This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft File: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft (raw, json) Hash identifier: yjIDBDM4rusnKpAZxbVA5v0upHQB+uEMVSVQ7I2R5PE= Subject key identifier: 75:0A:B7:30:AF:DD:33:9E:F6:24:24:60:7D:6A:F8:B9:50:C8:5D:3B Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F Certificate issuer: /CN=7651762de3d3f19cedd438b03cf23986ce91727f Certificate serial: 019BF650A77BE7CE3D017FF446ED03CE5C95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 18:00:39 +0000 Manifest this update: Sun 25 Jan 2026 18:00:39 +0000 Manifest next update: Mon 26 Jan 2026 18:00:39 +0000 Files and hashes: 1: H3TYAMLFFlNCp3XM0jhoUoBeQy8.roa (hash: J5xTusXlhkXdt1S3mE6QU/UGZ2zGPT9Q3Ow+NVkju+o=) 2: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl (hash: +RRgAdXGuBRlWzOQQ/oRvMpvOF9FqFcTZUN0YpUwuSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:a7:7b:e7:ce:3d:01:7f:f4:46:ed:03:ce:5c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f Validity Not Before: Jan 25 18:00:39 2026 GMT Not After : Jan 26 18:00:39 2026 GMT Subject: CN=750ab730afdd339ef62424607d6af8b950c85d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ee:91:1a:ca:f2:61:2e:c2:3c:93:0f:a7:02: 71:50:77:8f:43:95:9d:53:c7:a2:44:d0:c9:f0:81: dc:20:43:57:91:e6:79:e7:69:8f:3e:d7:67:25:e1: 3e:0f:8c:7e:41:09:81:ce:bb:a7:70:cd:d3:44:e0: 62:9c:66:fe:97:29:1e:37:95:87:7d:cb:d6:bc:71: a0:24:a6:3a:ce:a5:47:34:be:d1:74:4f:d8:6e:7b: ef:31:af:2a:4f:a6:f0:13:24:07:e3:89:64:03:05: 96:73:e0:cf:c3:71:12:9f:42:10:2d:c8:c2:4b:a6: 49:46:ea:f3:97:cd:ab:5d:76:6d:62:f8:57:59:57: fd:68:ca:0b:b1:13:6c:d2:a0:5e:9a:d5:fe:20:45: c9:54:9c:d5:db:40:f3:f8:56:b6:73:61:ac:b6:3e: 59:40:eb:df:14:97:a3:d9:cb:19:d7:f8:ee:9b:64: 30:7b:ca:91:d0:c0:d8:c1:23:dc:28:6f:4b:12:80: 00:fc:5e:97:ad:25:31:f6:81:a5:8a:d1:ae:0b:db: 9f:98:06:5c:38:a1:17:4f:4a:db:db:01:e1:58:45: af:57:d3:88:8d:0b:22:97:6e:46:af:19:00:5d:a6: f9:3b:91:b1:be:25:2d:46:9d:48:86:68:1c:dd:08: 54:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0A:B7:30:AF:DD:33:9E:F6:24:24:60:7D:6A:F8:B9:50:C8:5D:3B X509v3 Authority Key Identifier: keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:91:8e:98:72:ef:df:d6:30:20:1f:9c:45:13:c1:28:0d:a3: d9:d0:26:80:48:4f:88:55:ac:b7:8a:3b:1a:1e:53:3b:f0:a9: d3:75:8c:b4:ca:09:bb:e5:ea:85:9c:49:54:5e:e8:a2:75:fe: 