This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft File: dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft (raw, json) Hash identifier: S25WGf3wIG3avIyLl2yS7XZJNNHxfcUZH578k3I2x6g= Subject key identifier: 67:3D:8C:CA:30:A8:BB:CC:60:71:25:FD:27:62:6C:3F:F3:0F:C6:C3 Authority key identifier: 75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D Certificate issuer: /CN=75535bade37a3d6fc380442a285e157b984ca91d Certificate serial: 019BF651AB788FF7A19C80F003B765CE4D70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 18:01:45 +0000 Manifest this update: Sun 25 Jan 2026 18:01:45 +0000 Manifest next update: Mon 26 Jan 2026 18:01:45 +0000 Files and hashes: 1: OyLfbjr156VI2R6lu1s2sko4xuQ.roa (hash: wsr92dwS2psbt7DS2shBW+KX6UaQH5WPGbSf3r4UrZg=) 2: dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl (hash: YW9ltH9UCGP4nUw0wdbJsrjcbay5OVI6G/RdN2iI7EQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:ab:78:8f:f7:a1:9c:80:f0:03:b7:65:ce:4d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75535bade37a3d6fc380442a285e157b984ca91d Validity Not Before: Jan 25 18:01:45 2026 GMT Not After : Jan 26 18:01:45 2026 GMT Subject: CN=673d8cca30a8bbcc607125fd27626c3ff30fc6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a4:12:47:06:1d:6b:8c:8a:e8:34:4f:fd:42: 37:b1:92:4f:05:76:1e:0b:55:c1:30:02:de:01:4a: 4a:fe:37:96:9e:c8:92:a8:a9:33:6f:37:dc:95:f1: 03:dc:61:b4:e0:ed:35:33:15:4a:10:ec:90:52:57: 88:c3:82:10:6b:8d:05:ba:12:0a:a5:b1:e6:06:66: 83:59:2b:fe:ac:4b:e1:05:23:22:b1:1c:9a:c6:e4: e3:aa:0d:d1:57:5b:ce:59:37:6e:30:bd:0c:d2:d9: f4:26:ba:59:25:d6:7b:57:fb:b1:37:22:c1:15:48: 6c:c1:b9:a8:c6:83:d3:cc:56:9a:3d:80:22:0c:ae: 44:94:2d:7b:42:a1:65:17:da:97:0a:35:13:33:97: 01:d0:6e:f0:28:ba:eb:8f:4e:39:be:ca:b9:6c:93: ea:8a:84:4d:5c:64:d8:bb:f6:04:e7:0a:00:15:62: 82:94:f2:75:9d:b2:ee:b6:63:10:44:a8:56:f1:ba: 7b:b2:e6:6a:65:06:03:7f:24:33:5b:87:7b:0d:83: fe:02:ef:21:e8:32:10:98:f8:ba:1a:9a:6f:94:b2: f1:93:86:c2:93:2b:3e:51:d6:ac:31:0f:ca:74:12: 84:57:75:9b:74:57:31:a3:8a:c4:04:52:ff:bd:32: 06:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3D:8C:CA:30:A8:BB:CC:60:71:25:FD:27:62:6C:3F:F3:0F:C6:C3 X509v3 Authority Key Identifier: keyid:75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:93:9b:ec:f2:4a:8a:eb:88:e1:66:b2:5f:9e:8a:de:2c:e6: 1a:4b:8d:92:14:17:f4:59:5b:51:81:0e:01:c5:ec:95:92:d8: cb:03:43:c7:83:20:d5:fd:f6:ab:c3:31:20:b0:25:67:d2:f5: 7f:3a:06:0b:ab:b4:9e:c0:dd:85:57:13:45:84:68:9d:dc:e8: db:b8:aa:39:36:9d:76:a2:3f:b8:58:5b:d1:f0:0f:f3:7f:15: 98:2f:87:72:7d:e2:01:85:f0:d5:2f:d2:87:74:cc:55:4f:63: 96:e1:ee:2b:1d:ec:db:39:f9:d2:27:d6:9e:23:96:45:3d:89: d5:5c:fe:22:f5:6e:73:06:89:0a:c2:f5:3a:8c:55:77:73:40: ed:6c:57:85:0a:da:17:55:3e:63:f1:9b:05:85:fe:72:28:a9: ae:99:ef:95:c0:e8:55:27:37:18:7a:f2:2c:7c:2b:4e:b0:ec: 86:a4:57:2c:49:85:f6:f7:65:4a:78:26:40:e4:4c:fc:5a:f9: ec:f7:1a:db:9f:7c:1f:d5:ff:7d:1d:fc:e2:04:5d:3d:f4:69: 34:88:a7:e2:fc:88:14:fb:68:54:08:94:46:58:8e:db:90:7d: 7a:d1:84:dd:cd:be:07:f8:33:07:14:2c:33:42:39:46:8a:b5: ed:e9:73:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Uat4j/ehnIDwA7dlzk1wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTM1YmFkZTM3YTNkNmZjMzgwNDQyYTI4NWUxNTdiOTg0 Y2E5MWQwHhcNMjYwMTI1MTgwMTQ1WhcNMjYwMTI2MTgwMTQ1WjAzMTEwLwYDVQQD Eyg2NzNkOGNjYTMwYThiYmNjNjA3MTI1ZmQyNzYyNmMzZmYzMGZjNmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66QSRwYda4yK6DRP/UI3sZJPBXYe C1XBMALeAUpK/jeWnsiSqKkzbzfclfED3GG04O01MxVKEOyQUleIw4IQa40FuhIK pbHmBmaDWSv+rEvhBSMisRyaxuTjqg3RV1vOWTduML0M0tn0JrpZJdZ7V/uxNyLB FUhswbmoxoPTzFaaPYAiDK5ElC17QqFlF9qXCjUTM5cB0G7wKLrrj045vsq5bJPq ioRNXGTYu/YE5woAFWKClPJ1nbLutmMQRKhW8bp7suZqZQYDfyQzW4d7DYP+Au8h 6DIQmPi6GppvlLLxk4bCkys+UdasMQ/KdBKEV3WbdFcxo4rEBFL/vTIGcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGc9jMowqLvMYHEl/SdibD/zD8bDMB8GA1UdIwQY MBaAFHVTW63jej1vw4BEKiheFXuYTKkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZOYnJlTjZQV19EZ0VRcUtGNFZlNWhNcVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yZjMzOWItZjE5Zi00NTJmLTg4YmUt MjlmZmM0NDQzOTAxLzEvZFZOYnJlTjZQV19EZ0VRcUtGNFZlNWhNcVIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yZjMzOWItZjE5Zi00NTJmLTg4YmUtMjlmZmM0NDQzOTAx LzEvZFZOYnJlTjZQV19EZ0VRcUtGNFZlNWhNcVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZOb7PJK iuuI4WayX56K3izmGkuNkhQX9FlbUYEOAcXslZLYywNDx4Mg1f32q8MxILAlZ9L1 fzoGC6u0nsDdhVcTRYRondzo27iqOTaddqI/uFhb0fAP838VmC+Hcn3iAYXw1S/S h3TMVU9jluHuKx3s2zn50ifWniOWRT2J1Vz+IvVucwaJCsL1OoxVd3NA7WxXhQra F1U+Y/GbBYX+ciiprpnvlcDoVSc3GHryLHwrTrDshqRXLEmF9vdlSngmQORM/Fr5 7Pca2598H9X/fR384gRdPfRpNIin4vyIFPtoVAiURliO25B9etGE3c2+B/gzBxQs M0I5Roq17elzOA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:36:40 2026 by rpki-client