This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft File: duBenuWUd-AVX8HtwKGDByl2bog.mft (raw, json) Hash identifier: r3d9jbJaVsmoG6U7Qu+vxtg3aoKCxmmn2SjziLmLAZs= Subject key identifier: B8:AA:24:47:F5:89:2C:29:DC:DE:9B:6B:83:91:49:94:BC:D8:05:10 Authority key identifier: 76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88 Certificate issuer: /CN=76e05e9ee59477e0155fc1edc0a1830729766e88 Certificate serial: 019BF6F58800C8CF373645341A6D48B4589D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft Manifest number: 177B Signing time: Sun 25 Jan 2026 21:00:44 +0000 Manifest this update: Sun 25 Jan 2026 21:00:44 +0000 Manifest next update: Mon 26 Jan 2026 21:00:44 +0000 Files and hashes: 1: McH8mGnLHCM6mOT2jSygPPhIpnQ.roa (hash: +Pr4bFJHvbceI7BsmKDsD/oUAFUjqj+Qb2TSJ5/To2A=) 2: duBenuWUd-AVX8HtwKGDByl2bog.crl (hash: 0lmPabgnaQeQZ3Z4LhFLnKcVAZod/gbQyADu0K7RLKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:88:00:c8:cf:37:36:45:34:1a:6d:48:b4:58:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76e05e9ee59477e0155fc1edc0a1830729766e88 Validity Not Before: Jan 25 21:00:44 2026 GMT Not After : Jan 26 21:00:44 2026 GMT Subject: CN=b8aa2447f5892c29dcde9b6b83914994bcd80510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9c:97:ea:19:00:4c:6d:5f:49:a8:9a:36:07: 71:58:bc:df:b3:6c:ae:cb:76:24:74:f7:25:5e:df: bf:a7:65:c2:df:dd:4a:78:3a:62:e2:e6:24:3c:a6: dc:61:3b:06:a7:4c:40:1b:3d:b9:bd:02:af:40:63: 38:99:f9:2f:fc:68:67:53:5e:b3:31:26:d5:14:85: 08:ea:e9:dc:72:7a:66:3d:e6:17:77:87:51:a4:56: 24:df:72:db:fb:43:47:19:f3:79:ae:20:60:1e:27: 74:70:21:f7:cb:46:5e:b2:8c:ed:31:fd:0e:49:1a: 4f:83:08:ef:12:36:fd:e2:49:06:b0:f3:4f:41:46: 23:4f:65:c0:c5:1b:93:f3:9c:f7:0c:50:36:e7:86: 56:17:7a:84:0a:be:c0:2b:c6:be:79:f0:ce:78:a8: 2f:bf:26:a0:c6:cf:79:88:f4:22:5d:d7:0e:1c:c0: c4:d9:d1:56:bd:99:b6:1b:82:0d:9b:aa:90:f6:5a: 69:18:57:3e:a0:14:e3:71:6f:2b:49:f2:b8:fb:3d: d0:ea:72:c0:34:48:55:82:51:c8:76:06:7f:f0:01: ac:f2:51:a0:35:02:fd:0a:f5:0a:17:b7:3c:58:4f: 1a:76:63:5c:67:01:94:d1:86:c1:08:5d:bf:2f:36: 77:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AA:24:47:F5:89:2C:29:DC:DE:9B:6B:83:91:49:94:BC:D8:05:10 X509v3 Authority Key Identifier: keyid:76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d8:56:20:69:68:5a:11:b2:c2:43:b9:c3:06:fa:ab:09:86: 53:e9:6e:2e:ef:7b:2e:77:28:93:ac:8e:41:9a:57:ff:c5:a1: 