This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: FzmMFhNwE/xN2UxVhDEkhnMtAG9okC4LPt3vkGs6gds= Subject key identifier: 41:8D:20:A1:9E:18:B9:77:D2:62:01:2E:70:0C:8A:6D:35:48:67:AF Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019BF1CF96BAA4FC4D3940BB24805727D8BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 11B3 Signing time: Sat 24 Jan 2026 21:01:12 +0000 Manifest this update: Sat 24 Jan 2026 21:01:12 +0000 Manifest next update: Sun 25 Jan 2026 21:01:12 +0000 Files and hashes: 1: 4Rc8awWER1dWSivAWyBxQYvhNBc.roa (hash: 4cpiA/ovKfEb/H/Zx4o59n8dO49gnXcdaVDGvWSeHi8=) 2: A8k-ktADekUW8KGL9-TD1MM8a3Q.roa (hash: 8xlZQD8rUGje2ii4uZloIXz3Wi4R3xzE+RBDkavOVHI=) 3: AbJQHx5ahYpjvv315eRsPQzSy6s.roa (hash: IieQfWIJT+/3Ysx4MwtAIRbsPXEZaLQ5D1UaLDyxns0=) 4: Cl4gUWWdkaLuufc7IaskeYPpLtI.roa (hash: 1MLU7eGqfR1fNhY59VB68snOwCNrx/MEqW1PogRhMWg=) 5: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: 5UuWnCxGuEmUrUg1YxUBbRwjATYINe+yeJic9LQ40eE=) 6: GMfg_IltBAfUi8YQpIPuZWHWPVM.roa (hash: 88EeE1BLpzbAgAQpYWqHKatkmYfK+ol5tgjxm21cKXI=) 7: M3d-ndtS-EWKNtc6mJwZhcKWXhE.roa (hash: IX96+0wugdLurSubiSiT1icuKiERC0yGvvvWL4yy+fQ=) 8: SLt04H5KmH3Vrs5wkvZpWnGiha0.roa (hash: G9GxEVefW947uRK0BuK6mQqyb0vu3oxfGtbziIUIJQw=) 9: VDlRmZ_UUBGQIZXe-tlycFHtxuY.roa (hash: roAWquTgnTt3gI/FQ9e2D2VEpYewknrb+S48y8ncfXs=) 10: aYjhOwvnCzlgzbQHnira-ZaC3N8.roa (hash: ymasb353D4nJPS2cZZCPXG+hFCONgTbrdZ3r87bzCsI=) 11: dQ7u4JbIzkGK7zGlgsaEjYvDyPw.roa (hash: 0Io/aF5BJoS3S7A3SgO0UMDiD52MQt1rPPj3iNE5lRA=) 12: eWt0Tak3myBNkMD7r4cZaRZMMuI.roa (hash: H9iIgQUbeHquNPmfK/S2A+3CGFk8Rb9c/Cx3jhDtaaM=) 13: hzQ7tMh6oqC5v0mKv_jBU_A9aCw.roa (hash: fUyvgz1r/egD8D0UE0/Rhf6tbMxfTD9jAEgan6se/FA=) 14: jg4t7SrnuYvRZomc0XCPotAh4u0.roa (hash: 9RmoUuo6041b6kGDwKKpPE71TUf5ltFSivOlPvvgN5o=) 15: kP39bsnw_qJA-nAXWzwPudCCaSw.roa (hash: p5h1eBsrXq6bm8kjGVr9OVb84+2GgS0jxbrmtlhu5Yc=) 16: t9zXA_rZh6B_pE4ccfKKbM0UX8M.roa (hash: x+rDhCDJVIl1HJ9OhOXObawt9Y9MUYeu8ZdvRA+YDqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:cf:96:ba:a4:fc:4d:39:40:bb:24:80:57:27:d8:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Jan 24 21:01:12 2026 GMT Not After : Jan 25 21:01:12 2026 GMT Subject: CN=418d20a19e18b977d262012e700c8a6d354867af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a5:cf:1b:be:42:d9:dd:a3:be:60:83:7d:04: a8:b4:45:49:80:bb:dd:fe:44:cd:81:84:44:2c:45: 1b:76:bd:fc:72:eb:23:23:43:73:d3:6a:99:97:fc: 25:0e:f9:a4:30:24:09:3b:ff:ea:29:03:e2:59:dc: 95:87:ab:29:79:48:ee:9b:d4:d8:cd:7d:88:1d:f6: 90:0e:9a:53:46:5e:bc:9f:9e:3e:1d:59:4b:75:ed: f8:ed:6f:c5:bb:c4:d3:51:2b:62:9c:d3:97:1b:9e: 