This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft File: DA96BN1ySaXRS33gVCpBlzgABsw.mft (raw, json) Hash identifier: /wTWfgR15/egcSoZVG7N+MM//IhTCSOCzmtFxM6qeIY= Subject key identifier: CF:6A:8A:7E:C3:98:8B:E8:24:70:5A:0D:3F:D3:FD:4C:F0:2C:94:CB Authority key identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC Certificate issuer: /CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc Certificate serial: 019BF6F5CBF73707796EDEACDC66AD0E9551 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft Manifest number: 138C Signing time: Sun 25 Jan 2026 21:01:02 +0000 Manifest this update: Sun 25 Jan 2026 21:01:02 +0000 Manifest next update: Mon 26 Jan 2026 21:01:02 +0000 Files and hashes: 1: DA96BN1ySaXRS33gVCpBlzgABsw.crl (hash: ktgF5jbsXioEyh+nvRArJkyT97Xc2AYGZ2q+DSo4ly4=) 2: MGxIjp6odA89mKCCoAoK4gOBECQ.roa (hash: WV1c3KgNpfTE3JHTiidL4UKk6xN2JAg5ninbZPlQg+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:cb:f7:37:07:79:6e:de:ac:dc:66:ad:0e:95:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc Validity Not Before: Jan 25 21:01:02 2026 GMT Not After : Jan 26 21:01:02 2026 GMT Subject: CN=cf6a8a7ec3988be824705a0d3fd3fd4cf02c94cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f2:87:83:f3:7e:82:f5:84:6c:f3:fc:4c:22: 39:e3:ff:18:b6:ff:94:a2:46:57:9e:31:d4:4d:c3: 23:77:d4:2f:e8:7e:a1:13:b4:7b:15:2d:d9:7b:49: 83:f5:29:13:75:cb:46:3d:40:de:d9:49:6e:4d:98: 62:7c:20:ff:84:6a:44:2e:25:d4:49:88:f5:83:6f: 93:39:ae:40:8a:8a:2e:87:cd:fe:31:6c:1c:45:c8: 86:65:31:36:06:c2:09:04:50:ea:62:f1:9b:65:12: 9f:8f:44:b2:b9:82:14:0c:b9:58:f4:c1:7d:12:b7: 7e:04:f2:f3:7b:58:d6:90:e2:c5:1e:fc:a8:1f:6e: 81:6e:59:60:d8:c7:17:c1:29:08:a4:1e:4a:a3:c5: f7:3d:15:52:5a:80:9f:86:c1:31:ba:5a:89:78:42: 66:20:85:0d:93:d1:fe:6f:7d:ee:f9:a5:95:d3:f7: 98:4b:1c:5f:95:4b:99:35:9d:58:f8:b2:f5:b3:97: 5a:24:87:14:90:80:6e:23:83:8c:c5:9e:a5:e1:f0: d8:13:9e:30:4b:2e:7a:4c:f8:1d:1e:16:38:13:34: 5f:60:4c:7f:95:74:d0:81:a9:28:9a:9b:99:96:bd: 1b:a0:fb:cb:a5:e5:b8:99:6d:9f:72:d9:10:3d:77: 5d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6A:8A:7E:C3:98:8B:E8:24:70:5A:0D:3F:D3:FD:4C:F0:2C:94:CB X509v3 Authority Key Identifier: keyid:0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f6:4e:1e:72:60:a3:89:ff:01:e9:4d:3f:1b:8c:16:a1:ca: 4a:b8:a4:35:6f:10:c4:aa:6e:5d:86:2d:fa:46:9b:b1:50:05: