This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft File: 1-DJywMMtsATwePh0uZ2poLfmOv0.mft (raw, json) Hash identifier: uuCzOJyajmuI9Lf19xvp03CieLemTzYSmj+1FgKijbg= Subject key identifier: 35:2E:79:96:1D:E8:3F:C7:33:EE:B1:58:02:3A:97:C5:F5:27:90:02 Authority key identifier: F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD Certificate issuer: /CN=f83272c0c32db004f078f874b99da9a0b7e63afd Certificate serial: 019BFB773077321AFFEE44E6A697A9D4A2DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft Manifest number: 11D0 Signing time: Mon 26 Jan 2026 18:00:50 +0000 Manifest this update: Mon 26 Jan 2026 18:00:50 +0000 Manifest next update: Tue 27 Jan 2026 18:00:50 +0000 Files and hashes: 1: 1-DJywMMtsATwePh0uZ2poLfmOv0.crl (hash: XQm3Pc0o25qjeNYHlZq8hSTItaaRPcIjAm7HWIX01Jo=) 2: UAERni7WpWvns2q_WZ6vxo1ESzs.roa (hash: 5eIb//p/DGg/7vA3WQMp+ufksOfuPVGq/a7CLQE9QPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:30:77:32:1a:ff:ee:44:e6:a6:97:a9:d4:a2:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f83272c0c32db004f078f874b99da9a0b7e63afd Validity Not Before: Jan 26 18:00:50 2026 GMT Not After : Jan 27 18:00:50 2026 GMT Subject: CN=352e79961de83fc733eeb158023a97c5f5279002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b7:69:e6:e3:f9:9b:ea:6d:80:25:75:cc:74: 50:a8:7b:fe:6e:1c:d4:67:17:40:08:ca:d3:36:bd: 9c:20:ec:ec:aa:70:43:0e:f3:34:bf:19:5a:5f:64: 3a:14:28:81:94:30:aa:0b:55:44:36:a9:fa:9f:70: ec:95:ec:2c:97:e3:75:e9:43:bb:6b:17:fc:67:57: f2:d6:86:4e:eb:99:f3:ef:15:a4:a3:25:f4:10:87: fc:57:05:ff:c7:aa:da:6c:b6:2e:f6:d0:db:60:fe: 5f:94:6f:56:ca:81:5c:bc:63:fc:6d:b3:7d:17:d8: 0a:2f:93:1c:45:73:ef:f3:02:6b:40:45:54:d6:20: fa:eb:73:12:41:26:68:a5:cd:fc:f9:c5:f1:e1:e0: 57:dd:f3:ac:71:8b:90:16:48:6b:f3:5f:e8:d7:ba: ee:36:c3:d0:a4:1a:fb:1c:bb:7f:65:a0:17:ea:6e: d0:16:14:3f:c4:da:09:60:04:21:3c:6d:99:a6:f6: 99:62:89:d4:fb:89:65:4d:24:22:10:f9:87:39:74: 8e:2f:4a:ce:c1:4a:d0:1c:30:f9:d9:46:3c:47:7b: 7d:b1:49:f4:0f:8c:00:f0:c6:5d:18:5f:3b:be:e4: 34:00:d8:14:e0:23:4e:48:db:4e:bd:63:13:f8:74: 0c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2E:79:96:1D:E8:3F:C7:33:EE:B1:58:02:3A:97:C5:F5:27:90:02 X509v3 Authority Key Identifier: keyid:F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1c:09:e4:0b:b8:14:f2:5f:c7:c8:c9:55:0d:0c:0d:59:02: 12:af:6d:78:1a:95:f1:73:6a:89:20:c1:58:ab:7b:9d:f8:c1: