This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft File: dLTNPt9SHfjsChURESctP7kbmcM.mft (raw, json) Hash identifier: qbXq7Z9EXPwqNL8pG2i5kZzjOXNfaLvtpJowBCSIq30= Subject key identifier: 3D:34:8F:9D:9B:E7:92:A8:F2:D0:B6:74:3A:7A:4B:57:36:7C:35:8F Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3 Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3 Certificate serial: 019BF8ADE7B1F31AE979BDE7EFE1D7FE406A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft Manifest number: 17AD Signing time: Mon 26 Jan 2026 05:01:45 +0000 Manifest this update: Mon 26 Jan 2026 05:01:45 +0000 Manifest next update: Tue 27 Jan 2026 05:01:45 +0000 Files and hashes: 1: 7C-konr-1jI82QZNm1XAAlJxwEY.roa (hash: gJh2444HZN/6r7QL5RbtW3Wyf/LED6tVxIEbkkpYNb4=) 2: VISbwQPxKE4ZMWN4N2M-Ot4MfO4.roa (hash: 31aRf+y4KMCXXKPf61vmEKuD5SrxcJx1XR4Sfcx1mPk=) 3: d1KZjcdpNHIYVpiceFKi35WBNOI.roa (hash: bhgrHFOFhyZ/ACw8GjeBW0aMegg7PL6RgkmabbugbK8=) 4: dLTNPt9SHfjsChURESctP7kbmcM.crl (hash: hs029oL4PqrTD09YrNogB6kqWHAuxeSXi3iJZTr0Vpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:e7:b1:f3:1a:e9:79:bd:e7:ef:e1:d7:fe:40:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3 Validity Not Before: Jan 26 05:01:45 2026 GMT Not After : Jan 27 05:01:45 2026 GMT Subject: CN=3d348f9d9be792a8f2d0b6743a7a4b57367c358f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:47:14:34:67:18:d5:d4:fd:c0:81:de:cd:55: cb:3a:48:fd:8e:d6:03:75:a9:52:b9:12:39:64:8d: 16:df:e0:e0:08:06:2e:8c:c8:e1:65:25:72:55:36: 87:cb:15:bf:f5:ba:8b:7a:a9:c4:5c:15:ca:96:28: 08:1f:d2:f9:6e:96:91:79:6c:55:b9:7e:e0:7b:7d: ad:ee:d5:99:b9:3d:21:4f:44:df:4d:f4:e1:4c:5f: e2:57:00:04:03:ec:4c:8a:fa:6f:f9:64:ad:12:c6: 95:1f:de:de:b6:d3:d2:0f:03:10:51:6d:08:41:e4: 89:24:db:52:a8:fe:7e:d3:cd:a7:7d:95:0b:fc:d6: 3d:70:23:aa:1e:ad:f1:d5:61:33:4a:18:a4:3a:47: 2c:dc:55:24:aa:35:71:3b:a6:0f:fe:48:90:57:0c: d5:4e:1f:dc:8b:7d:40:fd:24:b0:13:a9:cd:82:54: 5c:0a:07:53:f3:e3:35:aa:96:d4:92:61:0f:2f:78: 56:33:30:2b:b4:02:9f:81:4d:7b:02:db:6b:88:8d: 6c:ba:a7:e2:b2:0c:94:ba:99:26:1f:45:c4:b7:fc: 2e:4d:ae:6b:20:80:3c:67:aa:38:79:b2:1b:17:c4: ec:39:f7:b5:0e:8f:0f:c6:3d:d0:e6:a7:fa:59:c0: 59:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:34:8F:9D:9B:E7:92:A8:F2:D0:B6:74:3A:7A:4B:57:36:7C:35:8F X509v3 Authority Key Identifier: keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:44:37:6b:8e:7c:6d:1e:0d:9f:97:9f:e0:7e:cb:fa:86:fb: 88:5f:e9:4d:d9:38:4c:b1:a6:ee:07:1b:dd:bb:d1:f9:c7:d8: 3b:88:8f:a3:71:c0:99:4f:8f:72:85:e8:63:c2:96:41:e7:ba: 37:d3:83:af:a8:97:5e:a1:46:69:5d:94:74:30:11:8f:e4:ec: fe:60:2e:a5:76:25:14:9a:85:23:1c:9d:19:95:74:7c:43:09: cb:e4:b5:dc:ac:ac:ca:ce:0b:da:25:89:c8:3a:05:84:af:b4: 31:cb:97:ea:b3:14:34:98:1f:79:64:7a:0e:2e:75:ed:a4:0f: f6:47:ce:22:a3:72:02:c0:38:3d:d2:08:41:41:8d:b9:12:1f: 8a:b5:9c:06:f4:93:15:c5:2a:f9:b3:c4:0f:46:0f:09:ef:42: e7:16:61:32:e8:3d:19:03:1f:61:18:a7:97:b1:8b:00:4b:e1: 71:ba:c1:f8:6a:5e:30:25:b7:be:72:9e:ab:ee:ba:3d:09:bb: 31:bc:d3:74:1a:62:40:d7:d1:e8:98:ce:69:3f:09:4e:f7:d6: c8:50:93:3d:91:f2:d5:70:dc:23:ad:d8:47:0b:14:45:4e:a2: 7b:3f:84:dc:82:07:9a:66:91:87:96:7d:20:c2:cb:2a:86:47: b3:ca:e0:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4reex8xrpeb3n7+HX/kBqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YjRjZDNlZGY1MjFkZjhlYzBhMTUxMTExMjcyZDNmYjkx Yjk5YzMwHhcNMjYwMTI2MDUwMTQ1WhcNMjYwMTI3MDUwMTQ1WjAzMTEwLwYDVQQD EygzZDM0OGY5ZDliZTc5MmE4ZjJkMGI2NzQzYTdhNGI1NzM2N2MzNThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0cUNGcY1dT9wIHezVXLOkj9jtYD dalSuRI5ZI0W3+DgCAYujMjhZSVyVTaHyxW/9bqLeqnEXBXKligIH9L5bpaReWxV uX7ge32t7tWZuT0hT0TfTfThTF/iVwAEA+xMivpv+WStEsaVH97ettPSDwMQUW0I QeSJJNtSqP5+082nfZUL/NY9cCOqHq3x1WEzShikOkcs3FUkqjVxO6YP/kiQVwzV Th/ci31A/SSwE6nNglRcCgdT8+M1qpbUkmEPL3hWMzArtAKfgU17AttriI1suqfi sgyUupkmH0XEt/wuTa5rIIA8Z6o4ebIbF8TsOfe1Do8Pxj3Q5qf6WcBZiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD00j52b55Ko8tC2dDp6S1c2fDWPMB8GA1UdIwQY MBaAFHS0zT7fUh347AoVEREnLT+5G5nDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMt ZTJhN2ZiODQ4MzE4LzEvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMtZTJhN2ZiODQ4MzE4 LzEvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUQ3a458 bR4Nn5ef4H7L+ob7iF/pTdk4TLGm7gcb3bvR+cfYO4iPo3HAmU+PcoXoY8KWQee6 N9ODr6iXXqFGaV2UdDARj+Ts/mAupXYlFJqFIxydGZV0fEMJy+S13Kysys4L2iWJ yDoFhK+0McuX6rMUNJgfeWR6Di517aQP9kfOIqNyAsA4PdIIQUGNuRIfirWcBvST FcUq+bPED0YPCe9C5xZhMug9GQMfYRinl7GLAEvhcbrB+GpeMCW3vnKeq+66PQm7 MbzTdBpiQNfR6JjOaT8JTvfWyFCTPZHy1XDcI63YRwsURU6iez+E3IIHmmaRh5Z9 IMLLKoZHs8rgLQ== -----END CERTIFICATE-----Generated at Mon Jan 26 12:24:49 2026 by rpki-client