a8:17:4d:48:e1:55:b1:21:bb:fe:92:01:e0:b7:76:c3:87:2d: 08:90:60:20:8b:26:c2:fa:b5:2b:a7:c3:e9:ec:39:80:9c:8e: 02:a6:74:dc:15:30:28:f8:01:da:26:01:3e:1f:00:be:f0:aa: a1:4d:58:9f:0d:44:ee:6d:c2:81:c4:4c:cf:76:25:e4:c7:62: 82:e7:31:c9:a0:de:9b:41:b0:52:c7:ac:66:a2:3c:93:5d:2f: 7e:8c:f2:d8:af:ad:6e:0d:1e:cb:22:2e:82:2c:86:1c:4e:b1: 46:73:fe:db:f8:82:a8:e9:a1:9f:17:c5:a0:0f:5b:02:e3:f2: 84:fd:03:3c:c2:50:0d:20:19:23:83:46:3e:83:a0:df:8a:72: 8d:d9:c3:ce:6c:c0:fe:b4:3f:6e:1a:74:db:e9:cb:47:52:53: 24:1b:1d:96:6f:35:9e:30:2d:95:3f:07:63:89:13:d9:ae:81: 47:c1:f1:27:e0:65:63:28:9c:65:0f:bb:f3:b2:8a:dc:35:46: d0:a8:23:94:df:67:be:d0:82:39:d6:63:8c:ba:43:d0:3e:62: ba:5d:e7:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29cv3Nwd5bt6s3GatDpVRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMGY3YTA0ZGQ3MjQ5YTVkMTRiN2RlMDU0MmE0MTk3Mzgw MDA2Y2MwHhcNMjYwMTI1MjEwMTAyWhcNMjYwMTI2MjEwMTAyWjAzMTEwLwYDVQQD EyhjZjZhOGE3ZWMzOTg4YmU4MjQ3MDVhMGQzZmQzZmQ0Y2YwMmM5NGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPKHg/N+gvWEbPP8TCI54/8Ytv+U okZXnjHUTcMjd9Qv6H6hE7R7FS3Ze0mD9SkTdctGPUDe2UluTZhifCD/hGpELiXU SYj1g2+TOa5Aioouh83+MWwcRciGZTE2BsIJBFDqYvGbZRKfj0SyuYIUDLlY9MF9 Erd+BPLze1jWkOLFHvyoH26Bbllg2McXwSkIpB5Ko8X3PRVSWoCfhsExulqJeEJm IIUNk9H+b33u+aWV0/eYSxxflUuZNZ1Y+LL1s5daJIcUkIBuI4OMxZ6l4fDYE54w Sy56TPgdHhY4EzRfYEx/lXTQgakompuZlr0boPvLpeW4mW2fctkQPXddjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9qin7DmIvoJHBaDT/T/UzwLJTLMB8GA1UdIwQY MBaAFAwPegTdckml0Ut94FQqQZc4AAbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREE5NkJOMXlTYVhSUzMzZ1ZDcEJsemdBQnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xMWRiMTQtZTg0NS00ZTRmLWE2OTIt YTNjYmVmZmY3Nzc3LzEvREE5NkJOMXlTYVhSUzMzZ1ZDcEJsemdBQnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8xMWRiMTQtZTg0NS00ZTRmLWE2OTItYTNjYmVmZmY3Nzc3 LzEvREE5NkJOMXlTYVhSUzMzZ1ZDcEJsemdBQnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfZOHnJg o4n/AelNPxuMFqHKSrikNW8QxKpuXYYt+kabsVAFqBdNSOFVsSG7/pIB4Ld2w4ct CJBgIIsmwvq1K6fD6ew5gJyOAqZ03BUwKPgB2iYBPh8AvvCqoU1Ynw1E7m3CgcRM z3Yl5MdigucxyaDem0GwUsesZqI8k10vfozy2K+tbg0eyyIugiyGHE6xRnP+2/iC qOmhnxfFoA9bAuPyhP0DPMJQDSAZI4NGPoOg34pyjdnDzmzA/rQ/bhp02+nLR1JT JBsdlm81njAtlT8HY4kT2a6BR8HxJ+BlYyicZQ+787KK3DVG0KgjlN9nvtCCOdZj jLpD0D5iul3nug== -----END CERTIFICATE-----Generated at Mon Jan 26 01:46:23 2026 by rpki-client