This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json) Hash identifier: FANvPeR1AasTGwZz02RYPllwrIc+Uq3SM4yAUOylctk= Subject key identifier: EE:51:EC:7C:1B:4D:CC:7D:47:5B:57:4B:B8:EC:B9:60:2C:2C:D9:7E Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75 Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75 Certificate serial: 019BF6F56AF4EFE28117A2FBEA185ED2DC5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 21:00:37 +0000 Manifest this update: Sun 25 Jan 2026 21:00:37 +0000 Manifest next update: Mon 26 Jan 2026 21:00:37 +0000 Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: MwakcZFaTCrn/GMMxozgGYOy5quZAQvCqvTlzOTxXuM=) 2: qB9Z-zHdmjEFSIG2vfJGfIMdpA0.roa (hash: MxW4mBfsVBC2g/oHLcgSIPQNdBtdZMBf3Vv3p/+UNxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:6a:f4:ef:e2:81:17:a2:fb:ea:18:5e:d2:dc:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75 Validity Not Before: Jan 25 21:00:37 2026 GMT Not After : Jan 26 21:00:37 2026 GMT Subject: CN=ee51ec7c1b4dcc7d475b574bb8ecb9602c2cd97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:36:b8:21:a1:07:de:45:b6:13:e4:7d:72:d7: 8e:51:8d:73:a6:14:39:98:b3:91:e5:c2:b2:14:1e: f9:3a:3c:fd:96:6b:bc:a1:1b:ad:da:9a:0e:07:cb: 05:2f:24:32:90:8e:a4:b5:20:c2:a3:73:e0:b3:5e: 95:87:b5:d4:25:7c:40:8d:93:80:aa:59:0b:9b:fb: a8:67:9d:96:ed:fe:97:fb:da:28:fc:a0:64:79:9d: 0e:5d:97:98:91:dd:89:38:f7:42:7a:0a:fe:87:a5: 36:91:41:04:b2:89:05:a4:94:8e:cd:bc:b4:3e:95: 03:8b:0f:d7:4b:45:63:56:f1:ba:f6:90:64:a5:cb: 71:3d:5a:e9:4a:4c:9b:bb:32:e9:19:ec:ac:84:89: 78:a9:d2:ae:1e:fa:ee:24:ae:11:80:3f:31:34:6e: 31:68:60:27:63:81:d1:f8:e1:07:78:60:bd:fd:9a: 0d:6e:3a:aa:d7:83:9b:05:8b:69:ea:be:11:4a:c1: 11:ab:10:9f:cf:a0:aa:54:07:46:71:aa:2d:33:45: 27:96:04:72:89:33:f6:3d:e9:da:0f:55:f2:e7:1b: bc:a8:b1:d2:03:6f:58:c5:15:78:94:d8:44:79:e7: 25:00:36:85:ed:26:b6:f7:4b:c4:8e:b2:65:10:f7: 84:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:51:EC:7C:1B:4D:CC:7D:47:5B:57:4B:B8:EC:B9:60:2C:2C:D9:7E X509v3 Authority Key Identifier: keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:0f:41:7c:20:bb:55:c5:b4:c4:f9:87:9b:c8:92:5e:2b:32: e8:8c:e3:58:5f:05:71:eb:16:2d:ae:45:67:1c:b1:4e:7a:58: d6:28:f7:0f:88:07:c6:c0:95:a6:93:26:13:2a:d5:bb:ec:d2: ab:f7:4c:37:e9:7c:3c:56:0c:64:1b:3b:91:a6:f3:f2:7c:fc: 64:11:c5:17:b6:59:ab:77:5a:66:b3:51:2d:2f:be:ea:1d:78: a0:7e:9a:fd:b1:78:ed:69:7b:44:d9:18:15:a2:4e:ad:cc:21: 09:d8:58:78:2a:2e:51:c6:8d:7e:ff:ad:80:f9:c3:4a:6f:10: a5:04:3e:24:be:38:90:19:54:04:89:26:33:55:9f:2f:c7:2a: 9b:b5:55:da:c6:ac:9d:81:35:44:45:ea:5a:a1:db:68:6f:34: af:79:c3:c5:b1:42:f1:a7:1b:f0:0e:3a:e7:d8:52:7c:a3:38: c9:76:fb:e7:26:a8:6e:16:d3:be:49:95:0a:99:10:30:f2:ce: 3c:20:6c:bc:4b:a4:aa:2b:7e:77:5f:33:3f:94:1d:88:0f:7e: e1:ba:19:24:94:cf:ad:77:f5:b8:58:74:c0:5c:2d:c2:3f:1a: 07:20:6f:ec:6d:4b:55:7e:f6:6a:4c:3b:14:37:f1:aa:a1:02: 5c:5f:18:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29Wr07+KBF6L76hhe0txdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMmQ0MjBlNjYxYzg2NTcxMDg5ZmYwYjUxOTY1YTg2ZTBk N2JjNzUwHhcNMjYwMTI1MjEwMDM3WhcNMjYwMTI2MjEwMDM3WjAzMTEwLwYDVQQD EyhlZTUxZWM3YzFiNGRjYzdkNDc1YjU3NGJiOGVjYjk2MDJjMmNkOTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTa4IaEH3kW2E+R9cteOUY1zphQ5 mLOR5cKyFB75Ojz9lmu8oRut2poOB8sFLyQykI6ktSDCo3Pgs16Vh7XUJXxAjZOA qlkLm/uoZ52W7f6X+9oo/KBkeZ0OXZeYkd2JOPdCegr+h6U2kUEEsokFpJSOzby0 PpUDiw/XS0VjVvG69pBkpctxPVrpSkybuzLpGeyshIl4qdKuHvruJK4RgD8xNG4x aGAnY4HR+OEHeGC9/ZoNbjqq14ObBYtp6r4RSsERqxCfz6CqVAdGcaotM0UnlgRy iTP2PenaD1Xy5xu8qLHSA29YxRV4lNhEeeclADaF7Sa290vEjrJlEPeEZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5R7HwbTcx9R1tXS7jsuWAsLNl+MB8GA1UdIwQY MBaAFA4tQg5mHIZXEIn/C1GWWobg17x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEt NzUxODhiM2MxMTJlLzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEtNzUxODhiM2MxMTJl LzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANA9BfCC7 VcW0xPmHm8iSXisy6IzjWF8FcesWLa5FZxyxTnpY1ij3D4gHxsCVppMmEyrVu+zS q/dMN+l8PFYMZBs7kabz8nz8ZBHFF7ZZq3daZrNRLS++6h14oH6a/bF47Wl7RNkY FaJOrcwhCdhYeCouUcaNfv+tgPnDSm8QpQQ+JL44kBlUBIkmM1WfL8cqm7VV2sas nYE1REXqWqHbaG80r3nDxbFC8acb8A4659hSfKM4yXb75yaobhbTvkmVCpkQMPLO PCBsvEukqit+d18zP5QdiA9+4boZJJTPrXf1uFh0wFwtwj8aByBv7G1LVX72akw7 FDfxqqECXF8Y4Q== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:21 2026 by rpki-client