This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft File: dBmPcCK5VgUB20SK9gMB-ihekjY.mft (raw, json) Hash identifier: y8NMt1LVDba9bCRYVwqpYTRiO5K3nIrjQb1TtXbqJzk= Subject key identifier: 4E:90:A6:6F:C5:82:21:15:3B:C3:F6:37:DC:E3:6B:F2:A5:55:D1:9C Authority key identifier: 74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36 Certificate issuer: /CN=74198f7022b9560501db448af60301fa285e9236 Certificate serial: 019BFA2E188FAB70730739B0E847D69729F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 12:01:23 +0000 Manifest this update: Mon 26 Jan 2026 12:01:23 +0000 Manifest next update: Tue 27 Jan 2026 12:01:23 +0000 Files and hashes: 1: dBmPcCK5VgUB20SK9gMB-ihekjY.crl (hash: OdrQCkyj+jzp7Lof2iMQDWhm4oXSEWSu0duT13UF4/I=) 2: x-8swSoHWXn2gEZTtgRDy-vs_DM.roa (hash: ylAYgviMfyC3A9eoEgIb+VgNLg1iORRgtmKdI3QPLJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2e:18:8f:ab:70:73:07:39:b0:e8:47:d6:97:29:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74198f7022b9560501db448af60301fa285e9236 Validity Not Before: Jan 26 12:01:23 2026 GMT Not After : Jan 27 12:01:23 2026 GMT Subject: CN=4e90a66fc58221153bc3f637dce36bf2a555d19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cc:ae:82:32:fa:eb:0c:be:3b:5c:b8:e3:95: 57:c2:45:2a:64:a5:5e:55:d7:6c:73:e8:a5:ab:80: 34:33:50:12:6d:dd:f5:1b:85:51:56:c0:ce:f7:1a: 22:2d:21:61:9f:de:70:95:e0:13:be:1b:0e:1f:d9: 4a:cf:57:71:28:fe:c4:62:a4:87:4e:c3:10:a9:9e: 2a:d3:1d:cc:65:13:ae:41:56:0b:36:d4:be:d9:00: 7e:92:08:bb:56:d6:d3:38:2a:5e:91:7b:d5:91:96: ab:bb:01:81:79:23:71:fd:4e:c7:2d:87:77:92:80: 14:fd:41:93:db:40:4f:fe:c6:0d:dd:61:17:0f:b1: f3:ab:2d:ef:b4:ec:74:4f:9c:1a:de:05:9c:a9:a4: 0e:60:37:a7:35:53:c3:5d:53:30:ab:cb:23:2b:ea: 8e:d2:eb:08:51:5f:7f:4b:50:ce:f1:47:e5:c6:8e: 4a:0a:c0:c9:4c:bb:79:93:4f:af:a6:7a:a8:d8:1f: ab:eb:e1:b1:48:cf:9e:30:7f:77:4f:11:89:01:67: 48:e6:8f:f6:80:52:ef:61:71:39:64:41:7d:9b:03: ce:43:f3:6d:37:56:2e:e1:7d:b7:12:f3:aa:43:22: 61:22:60:8b:60:ec:49:cc:79:91:27:8c:e7:6c:48: 72:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:90:A6:6F:C5:82:21:15:3B:C3:F6:37:DC:E3:6B:F2:A5:55:D1:9C X509v3 Authority Key Identifier: keyid:74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ad:01:b8:81:c9:36:05:a6:3c:5b:a6:2a:fb:fc:e7:33:f0: ed:e2:ab:2d:a0:e3:ae:20:db:2e:00:c6:d7:ed:d3:b6:13:4a: