This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft File: dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft (raw, json) Hash identifier: TYjBJk7VaF/EAPhUBhfr575klLBvgZFzwRmkvXYun3g= Subject key identifier: F3:E7:D1:0A:C6:A9:43:32:12:EF:35:58:B0:5B:E2:C8:A2:7E:84:15 Authority key identifier: 74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9 Certificate issuer: /CN=749d8a4328930b938fa86018b1e447ee4d8da8f9 Certificate serial: 019BF91B53C27EC00CE1D5FA8B8D3B23815E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft Manifest number: 0162 Signing time: Mon 26 Jan 2026 07:01:16 +0000 Manifest this update: Mon 26 Jan 2026 07:01:16 +0000 Manifest next update: Tue 27 Jan 2026 07:01:16 +0000 Files and hashes: 1: dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl (hash: pLZPZgPJFtqQjZZ8+3kEk54bGQpCf2lg9GoguHekj9E=) 2: i5v8Z7TLwK1d1522dak6QJo-ZdI.roa (hash: dORF0I0Mm7ul7rA3/PIS0cDu8jhdXdBq0BX2+YuQ/kM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:53:c2:7e:c0:0c:e1:d5:fa:8b:8d:3b:23:81:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749d8a4328930b938fa86018b1e447ee4d8da8f9 Validity Not Before: Jan 26 07:01:16 2026 GMT Not After : Jan 27 07:01:16 2026 GMT Subject: CN=f3e7d10ac6a9433212ef3558b05be2c8a27e8415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d8:e8:c8:65:34:39:e9:06:0b:fa:0e:1d:b3: 27:f4:f4:cc:52:ae:11:19:04:f8:49:38:d5:8b:23: d2:d9:60:93:f6:eb:50:da:64:d1:e3:95:52:ec:88: 8c:88:0e:28:b1:63:a3:2c:d6:93:4f:1b:e3:25:7a: 6c:5b:35:3f:17:2d:a9:e8:db:2b:83:9c:b4:bd:f3: 22:fe:10:55:4d:91:13:68:6b:42:1d:5d:1a:c3:2e: 37:83:20:15:28:82:e1:64:f7:db:86:19:68:f7:0a: 65:21:a5:a2:17:91:5b:51:03:bf:b2:d6:a6:d1:a9: 55:3e:83:31:05:9b:6e:b9:56:ae:43:24:8d:2b:ba: 66:ea:f4:57:91:93:2e:13:4e:7d:51:79:86:54:e9: 88:96:21:6c:02:83:a5:6c:ba:fa:76:8d:9d:d1:6d: ac:16:b2:34:95:04:c8:3c:6e:0b:b5:61:57:b4:0c: 4d:db:16:99:a1:c7:83:5d:6e:c5:27:cf:85:66:73: 7c:0d:6f:3a:2b:25:e5:48:04:ff:92:75:c6:15:48: 5e:4f:6c:06:a6:07:c9:6d:00:af:92:46:1b:82:9d: ac:41:c4:50:33:e6:21:bc:27:e5:5f:ab:0a:8b:a3: dd:d0:13:73:f5:18:5b:dc:1b:9a:9d:fa:ac:d8:d8: 8f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E7:D1:0A:C6:A9:43:32:12:EF:35:58:B0:5B:E2:C8:A2:7E:84:15 X509v3 Authority Key Identifier: keyid:74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c6:87:33:63:af:67:b5:f9:de:50:e0:e8:08:9d:ba:31:df: 