93:62:0e:82:7a:51:4f:80:7c:c7:0a:70:e2:99:55:9a:b9:8e: e4:5e:a7:23:13:11:76:16:cf:68:d4:32:50:bd:96:7c:de:9f: a2:d8:92:34:2d:b9:bc:90:c5:55:a9:f2:a6:45:79:5d:3b:fc: 77:d4:9c:99:5c:f1:60:b9:49:a0:59:4d:91:90:1a:0f:04:f5: a6:c6:0b:e5:d7:aa:8f:8f:ed:64:24:12:f4:44:c1:ae:fa:62: 59:2a:62:b6:f5:94:07:18:97:d7:b7:bb:c9:88:72:23:81:ca: 7a:d4:3c:4c:77:4d:f1:b7:b4:2f:a8:60:33:6c:e8:19:d9:ad: a2:18:f9:3e:50:2e:01:b4:47:86:f6:5a:3e:d5:f2:c1:ab:3d: 35:2c:1e:89:d2:4e:fa:28:dc:71:47:69:d4:2b:d1:b4:15:0e: 5c:8c:c0:e9:c9:01:87:8c:0e:57:e3:fd:72:bf:9c:c6:90:79: fc:63:c6:7a:9b:9c:ea:3c:bc:59:e1:80:f1:de:0b:90:fc:60: 28:71:14:85:e5:db:99:13:87:36:90:f3:34:3c:5c:df:79:a4: 88:9b:0d:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29YgAyM83NkU0Gm1ItFidMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZTA1ZTllZTU5NDc3ZTAxNTVmYzFlZGMwYTE4MzA3Mjk3 NjZlODgwHhcNMjYwMTI1MjEwMDQ0WhcNMjYwMTI2MjEwMDQ0WjAzMTEwLwYDVQQD EyhiOGFhMjQ0N2Y1ODkyYzI5ZGNkZTliNmI4MzkxNDk5NGJjZDgwNTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5yX6hkATG1fSaiaNgdxWLzfs2yu y3YkdPclXt+/p2XC391KeDpi4uYkPKbcYTsGp0xAGz25vQKvQGM4mfkv/GhnU16z MSbVFIUI6unccnpmPeYXd4dRpFYk33Lb+0NHGfN5riBgHid0cCH3y0ZesoztMf0O SRpPgwjvEjb94kkGsPNPQUYjT2XAxRuT85z3DFA254ZWF3qECr7AK8a+efDOeKgv vyagxs95iPQiXdcOHMDE2dFWvZm2G4INm6qQ9lppGFc+oBTjcW8rSfK4+z3Q6nLA NEhVglHIdgZ/8AGs8lGgNQL9CvUKF7c8WE8admNcZwGU0YbBCF2/LzZ3yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiqJEf1iSwp3N6ba4ORSZS82AUQMB8GA1UdIwQY MBaAFHbgXp7llHfgFV/B7cChgwcpdm6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHVCZW51V1VkLUFWWDhIdHdLR0RCeWwyYm9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS82NmU1MWEtZmU4Mi00YjVkLTk4ODQt YjUzM2Y0OTQxYWZlLzEvZHVCZW51V1VkLUFWWDhIdHdLR0RCeWwyYm9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS82NmU1MWEtZmU4Mi00YjVkLTk4ODQtYjUzM2Y0OTQxYWZl LzEvZHVCZW51V1VkLUFWWDhIdHdLR0RCeWwyYm9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNhWIGlo WhGywkO5wwb6qwmGU+luLu97Lncok6yOQZpX/8Whk2IOgnpRT4B8xwpw4plVmrmO 5F6nIxMRdhbPaNQyUL2WfN6fotiSNC25vJDFVanypkV5XTv8d9ScmVzxYLlJoFlN kZAaDwT1psYL5deqj4/tZCQS9ETBrvpiWSpitvWUBxiX17e7yYhyI4HKetQ8THdN 8be0L6hgM2zoGdmtohj5PlAuAbRHhvZaPtXywas9NSweidJO+ijccUdp1CvRtBUO XIzA6ckBh4wOV+P9cr+cxpB5/GPGepuc6jy8WeGA8d4LkPxgKHEUheXbmROHNpDz NDxc33mkiJsNXQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:08 2026 by rpki-client