This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft File: DoVoAb747TroEOfmejH9AStE0ww.mft (raw, json) Hash identifier: 5YRu4M/dftaqSNY7NkXUkNwOgDcz4cCRcq/Hsw32CJE= Subject key identifier: EB:C3:30:A8:D7:68:F2:23:BA:7E:41:E9:6E:DB:E6:12:3C:38:DF:91 Authority key identifier: 0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C Certificate issuer: /CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c Certificate serial: 019BF6BF8453A3B231BABA3524ED5E01AF0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft Manifest number: 173A Signing time: Sun 25 Jan 2026 20:01:44 +0000 Manifest this update: Sun 25 Jan 2026 20:01:44 +0000 Manifest next update: Mon 26 Jan 2026 20:01:44 +0000 Files and hashes: 1: 4hFvzV4WrmiLIBpFJw9jPUjsv-0.roa (hash: SOzlsBSFn/lFTeVqU71MsP/XA8RfCBYPDkl2dtb8tLE=) 2: DoVoAb747TroEOfmejH9AStE0ww.crl (hash: dC0kUfNuGn6ci9Y7V/aXhfK6HZ7YhGJfSYd1E+awqxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:84:53:a3:b2:31:ba:ba:35:24:ed:5e:01:af:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c Validity Not Before: Jan 25 20:01:44 2026 GMT Not After : Jan 26 20:01:44 2026 GMT Subject: CN=ebc330a8d768f223ba7e41e96edbe6123c38df91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:36:4a:46:5b:12:e8:4c:66:35:06:31:40: 5f:ec:e2:32:be:d8:cc:b4:02:68:31:d3:1d:90:21: e2:35:9f:26:57:df:78:86:c0:5d:ea:5c:ce:58:11: 5d:87:d2:99:3a:f8:7a:e2:bf:d4:0e:7f:9d:78:06: e2:8c:c7:16:a6:eb:ab:de:f8:90:49:3d:82:c8:b2: e2:dc:35:00:5c:df:3d:79:a8:87:d2:9b:63:24:de: 29:55:3a:c2:2c:8a:db:ba:92:d6:51:39:5f:67:88: f0:5e:19:5a:91:cd:ce:60:54:1f:ba:cb:69:9d:44: 4c:4c:4c:18:16:ac:61:e1:65:8f:05:89:37:ba:aa: b4:a9:31:75:57:12:2e:44:1f:c4:fc:dd:23:7b:74: 48:fc:7b:6b:d0:0f:64:5d:9e:c4:2b:cd:ec:ba:3d: 37:61:68:fe:4e:12:f5:e2:21:ca:92:ae:1e:18:1d: 26:e2:b8:c1:1d:5b:62:d8:70:6f:20:d6:82:43:9f: f2:2d:e9:13:88:f3:a5:04:f1:40:07:b0:f0:18:b2: cb:b2:01:ab:70:67:64:a2:22:a2:75:3c:6c:9a:78: 61:de:47:c9:a3:41:e9:06:0c:0d:d6:8e:c7:2a:70: 75:47:87:00:b7:81:cd:a0:82:ae:b1:d5:1d:7c:eb: 27:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C3:30:A8:D7:68:F2:23:BA:7E:41:E9:6E:DB:E6:12:3C:38:DF:91 X509v3 Authority Key Identifier: keyid:0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:02:08:c3:51:93:c2:1d:72:ef:94:23:30:dc:85:b6:93:22: 3a:47:50:3b:78:9a:24:dc:e7:72:9a:d8:80:a1:21:57:6a:b0: