This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft File: d7AlLypnrNQplw-mSmQXd29y2NY.mft (raw, json) Hash identifier: 84SkQ8nlfDX8b6j8ptgRl75EwLfhM31x3BmK5SzONXU= Subject key identifier: BF:67:F5:74:EB:3D:DA:EB:31:88:9D:A9:4B:5F:8D:C8:55:3D:DB:D6 Authority key identifier: 77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6 Certificate issuer: /CN=77b0252f2a67acd429970fa64a6417776f72d8d6 Certificate serial: 019BF687DAA859D50167A6A43B663B41D574 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft Manifest number: 06C5 Signing time: Sun 25 Jan 2026 19:00:56 +0000 Manifest this update: Sun 25 Jan 2026 19:00:56 +0000 Manifest next update: Mon 26 Jan 2026 19:00:56 +0000 Files and hashes: 1: GZzLxFCp1bVkiSpEsTLVVr4H9XI.asa (hash: ivqvyTFoXDuekBB8qUC8sgSfxDY8iNPCYAvAp+TmOlY=) 2: d7AlLypnrNQplw-mSmQXd29y2NY.crl (hash: 65jQfTP9NwSJrdqt0aX7OFUT0D4JnHd1W6nuzjVbHO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:da:a8:59:d5:01:67:a6:a4:3b:66:3b:41:d5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77b0252f2a67acd429970fa64a6417776f72d8d6 Validity Not Before: Jan 25 19:00:56 2026 GMT Not After : Jan 26 19:00:56 2026 GMT Subject: CN=bf67f574eb3ddaeb31889da94b5f8dc8553ddbd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:34:e7:e5:91:8a:b3:2a:8a:6a:7d:44:1f:1b: cf:8d:c5:bc:9c:4a:94:42:ad:f2:ab:6e:fb:46:90: d4:b9:9e:16:76:0f:ef:15:6f:ca:33:4c:43:07:51: 4b:07:b9:c6:c6:a5:95:c7:ec:3c:4a:54:b0:d5:8f: 7f:0c:46:bb:50:b0:85:79:c4:a1:7c:8e:c6:57:f0: 85:ab:8f:48:8b:69:ed:2b:70:9d:09:f0:41:a6:e3: d1:75:a2:2d:be:d8:a6:e7:03:70:ed:ec:40:0d:a6: fb:1b:dc:67:0f:78:dd:45:0b:fb:64:47:cf:83:47: 20:d5:8b:c4:e2:1e:d7:a0:b9:2c:14:7b:d9:f6:01: 3f:fd:44:5c:70:9d:e9:99:60:91:32:b3:9b:ca:2a: 68:23:48:17:98:f9:b8:38:6e:8f:e3:e6:b3:fb:56: 97:f5:3c:90:2c:ac:ab:da:f0:4b:64:41:13:88:54: 74:6d:40:0b:bb:84:da:d6:25:49:24:e3:d8:20:1a: 10:36:aa:cb:a9:cd:dc:a5:ae:fb:0d:e4:66:a4:62: 8e:da:d6:e7:26:13:ec:79:a1:f3:8a:cc:bf:45:c4: 26:34:78:55:15:6b:f2:9a:df:f6:58:46:77:15:f2: 11:75:c9:c6:1a:f3:0d:84:63:29:74:8e:89:40:37: 2c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:67:F5:74:EB:3D:DA:EB:31:88:9D:A9:4B:5F:8D:C8:55:3D:DB:D6 X509v3 Authority Key Identifier: keyid:77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:6d:21:f2:1b:e7:e1:33:84:95:48:27:a3:90:10:96:1c:29: 95:58:59:2d:68:87:09:4e:2e:d1:38:bb:11:44:11:8e:82:6a: