This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft File: D6vrbvgg09UvBTciM8VB7ksU82E.mft (raw, json) Hash identifier: 5q0TubITBkKRs3Nucr+39wo7K0aLR7kOMco3iKVXeVY= Subject key identifier: 38:65:AB:DE:B8:32:D1:69:DE:7A:C6:31:5D:C6:85:E4:83:58:23:66 Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61 Certificate issuer: /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361 Certificate serial: 019BF79AA29BCA3409A8625150CE90516353 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 00:01:05 +0000 Manifest this update: Mon 26 Jan 2026 00:01:05 +0000 Manifest next update: Tue 27 Jan 2026 00:01:05 +0000 Files and hashes: 1: D6vrbvgg09UvBTciM8VB7ksU82E.crl (hash: m369tLQaZ5TVbFjWNIl05d87BVE9LXGxm5C7MvEUQCQ=) 2: VS5UOf4Oqufmk1nDLv2qDmY9aAk.roa (hash: yxhJeQxv5OL2X3W33orxeTr4UI2HV6MbDSVgY4g3PdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:a2:9b:ca:34:09:a8:62:51:50:ce:90:51:63:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361 Validity Not Before: Jan 26 00:01:05 2026 GMT Not After : Jan 27 00:01:05 2026 GMT Subject: CN=3865abdeb832d169de7ac6315dc685e483582366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ea:17:f8:76:00:43:f6:fc:8f:f0:2d:d6:22: 2e:07:2f:0c:7b:ea:3b:04:ad:56:4e:84:3a:00:8f: ea:6d:85:c6:94:4a:d3:f7:3c:0f:0d:3e:fb:e9:3b: ef:05:07:76:0f:5d:c8:f0:2d:1e:c7:9c:4c:b2:5f: 9d:e4:80:1e:00:18:7e:9f:01:b1:50:5c:42:21:92: d7:ca:1a:3b:42:44:b0:65:0f:3b:02:8d:d4:50:03: 1a:c0:40:6c:f4:99:16:a8:ae:23:72:01:81:c5:94: da:61:49:8e:8e:f0:3d:74:e4:4b:a9:b7:61:15:2d: ad:43:4d:c4:56:62:11:8c:5e:cf:c2:13:f4:09:87: 0e:53:ca:9d:7d:cd:bb:f8:08:d7:03:2e:d5:3d:de: 0e:af:16:e9:90:b5:83:63:83:8a:f3:33:22:e1:7b: a9:ef:b1:60:96:b7:5a:84:a5:43:89:28:25:ab:66: 6a:ed:5e:37:03:a3:da:15:8c:3e:25:27:af:76:6d: dc:c6:a2:d3:21:ce:ad:68:1b:69:c4:58:9a:f7:a7: 9c:27:a9:8a:3e:3c:1c:79:ee:b8:fb:16:6a:e7:af: 68:12:6c:91:f3:bb:1c:6a:a6:96:da:96:25:19:0e: 17:2b:25:00:0c:60:ff:7f:9a:1c:99:6a:75:09:b9: 91:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:65:AB:DE:B8:32:D1:69:DE:7A:C6:31:5D:C6:85:E4:83:58:23:66 X509v3 Authority Key Identifier: keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:9a:e1:ad:07:71:04:fc:7c:00:d7:27:e6:ae:47:c7:3d:56: 0f:1a:49:04:c0:07:4f:41:94:b0:0d:63:03:ed:61:6b:ee:a5: cf:ca:68:1f:a3:78:c5:06:92:0b:fe:45:b7:8f:05:7b:b2:29: 95:70:1a:14:7e:e1:33:84:f3:49:9d:0e:03:6a:dc:1f:67:49: 8d:d1:71:80:6d:de:0f:4a:7c:fb:68:a0:3b:75:25:4c:80:e4: bc:96:1b:ea:99:14:7a:a8:df:b7:8f:98:3d:68:a1:58:4f:ef: 74:55:0d:00:72:9e:05:4b:ec:12:e3:28:44:1b:d4:07:0b:f5: 7a:f5:9a:d5:bc:53:51:ec:43:36:f6:36:f9:f0:20:0d:ab:51: 25:bf:68:a9:a5:ac:d8:59:e7:ca:69:73:9b:6a:78:73:bb:b2: a7:03:9b:1e:06:24:74:ff:ef:7d:41:ce:cb:de:72:ee:a5:97: 83:af:02:f9:65:49:14:ef:77:6b:95:16:d4:1b:94:85:e4:88: 64:f3:26:ee:5c:86:51:68:10:a4:c4:10:d2:6b:07:cd:50:86: 7e:56:6a:4c:6c:43:2d:5b:2f:f9:09:43:de:f2:36:f5:4d:6e: ba:85:51:32:a0:62:f6:a5:bf:f0:7e:1a:b1:22:80:d2:46:3c: 23:94:2f:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mqKbyjQJqGJRUM6QUWNTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmYWJlYjZlZjgyMGQzZDUyZjA1MzcyMjMzYzU0MWVlNGIx NGYzNjEwHhcNMjYwMTI2MDAwMTA1WhcNMjYwMTI3MDAwMTA1WjAzMTEwLwYDVQQD EygzODY1YWJkZWI4MzJkMTY5ZGU3YWM2MzE1ZGM2ODVlNDgzNTgyMzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOoX+HYAQ/b8j/At1iIuBy8Me+o7 BK1WToQ6AI/qbYXGlErT9zwPDT776TvvBQd2D13I8C0ex5xMsl+d5IAeABh+nwGx UFxCIZLXyho7QkSwZQ87Ao3UUAMawEBs9JkWqK4jcgGBxZTaYUmOjvA9dORLqbdh FS2tQ03EVmIRjF7PwhP0CYcOU8qdfc27+AjXAy7VPd4OrxbpkLWDY4OK8zMi4Xup 77FglrdahKVDiSglq2Zq7V43A6PaFYw+JSevdm3cxqLTIc6taBtpxFia96ecJ6mK Pjwcee64+xZq569oEmyR87scaqaW2pYlGQ4XKyUADGD/f5ocmWp1CbmRoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhlq964MtFp3nrGMV3GheSDWCNmMB8GA1UdIwQY MBaAFA+r6274INPVLwU3IjPFQe5LFPNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mM2Q4MzQtY2VlZC00YmJkLWFiZTEt NWEzNzEyNjcwNWFkLzEvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mM2Q4MzQtY2VlZC00YmJkLWFiZTEtNWEzNzEyNjcwNWFk LzEvRDZ2cmJ2Z2cwOVV2QlRjaU04VkI3a3NVODJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJrhrQdx BPx8ANcn5q5Hxz1WDxpJBMAHT0GUsA1jA+1ha+6lz8poH6N4xQaSC/5Ft48Fe7Ip lXAaFH7hM4TzSZ0OA2rcH2dJjdFxgG3eD0p8+2igO3UlTIDkvJYb6pkUeqjft4+Y PWihWE/vdFUNAHKeBUvsEuMoRBvUBwv1evWa1bxTUexDNvY2+fAgDatRJb9oqaWs 2Fnnymlzm2p4c7uypwObHgYkdP/vfUHOy95y7qWXg68C+WVJFO93a5UW1BuUheSI ZPMm7lyGUWgQpMQQ0msHzVCGflZqTGxDLVsv+QlD3vI29U1uuoVRMqBi9qW/8H4a sSKA0kY8I5Qv7g== -----END CERTIFICATE-----Generated at Mon Jan 26 03:33:03 2026 by rpki-client