This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft File: DC18I46J3NUvb7IpbfpHWMYcl74.mft (raw, json) Hash identifier: AL1hA5P2c0ygZO959gGtGbANGaeft49xslXeU5fbPJ4= Subject key identifier: BD:EE:81:81:2E:1F:22:91:E9:46:CD:8B:15:6D:04:75:3E:FF:73:AD Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be Certificate serial: 019BF34FA2AE09E693AA4F08A073D0A3D656 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft Manifest number: 17E5 Signing time: Sun 25 Jan 2026 04:00:41 +0000 Manifest this update: Sun 25 Jan 2026 04:00:41 +0000 Manifest next update: Mon 26 Jan 2026 04:00:41 +0000 Files and hashes: 1: DC18I46J3NUvb7IpbfpHWMYcl74.crl (hash: fW1YNNkixFYKA67mGqmbIDVz01ibTWKTJbJxFwbWkbs=) 2: bml28OP4KoXNao7A2GMBGmYqamQ.roa (hash: 0pR6vIDA6MRs37zqStEVFf7/l/MWTnFFDP3/gQtqi2o=) 3: ycbQTRWdjL9Qvr33IrnbqXH0Bqs.roa (hash: nglQg5MmKlEjssrWx8wngl2AAIBCB6KoQKV4TEUoUr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:a2:ae:09:e6:93:aa:4f:08:a0:73:d0:a3:d6:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be Validity Not Before: Jan 25 04:00:41 2026 GMT Not After : Jan 26 04:00:41 2026 GMT Subject: CN=bdee81812e1f2291e946cd8b156d04753eff73ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:83:b4:65:34:13:20:2f:20:40:f0:7f:7d:bd: f3:79:ab:68:75:eb:49:87:76:aa:6a:40:72:be:5a: 55:74:28:74:fa:d0:93:c7:eb:06:e8:24:09:37:18: 5d:97:c6:d9:cc:db:c7:2c:ef:00:2a:42:11:fc:94: 45:d9:20:cf:e8:10:5e:1a:86:c2:21:47:35:79:4c: a8:3d:a9:fc:56:66:c0:b7:e3:d6:f5:96:c5:ec:c3: 3f:cd:eb:6e:c6:cd:17:88:81:0f:e5:0b:7c:23:74: b8:d7:f7:f6:c2:29:52:4e:c5:4b:a5:2a:aa:5c:96: b0:01:fa:26:3f:2b:40:b4:1f:3b:60:18:2f:58:11: c3:ce:a0:5a:16:b0:a1:aa:44:8b:ec:f3:00:34:ba: a6:f7:c5:70:51:36:e0:8f:0f:35:a5:53:68:75:27: 43:59:c8:72:0c:0f:04:8c:f4:d7:5a:3a:e1:b3:c7: 0c:19:d1:ca:06:19:ae:0a:ac:a8:e1:12:dc:2c:38: c3:32:7c:8a:81:6a:a8:3a:2e:a5:1b:07:a5:dc:03: 5c:fc:ed:3e:09:ac:a7:5f:f0:c8:a9:fc:16:90:13: 12:48:28:d6:ec:0e:29:df:73:3e:dd:49:27:7d:87: 70:4b:da:85:c3:ea:aa:c3:e3:d6:06:1b:e3:ed:3f: e2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:EE:81:81:2E:1F:22:91:E9:46:CD:8B:15:6D:04:75:3E:FF:73:AD X509v3 Authority Key Identifier: keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:3d:b7:92:a9:15:ec:40:c5:37:d5:3f:ca:b5:9f:e1:c7:37: b7:87:81:bb:d2:75:fa:0f:98:bb:ae:92:1e:d8:bb:7d:0c:e6: 