08:cb:1e:d7:a7:b3:b9:03:e9:bd:ac:ca:5f:f6:e4:30:31:48: 2c:c2:37:b2:c9:a3:9c:5c:de:9e:58:6d:0c:0c:2d:84:19:60: 2e:2f:5e:37:a0:9e:bb:cc:0f:a7:a1:40:55:1e:77:61:17:90: 91:e9:ac:7b:f2:33:82:62:d3:32:1e:be:05:05:ef:fd:11:df: c6:e2:0a:47:03:fc:b1:3e:b6:08:f7:97:1c:df:73:1a:a4:07: 2a:71:d4:ec:51:9a:d1:3d:5e:11:2c:fd:cc:01:2e:e3:93:48: bd:3d:db:d7:26:b8:4d:ac:10:fe:00:76:c8:93:7c:0f:2d:1c: 89:9d:98:13:83:c4:2a:7e:58:39:a1:32:92:7c:3d:12:4c:cf: f1:83:d6:00:71:eb:53:61:7a:8d:ac:42:b0:23:5e:f0:0a:9e: 28:b3:35:03:30:fe:88:2a:0d:1a:93:a8:7c:d0:0e:e0:c5:b3: db:b9:4c:e8:b5:26:b0:ea:fc:4a:02:17:31:a1:d6:c1:97:20: 6c:57:be:ab:74:1e:67:b3:1c:4a:88:e5:6e:28:c1:14:d4:4e: a5:49:08:63:2c:81:99:2e:66:56:f0:b7:b6:77:13:3a:6a:da: 50:44:ef:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G1PCfsAM4dX6i407I4FeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OWQ4YTQzMjg5MzBiOTM4ZmE4NjAxOGIxZTQ0N2VlNGQ4 ZGE4ZjkwHhcNMjYwMTI2MDcwMTE2WhcNMjYwMTI3MDcwMTE2WjAzMTEwLwYDVQQD EyhmM2U3ZDEwYWM2YTk0MzMyMTJlZjM1NThiMDViZTJjOGEyN2U4NDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNjoyGU0OekGC/oOHbMn9PTMUq4R GQT4STjViyPS2WCT9utQ2mTR45VS7IiMiA4osWOjLNaTTxvjJXpsWzU/Fy2p6Nsr g5y0vfMi/hBVTZETaGtCHV0awy43gyAVKILhZPfbhhlo9wplIaWiF5FbUQO/stam 0alVPoMxBZtuuVauQySNK7pm6vRXkZMuE059UXmGVOmIliFsAoOlbLr6do2d0W2s FrI0lQTIPG4LtWFXtAxN2xaZoceDXW7FJ8+FZnN8DW86KyXlSAT/knXGFUheT2wG pgfJbQCvkkYbgp2sQcRQM+YhvCflX6sKi6Pd0BNz9Rhb3Buanfqs2NiP8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPn0QrGqUMyEu81WLBb4siifoQVMB8GA1UdIwQY MBaAFHSdikMokwuTj6hgGLHkR+5Njaj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEoyS1F5aVRDNU9QcUdBWXNlUkg3azJOcVBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zZmEyMTctODVmNS00ZjE5LWI5MWUt MDg4OWUzZWNkMWY2LzEvZEoyS1F5aVRDNU9QcUdBWXNlUkg3azJOcVBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8zZmEyMTctODVmNS00ZjE5LWI5MWUtMDg4OWUzZWNkMWY2 LzEvZEoyS1F5aVRDNU9QcUdBWXNlUkg3azJOcVBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8aHM2Ov Z7X53lDg6AidujHfCMse16ezuQPpvazKX/bkMDFILMI3ssmjnFzenlhtDAwthBlg Li9eN6Ceu8wPp6FAVR53YReQkemse/IzgmLTMh6+BQXv/RHfxuIKRwP8sT62CPeX HN9zGqQHKnHU7FGa0T1eESz9zAEu45NIvT3b1ya4TawQ/gB2yJN8Dy0ciZ2YE4PE Kn5YOaEyknw9EkzP8YPWAHHrU2F6jaxCsCNe8AqeKLM1AzD+iCoNGpOofNAO4MWz 27lM6LUmsOr8SgIXMaHWwZcgbFe+q3QeZ7McSojlbijBFNROpUkIYyyBmS5mVvC3 tncTOmraUETv/g== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:10 2026 by rpki-client