8a:d1:44:a4:3a:06:6e:e5:64:86:e5:5f:33:56:a9: 75:48:7b:f9:54:23:d5:f3:67:59:ba:d8:68:a0:d4: 83:5d:2c:f4:56:07:e6:d5:27:79:2d:80:fb:05:67: 1a:f4:c1:30:73:f4:d8:56:5f:4c:15:a6:9d:13:18: 60:54:23:9b:75:8f:44:8f:af:70:32:70:13:47:e8: 46:93:f5:27:f9:d7:12:1c:58:95:23:d9:53:fe:73: 67:05:81:7b:f6:2a:9c:72:8d:d4:fc:6b:1c:54:ce: db:70:1d:75:58:fb:67:71:91:dc:c6:cf:9e:f5:35: 06:10:73:49:13:1d:8c:f4:8e:39:28:df:f5:aa:c2: f4:01:02:37:ea:7b:2d:6f:24:e7:63:b0:31:c7:93: a0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8D:20:A1:9E:18:B9:77:D2:62:01:2E:70:0C:8A:6D:35:48:67:AF X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:39:90:a6:5d:5f:a6:a1:e1:57:51:a2:1d:72:bc:66:f3:d2: b1:1a:2a:aa:c2:fe:2f:34:f9:16:46:07:af:ff:80:76:fb:60: 33:c3:fe:2d:b4:14:49:c6:fd:1f:fc:3b:bd:a4:68:4c:2d:7d: 41:a1:7b:2a:90:05:dc:c9:37:bf:22:56:25:6d:f0:27:4a:6b: d3:d9:44:d7:e9:6c:13:cb:df:e5:ca:be:bc:6a:f6:92:a5:7a: b5:4b:51:e8:94:17:17:83:27:b6:90:4a:76:ac:cc:df:96:79: b0:66:1b:da:77:56:29:d9:fa:fb:64:dc:28:0d:03:89:aa:8e: 7d:3a:7a:05:87:08:74:62:0a:1e:09:b0:ac:f6:a3:ee:db:2d: 44:99:53:37:ff:8b:98:af:67:60:58:a3:1c:14:9c:dc:dc:bd: 81:e6:a3:6a:f0:38:6a:4a:fd:b7:73:f0:fa:47:a4:ff:b0:a7: a8:a0:44:3d:c4:58:bb:44:ec:db:5a:3a:23:01:27:f0:89:f2: 1d:c4:c1:9c:c0:6b:22:e7:2f:89:45:bd:4d:b4:92:7b:15:40: 74:b4:f7:4f:5d:d4:25:c2:11:a4:b1:c1:0c:57:82:82:80:36: 7a:63:bb:08:7a:e8:54:35:a7:8a:e7:fe:92:31:60:a5:5d:af: 95:d1:27:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvxz5a6pPxNOUC7JIBXJ9i+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYwMTI0MjEwMTEyWhcNMjYwMTI1MjEwMTEyWjAzMTEwLwYDVQQD Eyg0MThkMjBhMTllMThiOTc3ZDI2MjAxMmU3MDBjOGE2ZDM1NDg2N2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaXPG75C2d2jvmCDfQSotEVJgLvd /kTNgYRELEUbdr38cusjI0Nz02qZl/wlDvmkMCQJO//qKQPiWdyVh6speUjum9TY zX2IHfaQDppTRl68n54+HVlLde347W/Fu8TTUStinNOXG56K0USkOgZu5WSG5V8z Vql1SHv5VCPV82dZuthooNSDXSz0Vgfm1Sd5LYD7BWca9MEwc/TYVl9MFaadExhg VCObdY9Ej69wMnATR+hGk/Un+dcSHFiVI9lT/nNnBYF79iqcco3U/GscVM7bcB11 WPtncZHcxs+e9TUGEHNJEx2M9I45KN/1qsL0AQI36nstbyTnY7Axx5Og0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGNIKGeGLl30mIBLnAMim01SGevMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTmQpl1f pqHhV1GiHXK8ZvPSsRoqqsL+LzT5FkYHr/+AdvtgM8P+LbQUScb9H/w7vaRoTC19 QaF7KpAF3Mk3vyJWJW3wJ0pr09lE1+lsE8vf5cq+vGr2kqV6tUtR6JQXF4MntpBK dqzM35Z5sGYb2ndWKdn6+2TcKA0DiaqOfTp6BYcIdGIKHgmwrPaj7tstRJlTN/+L mK9nYFijHBSc3Ny9geajavA4akr9t3Pw+kek/7CnqKBEPcRYu0Ts21o6IwEn8Iny HcTBnMBrIucviUW9TbSSexVAdLT3T13UJcIRpLHBDFeCgoA2emO7CHroVDWniuf+ kjFgpV2vldEnSw== -----END CERTIFICATE-----Generated at Sun Jan 25 05:40:10 2026 by rpki-client