ef:56:e3:b7:66:7c:f6:0b:e5:cf:ab:89:1e:66:55:ee:3f:de: 7e:4d:5b:2b:46:70:0e:56:7f:0f:55:99:14:a8:77:15:90:6e: 1a:a5:fd:23:48:e6:17:31:1f:8a:2b:9a:42:60:b4:4e:82:c3: 53:48:c0:93:b3:9b:e6:db:18:46:87:5a:45:75:36:6b:a2:b1: a7:44:cb:f1:3e:5d:05:35:12:f9:4c:d0:e1:34:16:5b:ba:13: eb:10:ed:de:d0:02:9d:8b:a7:78:36:21:e8:02:8a:ed:15:c4: a5:90:2b:59:1c:72:56:ce:fb:7e:18:9f:66:70:54:54:ab:69: 25:32:c9:3e:8a:d9:cc:f0:e3:94:48:41:4a:48:04:f3:21:05: 8c:60:e3:a2:a8:15:5d:53:7d:47:82:f2:e5:ba:ec:10:4d:8f: e9:26:2b:e6:9b:6d:53:98:d2:c9:a1:a4:93:38:34:0e:c3:1c: 6e:c0:a2:a8:69:0e:dd:aa:b7:95:e3:a4:fe:4d:78:2e:ef:53: 08:0c:24:60:74:ae:f8:06:80:c5:02:79:bb:48:a5:e0:9b:8f: 41:6f:4b:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h9qoWdUBZ6akO2Y7QdV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YjAyNTJmMmE2N2FjZDQyOTk3MGZhNjRhNjQxNzc3NmY3 MmQ4ZDYwHhcNMjYwMTI1MTkwMDU2WhcNMjYwMTI2MTkwMDU2WjAzMTEwLwYDVQQD EyhiZjY3ZjU3NGViM2RkYWViMzE4ODlkYTk0YjVmOGRjODU1M2RkYmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjTn5ZGKsyqKan1EHxvPjcW8nEqU Qq3yq277RpDUuZ4Wdg/vFW/KM0xDB1FLB7nGxqWVx+w8SlSw1Y9/DEa7ULCFecSh fI7GV/CFq49Ii2ntK3CdCfBBpuPRdaItvtim5wNw7exADab7G9xnD3jdRQv7ZEfP g0cg1YvE4h7XoLksFHvZ9gE//URccJ3pmWCRMrObyipoI0gXmPm4OG6P4+az+1aX 9TyQLKyr2vBLZEETiFR0bUALu4Ta1iVJJOPYIBoQNqrLqc3cpa77DeRmpGKO2tbn JhPseaHzisy/RcQmNHhVFWvymt/2WEZ3FfIRdcnGGvMNhGMpdI6JQDcsIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9n9XTrPdrrMYidqUtfjchVPdvWMB8GA1UdIwQY MBaAFHewJS8qZ6zUKZcPpkpkF3dvctjWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDdBbEx5cG5yTlFwbHctbVNtUVhkMjl5Mk5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yOTZlOTQtOTI5Ni00MmU1LWE0YjQt OTk2YzUyOWVjOTg2LzEvZDdBbEx5cG5yTlFwbHctbVNtUVhkMjl5Mk5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yOTZlOTQtOTI5Ni00MmU1LWE0YjQtOTk2YzUyOWVjOTg2 LzEvZDdBbEx5cG5yTlFwbHctbVNtUVhkMjl5Mk5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFW0h8hvn 4TOElUgno5AQlhwplVhZLWiHCU4u0Ti7EUQRjoJq71bjt2Z89gvlz6uJHmZV7j/e fk1bK0ZwDlZ/D1WZFKh3FZBuGqX9I0jmFzEfiiuaQmC0ToLDU0jAk7Ob5tsYRoda RXU2a6Kxp0TL8T5dBTUS+UzQ4TQWW7oT6xDt3tACnYuneDYh6AKK7RXEpZArWRxy Vs77fhifZnBUVKtpJTLJPorZzPDjlEhBSkgE8yEFjGDjoqgVXVN9R4Ly5brsEE2P 6SYr5pttU5jSyaGkkzg0DsMcbsCiqGkO3aq3leOk/k14Lu9TCAwkYHSu+AaAxQJ5 u0il4JuPQW9LfQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:11 2026 by rpki-client