3d:98:c7:87:a5:3d:ff:e1:6e: 77:5b:83:d9:c4:ad:15:28:4d:80:24:5d:b2:e2:d4:ee:40:4f: fe:73:99:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vuKn4l6nJCDlwjl/b3/oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YmI1OWQ4YWI0YWI1Mjc3Y2VlZTVmZjA5ODIwODQzMzA2 MjdiMWYwHhcNMjYwMTI1MjAwMTAzWhcNMjYwMTI2MjAwMTAzWjAzMTEwLwYDVQQD EygwOWI5MmZmMTZkZTcyZGNkOTZjZjQxZDU1NWQ4YTM1OGM2NDM2ODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+ekgVLmIAKe5OM3bub/rNCHHzjj e2f/Y8gL55GdgB4Z8mMR/6wl/r9dp7wPEs7CnIrEyTXoL1oJNvreTnFYFUHreGIq ZIIkKiBbqhxrR7RxdeXjmaRQ43Adx3JzVzRDH3Oak955QTzGzG2XHsqYpuC6cnkD 3GAuigT6xSESinqp9sIJXxJQhhrUoZnyBEwbSvUfXZRZNhhqnw/hRmHnLsOp10qC 1mFdPSkl/y6SAdY1Nv+tIW45bmiZSVGoYYxca35Nj0tatiUHp9GES9fKa8jVio42 QROukVPHHpkUOIFaJS2aoOiLKgXH/DFBgljwEk5UeiLH3Mcg9O22zrpWqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAm5L/Ft5y3Nls9B1VXYo1jGQ2gkMB8GA1UdIwQY MBaAFHa7WdirSrUnfO7l/wmCCEMwYnsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHJ0WjJLdEt0U2Q4N3VYX0NZSUlRekJpZXg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS84MmQ2NWUtZTBkOS00ZmNkLWIzYWUt NGQzYTVjMDQyZTYxLzEvZHJ0WjJLdEt0U2Q4N3VYX0NZSUlRekJpZXg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS84MmQ2NWUtZTBkOS00ZmNkLWIzYWUtNGQzYTVjMDQyZTYx LzEvZHJ0WjJLdEt0U2Q4N3VYX0NZSUlRekJpZXg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG658lj3F F7cFJoUqsTuQe/iriKAHeY+a5Bw9tnV0VTnQ4XgcQtwa2R0drBm18FYUOJs6HLVv +s5WPs7CBGqaWIgJTStullNYZ736hn9sSBCoQqwZOnTSkQLdifRJN4H306NYrw+K 4A86AHEH3Oz4O2SdBihkiB2KGG7RruzCLqyguRRBI0f2XViUTKt4BXTWEMBV3WZB orQvXZ14ZnEsRQUVadDM8U5n7jVHVw438McX1HVpHRjUx2kapRG6/gs9mFN8DHrr c21QgL9tXxKBsee58xITBiKoGtKLOtmdbl5HPZjHh6U9/+Fud1uD2cStFShNgCRd suLU7kBP/nOZkg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:58 2026 by rpki-client