d8:f3:5f:6e:6e:06:5a:a0:6d:61:f7:e5:ed:23:dc:3d:52:36: 7f:58:1a:ae:97:46:92:31:bc:e7:36:26:0b:bc:5b:04:44:07: 0e:27:b8:25:1d:11:54:fe:aa:6e:7f:be:5a:14:34:28:40:07: e4:21:bd:69:46:c0:ba:1e:c2:79:1d:bb:e3:69:c3:6d:6d:c8: d9:03:28:c0:fb:f0:11:48:60:23:8c:b5:80:c2:1c:3d:9e:91: f3:2d:df:8a:88:88:4a:71:e3:da:d9:a1:b9:85:d8:df:a8:3e: 67:0f:92:5f:b6:8d:0c:48:c6:87:7b:2d:fd:b5:2e:d4:f3:80: 76:38:50:dc:20:6d:60:ad:8e:9b:cc:ef:4e:50:d0:48:72:8a: ff:fb:09:e2:c5:f5:30:b9:c5:4b:40:04:64:39:3f:2b:0f:4e: 3e:4c:14:38:da:31:2d:de:bc:8a:61:b3:40:f0:c9:dc:08:76: da:29:83:f1:13:e9:bc:e9:95:a3:11:b5:d9:86:05:2a:5d:37: 38:05:85:2d:43:56:60:cc:1f:2b:54:51:2c:04:d6:b4:21:77: f0:32:d5:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v4RTo7Ixuro1JO1eAa8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlODU2ODAxYmVmOGVkM2FlODEwZTdlNjdhMzFmZDAxMmI0 NGQzMGMwHhcNMjYwMTI1MjAwMTQ0WhcNMjYwMTI2MjAwMTQ0WjAzMTEwLwYDVQQD EyhlYmMzMzBhOGQ3NjhmMjIzYmE3ZTQxZTk2ZWRiZTYxMjNjMzhkZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxg2SkZbEuhMZjUGMUBf7OIyvtjM tAJoMdMdkCHiNZ8mV994hsBd6lzOWBFdh9KZOvh64r/UDn+deAbijMcWpuur3viQ ST2CyLLi3DUAXN89eaiH0ptjJN4pVTrCLIrbupLWUTlfZ4jwXhlakc3OYFQfustp nURMTEwYFqxh4WWPBYk3uqq0qTF1VxIuRB/E/N0je3RI/Htr0A9kXZ7EK83suj03 YWj+ThL14iHKkq4eGB0m4rjBHVti2HBvINaCQ5/yLekTiPOlBPFAB7DwGLLLsgGr cGdkoiKidTxsmnhh3kfJo0HpBgwN1o7HKnB1R4cAt4HNoIKusdUdfOsn9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvDMKjXaPIjun5B6W7b5hI8ON+RMB8GA1UdIwQY MBaAFA6FaAG++O066BDn5nox/QErRNMMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG9Wb0FiNzQ3VHJvRU9mbWVqSDlBU3RFMHd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81NDE0MzQtODc5ZC00ZTU1LWE0N2Yt MTkwYjA2ZGVlNGRjLzEvRG9Wb0FiNzQ3VHJvRU9mbWVqSDlBU3RFMHd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC81NDE0MzQtODc5ZC00ZTU1LWE0N2YtMTkwYjA2ZGVlNGRj LzEvRG9Wb0FiNzQ3VHJvRU9mbWVqSDlBU3RFMHd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwIIw1GT wh1y75QjMNyFtpMiOkdQO3iaJNzncprYgKEhV2qw2PNfbm4GWqBtYffl7SPcPVI2 f1garpdGkjG85zYmC7xbBEQHDie4JR0RVP6qbn++WhQ0KEAH5CG9aUbAuh7CeR27 42nDbW3I2QMowPvwEUhgI4y1gMIcPZ6R8y3fioiISnHj2tmhuYXY36g+Zw+SX7aN DEjGh3st/bUu1POAdjhQ3CBtYK2Om8zvTlDQSHKK//sJ4sX1MLnFS0AEZDk/Kw9O PkwUONoxLd68imGzQPDJ3Ah22imD8RPpvOmVoxG12YYFKl03OAWFLUNWYMwfK1RR LATWtCF38DLVOA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:15:20 2026 by rpki-client