This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft File: dahWeFOS2ifQC9snCRxZJsMVXYk.mft (raw, json) Hash identifier: hdopkanR/EknuX9mv2rfT2hfYXidvCrazOhFMf+ey0k= Subject key identifier: 96:88:59:DE:E3:A3:F8:42:1D:EE:97:B6:4F:4C:83:E3:1F:1F:E1:6C Authority key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89 Certificate issuer: /CN=75a856785392da27d00bdb27091c5926c3155d89 Certificate serial: 019BF72CCB35E9DE7E7E90E103B44A80614B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft Manifest number: 101C Signing time: Sun 25 Jan 2026 22:01:06 +0000 Manifest this update: Sun 25 Jan 2026 22:01:06 +0000 Manifest next update: Mon 26 Jan 2026 22:01:06 +0000 Files and hashes: 1: dahWeFOS2ifQC9snCRxZJsMVXYk.crl (hash: rLiI7rEqRwSvrElYH26SvUdXDtIs72scmcdh23P0Qvg=) 2: eDXxJ-0nUaJuRJ8r9tLMMsrPV9k.roa (hash: VZENBgpRHMOQW00Ak5z3+ezYs7jMSDyUdIGCk++UNGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:cb:35:e9:de:7e:7e:90:e1:03:b4:4a:80:61:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a856785392da27d00bdb27091c5926c3155d89 Validity Not Before: Jan 25 22:01:06 2026 GMT Not After : Jan 26 22:01:06 2026 GMT Subject: CN=968859dee3a3f8421dee97b64f4c83e31f1fe16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:34:01:45:99:09:27:20:d7:93:35:e1:f5:ec: 01:d3:cb:94:6a:b1:78:b7:f9:cd:74:32:65:58:de: e8:6d:10:94:4e:59:35:6c:93:db:9e:85:b9:23:df: 38:8a:42:8c:4b:60:12:47:2c:12:ad:04:be:d5:3c: 5c:88:80:6d:41:1f:cc:76:f7:8c:04:df:5d:d3:09: 9d:46:6b:b2:fe:a6:6a:36:18:8b:86:76:a2:af:fd: ca:b5:e9:a6:38:e4:d6:7a:08:d6:b7:e3:57:18:ce: 87:e9:98:33:11:cb:2b:f8:30:85:8f:eb:9d:7c:2b: 50:0a:0b:5d:e4:7d:02:64:06:a6:d4:a8:d4:d0:82: eb:b5:c6:3f:8a:cb:b4:8b:b1:6e:d4:76:c0:ad:e6: 70:0c:92:30:5e:d7:f2:ea:08:3a:65:82:ca:65:bd: dc:d7:d3:53:51:8b:57:fa:1d:50:73:bd:77:a0:bb: a1:3c:2c:7a:55:ff:77:83:e1:1c:6e:42:fb:b4:cf: 31:be:3f:21:6d:64:02:f4:fc:8a:7a:0f:ec:eb:73: 60:e3:da:28:23:8d:b1:66:a1:2c:52:2a:02:34:96: 63:b6:cb:a4:df:1c:a7:27:d9:5c:17:72:75:37:c5: 0a:a6:48:5f:31:6c:ff:86:7c:7a:3c:14:58:a6:ad: 87:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:88:59:DE:E3:A3:F8:42:1D:EE:97:B6:4F:4C:83:E3:1F:1F:E1:6C X509v3 Authority Key Identifier: keyid:75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3b:18:67:7d:a5:bb:7d:31:02:dd:df:9c:da:30:dc:e4:66: 44:3d:6b:4d:d0:05:3e:76:e1:fa:c9:e6:e2:36:52:48:82:4b: 