This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft File: Dj8xyerObwpezNuN8rAcc1FWhoY.mft (raw, json) Hash identifier: 0KwNm7pVyo24ZLDVqh/a+DFzF+w4qOpDFTUdFRV3dKQ= Subject key identifier: 07:EC:9E:A2:D0:65:EF:72:45:84:E4:20:66:19:64:02:53:92:27:59 Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86 Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686 Certificate serial: 019BF5AC4EB6CF7282EA960D6D5B4348AA4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft Manifest number: 17A4 Signing time: Sun 25 Jan 2026 15:01:08 +0000 Manifest this update: Sun 25 Jan 2026 15:01:08 +0000 Manifest next update: Mon 26 Jan 2026 15:01:08 +0000 Files and hashes: 1: Dj8xyerObwpezNuN8rAcc1FWhoY.crl (hash: Hre8w0RyzD4pKWZCeOxBqVYy73UGTHA7YlMNLdapE3g=) 2: KG2bwdMHpiZ-qNVrmFbejxgZnXw.roa (hash: /SATlKhWfLl21S+M8PJymfOJAuNbA6mH3Elkc2JeqqY=) 3: P36bForyKz3A1xYxUt5uRvnbjGo.roa (hash: CVAU2pcmHNPpR0Ea2g62GxYoWi/yJ4n8I1Gjfyzzm7o=) 4: uZHn0r02l2agjVRMRfZ3xICbMLw.roa (hash: YR/6cl0OhmlwCiQwg5TQ7bSWNguLPLl/GP2GOc23T+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:4e:b6:cf:72:82:ea:96:0d:6d:5b:43:48:aa:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686 Validity Not Before: Jan 25 15:01:08 2026 GMT Not After : Jan 26 15:01:08 2026 GMT Subject: CN=07ec9ea2d065ef724584e4206619640253922759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fc:a7:6c:6e:82:30:22:e4:56:0f:d7:ac:a5: 46:14:27:1e:83:ca:19:12:63:e1:0b:3a:ea:0c:aa: 45:21:72:d7:09:c3:9c:ec:00:b9:b4:57:54:16:73: b9:b4:9a:94:1c:ce:ef:15:a7:19:a5:10:b3:61:73: 4e:0d:d3:c9:db:c1:6b:bc:1b:b7:61:11:0b:a1:a2: b1:f5:93:fd:64:09:72:1c:50:af:f3:d9:c2:58:49: e4:c4:31:c0:cf:8a:43:98:61:1b:d1:64:a8:72:f1: 2c:9f:21:99:b6:fc:ae:09:43:b7:9f:bc:e0:63:76: fb:c8:3f:60:4a:ff:56:96:82:10:55:43:05:2b:e4: ba:9e:95:55:a8:a2:2c:13:b5:1c:24:65:60:72:3e: 97:9d:17:b2:7d:93:f7:ae:3e:02:81:e8:eb:cd:02: dd:2c:85:68:1a:c6:75:d3:62:50:e8:27:b4:ee:09: 04:fe:90:9b:c5:c7:3d:91:14:3f:b7:36:fd:29:83: 13:ac:8e:5f:d7:e6:1a:80:3d:20:30:5d:70:fc:1a: 58:6c:d7:a6:5c:0f:e3:98:0c:51:ba:94:db:1c:ed: 6f:ba:e9:de:ec:e6:3e:28:55:d9:11:c7:fd:78:60: 5e:cd:1f:04:1f:80:31:fe:43:d8:ee:17:65:0a:2a: 50:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EC:9E:A2:D0:65:EF:72:45:84:E4:20:66:19:64:02:53:92:27:59 X509v3 Authority Key Identifier: keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:af:e4:06:e0:b1:9a:16:a3:7a:8f:d6:0d:21:2a:67:a8:78: 11:5b:52:89:3e:98:49:7f:fc:e9:73:a5:5a:32:52:06:5a:57: 52:33:de:14:42:15:10:d0:a5:d4:5a:eb:82:6b:ee:7d:58:27: 9d:06:b2:5e:44:55:e6:1b:dc:89:3f:ef:25:7a:2f:95:01:97: d0:06:e8:c6:2d:74:94:76:bf:3e:ca:56:61:25:d2:c6:28:43: 06:ce:d9:07:3a:dd:d7:77:73:eb:3e:15:8e:84:6e:8a:57:50: cf:bd:ab:39:99:16:c8:5a:ca:a8:06:d6:18:d0:10:3b:13:17: 05:63:c6:0a:9e:b3:0b:a1:90:38:9e:f2:96:f3:0a:ae:07:03: 09:c5:60:47:75:f5:37:87:9d:ce:05:cf:c4:2c:cf:dc:e8:c5: 68:1b:97:6f:6d:2c:86:ce:a0:af:20:75:9e:e3:9c:d4:f7:d2: 62:e4:45:52:34:a7:c6:f2:9a:8c:fe:f8:82:47:a4:b0:1b:25: 49:3e:36:ca:43:5f:48:6a:c3:a3:cf:cb:59:1b:94:be:9e:41: 6a:cb:10:f8:d1:05:9d:b2:42:dd:2a:a2:f7:6d:9f:68:65:63: 2e:b7:7f:a3:60:c4:62:0d:e0:b6:24:33:f9:e4:24:8f:93:24: 1b:ed:c3:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rE62z3KC6pYNbVtDSKpOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlM2YzMWM5ZWFjZTZmMGE1ZWNjZGI4ZGYyYjAxYzczNTE1 Njg2ODYwHhcNMjYwMTI1MTUwMTA4WhcNMjYwMTI2MTUwMTA4WjAzMTEwLwYDVQQD EygwN2VjOWVhMmQwNjVlZjcyNDU4NGU0MjA2NjE5NjQwMjUzOTIyNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvynbG6CMCLkVg/XrKVGFCceg8oZ EmPhCzrqDKpFIXLXCcOc7AC5tFdUFnO5tJqUHM7vFacZpRCzYXNODdPJ28FrvBu3 YRELoaKx9ZP9ZAlyHFCv89nCWEnkxDHAz4pDmGEb0WSocvEsnyGZtvyuCUO3n7zg Y3b7yD9gSv9WloIQVUMFK+S6npVVqKIsE7UcJGVgcj6XnReyfZP3rj4CgejrzQLd LIVoGsZ102JQ6Ce07gkE/pCbxcc9kRQ/tzb9KYMTrI5f1+YagD0gMF1w/BpYbNem XA/jmAxRupTbHO1vuune7OY+KFXZEcf9eGBezR8EH4Ax/kPY7hdlCipQxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfsnqLQZe9yRYTkIGYZZAJTkidZMB8GA1UdIwQY MBaAFA4/Mcnqzm8KXszbjfKwHHNRVoaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYt ZGQ1ZGRkMDVkYjBiLzEvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYtZGQ1ZGRkMDVkYjBi LzEvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAha/kBuCx mhajeo/WDSEqZ6h4EVtSiT6YSX/86XOlWjJSBlpXUjPeFEIVENCl1FrrgmvufVgn nQayXkRV5hvciT/vJXovlQGX0Aboxi10lHa/PspWYSXSxihDBs7ZBzrd13dz6z4V joRuildQz72rOZkWyFrKqAbWGNAQOxMXBWPGCp6zC6GQOJ7ylvMKrgcDCcVgR3X1 N4edzgXPxCzP3OjFaBuXb20shs6gryB1nuOc1PfSYuRFUjSnxvKajP74gkeksBsl ST42ykNfSGrDo8/LWRuUvp5BassQ+NEFnbJC3Sqi922faGVjLrd/o2DEYg3gtiQz +eQkj5MkG+3Dow== -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:59 2026 by rpki-client