This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft File: dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft (raw, json) Hash identifier: guMEGMiggEcWeuGfLWmwQtJ+geHhMgFsUaLCmPbI+rc= Subject key identifier: D2:91:32:E9:9E:88:F1:5F:F5:D9:DC:12:15:11:4A:6D:85:CC:93:8C Authority key identifier: 74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A Certificate issuer: /CN=740f65f302335baa90ed81c05384d53f2332391a Certificate serial: 019BF7D27FDDDB62B0D9C3D07A2F1D08C36E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft Manifest number: 0900 Signing time: Mon 26 Jan 2026 01:02:06 +0000 Manifest this update: Mon 26 Jan 2026 01:02:06 +0000 Manifest next update: Tue 27 Jan 2026 01:02:06 +0000 Files and hashes: 1: 60AgYXI0MVWEVUOzuDwIpQcFWrE.roa (hash: 1Lj/1bPCIRRdQ0zsLEkl5mAqw0n7NxUgu4JklwVrAAs=) 2: dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl (hash: EElmFQ7ruShL6pap4MbePnL7Pz0gm770gJqHNpM8128=) 3: dhhgDn01VBGU33txgYz8NBfOFn0.asa (hash: LohB167OFmIaspaV8SsKY8hSV57AJZzngteLMm6LIZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:7f:dd:db:62:b0:d9:c3:d0:7a:2f:1d:08:c3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=740f65f302335baa90ed81c05384d53f2332391a Validity Not Before: Jan 26 01:02:06 2026 GMT Not After : Jan 27 01:02:06 2026 GMT Subject: CN=d29132e99e88f15ff5d9dc1215114a6d85cc938c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:6d:7a:57:d7:71:41:0a:96:b5:11:ea:6c: aa:45:d6:ca:41:bb:9a:78:4e:ad:02:b0:f5:ef:6c: fe:b1:37:f1:56:cf:8b:7d:a7:5c:9c:b8:83:73:11: 21:4f:15:28:02:e7:25:78:b8:15:4c:49:06:b0:85: 12:b8:67:f8:e4:c2:14:4a:c2:b7:01:f7:61:06:41: 24:2d:e1:b9:70:4b:e9:35:a0:5e:5c:e4:70:54:f7: 0a:07:05:c3:d2:d9:55:59:05:a4:72:ab:6a:25:ce: e0:bd:f5:a2:cf:a7:3a:9a:ba:f6:65:e1:cb:be:e3: 39:35:0c:dc:56:77:65:07:05:bf:33:aa:08:60:3c: 86:b6:59:47:f5:29:f1:ed:d5:37:89:db:75:f6:1b: c7:12:07:ee:78:93:ac:69:ba:5e:e2:30:a3:a7:35: 7b:39:07:cc:e3:15:64:85:e9:17:9e:b7:5a:c9:1f: da:a4:2a:72:40:25:c6:e8:d4:b5:fb:cc:9a:a2:38: 53:e6:31:99:07:77:fe:dc:25:9c:8a:52:1d:16:de: bc:53:17:6d:26:04:b8:99:54:cd:a1:6d:70:11:cb: 82:77:09:f4:30:3d:de:9b:4c:27:20:5b:c2:54:51: a4:49:bf:08:1d:9c:32:2f:56:7d:cc:25:35:d0:d4: 4d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:91:32:E9:9E:88:F1:5F:F5:D9:DC:12:15:11:4A:6D:85:CC:93:8C X509v3 Authority Key Identifier: keyid:74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:0d:1a:4b:c8:00:bb:31:11:dc:14:5c:34:75:ea:0d:c5:48: 