d5:32:69:05:07:8c:bb:47:94:a4:f3:e4:3c:34:03:47:15:1d: 76:d2:53:4b:61:f1:3d:c8:f7:db:ff:66:f1:db:f7:c1:d7:86: 53:cd:01:1f:80:e9:e4:86:d3:01:21:10:cb:bf:c5:ec:36:a7: a4:8c:85:16:d3:81:26:6a:3b:08:4f:12:f1:28:70:b2:07:43: 6c:18:85:60:5c:8d:fa:82:d9:96:c3:7d:67:b6:1b:76:1e:7a: 92:9a:ef:e5:7b:3f:4f:05:c4:04:e3:02:c5:40:42:c1:7f:7c: 82:b7:f9:e1:bb:52:db:6c:cd:d8:58:1b:a5:bd:f0:a2:96:2c: 05:f5:62:6e:a8:11:4d:af:ce:08:9b:96:8a:7e:4d:13:a1:01: ef:2b:aa:d1:06:9b:77:03:74:79:63:18:45:29:c0:a8:f3:8b: a5:b9:0e:7d:fb:b9:27:2e:8a:19:fe:64:79:ec:f2:51:7b:5e: 14:b7:90:32:fe:b3:0a:20:98:f0:ef:3f:86:f5:bf:bc:91:85: 7f:78:89:e1:55:2c:cf:6a:1c:83:f6:09:d9:74:9c:a5:e5:52: c3:b7:66:81 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv7dzB3Mhr/7kTmppep1KLbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MzI3MmMwYzMyZGIwMDRmMDc4Zjg3NGI5OWRhOWEwYjdl NjNhZmQwHhcNMjYwMTI2MTgwMDUwWhcNMjYwMTI3MTgwMDUwWjAzMTEwLwYDVQQD EygzNTJlNzk5NjFkZTgzZmM3MzNlZWIxNTgwMjNhOTdjNWY1Mjc5MDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7dp5uP5m+ptgCV1zHRQqHv+bhzU ZxdACMrTNr2cIOzsqnBDDvM0vxlaX2Q6FCiBlDCqC1VENqn6n3Dslewsl+N16UO7 axf8Z1fy1oZO65nz7xWkoyX0EIf8VwX/x6rabLYu9tDbYP5flG9WyoFcvGP8bbN9 F9gKL5McRXPv8wJrQEVU1iD663MSQSZopc38+cXx4eBX3fOscYuQFkhr81/o17ru NsPQpBr7HLt/ZaAX6m7QFhQ/xNoJYAQhPG2ZpvaZYonU+4llTSQiEPmHOXSOL0rO wUrQHDD52UY8R3t9sUn0D4wA8MZdGF87vuQ0ANgU4CNOSNtOvWMT+HQMzwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDUueZYd6D/HM+6xWAI6l8X1J5ACMB8GA1UdIwQY MBaAFPgycsDDLbAE8Hj4dLmdqaC35jr9MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ESnl3TU10c0FUd2VQaDB1WjJwb0xmbU92MC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvOTRhMWUwLWMxODAtNGJhZi05ZWEw LWY2N2U3MDc4ODc4ZS8xLzEtREp5d01NdHNBVHdlUGgwdVoycG9MZm1PdjAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzkzLzk0YTFlMC1jMTgwLTRiYWYtOWVhMC1mNjdlNzA3ODg3 OGUvMS8xLURKeXdNTXRzQVR3ZVBoMHVaMnBvTGZtT3YwLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRwJ 5Au4FPJfx8jJVQ0MDVkCEq9teBqV8XNqiSDBWKt7nfjB1TJpBQeMu0eUpPPkPDQD RxUddtJTS2HxPcj32/9m8dv3wdeGU80BH4Dp5IbTASEQy7/F7DanpIyFFtOBJmo7 CE8S8ShwsgdDbBiFYFyN+oLZlsN9Z7Ybdh56kprv5Xs/TwXEBOMCxUBCwX98grf5 4btS22zN2Fgbpb3wopYsBfVibqgRTa/OCJuWin5NE6EB7yuq0QabdwN0eWMYRSnA qPOLpbkOffu5Jy6KGf5keezyUXteFLeQMv6zCiCY8O8/hvW/vJGFf3iJ4VUsz2oc g/YJ2XScpeVSw7dmgQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:35:27 2026 by rpki-client