This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft File: d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft (raw, json) Hash identifier: 1Ffe1T0kMwS7QiZsIeXr21HWjHc+A43NG/AxRdeEjzU= Subject key identifier: B0:0E:F0:92:97:E1:5E:25:93:84:A3:48:D7:D7:64:2F:9B:22:02:FB Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98 Certificate issuer: /CN=777c49d3f627335190e3c2ec3654e154cfd45398 Certificate serial: 019BF6879AB1EC1651397BE3A77C58CC11B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft Manifest number: 0ED2 Signing time: Sun 25 Jan 2026 19:00:40 +0000 Manifest this update: Sun 25 Jan 2026 19:00:40 +0000 Manifest next update: Mon 26 Jan 2026 19:00:40 +0000 Files and hashes: 1: 1JIM2kMeVJoHRDwhcEraJMNWzzk.roa (hash: 7HnRkqXRdr1xWTIy9iiHnk4cqifwXb86Gt3ZsfiE8YQ=) 2: d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl (hash: dOIMxeQySeGaXRO4Qh8K6FuwYuafJSKuz0ml0cs3K4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:9a:b1:ec:16:51:39:7b:e3:a7:7c:58:cc:11:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398 Validity Not Before: Jan 25 19:00:40 2026 GMT Not After : Jan 26 19:00:40 2026 GMT Subject: CN=b00ef09297e15e259384a348d7d7642f9b2202fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dc:7a:81:45:2b:f0:23:5a:f0:6e:c4:a4:db: fb:32:49:c6:03:81:9f:7b:f7:7d:b1:8a:58:78:81: 3e:2c:df:d9:b8:5e:4e:ee:cc:15:cc:52:30:ef:47: d2:61:23:15:4b:cf:a4:69:60:fe:d0:7c:68:64:67: c9:6d:78:4a:e9:d1:f4:4e:20:d3:19:dc:59:63:38: 39:4d:97:a8:4d:21:90:a4:55:a2:c6:5f:ad:42:bd: da:5b:8a:18:43:3c:d9:a7:74:62:0e:b7:ee:c2:ed: 1d:2f:c6:62:26:ed:25:bf:74:13:84:49:70:cb:ae: ce:68:fb:2c:7c:7f:b0:42:cb:db:a7:a0:5a:4e:75: 8e:dd:db:61:e4:a4:06:8d:d0:f7:40:c4:29:06:9a: 20:df:e4:9b:a1:27:9d:42:5c:2a:7a:31:32:c3:14: 35:39:dd:0d:b2:86:18:15:85:ee:d6:a1:60:28:75: 7f:99:34:4a:5c:d2:4c:48:03:de:9f:c3:ee:6c:17: b4:66:f9:94:a9:39:4e:88:aa:98:bf:b0:86:ad:58: f6:19:76:ce:fa:ce:71:56:94:a7:97:66:2c:a4:b8: 0e:ed:9a:b8:bb:68:d1:2c:00:4d:67:a9:a1:4b:53: bb:2b:8e:c4:82:d1:61:bb:42:cd:19:21:6e:bc:f8: 7c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0E:F0:92:97:E1:5E:25:93:84:A3:48:D7:D7:64:2F:9B:22:02:FB X509v3 Authority Key Identifier: keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:43:95:7e:35:04:16:63:93:4b:0a:c7:31:f9:38:47:7b:95: ec:34:1f:ba:a6:5b:d6:fa:34:95:bd:8b:98:9c:ea:34:20:01: 6c:a1:56:e6:8c:39:da:dd:e7:7a:5b:f7:3b:da:28:76:00:c4: fb:41:1a:7b:7f:7e:6d:1d:53:ce:96:60:b8:5d:15:bf:6e:41: 4b:e3:b7:9a:83:0c:9b:06:1f:03:c3:fa:03:36:af:1f:89:5f: ba:d7:71:c8:81:39:2a:bd:60:8c:59:7a:50:5d:22:6c:20:6a: ea:7b:f4:d5:c5:5c:02:54:0b:89:19:e7:0a:5d:a7:49:b0:8e: 95:f0:53:35:03:67:f0:bf:81:46:ba:62:cc:bb:eb:2c:55:bd: e3:ef:c1:94:2b:29:c3:4e:a3:bb:c8:f7:71:3d:d2:2f:d0:20: 41:61:93:fd:75:3c:1b:05:a0:d8:f0:ba:68:98:8a:a8:63:39: 19:4d:f3:86:ba:06:e7:46:d5:79:ed:79:fb:b2:3f:60:5c:2d: 06:78:8b:4f:fe:1a:69:24:8a:b2:3f:a5:d5:a4:c2:ee:6e:b0: 49:f1:5d:aa:9b:1e:af:f6:a1:50:b3:3d:c6:75:f9:e7:09:c2: 3e:9c:8a:ea:b0:a7:32:8b:5c:af:42:a1:80:07:37:36:ab:f3: 36:8e:e9:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h5qx7BZROXvjp3xYzBG4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3N2M0OWQzZjYyNzMzNTE5MGUzYzJlYzM2NTRlMTU0Y2Zk NDUzOTgwHhcNMjYwMTI1MTkwMDQwWhcNMjYwMTI2MTkwMDQwWjAzMTEwLwYDVQQD EyhiMDBlZjA5Mjk3ZTE1ZTI1OTM4NGEzNDhkN2Q3NjQyZjliMjIwMmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNx6gUUr8CNa8G7EpNv7MknGA4Gf e/d9sYpYeIE+LN/ZuF5O7swVzFIw70fSYSMVS8+kaWD+0HxoZGfJbXhK6dH0TiDT GdxZYzg5TZeoTSGQpFWixl+tQr3aW4oYQzzZp3RiDrfuwu0dL8ZiJu0lv3QThElw y67OaPssfH+wQsvbp6BaTnWO3dth5KQGjdD3QMQpBpog3+SboSedQlwqejEywxQ1 Od0NsoYYFYXu1qFgKHV/mTRKXNJMSAPen8PubBe0ZvmUqTlOiKqYv7CGrVj2GXbO +s5xVpSnl2YspLgO7Zq4u2jRLABNZ6mhS1O7K47EgtFhu0LNGSFuvPh8YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAO8JKX4V4lk4SjSNfXZC+bIgL7MB8GA1UdIwQY MBaAFHd8SdP2JzNRkOPC7DZU4VTP1FOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny81ZTdhMzEtZWU2My00MTIwLTk1MmMt Y2QyZjhjOTRmOTc0LzEvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny81ZTdhMzEtZWU2My00MTIwLTk1MmMtY2QyZjhjOTRmOTc0 LzEvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUOVfjUE FmOTSwrHMfk4R3uV7DQfuqZb1vo0lb2LmJzqNCABbKFW5ow52t3nelv3O9oodgDE +0Eae39+bR1TzpZguF0Vv25BS+O3moMMmwYfA8P6AzavH4lfutdxyIE5Kr1gjFl6 UF0ibCBq6nv01cVcAlQLiRnnCl2nSbCOlfBTNQNn8L+BRrpizLvrLFW94+/BlCsp w06ju8j3cT3SL9AgQWGT/XU8GwWg2PC6aJiKqGM5GU3zhroG50bVee15+7I/YFwt BniLT/4aaSSKsj+l1aTC7m6wSfFdqpser/ahULM9xnX55wnCPpyK6rCnMotcr0Kh gAc3NqvzNo7pYw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:19:56 2026 by rpki-client