This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft File: daWp6O8n4wJyk--E-4-NMPq25tY.mft (raw, json) Hash identifier: CMS7JzCCK9z/YqQy4s8YfbvkcCViK3FGdLoxG1E8rTc= Subject key identifier: 17:B5:B6:AF:35:18:B0:F2:16:6D:F1:66:4F:33:D5:C3:2D:10:AE:72 Authority key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6 Certificate issuer: /CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6 Certificate serial: 019BF8764CE5D8544D99B76C9B6FD4715A45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 04:01:01 +0000 Manifest this update: Mon 26 Jan 2026 04:01:01 +0000 Manifest next update: Tue 27 Jan 2026 04:01:01 +0000 Files and hashes: 1: daWp6O8n4wJyk--E-4-NMPq25tY.crl (hash: Dw/p1SVRpKuIfOuMd/TXRAyorBjjF38T+IqB12H+n8c=) 2: nDj9PT5N_QWx4Sz5FT7RF4CSpok.roa (hash: h0RW3y25bIVEC8aKObDu/RDtNTnrw2v6jC5PsgpIK5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:4c:e5:d8:54:4d:99:b7:6c:9b:6f:d4:71:5a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6 Validity Not Before: Jan 26 04:01:01 2026 GMT Not After : Jan 27 04:01:01 2026 GMT Subject: CN=17b5b6af3518b0f2166df1664f33d5c32d10ae72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8c:9e:cf:20:a6:8e:cf:1c:be:fc:5a:82:2e: 74:ae:f7:18:cb:01:fd:b9:03:6e:bd:aa:ae:4e:56: 86:fa:fb:cd:03:85:c6:f1:f5:8c:bb:b4:dc:2f:ab: 36:0f:28:13:84:8c:81:fc:4e:bc:41:9a:ff:5a:63: 1b:13:7b:67:13:a0:00:39:f5:da:31:46:f7:f7:6e: da:c6:be:fa:2f:60:69:7d:a5:48:93:28:45:d6:1e: 80:c9:2d:e4:6c:9a:d7:74:78:a1:d0:cd:88:dd:88: d5:d4:06:9f:00:71:3f:e0:64:d8:8c:91:c9:4f:96: 36:5b:9b:66:94:58:d1:99:08:23:64:e9:f9:ad:35: 92:52:d7:5d:74:41:85:e9:69:a1:8c:77:ec:6a:70: 20:63:da:0a:2a:f7:ef:45:e9:00:88:da:17:e3:71: bc:78:96:62:3e:48:79:d5:af:28:99:0c:3d:04:1a: e1:45:ad:b4:c9:4a:97:3c:45:a1:4d:cc:61:4c:10: 45:74:54:bd:c4:9d:eb:59:05:d6:a7:92:03:de:0b: 30:55:af:8f:29:54:46:4f:b9:46:82:b4:b1:33:6e: fb:71:bb:da:94:f5:fa:d8:6a:0e:10:3a:61:0f:36: 5f:a9:b1:f7:0c:3b:e0:92:9b:1c:c7:1a:03:e6:e9: f7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B5:B6:AF:35:18:B0:F2:16:6D:F1:66:4F:33:D5:C3:2D:10:AE:72 X509v3 Authority Key Identifier: keyid:75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:7b:db:96:2d:3d:c3:4f:69:4e:2d:46:53:cb:1d:5d:3b:7d: cf:58:5e:80:04:2c:08:11:02:30:34:0d:75:91:21:96:35:ea: 61:71:71:b9:c7:51:46:7a:25:66:e2:f6:5c:94:78:33:f8:e8: 71:27:7c:96:2c:2f:c8:26:bd:7b:e1:91:be:af:5a:89:a4:4a: 84:65:00:a6:12:d7:01:90:0f:0e:f3:5f:e2:33:d6:cc:e5:8c: 79:04:e4:fb:17:c1:91:ca:ea:e0:b7:8e:3d:dc:cc:b3:8c:9a: 67:e1:e3:57:6c:d8:12:e2:d5:10:d0:17:ba:60:af:ec:31:d9: 9f:8e:df:72:7f:ee:2d:6b:05:8f:6d:34:5a:a5:68:c6:25:b7: 7b:3e:7c:a6:b5:e3:7b:18:2c:63:e6:08:22:0a:81:00:bb:fc: a7:06:34:22:73:e3:49:6c:90:49:40:bc:91:74:60:39:3c:e8: 6c:cb:76:2c:11:ae:83:d1:a5:db:55:0b:9e:11:ec:31:31:c8: 37:a6:6b:0f:45:9d:f6:60:63:75:6d:5d:c1:69:f3:74:00:30: 42:e1:be:15:cc:b1:01:90:b9:ab:73:0d:fd:ac:0b:5c:a8:fd: 0c:0c:e3:08:02:91:84:4d:2a:0c:41:69:ec:5b:46:31:38:2f: 34:46:b2:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dkzl2FRNmbdsm2/UcVpFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YTVhOWU4ZWYyN2UzMDI3MjkzZWY4NGZiOGY4ZDMwZmFi NmU2ZDYwHhcNMjYwMTI2MDQwMTAxWhcNMjYwMTI3MDQwMTAxWjAzMTEwLwYDVQQD EygxN2I1YjZhZjM1MThiMGYyMTY2ZGYxNjY0ZjMzZDVjMzJkMTBhZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIyezyCmjs8cvvxagi50rvcYywH9 uQNuvaquTlaG+vvNA4XG8fWMu7TcL6s2DygThIyB/E68QZr/WmMbE3tnE6AAOfXa MUb3927axr76L2BpfaVIkyhF1h6AyS3kbJrXdHih0M2I3YjV1AafAHE/4GTYjJHJ T5Y2W5tmlFjRmQgjZOn5rTWSUtdddEGF6WmhjHfsanAgY9oKKvfvRekAiNoX43G8 eJZiPkh51a8omQw9BBrhRa20yUqXPEWhTcxhTBBFdFS9xJ3rWQXWp5ID3gswVa+P KVRGT7lGgrSxM277cbvalPX62GoOEDphDzZfqbH3DDvgkpscxxoD5un3mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBe1tq81GLDyFm3xZk8z1cMtEK5yMB8GA1UdIwQY MBaAFHWlqejvJ+MCcpPvhPuPjTD6tubWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGFXcDZPOG40d0p5ay0tRS00LU5NUHEyNXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jYTZmNjktNmZlYy00NzUzLWFkNzct ZWI2ZjlkZjA0NWIyLzEvZGFXcDZPOG40d0p5ay0tRS00LU5NUHEyNXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9jYTZmNjktNmZlYy00NzUzLWFkNzctZWI2ZjlkZjA0NWIy LzEvZGFXcDZPOG40d0p5ay0tRS00LU5NUHEyNXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXvbli09 w09pTi1GU8sdXTt9z1hegAQsCBECMDQNdZEhljXqYXFxucdRRnolZuL2XJR4M/jo cSd8liwvyCa9e+GRvq9aiaRKhGUAphLXAZAPDvNf4jPWzOWMeQTk+xfBkcrq4LeO PdzMs4yaZ+HjV2zYEuLVENAXumCv7DHZn47fcn/uLWsFj200WqVoxiW3ez58prXj exgsY+YIIgqBALv8pwY0InPjSWyQSUC8kXRgOTzobMt2LBGug9Gl21ULnhHsMTHI N6ZrD0Wd9mBjdW1dwWnzdAAwQuG+FcyxAZC5q3MN/awLXKj9DAzjCAKRhE0qDEFp 7FtGMTgvNEayLA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:18:42 2026 by rpki-client