This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft File: DYGcnS5S2Ereot5MLeZLd4mFjrI.mft (raw, json) Hash identifier: Is0jZfaoZoxFGs7OI7HtjbaRIn23WQKwY7tUggNDT1w= Subject key identifier: 24:64:C1:2E:40:8B:DE:79:6E:E1:DD:02:7D:C6:16:ED:35:53:00:E2 Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2 Certificate issuer: /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2 Certificate serial: 019BF72D7308CECC1ED3ECD54E1929926BF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft Manifest number: 0B46 Signing time: Sun 25 Jan 2026 22:01:49 +0000 Manifest this update: Sun 25 Jan 2026 22:01:49 +0000 Manifest next update: Mon 26 Jan 2026 22:01:49 +0000 Files and hashes: 1: 4mvw711lnQzyvs4Hvdkp66DN8WA.roa (hash: cOfCZrF6cE78BmpoYXmsaMPC6thd3G27U3oDjezLwXY=) 2: DYGcnS5S2Ereot5MLeZLd4mFjrI.crl (hash: six2Y+gySRaa48ZYTJH6hvLDuHlAnMQAVKsuUN2eujs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:73:08:ce:cc:1e:d3:ec:d5:4e:19:29:92:6b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2 Validity Not Before: Jan 25 22:01:49 2026 GMT Not After : Jan 26 22:01:49 2026 GMT Subject: CN=2464c12e408bde796ee1dd027dc616ed355300e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1d:38:b5:8d:74:7e:80:a8:fa:dd:08:87:91: 90:3d:57:86:43:13:df:b0:d5:e4:aa:1d:8b:cf:ed: 63:db:30:28:b8:0a:a6:68:b0:9f:25:47:a7:ea:39: ab:49:2e:87:82:ec:11:50:59:a3:0c:e2:71:8b:1b: c0:4a:bd:7b:bc:2e:d5:be:6b:ff:8f:79:08:de:07: 48:82:ab:2b:78:4d:75:7f:98:f5:ef:3c:db:3d:07: d4:e0:04:e9:bf:85:29:9e:b1:d3:bd:26:6c:7c:d5: 82:9e:63:e4:6e:38:5a:11:01:a2:97:71:98:5a:e6: 3f:6c:b5:12:33:5e:fd:4b:48:68:ff:ee:79:ef:57: 85:e6:e2:34:b6:cb:70:d3:4b:43:72:de:37:5e:c8: c5:73:51:ee:8f:dd:4c:50:92:ef:17:ba:58:6d:16: e9:6c:b2:74:9e:d8:a2:54:c8:78:c8:bc:74:e8:40: 61:f7:e6:77:4c:5f:fb:cb:f3:ec:fa:32:10:4e:2f: 7f:13:76:fb:2c:a9:f6:27:01:81:00:7a:92:45:2d: 54:f4:0e:25:6d:7f:32:a4:78:b6:bc:f0:b1:91:41: 8c:7e:26:b3:bd:f7:7b:12:65:62:17:97:aa:8d:16: a8:ef:0b:7a:9d:6b:32:5a:36:2f:df:54:eb:c1:95: c9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:64:C1:2E:40:8B:DE:79:6E:E1:DD:02:7D:C6:16:ED:35:53:00:E2 X509v3 Authority Key Identifier: keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:0d:80:d0:aa:0b:3d:3f:5a:2e:6c:96:ff:9a:e8:40:b9:a7: a6:42:79:40:9d:48:a6:d9:64:64:52:df:97:4a:49:ac:a4:ef: ba:87:0b:14:4d:0e:5b:76:40:ae:4e:09:d7:a0:ed:54:48:f9: d7:80:1a:f3:70:3c:ba:f4:4b:16:8e:49:4f:6c:45:14:d6:09: 7b:13:d8:74:a7:f3:58:97:a2:3a:82:70:bb:85:0e:a3:81:31: 8b:9c:ae:c7:d4:0c:c5:b3:46:b9:d2:08:85:84:37:fa:75:11: 19:f6:b5:82:b3:c0:2e:ba:34:8c:f9:2f:c7:9c:ea:cf:a7:33: 0e:d4:6e:a1:0f:47:10:df:9e:69:d8:dd:44:85:09:53:d8:84: 59:63:f6:75:03:a4:1a:bf:e6:54:99:22:1d:fb:2d:c9:49:01: f3:7b:cd:da:53:ab:78:b8:34:36:ff:09:6a:e9:ea:3c:ab:c2: be:98:c2:ec:5d:2a:e7:2b:30:da:35:22:37:ef:83:fe:51:1e: 0b:c5:b9:8f:d4:33:de:64:28:85:8b:ef:02:1f:9a:68:1d:a9: 07:64:13:4b:fb:6d:79:19:13:ad:e5:74:ae:ce:ae:f9:5e:12: 07:2a:8d:39:04:52:27:d1:d9:14:2a:6a:13:02:1b:eb:85:d9: 1c:b6:f7:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LXMIzswe0+zVThkpkmvyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkODE5YzlkMmU1MmQ4NGFkZWEyZGU0YzJkZTY0Yjc3ODk4 NThlYjIwHhcNMjYwMTI1MjIwMTQ5WhcNMjYwMTI2MjIwMTQ5WjAzMTEwLwYDVQQD EygyNDY0YzEyZTQwOGJkZTc5NmVlMWRkMDI3ZGM2MTZlZDM1NTMwMGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB04tY10foCo+t0Ih5GQPVeGQxPf sNXkqh2Lz+1j2zAouAqmaLCfJUen6jmrSS6HguwRUFmjDOJxixvASr17vC7Vvmv/ j3kI3gdIgqsreE11f5j17zzbPQfU4ATpv4UpnrHTvSZsfNWCnmPkbjhaEQGil3GY WuY/bLUSM179S0ho/+5571eF5uI0tstw00tDct43XsjFc1Huj91MUJLvF7pYbRbp bLJ0ntiiVMh4yLx06EBh9+Z3TF/7y/Ps+jIQTi9/E3b7LKn2JwGBAHqSRS1U9A4l bX8ypHi2vPCxkUGMfiazvfd7EmViF5eqjRao7wt6nWsyWjYv31TrwZXJWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRkwS5Ai955buHdAn3GFu01UwDiMB8GA1UdIwQY MBaAFA2BnJ0uUthK3qLeTC3mS3eJhY6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS84NzczNDItNzM0Yy00NzFiLWIzZjkt MDJjMzdmZWI4YTllLzEvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS84NzczNDItNzM0Yy00NzFiLWIzZjktMDJjMzdmZWI4YTll LzEvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQ2A0KoL PT9aLmyW/5roQLmnpkJ5QJ1IptlkZFLfl0pJrKTvuocLFE0OW3ZArk4J16DtVEj5 14Aa83A8uvRLFo5JT2xFFNYJexPYdKfzWJeiOoJwu4UOo4Exi5yux9QMxbNGudII hYQ3+nURGfa1grPALro0jPkvx5zqz6czDtRuoQ9HEN+eadjdRIUJU9iEWWP2dQOk Gr/mVJkiHfstyUkB83vN2lOreLg0Nv8JaunqPKvCvpjC7F0q5ysw2jUiN++D/lEe C8W5j9Qz3mQohYvvAh+aaB2pB2QTS/tteRkTreV0rs6u+V4SByqNOQRSJ9HZFCpq EwIb64XZHLb3Zg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:45:05 2026 by rpki-client