This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft File: DUxrauUAB3adKNmJcNJPvO4bo5A.mft (raw, json) Hash identifier: YTTuCZKgQLI4+I+j6nbjhytneOmtmQ5vzOXM5fq4HuU= Subject key identifier: A1:2A:18:02:E1:7D:AB:D4:40:A3:FD:24:1B:20:CB:9C:67:91:52:A5 Authority key identifier: 0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90 Certificate issuer: /CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390 Certificate serial: 019BF61A4518D0A2417652AB7A73FCD4CA1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft Manifest number: 01AE Signing time: Sun 25 Jan 2026 17:01:15 +0000 Manifest this update: Sun 25 Jan 2026 17:01:15 +0000 Manifest next update: Mon 26 Jan 2026 17:01:15 +0000 Files and hashes: 1: DUxrauUAB3adKNmJcNJPvO4bo5A.crl (hash: pFIiQHwwyhOzT/3L/y4/U+QgRUvXV7J3qZGfNMnoqms=) 2: OUFJxy-s9TAVicg_TPyt24njjok.roa (hash: CcCuuymnsKxCH+FKsnrcE8VI1Z4HjrKesHC84Px54Dk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:45:18:d0:a2:41:76:52:ab:7a:73:fc:d4:ca:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390 Validity Not Before: Jan 25 17:01:15 2026 GMT Not After : Jan 26 17:01:15 2026 GMT Subject: CN=a12a1802e17dabd440a3fd241b20cb9c679152a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e5:e2:2f:94:f3:64:c3:b0:99:c6:e0:9d:68: 02:36:29:77:57:b1:b0:f5:09:a4:d8:b8:a1:58:81: 78:10:a7:4c:bf:c9:8e:c5:ff:93:54:76:ae:63:9f: 15:39:77:3a:8b:be:89:37:a5:18:3c:dc:23:72:db: 01:71:29:d5:e4:fc:90:ac:ab:01:18:e6:89:c1:61: 2c:09:be:db:f5:92:d0:d0:97:73:05:29:8a:c2:fa: 8c:5f:b6:d9:a1:ae:20:21:3c:cf:9a:5d:dc:22:bb: fa:f6:00:d3:61:25:88:f3:1f:d5:7d:29:cb:af:1e: 69:c9:52:a5:d4:db:e9:39:f0:c3:de:0a:c1:f4:26: 74:b4:da:44:6d:81:19:3e:36:20:da:22:99:02:c7: 5b:26:4f:e4:e2:cb:ae:3a:49:2c:24:c5:fd:4f:91: a7:d5:ce:ee:9e:99:0b:8a:0e:0f:31:f7:64:d9:25: 4a:2c:32:0a:ad:e7:db:55:07:2d:ef:ba:6b:3e:1c: 65:69:23:78:2d:81:d0:82:03:bf:4c:41:a4:16:5d: 55:01:ed:5c:5e:54:ec:f1:1c:c0:1f:48:23:b7:a6: dc:a6:f9:a5:d6:35:d2:c3:5b:1d:4b:bd:50:09:e9: 91:e3:c0:44:a9:f9:7e:78:7f:d1:5f:12:06:5e:51: b1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2A:18:02:E1:7D:AB:D4:40:A3:FD:24:1B:20:CB:9C:67:91:52:A5 X509v3 Authority Key Identifier: keyid:0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:48:1c:ab:07:23:78:da:50:16:a2:22:d1:af:8a:88:3d:8b: f3:75:2d:9b:fa:3f:50:9c:54:26:0e:50:dd:c4:94:8d:b9:11: 