This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json) Hash identifier: fcTDkY0OObWP+Us57mSd+V1BFvTlkxaUH038FbMsVCU= Subject key identifier: FE:49:EC:92:76:9A:C9:48:12:23:A9:06:E7:54:7B:B9:E7:F5:A5:3E Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90 Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290 Certificate serial: 019BF42BDC29C47E3C2461CF10FFEC0963CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft Manifest number: 0887 Signing time: Sun 25 Jan 2026 08:01:13 +0000 Manifest this update: Sun 25 Jan 2026 08:01:13 +0000 Manifest next update: Mon 26 Jan 2026 08:01:13 +0000 Files and hashes: 1: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: 1FhMDBcJvMqQtunSwo1lxlOcor1gjsYFG9TWMLtfn3U=) 2: qdFP8iSD0Z_J4wvN-DjLd-7BFwQ.roa (hash: 0D/tNJqnYIvzeRQq9p/CHZuxh+SBEqxg5rvNHFpn3cY=) 3: vrCign6erTM1LbQRKP4h0IonXBQ.roa (hash: AQYpWzYbq4r9zz5A/4U8pWZOmJvv2qppgX/OMFbKwks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:dc:29:c4:7e:3c:24:61:cf:10:ff:ec:09:63:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290 Validity Not Before: Jan 25 08:01:13 2026 GMT Not After : Jan 26 08:01:13 2026 GMT Subject: CN=fe49ec92769ac9481223a906e7547bb9e7f5a53e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:da:ab:8e:ac:5a:50:3d:8d:96:4a:81:d7:9c: b9:9e:98:92:bd:fc:ad:ef:28:7a:42:d3:72:04:1b: 7b:c0:02:76:05:28:45:37:eb:eb:a5:e9:df:ee:5a: 33:ea:9c:73:01:ea:86:1c:80:ca:ea:21:81:1d:74: f4:4d:7e:ba:57:75:18:09:0b:02:85:60:82:53:f0: 4a:d6:54:b9:ed:b3:a6:6a:d3:cb:d5:75:c8:c3:97: 5e:4a:28:0f:97:3d:76:71:f5:1b:d5:8b:2b:9c:27: 37:88:fa:c0:98:42:36:3c:9a:aa:2e:19:01:ac:1a: 56:96:22:e9:3e:09:0e:9c:20:74:63:f4:d7:e4:1e: 3d:34:2e:57:3f:e2:38:ce:98:55:eb:1c:aa:37:5b: 09:57:d0:9a:2d:42:06:a0:3c:e8:cc:4a:5f:73:c4: 2f:a2:0d:0b:3e:52:8e:08:f5:5e:8a:e6:70:d2:85: 2e:22:15:2b:d9:4a:1c:37:dc:b1:9c:f5:b7:61:44: 4a:18:e1:3e:2c:62:cf:61:b7:88:c1:c9:0a:98:e4: 8c:90:53:1c:d4:7c:8c:d7:4e:e3:d5:7f:7f:91:d0: 6b:98:e5:14:01:c0:5a:e9:a8:65:ab:51:28:55:3a: 96:86:15:dc:69:da:09:a3:6a:c8:24:68:8b:bc:fe: a8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:49:EC:92:76:9A:C9:48:12:23:A9:06:E7:54:7B:B9:E7:F5:A5:3E X509v3 Authority Key Identifier: keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:5a:25:c4:88:3f:f3:d8:e2:75:51:c6:59:eb:78:57:97:ce: 33:e0:33:91:1a:b6:0c:8d:1f:43:50:9c:ec:ce:7b:9a:1a:b3: 47:a1:51:42:53:6a:ad:e1:f0:74:51:27:4d:bb:02:b7:33:dd: 02:b6:58:a4:40:62:46:55:71:94:d5:36:44:1c:76:04:d3:52: 33:64:b2:ab:f0:d1:74:69:96:4d:74:1f:7e:ab:46:2a:a3:58: b4:ae:57:6f:bb:29:4a:9c:24:a1:61:be:24:0a:9a:eb:25:40: 03:05:7e:9d:46:78:e0:9b:01:83:e7:53:47:97:8b:0a:2b:ff: f0:da:0e:ff:3d:0f:08:fb:a8:cc:93:0a:4c:27:34:02:14:a1: 74:14:6d:ed:44:60:89:01:76:0a:68:60:c3:42:5c:65:f3:75: ca:19:3f:50:a2:1a:53:e9:57:96:ee:ac:4e:6a:0b:af:d6:20: 8f:82:91:ee:a2:68:18:9f:34:a9:e2:e5:46:27:dc:2d:05:f3: 04:30:7c:b0:e7:a2:89:21:4a:7d:e7:85:43:a0:6e:0a:c8:a6: 53:81:c4:9c:6a:de:4d:fc:49:68:08:de:b8:ff:e7:cf:0b:b4: b5:33:60:22:7f:2a:00:14:a7:4c:0d:83:6e:b4:fd:44:7c:80: 6c:66:f4:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K9wpxH48JGHPEP/sCWPPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTgxNTlhMTZkNzJiM2Q2Y2RmYmFhMDk2ZDY5MTM5ZmRl OWQyOTAwHhcNMjYwMTI1MDgwMTEzWhcNMjYwMTI2MDgwMTEzWjAzMTEwLwYDVQQD EyhmZTQ5ZWM5Mjc2OWFjOTQ4MTIyM2E5MDZlNzU0N2JiOWU3ZjVhNTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudqrjqxaUD2NlkqB15y5npiSvfyt 7yh6QtNyBBt7wAJ2BShFN+vrpenf7loz6pxzAeqGHIDK6iGBHXT0TX66V3UYCQsC hWCCU/BK1lS57bOmatPL1XXIw5deSigPlz12cfUb1YsrnCc3iPrAmEI2PJqqLhkB rBpWliLpPgkOnCB0Y/TX5B49NC5XP+I4zphV6xyqN1sJV9CaLUIGoDzozEpfc8Qv og0LPlKOCPVeiuZw0oUuIhUr2UocN9yxnPW3YURKGOE+LGLPYbeIwckKmOSMkFMc 1HyM107j1X9/kdBrmOUUAcBa6ahlq1EoVTqWhhXcadoJo2rIJGiLvP6okQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5J7JJ2mslIEiOpBudUe7nn9aU+MB8GA1UdIwQY MBaAFHToFZoW1ys9bN+6oJbWkTn96dKQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85YmUwYTctNDFiMy00OGE1LThhMzgt ODRjYmM4NWEyMzQzLzEvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS85YmUwYTctNDFiMy00OGE1LThhMzgtODRjYmM4NWEyMzQz LzEvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzVolxIg/ 89jidVHGWet4V5fOM+AzkRq2DI0fQ1Cc7M57mhqzR6FRQlNqreHwdFEnTbsCtzPd ArZYpEBiRlVxlNU2RBx2BNNSM2Syq/DRdGmWTXQffqtGKqNYtK5Xb7spSpwkoWG+ JAqa6yVAAwV+nUZ44JsBg+dTR5eLCiv/8NoO/z0PCPuozJMKTCc0AhShdBRt7URg iQF2Cmhgw0JcZfN1yhk/UKIaU+lXlu6sTmoLr9Ygj4KR7qJoGJ80qeLlRifcLQXz BDB8sOeiiSFKfeeFQ6BuCsimU4HEnGreTfxJaAjeuP/nzwu0tTNgIn8qABSnTA2D brT9RHyAbGb01A== -----END CERTIFICATE-----Generated at Sun Jan 25 19:25:02 2026 by rpki-client