ab:9f:be:42:17:8c:ae:9f:87:9c:72:0b:51:8b:06:af:51:17: 19:15:0f:f6:68:99:3f:64:71:a2:dd:f7:7c:ea:59:85:8a:c6: fd:2e:c7:8c:13:1e:9d:a2:57:22:31:5c:1e:99:ea:cc:01:8b: 8b:fa:48:12:4f:10:a8:11:fa:1a:ac:82:3e:79:b7:a1:25:4e: 20:3f:2f:84:76:1d:67:54:9c:bd:b3:80:1f:fc:f8:dd:e3:9d: 5c:a7:02:b1:73:38:f0:28:74:d3:2c:33:3a:0c:07:bf:aa:e2: 78:e1:9c:a1:18:ad:c7:ae:fb:c8:4b:20:3f:c6:33:7e:ff:d6: 89:ca:0c:9c:5a:10:7e:df:b2:1a:a6:d7:3d:88:e3:45:7b:a3: 2e:53:03:95:f7:19:8a:f3:1c:e5:31:9f:ee:33:29:4c:c5:31: 76:89:04:bf:62:52:18:34:9d:83:d7:43:e6:52:96:b1:ef:ce: f4:e1:d1:a8:00:df:c2:10:d6:ea:d5:1a:7d:87:29:02:14:fd: 5e:86:cc:06:42:0b:6a:1c:eb:7c:9a:78:9e:75:f6:ff:e2:d3: 04:28:3d:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LhiPq3BzBzmw6EfWlynzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MTk4ZjcwMjJiOTU2MDUwMWRiNDQ4YWY2MDMwMWZhMjg1 ZTkyMzYwHhcNMjYwMTI2MTIwMTIzWhcNMjYwMTI3MTIwMTIzWjAzMTEwLwYDVQQD Eyg0ZTkwYTY2ZmM1ODIyMTE1M2JjM2Y2MzdkY2UzNmJmMmE1NTVkMTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycyugjL66wy+O1y445VXwkUqZKVe Vddsc+ilq4A0M1ASbd31G4VRVsDO9xoiLSFhn95wleATvhsOH9lKz1dxKP7EYqSH TsMQqZ4q0x3MZROuQVYLNtS+2QB+kgi7VtbTOCpekXvVkZaruwGBeSNx/U7HLYd3 koAU/UGT20BP/sYN3WEXD7Hzqy3vtOx0T5wa3gWcqaQOYDenNVPDXVMwq8sjK+qO 0usIUV9/S1DO8Uflxo5KCsDJTLt5k0+vpnqo2B+r6+GxSM+eMH93TxGJAWdI5o/2 gFLvYXE5ZEF9mwPOQ/NtN1Yu4X23EvOqQyJhImCLYOxJzHmRJ4znbEhy4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6Qpm/FgiEVO8P2N9zja/KlVdGcMB8GA1UdIwQY MBaAFHQZj3AiuVYFAdtEivYDAfooXpI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJtUGNDSzVWZ1VCMjBTSzlnTUItaWhla2pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8xYmU1ZTEtNTZiNC00YzY2LWJlYWIt NmYxNjM5NjZhZjhiLzEvZEJtUGNDSzVWZ1VCMjBTSzlnTUItaWhla2pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8xYmU1ZTEtNTZiNC00YzY2LWJlYWItNmYxNjM5NjZhZjhi LzEvZEJtUGNDSzVWZ1VCMjBTSzlnTUItaWhla2pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfK0BuIHJ NgWmPFumKvv85zPw7eKrLaDjriDbLgDG1+3TthNKq5++QheMrp+HnHILUYsGr1EX GRUP9miZP2Rxot33fOpZhYrG/S7HjBMenaJXIjFcHpnqzAGLi/pIEk8QqBH6GqyC Pnm3oSVOID8vhHYdZ1ScvbOAH/z43eOdXKcCsXM48Ch00ywzOgwHv6rieOGcoRit x677yEsgP8Yzfv/WicoMnFoQft+yGqbXPYjjRXujLlMDlfcZivMc5TGf7jMpTMUx dokEv2JSGDSdg9dD5lKWse/O9OHRqADfwhDW6tUafYcpAhT9XobMBkILahzrfJp4 nnX2/+LTBCg9gA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:45 2026 by rpki-client