40:ec:bf:6f:66:a1:b8:b4:13:41:eb:7f:57:5b:29:b1:67:69: 57:af:11:40:11:00:80:ca:f8:ca:43:fd:d3:51:00:b7:ee:25: 0b:30:ca:e4:2b:5d:ef:e5:64:f9:85:6b:e4:fe:13:f0:39:82: a1:0d:58:6b:e0:a9:5d:08:5e:58:58:ed:aa:8e:ec:5f:14:c9: 0c:62:4a:3c:be:b3:91:8d:6b:bd:c8:ee:5a:f1:b8:45:b7:2a: bf:da:8e:43:81:ce:d2:c5:65:fc:d3:5c:85:3a:91:7c:1c:02: 52:65:d0:93:5e:eb:ea:d9:6e:5c:f8:79:ce:de:72:5e:f1:92: 91:c7:d6:95:b3:3b:10:1a:f1:9d:b7:1b:20:d8:68:ad:ab:e9: 92:85:60:38:fb:ca:60:26:87:3c:08:ce:7e:2d:aa:54:4d:8c: 28:22:27:eb:9e:66:ef:94:76:59:7d:01:2f:25:89:78:25:18: 6e:48:9a:6c:19:61:79:53:9d:7e:c7:3a:32:8b:ff:52:47:bd: ba:57:34:95:9b:3f:ce:c2:bd:a4:31:63:a2:e3:3a:65:3f:1a: 69:f1:f3:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GkUY0KJBdlKrenP81MofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNGM2YjZhZTUwMDA3NzY5ZDI4ZDk4OTcwZDI0ZmJjZWUx YmEzOTAwHhcNMjYwMTI1MTcwMTE1WhcNMjYwMTI2MTcwMTE1WjAzMTEwLwYDVQQD EyhhMTJhMTgwMmUxN2RhYmQ0NDBhM2ZkMjQxYjIwY2I5YzY3OTE1MmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uXiL5TzZMOwmcbgnWgCNil3V7Gw 9Qmk2LihWIF4EKdMv8mOxf+TVHauY58VOXc6i76JN6UYPNwjctsBcSnV5PyQrKsB GOaJwWEsCb7b9ZLQ0JdzBSmKwvqMX7bZoa4gITzPml3cIrv69gDTYSWI8x/VfSnL rx5pyVKl1NvpOfDD3grB9CZ0tNpEbYEZPjYg2iKZAsdbJk/k4suuOkksJMX9T5Gn 1c7unpkLig4PMfdk2SVKLDIKrefbVQct77prPhxlaSN4LYHQggO/TEGkFl1VAe1c XlTs8RzAH0gjt6bcpvml1jXSw1sdS71QCemR48BEqfl+eH/RXxIGXlGxswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEqGALhfavUQKP9JBsgy5xnkVKlMB8GA1UdIwQY MBaAFA1Ma2rlAAd2nSjZiXDST7zuG6OQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFV4cmF1VUFCM2FkS05tSmNOSlB2TzRibzVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82MzY2N2ItN2EyNS00NDBmLTg0Zjkt MmFiOTU4N2U1ZjFkLzEvRFV4cmF1VUFCM2FkS05tSmNOSlB2TzRibzVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82MzY2N2ItN2EyNS00NDBmLTg0ZjktMmFiOTU4N2U1ZjFk LzEvRFV4cmF1VUFCM2FkS05tSmNOSlB2TzRibzVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUgcqwcj eNpQFqIi0a+KiD2L83Utm/o/UJxUJg5Q3cSUjbkRQOy/b2ahuLQTQet/V1spsWdp V68RQBEAgMr4ykP901EAt+4lCzDK5Ctd7+Vk+YVr5P4T8DmCoQ1Ya+CpXQheWFjt qo7sXxTJDGJKPL6zkY1rvcjuWvG4Rbcqv9qOQ4HO0sVl/NNchTqRfBwCUmXQk17r 6tluXPh5zt5yXvGSkcfWlbM7EBrxnbcbINhoravpkoVgOPvKYCaHPAjOfi2qVE2M KCIn655m75R2WX0BLyWJeCUYbkiabBlheVOdfsc6Mov/Uke9ulc0lZs/zsK9pDFj ouM6ZT8aafHzwA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:19:37 2026 by rpki-client