This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json) Hash identifier: ycmt5AKc/VjzvCScim+wI8fHx6h+3wrEWLe/HdZPLAA= Subject key identifier: 68:CB:2F:4B:87:23:93:F6:C1:30:08:F5:ED:E6:F8:EF:52:7F:95:C3 Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00 Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00 Certificate serial: 019BF91B660AC32A66286F816AB7CBD41748 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft Manifest number: 0337 Signing time: Mon 26 Jan 2026 07:01:20 +0000 Manifest this update: Mon 26 Jan 2026 07:01:20 +0000 Manifest next update: Tue 27 Jan 2026 07:01:20 +0000 Files and hashes: 1: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: yxCiTwxaMXhxq/BAtvTW5vNxLd8MJ3xzf5VFXS8IxtU=) 2: SlA5tSP0JsNUjyJD0_sJwHDnin4.roa (hash: bKdVeFE4Poy+cUlHJCjz5CZJ/t5ehlZqsw1uXknJEjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:66:0a:c3:2a:66:28:6f:81:6a:b7:cb:d4:17:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00 Validity Not Before: Jan 26 07:01:20 2026 GMT Not After : Jan 27 07:01:20 2026 GMT Subject: CN=68cb2f4b872393f6c13008f5ede6f8ef527f95c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:56:a9:fa:70:15:8d:97:49:08:76:ad:85:9c: 0f:82:19:77:cc:1e:59:f2:98:ea:d4:e3:90:b2:a9: fc:c0:ba:8f:5f:b4:dd:c4:69:69:fc:f0:ed:b5:65: 8e:2e:45:b3:78:56:f0:32:e9:c0:21:2a:11:a9:85: 2e:eb:d4:a8:9c:92:b3:1d:f3:ea:5d:62:4a:d6:4d: 2b:a9:c4:7c:1f:17:bb:18:35:9b:10:3e:8a:db:9f: 95:8e:60:ae:4e:c5:73:73:4d:5f:b6:6d:09:b0:19: 32:33:e3:72:cb:2a:e2:90:dc:e1:70:db:e4:c7:d8: c4:1e:aa:a0:96:05:46:1d:25:af:9c:8c:dd:65:f6: aa:09:ba:67:4b:db:0a:95:0c:75:ea:b5:5e:fb:b2: 86:31:71:48:2c:e3:9b:4c:31:08:ec:54:e0:af:5e: 19:01:81:8d:af:e7:18:f0:a6:1b:fb:5d:de:b9:54: 6e:6f:e3:bc:7a:7d:38:21:2d:57:93:7d:98:75:96: cc:f4:b1:0d:fb:7c:0a:5d:1a:15:e5:23:51:4b:6f: 85:0e:63:80:7b:15:d0:2e:10:67:10:c7:66:1c:8c: 12:10:60:5d:4f:66:db:d1:b2:c7:91:af:cd:99:14: 53:dc:39:ef:85:2b:11:0f:58:4d:ea:f1:c3:2b:e0: 4b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CB:2F:4B:87:23:93:F6:C1:30:08:F5:ED:E6:F8:EF:52:7F:95:C3 X509v3 Authority Key Identifier: keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:7f:0c:a1:49:75:a1:5f:75:14:87:95:ab:64:da:61:64:3d: c6:9b:39:9f:d3:e1:4f:0c:ab:93:b1:a4:28:7c:8c:92:25:b1: 8e:50:3b:9c:9d:2a:ad:a1:25:ab:39:e4:90:61:c7:5d:e6:e6: 87:55:8f:53:23:17:d3:8a:ad:c4:71:49:47:de:68:1b:a7:14: 01:23:aa:05:c4:ea:8c:6c:40:44:45:29:31:02:a0:1d:31:ce: f4:6a:46:0b:a8:9e:64:0b:2f:c5:14:ea:68:e2:4c:5c:8c:10: c0:5e:6f:97:c3:d6:f6:55:08:67:fa:0e:56:ca:b4:a7:95:07: 56:63:69:e4:63:7d:d0:45:52:56:c1:2a:07:f8:7c:55:bb:d4: 5b:4a:bc:a0:2e:6f:fe:5e:ae:fc:df:65:16:5c:d8:9f:76:fd: 3e:03:db:c9:b3:76:9e:86:ca:ba:8a:13:68:e6:81:eb:bc:8e: b3:1f:21:0b:f9:64:25:d9:47:01:57:26:fc:b2:78:81:13:89: fb:ed:02:20:ed:79:b4:5a:3a:65:82:9b:0e:15:d7:17:12:7c: 7d:3f:8e:36:55:8b:f4:9e:1a:57:42:ae:f9:14:b0:f4:ef:4a: ca:f9:ed:ac:bb:7a:38:0c:b8:eb:b8:c6:db:03:a7:d5:6a:f8: 79:22:4f:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G2YKwypmKG+BarfL1BdIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTJkZDA1ZjY4YWExYTMyNGFkNWJjMTI0NzZjNWI5YTYx ZWJjMDAwHhcNMjYwMTI2MDcwMTIwWhcNMjYwMTI3MDcwMTIwWjAzMTEwLwYDVQQD Eyg2OGNiMmY0Yjg3MjM5M2Y2YzEzMDA4ZjVlZGU2ZjhlZjUyN2Y5NWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1ap+nAVjZdJCHathZwPghl3zB5Z 8pjq1OOQsqn8wLqPX7TdxGlp/PDttWWOLkWzeFbwMunAISoRqYUu69SonJKzHfPq XWJK1k0rqcR8Hxe7GDWbED6K25+VjmCuTsVzc01ftm0JsBkyM+NyyyrikNzhcNvk x9jEHqqglgVGHSWvnIzdZfaqCbpnS9sKlQx16rVe+7KGMXFILOObTDEI7FTgr14Z AYGNr+cY8KYb+13euVRub+O8en04IS1Xk32YdZbM9LEN+3wKXRoV5SNRS2+FDmOA exXQLhBnEMdmHIwSEGBdT2bb0bLHka/NmRRT3DnvhSsRD1hN6vHDK+BL8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjLL0uHI5P2wTAI9e3m+O9Sf5XDMB8GA1UdIwQY MBaAFAxS3QX2iqGjJK1bwSR2xbmmHrwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYjRlNTctNWViNC00YjlkLWJjMjYt NzA3NDllN2E0ZDk0LzEvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xYjRlNTctNWViNC00YjlkLWJjMjYtNzA3NDllN2E0ZDk0 LzEvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf38MoUl1 oV91FIeVq2TaYWQ9xps5n9PhTwyrk7GkKHyMkiWxjlA7nJ0qraElqznkkGHHXebm h1WPUyMX04qtxHFJR95oG6cUASOqBcTqjGxAREUpMQKgHTHO9GpGC6ieZAsvxRTq aOJMXIwQwF5vl8PW9lUIZ/oOVsq0p5UHVmNp5GN90EVSVsEqB/h8VbvUW0q8oC5v /l6u/N9lFlzYn3b9PgPbybN2nobKuooTaOaB67yOsx8hC/lkJdlHAVcm/LJ4gROJ ++0CIO15tFo6ZYKbDhXXFxJ8fT+ONlWL9J4aV0Ku+RSw9O9KyvntrLt6OAy467jG 2wOn1Wr4eSJPjQ== -----END CERTIFICATE-----Generated at Mon Jan 26 12:24:42 2026 by rpki-client