88:07:a1:d7:a8:eb:1e:89:9d:14:03:71:cf:0f:58:11:ae:a4: d3:34:dc:a5:5b:1e:26:b8:36:fa:ad:69:1c:ce:a5:05:68:b1: 48:83:53:dd:a5:d8:1b:5c:71:e3:8e:34:f9:0d:34:a9:dd:92: 39:3e:e3:78:2f:22:d8:dc:aa:36:23:1a:99:3d:14:af:21:80: a0:56:a1:b5:f8:36:52:3e:dd:60:f1:3a:00:76:c0:c4:21:cf: 10:57:eb:50:da:10:07:5d:09:5f:39:a0:1c:89:44:7b:09:b8: 97:cb:26:07:98:1e:d6:c1:57:e2:f3:32:0e:99:f4:46:cb:54: 7c:0b:ec:5c:64:6f:7a:96:a8:ad:89:b0:15:f0:b6:1c:d0:16: b3:e1:1a:e2:49:a4:80:b0:1e:0c:b2:dd:8d:ea:cf:87:73:11: e9:30:05:54:00:49:b1:be:f4:9f:89:6d:51:15:3d:40:c3:d5: af:f3:e9:61:9e:19:32:b6:c3:da:c6:84:97:8d:13:27:1a:5f: aa:8f:ef:68:d3:6b:78:5e:a8:5d:11:be:08:e5:d1:ac:93:e1: 91:74:32:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LMs16d5+fpDhA7RKgGFLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YTg1Njc4NTM5MmRhMjdkMDBiZGIyNzA5MWM1OTI2YzMx NTVkODkwHhcNMjYwMTI1MjIwMTA2WhcNMjYwMTI2MjIwMTA2WjAzMTEwLwYDVQQD Eyg5Njg4NTlkZWUzYTNmODQyMWRlZTk3YjY0ZjRjODNlMzFmMWZlMTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDQBRZkJJyDXkzXh9ewB08uUarF4 t/nNdDJlWN7obRCUTlk1bJPbnoW5I984ikKMS2ASRywSrQS+1TxciIBtQR/MdveM BN9d0wmdRmuy/qZqNhiLhnair/3KtemmOOTWegjWt+NXGM6H6ZgzEcsr+DCFj+ud fCtQCgtd5H0CZAam1KjU0ILrtcY/isu0i7Fu1HbAreZwDJIwXtfy6gg6ZYLKZb3c 19NTUYtX+h1Qc713oLuhPCx6Vf93g+EcbkL7tM8xvj8hbWQC9PyKeg/s63Ng49oo I42xZqEsUioCNJZjtsuk3xynJ9lcF3J1N8UKpkhfMWz/hnx6PBRYpq2HnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJaIWd7jo/hCHe6Xtk9Mg+MfH+FsMB8GA1UdIwQY MBaAFHWoVnhTkton0AvbJwkcWSbDFV2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGFoV2VGT1MyaWZRQzlzbkNSeFpKc01WWFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lYzBkYTktZWE4Yy00YjhlLWEzMmEt YTViYzBjNzBjNTEzLzEvZGFoV2VGT1MyaWZRQzlzbkNSeFpKc01WWFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9lYzBkYTktZWE4Yy00YjhlLWEzMmEtYTViYzBjNzBjNTEz LzEvZGFoV2VGT1MyaWZRQzlzbkNSeFpKc01WWFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDsYZ32l u30xAt3fnNow3ORmRD1rTdAFPnbh+snm4jZSSIJLiAeh16jrHomdFANxzw9YEa6k 0zTcpVseJrg2+q1pHM6lBWixSINT3aXYG1xx4440+Q00qd2SOT7jeC8i2NyqNiMa mT0UryGAoFahtfg2Uj7dYPE6AHbAxCHPEFfrUNoQB10JXzmgHIlEewm4l8smB5ge 1sFX4vMyDpn0RstUfAvsXGRvepaorYmwFfC2HNAWs+Ea4kmkgLAeDLLdjerPh3MR 6TAFVABJsb70n4ltURU9QMPVr/PpYZ4ZMrbD2saEl40TJxpfqo/vaNNreF6oXRG+ COXRrJPhkXQytA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:51:12 2026 by rpki-client