4a:cb:48:d3:b8:b3:e3:08:f7:e9:98:01:8e:55:bc:9f:ea:77: 90:3e:f1:ba:87:c0:9b:57:88:e4:d4:97:67:ee:9a:7d:67:f0: b7:09:7c:84:d7:86:6b:29:dd:07:9c:e0:1e:d2:45:ac:86:86: 7d:14:30:fe:16:ac:b9:a7:16:b2:c6:8b:45:2d:83:20:56:70: 9c:c6:68:e3:57:fc:ef:29:79:2c:8f:5e:cb:21:74:ca:a2:2f: 88:5a:67:44:24:07:53:d9:c5:10:ba:87:12:2c:81:40:7b:4b: 24:35:24:20:83:70:f1:02:3b:9e:62:17:a0:1b:25:8e:b9:e0: f3:9b:97:c4:15:f3:c5:6b:a3:c4:9b:d7:d5:72:b6:36:73:5b: c0:4d:27:47:d4:a3:f1:c2:9f:a5:b1:4c:58:26:72:95:9a:ac: 8e:89:83:84:f3:a1:09:dc:d0:26:e5:58:2e:e1:43:ec:57:99: 78:f6:59:ff:1b:f8:f8:f1:bc:4b:fe:2d:ee:e0:42:9e:58:e0: b9:3f:78:61:56:0e:46:10:36:c1:8e:af:fc:aa:44:d4:f6:3a: c8:a8:c0:45:45:6b:38:43:8d:aa:ff:01:06:e8:c4:54:35:d1: c8:65:00:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30n/d22Kw2cPQei8dCMNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MGY2NWYzMDIzMzViYWE5MGVkODFjMDUzODRkNTNmMjMz MjM5MWEwHhcNMjYwMTI2MDEwMjA2WhcNMjYwMTI3MDEwMjA2WjAzMTEwLwYDVQQD EyhkMjkxMzJlOTllODhmMTVmZjVkOWRjMTIxNTExNGE2ZDg1Y2M5MzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiZtelfXcUEKlrUR6myqRdbKQbua eE6tArD172z+sTfxVs+LfadcnLiDcxEhTxUoAucleLgVTEkGsIUSuGf45MIUSsK3 AfdhBkEkLeG5cEvpNaBeXORwVPcKBwXD0tlVWQWkcqtqJc7gvfWiz6c6mrr2ZeHL vuM5NQzcVndlBwW/M6oIYDyGtllH9Snx7dU3idt19hvHEgfueJOsabpe4jCjpzV7 OQfM4xVkhekXnrdayR/apCpyQCXG6NS1+8yaojhT5jGZB3f+3CWcilIdFt68Uxdt JgS4mVTNoW1wEcuCdwn0MD3em0wnIFvCVFGkSb8IHZwyL1Z9zCU10NRNyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKRMumeiPFf9dncEhURSm2FzJOMMB8GA1UdIwQY MBaAFHQPZfMCM1uqkO2BwFOE1T8jMjkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEE5bDh3SXpXNnFRN1lIQVU0VFZQeU15T1JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zYjFjMWYtMmQ4Yy00ODYxLWI3MWQt ZDAzYTJjNDM1YWVjLzEvZEE5bDh3SXpXNnFRN1lIQVU0VFZQeU15T1JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8zYjFjMWYtMmQ4Yy00ODYxLWI3MWQtZDAzYTJjNDM1YWVj LzEvZEE5bDh3SXpXNnFRN1lIQVU0VFZQeU15T1JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOg0aS8gA uzER3BRcNHXqDcVISstI07iz4wj36ZgBjlW8n+p3kD7xuofAm1eI5NSXZ+6afWfw twl8hNeGayndB5zgHtJFrIaGfRQw/hasuacWssaLRS2DIFZwnMZo41f87yl5LI9e yyF0yqIviFpnRCQHU9nFELqHEiyBQHtLJDUkIINw8QI7nmIXoBsljrng85uXxBXz xWujxJvX1XK2NnNbwE0nR9Sj8cKfpbFMWCZylZqsjomDhPOhCdzQJuVYLuFD7FeZ ePZZ/xv4+PG8S/4t7uBCnljguT94YVYORhA2wY6v/KpE1PY6yKjARUVrOEONqv8B BujEVDXRyGUArA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:53:20 2026 by rpki-client