This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft File: dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json) Hash identifier: S6YASKqITEwQCd9PGRhqpay+eCTTGla9iq4S8qxHIrM= Subject key identifier: 39:23:71:90:82:D0:69:6A:74:45:E6:EB:6F:3D:E7:3C:DC:73:D2:F4 Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0 Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0 Certificate serial: 019BF6F5B5BF2409237026BA581AAEE739D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 21:00:56 +0000 Manifest this update: Sun 25 Jan 2026 21:00:56 +0000 Manifest next update: Mon 26 Jan 2026 21:00:56 +0000 Files and hashes: 1: H7fYzgAywiwtcT8-20X5WOux6fs.roa (hash: h+Uh5Kz1qJdgzCKaZAX98ps/QJeCnLPBc45Zv+eXiYA=) 2: cHfaPvW5Vud_9pj79Xxvj7kuddE.roa (hash: bGFOgs4ZrshgcJyva0SGzm2fyOyJP6p6s4rmZXREF64=) 3: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: P9e/dbgqq9XI1LuaAF8Zie47DvznOct35HEQSeCVPCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:b5:bf:24:09:23:70:26:ba:58:1a:ae:e7:39:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0 Validity Not Before: Jan 25 21:00:56 2026 GMT Not After : Jan 26 21:00:56 2026 GMT Subject: CN=3923719082d0696a7445e6eb6f3de73cdc73d2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:15:36:97:00:9f:32:92:e1:67:1f:74:de: 5f:78:13:e7:77:47:98:0e:42:34:b0:0b:5a:79:da: 9a:29:db:09:ca:ae:90:ab:13:9e:2e:70:26:29:79: d2:92:30:62:16:de:83:51:c4:23:ef:11:02:0c:f1: 67:ee:98:09:69:3d:fc:e8:17:ea:57:15:e9:18:05: 56:c1:87:7b:63:cc:cb:0c:46:5a:3a:7a:f7:ac:aa: 33:8f:f1:f4:6a:32:05:22:07:b6:0b:ba:53:d9:dc: b5:38:b9:17:95:cb:85:88:5a:b6:6a:4c:10:d9:47: 4d:e1:ad:85:71:43:cb:a4:0d:57:4c:1f:e2:3c:73: 55:6a:1b:73:95:53:39:ee:df:88:0b:13:92:9d:ab: 24:09:68:55:d9:4e:21:64:91:7e:25:bb:8a:9c:3c: 9e:a7:93:4b:96:9a:b3:3e:d0:fb:d3:b2:23:76:55: 7a:ef:22:ac:1a:d9:38:e8:be:52:79:c5:dc:35:70: 06:a9:ae:5e:9d:69:75:e2:63:aa:2c:e5:b6:90:3b: a6:e3:22:56:7e:8c:5b:84:a5:8f:92:fb:4a:5d:4e: 8a:b3:ad:87:65:ca:01:d3:2c:11:10:88:bf:6a:df: bd:6d:96:30:47:41:14:9e:0c:f4:e1:10:8f:08:2d: 8d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:23:71:90:82:D0:69:6A:74:45:E6:EB:6F:3D:E7:3C:DC:73:D2:F4 X509v3 Authority Key Identifier: keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:da:d6:c0:d4:9b:38:ea:07:be:d6:74:7f:ea:7d:aa:c7:07: bb:3b:eb:5b:a5:c1:30:dc:f4:c6:be:40:98:f1:73:86:17:db: e8:07:91:e3:63:c4:1b:05:dd:b7:46:d4:12:79:48:35:c0:6e: 36:7c:f2:76:4a:23:72:87:3d:7c:73:8a:6d:97:ab:b3:39:b6: 54:8d:73:20:2e:fb:ce:c1:dc:81:b2:49:b2:ae:07:7f:3b:c9: 11:76:53:40:fe:c4:ff:8a:d8:a2:71:2a:41:a8:62:d8:d3:3d: 6b:72:d5:25:d8:a7:d0:5c:1f:e1:f5:1b:8c:f4:07:60:50:5d: 8e:f1:2d:7a:f1:7d:6e:52:18:45:34:6c:12:9d:1c:d1:31:7b: ef:87:6f:17:c9:b4:de:77:32:b7:c6:fd:c5:25:fb:ca:82:0b: aa:5c:ab:af:94:96:9f:d9:58:3d:88:4b:24:b8:64:81:d1:87: 7b:ed:92:ac:5c:72:74:3a:ab:25:c7:86:56:dd:be:b2:e3:5d: 2e:0e:e4:4a:04:3a:f7:13:41:9b:0a:99:f6:da:7d:ab:72:d4: 0e:93:6d:82:9e:5a:b8:52:e7:4a:88:89:cc:67:f5:4f:40:31: 32:5e:d3:74:ac:36:7d:42:d8:20:17:85:9d:21:24:fa:84:63: 0d:48:3a:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29bW/JAkjcCa6WBqu5znXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1M2Q0NzZkYjk2ZGUxZTU4NjIzMTE5YTcwYjlkN2IwMGI2 NzZkYTAwHhcNMjYwMTI1MjEwMDU2WhcNMjYwMTI2MjEwMDU2WjAzMTEwLwYDVQQD EygzOTIzNzE5MDgyZDA2OTZhNzQ0NWU2ZWI2ZjNkZTczY2RjNzNkMmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw4VNpcAnzKS4WcfdN5feBPnd0eY DkI0sAtaedqaKdsJyq6QqxOeLnAmKXnSkjBiFt6DUcQj7xECDPFn7pgJaT386Bfq VxXpGAVWwYd7Y8zLDEZaOnr3rKozj/H0ajIFIge2C7pT2dy1OLkXlcuFiFq2akwQ 2UdN4a2FcUPLpA1XTB/iPHNVahtzlVM57t+ICxOSnaskCWhV2U4hZJF+JbuKnDye p5NLlpqzPtD707IjdlV67yKsGtk46L5SecXcNXAGqa5enWl14mOqLOW2kDum4yJW foxbhKWPkvtKXU6Ks62HZcoB0ywREIi/at+9bZYwR0EUngz04RCPCC2NrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkjcZCC0GlqdEXm62895zzcc9L0MB8GA1UdIwQY MBaAFHU9R225beHlhiMRmnC517ALZ22gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUt NDY4NTc4MmFjMmMzLzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUtNDY4NTc4MmFjMmMz LzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr9rWwNSb OOoHvtZ0f+p9qscHuzvrW6XBMNz0xr5AmPFzhhfb6AeR42PEGwXdt0bUEnlINcBu Nnzydkojcoc9fHOKbZerszm2VI1zIC77zsHcgbJJsq4HfzvJEXZTQP7E/4rYonEq Qahi2NM9a3LVJdin0Fwf4fUbjPQHYFBdjvEtevF9blIYRTRsEp0c0TF774dvF8m0 3ncyt8b9xSX7yoILqlyrr5SWn9lYPYhLJLhkgdGHe+2SrFxydDqrJceGVt2+suNd Lg7kSgQ69xNBmwqZ9tp9q3LUDpNtgp5auFLnSoiJzGf1T0AxMl7TdKw2fULYIBeF nSEk+oRjDUg6Wg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:52 2026 by rpki-client