This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json) Hash identifier: IZAfeiiqpwn0pnup8JCzeGwIVdEWQyn+xkM665oLfe8= Subject key identifier: FC:42:52:C3:A9:DA:9F:54:10:79:69:3A:74:6E:E0:C6:C9:43:56:6C Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0 Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0 Certificate serial: 019BF79AAFE94586146FB6F22FD0376E682D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft Manifest number: 12C3 Signing time: Mon 26 Jan 2026 00:01:08 +0000 Manifest this update: Mon 26 Jan 2026 00:01:08 +0000 Manifest next update: Tue 27 Jan 2026 00:01:08 +0000 Files and hashes: 1: ISzoHWBHuetmLQLrWc6n51rZYYg.roa (hash: 1yzmUR8v23fkpuJd9tVMCHTMq6Cr5Yk1vOljZxe5hY0=) 2: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: NIHvOFHtcJMIkDuT4aKwn5uKFED0fRR1r4zspcDE1rY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:af:e9:45:86:14:6f:b6:f2:2f:d0:37:6e:68:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0 Validity Not Before: Jan 26 00:01:08 2026 GMT Not After : Jan 27 00:01:08 2026 GMT Subject: CN=fc4252c3a9da9f541079693a746ee0c6c943566c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e0:dd:c2:26:08:cd:ab:a2:f0:1f:b8:7e:68: 54:65:82:68:90:72:3d:5c:b2:0f:d3:5f:a7:87:c0: 16:3d:0e:10:a4:25:ac:47:65:30:8f:17:ae:40:88: fe:ce:2f:c0:2f:58:65:14:06:de:76:b7:92:56:3d: 4c:85:15:10:13:7d:cc:0e:92:18:2f:d5:7a:f5:a1: f7:b0:1b:ff:4d:77:9c:24:6a:fd:b5:e7:cf:5c:4c: 0b:25:34:ba:80:f3:54:dc:ca:9c:8f:65:8d:f3:2c: 1b:68:03:2b:31:a2:93:ba:71:1f:15:55:90:6b:0a: 4f:c8:5e:3b:bd:bf:a7:22:81:c0:f0:8d:10:b5:83: df:46:21:89:01:35:45:b3:36:bd:5c:34:27:62:f5: 71:74:73:b2:04:64:c2:f7:5c:bb:c4:13:3f:2a:21: c8:d6:03:ad:a0:66:a9:dc:db:c6:c7:63:00:06:3c: e6:e6:11:89:53:1f:0e:20:9b:42:7a:6f:96:5e:76: a7:17:59:20:06:95:23:ac:27:f8:5f:06:f5:70:dc: c5:be:01:63:af:d3:64:95:cd:ad:ed:d7:a1:fd:66: aa:57:3e:03:7c:95:34:39:ea:56:ca:bd:75:56:02: 77:29:f7:7f:98:fe:22:ca:72:34:73:5c:81:a3:e9: d0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:42:52:C3:A9:DA:9F:54:10:79:69:3A:74:6E:E0:C6:C9:43:56:6C X509v3 Authority Key Identifier: keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:76:b9:17:18:d4:24:ce:13:b1:c0:32:e7:39:a0:75:8c:b0: 16:d2:9e:42:ec:29:23:b6:b0:0b:c4:7f:94:31:35:a9:d9:8a: 03:71:50:05:90:b9:fc:43:88:e1:0c:48:8e:9b:ae:58:e7:72: 67:a2:fd:52:2f:1c:fc:e7:fa:5d:1d:6c:c2:6e:b0:28:42:c1: 24:e0:99:fc:37:d0:04:a2:9b:22:f6:26:e5:35:0b:23:3a:fd: 16:67:83:47:b5:56:f8:31:b3:cd:9d:da:7c:f8:6b:36:38:8b: 96:ab:14:0a:1a:c7:b0:6c:a3:15:f5:98:c7:60:0d:a3:0f:72: 9a:07:9d:1d:3b:d0:a0:c9:2e:c0:42:13:2c:c0:11:82:99:3f: fb:38:f4:ce:66:a1:d3:91:8f:49:28:1e:46:e6:ca:22:af:99: 00:6f:4f:95:9e:19:ce:bc:82:d3:1b:99:82:8b:ad:88:71:4d: 5a:92:c6:17:58:f0:47:43:b9:aa:7f:17:81:c5:80:2d:a5:14: 4d:46:c4:99:b5:76:a3:98:1a:b4:88:75:8d:14:37:67:5c:49: c9:73:48:8b:f2:65:32:4e:a5:66:d2:0e:8e:cd:23:78:6b:b4: 8c:61:a0:a6:f8:f0:1a:65:b3:19:97:44:19:74:51:74:83:da: 53:de:2a:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mq/pRYYUb7byL9A3bmgtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MTQ5MWE2YjEwNDMzYjk5NjE1NzU2ZmRlOTMxM2YyYmUx ZDNkZjAwHhcNMjYwMTI2MDAwMTA4WhcNMjYwMTI3MDAwMTA4WjAzMTEwLwYDVQQD EyhmYzQyNTJjM2E5ZGE5ZjU0MTA3OTY5M2E3NDZlZTBjNmM5NDM1NjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeDdwiYIzaui8B+4fmhUZYJokHI9 XLIP01+nh8AWPQ4QpCWsR2UwjxeuQIj+zi/AL1hlFAbedreSVj1MhRUQE33MDpIY L9V69aH3sBv/TXecJGr9tefPXEwLJTS6gPNU3Mqcj2WN8ywbaAMrMaKTunEfFVWQ awpPyF47vb+nIoHA8I0QtYPfRiGJATVFsza9XDQnYvVxdHOyBGTC91y7xBM/KiHI 1gOtoGap3NvGx2MABjzm5hGJUx8OIJtCem+WXnanF1kgBpUjrCf4Xwb1cNzFvgFj r9Nklc2t7deh/WaqVz4DfJU0OepWyr11VgJ3Kfd/mP4iynI0c1yBo+nQbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxCUsOp2p9UEHlpOnRu4MbJQ1ZsMB8GA1UdIwQY MBaAFHQUkaaxBDO5lhV1b96TE/K+HT3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTct ODRiNTc2OTNjN2E4LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTctODRiNTc2OTNjN2E4 LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHa5FxjU JM4TscAy5zmgdYywFtKeQuwpI7awC8R/lDE1qdmKA3FQBZC5/EOI4QxIjpuuWOdy Z6L9Ui8c/Of6XR1swm6wKELBJOCZ/DfQBKKbIvYm5TULIzr9FmeDR7VW+DGzzZ3a fPhrNjiLlqsUChrHsGyjFfWYx2ANow9ymgedHTvQoMkuwEITLMARgpk/+zj0zmah 05GPSSgeRubKIq+ZAG9PlZ4ZzryC0xuZgoutiHFNWpLGF1jwR0O5qn8XgcWALaUU TUbEmbV2o5gatIh1jRQ3Z1xJyXNIi/JlMk6lZtIOjs0jeGu0jGGgpvjwGmWzGZdE GXRRdIPaU94qQQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:09:02 2026 by rpki-client