This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft File: 2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json) Hash identifier: pcpNTqNTaJfm5/x+E5ffG7I3TpZ8WqKLbnAKQ3Qakeg= Subject key identifier: 99:5C:5F:F4:86:E9:4F:D2:4C:2D:45:E5:53:01:FC:ED:BF:4B:E3:80 Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0 Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0 Certificate serial: 019BF6F561BBD008B16E4336A6109396CBA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft Manifest number: 0B6C Signing time: Sun 25 Jan 2026 21:00:34 +0000 Manifest this update: Sun 25 Jan 2026 21:00:34 +0000 Manifest next update: Mon 26 Jan 2026 21:00:34 +0000 Files and hashes: 1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: ZkXRvTcKUfsjazJikLXbVeV7cpS8SdqYNqnHO3OAv6A=) 2: DaHppUozY1kCYvwX88wtsnmWINM.roa (hash: ru4D4lVH2+jP/p2rQYVLF6vXvNKc/Al77YQMaktDxfM=) 3: HtCMzIedr8Uyc-ZY1tVjU5QJcKU.roa (hash: I9957InTODSplYXK+6SDN/CVJ6zGM65GrDjFyU/wtKc=) 4: PQYW-fI83eP_2ozihVN7n1dxJM8.roa (hash: H3fcYH9FUIKWRSPN6O9tYDgQYIdSAPwR2TIyzxV1Zzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:61:bb:d0:08:b1:6e:43:36:a6:10:93:96:cb:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0 Validity Not Before: Jan 25 21:00:34 2026 GMT Not After : Jan 26 21:00:34 2026 GMT Subject: CN=995c5ff486e94fd24c2d45e55301fcedbf4be380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6c:2a:97:04:ef:9d:f0:dc:fc:30:8f:a5:f6: 97:4d:f6:30:22:ef:63:b7:1d:07:85:5e:5e:28:6a: 04:f1:54:a1:1f:d5:c7:83:76:a3:51:e4:ad:1b:75: 6f:1d:56:36:4d:e2:9d:2f:31:5c:8a:b9:f6:25:27: 9e:97:e3:87:86:b9:d0:1e:d6:dc:1a:7b:a8:f9:60: 7c:19:6d:5d:fe:1f:a3:11:9b:1e:71:75:87:b9:2a: 99:49:65:bf:8f:c7:45:46:b3:ed:7a:a7:b2:c2:0c: 4f:c0:00:78:84:99:5c:9b:eb:cf:db:58:3c:b2:b4: 34:0b:2a:db:d9:01:7d:4f:53:01:82:86:91:bd:48: 36:b7:eb:a7:05:c6:93:3c:5d:1c:d5:6f:59:82:a2: fa:1a:b8:ef:49:23:61:7d:16:eb:fd:73:88:bb:1a: 84:9f:2f:09:c4:50:e2:96:2a:07:bc:dd:46:64:b3: c7:7b:5a:a8:9e:77:de:f6:9a:2c:1b:f3:71:01:7a: 50:00:81:40:9b:4b:10:01:b3:1b:f9:eb:14:f6:ee: f2:7c:15:ec:8f:b0:1f:46:e1:3c:d7:59:61:63:f1: 27:99:8a:c6:98:c5:ae:40:fa:44:69:62:58:16:ec: c2:97:2b:cf:69:18:08:a8:25:f2:16:4c:54:b6:c3: 1b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5C:5F:F4:86:E9:4F:D2:4C:2D:45:E5:53:01:FC:ED:BF:4B:E3:80 X509v3 Authority Key Identifier: keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:28:a6:d4:6c:d7:aa:fe:1e:cd:10:22:bf:c7:b0:68:8d:96: 50:66:c8:c5:23:3d:59:0e:de:fd:34:89:e0:a8:9c:1f:0f:c1: f9:6c:66:8d:75:fc:0b:a0:e2:19:9b:a4:94:a4:b1:4f:8b:c0: 77:40:6e:15:08:01:b6:90:09:38:76:55:77:22:aa:69:e2:42: 0d:a5:32:49:f3:68:f3:62:0c:40:a8:17:fc:e2:4c:ad:17:16: f1:c6:dc:7b:00:94:f2:19:1b:92:95:94:bf:cd:5e:07:d8:46: 6b:db:1b:08:56:cf:f4:01:b0:50:a6:3b:d9:61:8c:68:1e:2b: 8a:0f:65:7b:91:dd:63:40:57:c2:79:3d:ea:b9:8a:06:d2:bd: 7f:ee:2c:06:6f:2e:ef:e2:26:8d:19:fc:b5:c0:74:df:54:75: 71:bb:c5:92:bd:ba:8b:c2:12:d2:b7:7a:26:20:43:52:fb:ce: c5:be:ab:80:87:b9:85:5e:55:5e:21:e5:30:e0:11:f5:97:9d: 93:f1:30:5c:27:62:a4:3f:dd:f3:02:7f:b9:6f:30:c5:ad:06: 63:99:bc:c0:bc:98:5e:a9:e9:e2:cb:f3:a9:d9:2b:6c:44:65: c0:4a:e7:f2:83:88:8f:db:92:0b:69:12:4e:63:b7:50:7f:21: f5:4c:fd:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29WG70AixbkM2phCTlsujMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MzcxM2ZkN2I0Y2RmYTZjYmEwMTZhODdlYWY4YjMxYzg5 MWJlYjAwHhcNMjYwMTI1MjEwMDM0WhcNMjYwMTI2MjEwMDM0WjAzMTEwLwYDVQQD Eyg5OTVjNWZmNDg2ZTk0ZmQyNGMyZDQ1ZTU1MzAxZmNlZGJmNGJlMzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWwqlwTvnfDc/DCPpfaXTfYwIu9j tx0HhV5eKGoE8VShH9XHg3ajUeStG3VvHVY2TeKdLzFcirn2JSeel+OHhrnQHtbc Gnuo+WB8GW1d/h+jEZsecXWHuSqZSWW/j8dFRrPteqeywgxPwAB4hJlcm+vP21g8 srQ0Cyrb2QF9T1MBgoaRvUg2t+unBcaTPF0c1W9ZgqL6GrjvSSNhfRbr/XOIuxqE ny8JxFDilioHvN1GZLPHe1qonnfe9posG/NxAXpQAIFAm0sQAbMb+esU9u7yfBXs j7AfRuE811lhY/EnmYrGmMWuQPpEaWJYFuzClyvPaRgIqCXyFkxUtsMbFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlcX/SG6U/STC1F5VMB/O2/S+OAMB8GA1UdIwQY MBaAFNg3E/17TN+my6AWqH6vizHIkb6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMt MDU4Nzg1YjRhOTZlLzEvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMtMDU4Nzg1YjRhOTZl LzEvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiim1GzX qv4ezRAiv8ewaI2WUGbIxSM9WQ7e/TSJ4KicHw/B+WxmjXX8C6DiGZuklKSxT4vA d0BuFQgBtpAJOHZVdyKqaeJCDaUySfNo82IMQKgX/OJMrRcW8cbcewCU8hkbkpWU v81eB9hGa9sbCFbP9AGwUKY72WGMaB4rig9le5HdY0BXwnk96rmKBtK9f+4sBm8u 7+ImjRn8tcB031R1cbvFkr26i8IS0rd6JiBDUvvOxb6rgIe5hV5VXiHlMOAR9Zed k/EwXCdipD/d8wJ/uW8wxa0GY5m8wLyYXqnp4svzqdkrbERlwErn8oOIj9uSC2kS TmO3UH8h9Uz9Ew== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:42 2026 by rpki-client