78:28:76:0f:a8:14:89:bc:30:9a:4b:e2:0a:d9:ba:5b:a3:47: 92:d0:da:54:18:55:d3:bd:1d:12:40:f7:74:6e:e5:e6:86:f9: 85:b9:43:92:46:68:64:66:ea:1b:d6:aa:7e:f5:25:f9:69:41: c0:97:df:ce:3c:38:4e:56:81:a9:ea:fc:7d:a1:7b:b3:aa:f5: 8c:87:20:fa:49:2e:94:4b:8e:25:c7:f8:24:bc:c7:e1:60:20: d7:99:03:a7:16:ec:1d:a6:8f:ae:25:bd:f9:65:ca:12:85:5a: 34:a5:a5:2d:8b:3a:13:00:a7:3f:ef:a0:eb:43:d4:aa:c3:19: 85:d2:a7:fd:98:68:a0:a6:05:08:83:45:ff:f1:b9:58:b0:ea: af:c1:9c:f4:be:0d:94:f1:f1:7b:10:18:24:be:2f:f3:4e:e9: 64:3f:e3:10:7b:12:62:3f:e6:c1:4f:02:d1:a1:85:cf:ce:f1: 97:c1:ad:2a:37:6f:6d:98:eb:4e:29:32:e8:fd:9a:51:d9:12: b7:e6:75:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UKd75849AX/0Ru0DzlyVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NTE3NjJkZTNkM2YxOWNlZGQ0MzhiMDNjZjIzOTg2Y2U5 MTcyN2YwHhcNMjYwMTI1MTgwMDM5WhcNMjYwMTI2MTgwMDM5WjAzMTEwLwYDVQQD Eyg3NTBhYjczMGFmZGQzMzllZjYyNDI0NjA3ZDZhZjhiOTUwYzg1ZDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne6RGsryYS7CPJMPpwJxUHePQ5Wd U8eiRNDJ8IHcIENXkeZ552mPPtdnJeE+D4x+QQmBzruncM3TROBinGb+lykeN5WH fcvWvHGgJKY6zqVHNL7RdE/YbnvvMa8qT6bwEyQH44lkAwWWc+DPw3ESn0IQLcjC S6ZJRurzl82rXXZtYvhXWVf9aMoLsRNs0qBemtX+IEXJVJzV20Dz+Fa2c2Gstj5Z QOvfFJej2csZ1/jum2Qwe8qR0MDYwSPcKG9LEoAA/F6XrSUx9oGlitGuC9ufmAZc OKEXT0rb2wHhWEWvV9OIjQsil25GrxkAXab5O5GxviUtRp1Ihmgc3QhU2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUKtzCv3TOe9iQkYH1q+LlQyF07MB8GA1UdIwQY MBaAFHZRdi3j0/Gc7dQ4sDzyOYbOkXJ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGxGMkxlUFQ4Wnp0MURpd1BQSTVoczZSY244LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80ZTI4MDgtZThmNC00MmE3LWE4Mjct N2FiY2U2MDBjMjE4LzEvZGxGMkxlUFQ4Wnp0MURpd1BQSTVoczZSY244Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80ZTI4MDgtZThmNC00MmE3LWE4MjctN2FiY2U2MDBjMjE4 LzEvZGxGMkxlUFQ4Wnp0MURpd1BQSTVoczZSY244LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJGOmHLv 39YwIB+cRRPBKA2j2dAmgEhPiFWst4o7Gh5TO/Cp03WMtMoJu+XqhZxJVF7oonX+ eCh2D6gUibwwmkviCtm6W6NHktDaVBhV070dEkD3dG7l5ob5hblDkkZoZGbqG9aq fvUl+WlBwJffzjw4TlaBqer8faF7s6r1jIcg+kkulEuOJcf4JLzH4WAg15kDpxbs HaaPriW9+WXKEoVaNKWlLYs6EwCnP++g60PUqsMZhdKn/ZhooKYFCINF//G5WLDq r8Gc9L4NlPHxexAYJL4v807pZD/jEHsSYj/mwU8C0aGFz87xl8GtKjdvbZjrTiky 6P2aUdkSt+Z1ig== -----END CERTIFICATE-----Generated at Mon Jan 26 00:43:30 2026 by rpki-client