This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft File: pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft (raw, json) Hash identifier: H5+zcAt010z2Lz3KHSyMkRJ8b07wwZQAxRIvzvw0tc0= Subject key identifier: 2A:DC:2D:73:23:24:7E:53:F3:D2:D9:A7:3B:78:C6:4A:A7:09:5F:0D Authority key identifier: A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98 Certificate issuer: /CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98 Certificate serial: 019BF763491A198BAE4329EBF36A1CC4922F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 23:00:37 +0000 Manifest this update: Sun 25 Jan 2026 23:00:37 +0000 Manifest next update: Mon 26 Jan 2026 23:00:37 +0000 Files and hashes: 1: pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl (hash: Zl5B+QtEbmA1TfmivjYSHyTVK3hqEJZObj9ZRsAPHEQ=) 2: sFhaHiuTZkyPvfZGeitPsQ50uDY.roa (hash: A+Ir0fHumCJtAvIDD0Uq1l9aMQ2n7on4GhmvbKyT6iw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:49:1a:19:8b:ae:43:29:eb:f3:6a:1c:c4:92:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98 Validity Not Before: Jan 25 23:00:37 2026 GMT Not After : Jan 26 23:00:37 2026 GMT Subject: CN=2adc2d7323247e53f3d2d9a73b78c64aa7095f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:2a:a4:89:ab:84:f4:c3:4b:5a:55:ed:5b: 80:3c:44:3d:64:ed:0b:fd:81:d5:5d:81:1a:66:7b: 5d:a8:51:90:66:14:68:60:fa:f9:98:96:ea:d4:02: 75:c9:f1:40:a1:5b:9d:9f:76:ce:bc:b0:6e:40:23: 98:fd:76:a6:c3:06:5b:4d:ca:38:78:e5:d7:28:52: 26:a4:9c:21:8e:ba:fd:33:52:84:93:d9:78:ad:cd: dd:59:b7:e8:92:7e:3d:0f:92:5e:88:0d:2b:89:74: 76:d4:df:83:ac:f0:9e:a5:4b:06:10:dc:8f:93:6e: 56:1b:36:f2:c5:37:66:eb:03:7d:56:8f:7e:b6:cf: e5:35:35:49:40:2f:28:18:88:81:bc:c6:55:fd:6d: f2:a2:64:c2:cc:5a:25:54:fd:27:be:92:60:23:6e: 9d:88:e3:7e:65:90:5a:8f:b5:8e:cb:24:77:f3:c4: 23:7d:73:dd:7a:50:a8:6d:3c:25:8e:66:c5:a6:a0: e2:a2:b1:3b:69:98:39:e2:f9:84:7d:fc:67:6c:e1: 44:94:3f:10:a4:8b:ad:24:df:6e:ad:50:e1:c1:85: ae:cb:09:6e:5f:7e:4b:20:b9:a3:d4:1c:c7:f2:e7: 34:6f:b8:9d:e7:83:cb:aa:1a:ea:01:d1:e6:1f:a6: c7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DC:2D:73:23:24:7E:53:F3:D2:D9:A7:3B:78:C6:4A:A7:09:5F:0D X509v3 Authority Key Identifier: keyid:A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:db:74:35:65:bf:eb:13:d8:90:04:90:1e:1e:1a:0c:b4:5f: d2:88:1e:52:d8:58:d4:da:91:1d:e9:41:30:19:12:ff:d5:a2: 16:5c:ad:e7:99:bb:91:0d:b1:18:67:bd:5f:47:9b:87:d9:2d: 89:f3:0d:15:b7:72:ae:5e:3e:1e:ce:a7:46:ba:47:98:8e:9c: 77:4a:03:ad:9c:82:90:98:3a:82:7f:fb:47:ab:6c:b6:4e:1a: ff:b7:61:93:a0:87:b2:57:e6:77:a3:dc:61:4a:50:06:a5:b7: d2:0b:03:46:93:15:56:14:ea:a3:a5:88:6f:e6:68:80:7d:03: 08:74:de:a0:02:b4:aa:ab:00:bb:f4:9e:47:a3:52:3b:bf:2f: 34:bc:82:24:01:5a:7a:ce:2a:b2:d4:6f:5e:f0:55:81:a9:5f: f0:5a:8e:3a:af:d6:11:b8:21:1f:8c:6e:b8:5b:95:1c:41:9a: fe:b9:55:21:ba:46:06:df:2b:8c:5b:9c:2a:21:e8:0c:6e:ad: da:4f:fc:7e:78:b0:00:55:10:2f:c3:6d:63:2c:ce:8c:c4:af: 65:35:80:b1:39:7f:38:0b:dd:a0:e8:10:6c:5a:3c:07:a2:22: 68:f7:a4:6e:0b:ef:0f:63:e1:e5:09:d7:b9:e9:65:1c:66:82: 6a:a9:1b:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y0kaGYuuQynr82ocxJIvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MzNlMzJhYzBjNmZhNzM1YTZjN2JlMTQ0Y2ZhM2ZjMjk3 YzBiOTgwHhcNMjYwMTI1MjMwMDM3WhcNMjYwMTI2MjMwMDM3WjAzMTEwLwYDVQQD EygyYWRjMmQ3MzIzMjQ3ZTUzZjNkMmQ5YTczYjc4YzY0YWE3MDk1ZjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG0qpImrhPTDS1pV7VuAPEQ9ZO0L /YHVXYEaZntdqFGQZhRoYPr5mJbq1AJ1yfFAoVudn3bOvLBuQCOY/XamwwZbTco4 eOXXKFImpJwhjrr9M1KEk9l4rc3dWbfokn49D5JeiA0riXR21N+DrPCepUsGENyP k25WGzbyxTdm6wN9Vo9+ts/lNTVJQC8oGIiBvMZV/W3yomTCzFolVP0nvpJgI26d iON+ZZBaj7WOyyR388QjfXPdelCobTwljmbFpqDiorE7aZg54vmEffxnbOFElD8Q pIutJN9urVDhwYWuywluX35LILmj1BzH8uc0b7id54PLqhrqAdHmH6bHwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrcLXMjJH5T89LZpzt4xkqnCV8NMB8GA1UdIwQY MBaAFKQz4yrAxvpzWmx74UTPo/wpfAuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcERQaktzREctbk5hYkh2aFJNLWpfQ2w4QzVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84NjU5Y2YtZjgyNC00ZjkzLTg2MDQt YjgxMmJkNTk0NzM5LzEvcERQaktzREctbk5hYkh2aFJNLWpfQ2w4QzVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi84NjU5Y2YtZjgyNC00ZjkzLTg2MDQtYjgxMmJkNTk0NzM5 LzEvcERQaktzREctbk5hYkh2aFJNLWpfQ2w4QzVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdt0NWW/ 6xPYkASQHh4aDLRf0ogeUthY1NqRHelBMBkS/9WiFlyt55m7kQ2xGGe9X0ebh9kt ifMNFbdyrl4+Hs6nRrpHmI6cd0oDrZyCkJg6gn/7R6tstk4a/7dhk6CHslfmd6Pc YUpQBqW30gsDRpMVVhTqo6WIb+ZogH0DCHTeoAK0qqsAu/SeR6NSO78vNLyCJAFa es4qstRvXvBVgalf8FqOOq/WEbghH4xuuFuVHEGa/rlVIbpGBt8rjFucKiHoDG6t 2k/8fniwAFUQL8NtYyzOjMSvZTWAsTl/OAvdoOgQbFo8B6IiaPekbgvvD2Ph5QnX uellHGaCaqkbMg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:17 2026 by rpki-client