72:0b:b2:73:d4:23:b9:65:1e:75:f2:e9:ea:15:7d:99:a8:fe: 40:c6:ef:db:60:5f:0a:88:b4:77:f1:a9:ea:15:85:9b:e7:61: 94:39:85:c6:c4:73:c6:aa:27:7e:54:88:9e:1c:34:c5:c6:42: da:41:8e:28:48:48:24:eb:36:20:0a:c8:51:5b:4d:a5:e8:70: 2c:92:66:b4:48:58:ca:f9:9a:6a:09:5d:4b:1c:39:2e:d3:6b: af:c6:a2:10:2e:68:ee:19:fd:07:d5:03:11:2f:a7:fc:58:0e: 88:4c:a8:09:cc:53:a4:7d:b8:53:af:c5:d3:47:ca:c6:62:32: d5:b1:29:99:da:07:2d:21:85:3c:67:d1:a0:28:56:bb:50:b4: f1:e2:df:08:5e:b0:77:8d:56:e2:85:96:7f:cf:b1:d4:35:57: be:fa:ca:6a:db:b7:79:ad:2b:39:af:42:06:ef:0f:74:05:01: 5b:ab:87:d5:01:02:2e:19:d5:a2:78:4b:ca:bf:23:b7:85:fe: d8:ca:81:36:61:b1:ec:ef:b0:40:8f:41:02:3c:f9:cb:76:d6: 5c:c0:67:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT6KuCeaTqk8IoHPQo9ZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMmQ3YzIzOGU4OWRjZDUyZjZmYjIyOTZkZmE0NzU4YzYx Yzk3YmUwHhcNMjYwMTI1MDQwMDQxWhcNMjYwMTI2MDQwMDQxWjAzMTEwLwYDVQQD EyhiZGVlODE4MTJlMWYyMjkxZTk0NmNkOGIxNTZkMDQ3NTNlZmY3M2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoO0ZTQTIC8gQPB/fb3zeatodetJ h3aqakByvlpVdCh0+tCTx+sG6CQJNxhdl8bZzNvHLO8AKkIR/JRF2SDP6BBeGobC IUc1eUyoPan8VmbAt+PW9ZbF7MM/zetuxs0XiIEP5Qt8I3S41/f2wilSTsVLpSqq XJawAfomPytAtB87YBgvWBHDzqBaFrChqkSL7PMANLqm98VwUTbgjw81pVNodSdD WchyDA8EjPTXWjrhs8cMGdHKBhmuCqyo4RLcLDjDMnyKgWqoOi6lGwel3ANc/O0+ CaynX/DIqfwWkBMSSCjW7A4p33M+3UknfYdwS9qFw+qqw+PWBhvj7T/inQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3ugYEuHyKR6UbNixVtBHU+/3OtMB8GA1UdIwQY MBaAFAwtfCOOidzVL2+yKW36R1jGHJe+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREMxOEk0NkozTlV2YjdJcGJmcEhXTVljbDc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80NjkxNmUtZTg2Yy00NGE4LThhYjkt NTM4NDliYWYxYjQ1LzEvREMxOEk0NkozTlV2YjdJcGJmcEhXTVljbDc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC80NjkxNmUtZTg2Yy00NGE4LThhYjktNTM4NDliYWYxYjQ1 LzEvREMxOEk0NkozTlV2YjdJcGJmcEhXTVljbDc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMj23kqkV 7EDFN9U/yrWf4cc3t4eBu9J1+g+Yu66SHti7fQzmcguyc9QjuWUedfLp6hV9maj+ QMbv22BfCoi0d/Gp6hWFm+dhlDmFxsRzxqonflSInhw0xcZC2kGOKEhIJOs2IArI UVtNpehwLJJmtEhYyvmaagldSxw5LtNrr8aiEC5o7hn9B9UDES+n/FgOiEyoCcxT pH24U6/F00fKxmIy1bEpmdoHLSGFPGfRoChWu1C08eLfCF6wd41W4oWWf8+x1DVX vvrKatu3ea0rOa9CBu8PdAUBW6uH1QECLhnVonhLyr8jt4X+2MqBNmGx7O+wQI9B Ajz5y3bWXMBn/g== -----END CERTIFICATE-----Generated at Sun Jan 25 15:24:23 2026 by rpki-client