This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft File: DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json) Hash identifier: l9O9QY7wP0OGDEbIVWTt2N5KA5zXwIyx5ZHw3EWqDAI= Subject key identifier: 75:4E:74:7D:9D:0F:8C:73:2A:2B:55:AB:56:E8:0F:37:C1:13:F1:06 Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf Certificate serial: 019BF8ADA662956933D70DBC5BAD3E4964F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft Manifest number: 15DA Signing time: Mon 26 Jan 2026 05:01:28 +0000 Manifest this update: Mon 26 Jan 2026 05:01:28 +0000 Manifest next update: Tue 27 Jan 2026 05:01:28 +0000 Files and hashes: 1: 7yB2yDJ-HgimpHgTLA1aufvYXvA.roa (hash: We/Y2EIgK33DNG81UZmPRyHMQRU13Wzwkuo+kvc15gs=) 2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: dbhnJQ/h7QWzyqXffWXMu+zaDb0v0Af/psNcJQbE3/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:a6:62:95:69:33:d7:0d:bc:5b:ad:3e:49:64:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf Validity Not Before: Jan 26 05:01:28 2026 GMT Not After : Jan 27 05:01:28 2026 GMT Subject: CN=754e747d9d0f8c732a2b55ab56e80f37c113f106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:7e:ff:54:e9:94:3c:34:55:df:41:da:65: e0:66:70:08:7c:22:39:7d:18:ea:98:12:ab:1d:6e: f7:bc:7e:8e:4f:2a:d1:bb:50:bf:75:36:e0:32:6e: 08:02:c3:27:a9:5f:67:e9:f9:fb:10:e4:f3:46:c0: e2:61:fd:a9:91:61:69:2b:c7:bb:6b:f0:53:f9:9a: 37:5d:bc:f2:e5:e0:12:9e:8b:60:be:67:b4:24:df: 08:71:3a:4d:c3:c5:79:22:c9:1e:df:a9:d9:55:e6: b4:8d:96:5c:e2:8e:d6:26:0c:63:9c:f7:58:ec:fa: 21:66:fd:7e:19:14:39:cd:e1:2a:89:f9:f5:e9:31: 9a:2e:e9:24:24:14:67:b2:bb:9c:fa:6e:7b:6f:34: bf:5c:88:61:16:af:06:51:ff:9c:52:93:a3:ee:02: b8:6f:c5:7a:b3:48:e2:07:09:14:de:9b:4f:ac:9e: 44:79:d1:f2:78:a7:e8:63:6c:7b:d7:f8:a0:e9:16: 8c:41:d0:c7:85:97:11:3d:93:b9:13:b6:fc:31:a5: a7:ed:6d:ad:81:f4:5e:8d:bd:00:ca:2e:fc:1a:77: 87:70:13:9a:16:f8:36:87:d7:5b:c5:f5:d7:da:ec: 47:5d:21:96:d7:06:aa:cf:58:e2:1e:50:7a:e9:5e: 7a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4E:74:7D:9D:0F:8C:73:2A:2B:55:AB:56:E8:0F:37:C1:13:F1:06 X509v3 Authority Key Identifier: keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:9e:0e:30:32:e8:83:fe:97:52:06:76:76:61:4d:49:4a:20: d8:b2:f7:43:ae:01:18:3b:d7:e0:81:64:56:76:1c:ab:83:5f: 8f:57:70:20:97:ee:74:af:c5:84:b2:bc:7d:38:55:ed:ee:a9: 85:45:fb:17:c4:f1:a2:75:37:e8:56:8a:e1:bf:46:99:10:54: 20:88:7f:9b:cb:d7:15:64:25:c8:d1:ea:cd:99:2d:95:10:a9: 9b:c2:0f:95:23:9a:01:2c:3b:8e:2f:84:1d:a6:0f:9b:d3:b4: 26:a2:3c:b0:29:29:b5:36:48:88:b4:27:17:04:f8:be:c1:dc: 09:0b:6c:25:dd:02:de:2c:bf:1c:ef:ca:37:51:99:2a:d7:b5: 1c:03:f7:0c:6d:ce:dc:c9:aa:de:58:a2:25:94:84:3f:6e:12: 7c:be:bf:b4:75:ab:40:a3:77:26:1e:0c:a6:e6:fc:42:d1:e9: 3c:c4:52:4c:82:7e:f6:83:85:58:03:3f:eb:6c:67:d8:c9:3c: b8:86:03:01:f6:10:7c:e1:59:29:40:cd:45:de:eb:d5:91:08: 9a:e2:78:d0:85:8b:82:0e:0f:70:11:b6:76:af:05:13:cb:df: 6f:12:35:28:23:39:6e:95:75:54:5f:94:24:39:82:d5:d1:78: 78:d3:dd:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4raZilWkz1w28W60+SWT5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYTNjOWM0NDk3YzFmYTQ4NWU5ZGQxNzU4YWY5ZjAwMGUy YmQ0YmYwHhcNMjYwMTI2MDUwMTI4WhcNMjYwMTI3MDUwMTI4WjAzMTEwLwYDVQQD Eyg3NTRlNzQ3ZDlkMGY4YzczMmEyYjU1YWI1NmU4MGYzN2MxMTNmMTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2R+/1TplDw0Vd9B2mXgZnAIfCI5 fRjqmBKrHW73vH6OTyrRu1C/dTbgMm4IAsMnqV9n6fn7EOTzRsDiYf2pkWFpK8e7 a/BT+Zo3Xbzy5eASnotgvme0JN8IcTpNw8V5Iske36nZVea0jZZc4o7WJgxjnPdY 7PohZv1+GRQ5zeEqifn16TGaLukkJBRnsruc+m57bzS/XIhhFq8GUf+cUpOj7gK4 b8V6s0jiBwkU3ptPrJ5EedHyeKfoY2x71/ig6RaMQdDHhZcRPZO5E7b8MaWn7W2t gfRejb0Ayi78GneHcBOaFvg2h9dbxfXX2uxHXSGW1waqz1jiHlB66V56AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVOdH2dD4xzKitVq1boDzfBE/EGMB8GA1UdIwQY MBaAFA6jycRJfB+khendF1ivnwAOK9S/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hYWQyN2ItNjliYS00OWVkLWJiN2Ut YTk5MGY5MDY0YTU3LzEvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9hYWQyN2ItNjliYS00OWVkLWJiN2UtYTk5MGY5MDY0YTU3 LzEvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAip4OMDLo g/6XUgZ2dmFNSUog2LL3Q64BGDvX4IFkVnYcq4Nfj1dwIJfudK/FhLK8fThV7e6p hUX7F8TxonU36FaK4b9GmRBUIIh/m8vXFWQlyNHqzZktlRCpm8IPlSOaASw7ji+E HaYPm9O0JqI8sCkptTZIiLQnFwT4vsHcCQtsJd0C3iy/HO/KN1GZKte1HAP3DG3O 3Mmq3liiJZSEP24SfL6/tHWrQKN3Jh4Mpub8QtHpPMRSTIJ+9oOFWAM/62xn2Mk8 uIYDAfYQfOFZKUDNRd7r1ZEImuJ40IWLgg4PcBG2dq8FE8vfbxI1KCM5bpV1VF+U JDmC1dF4eNPd0g== -----END CERTIFICATE-----Generated at Mon Jan 26 06:39:52 2026 by rpki-client