This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft File: dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft (raw, json) Hash identifier: addVvkWRlYgqL/KXr1hcIiYib9ggeTIjKSiz3SCQYUw= Subject key identifier: CC:48:18:E7:51:A2:20:A7:63:62:19:3F:D6:B3:53:91:93:EA:61:67 Authority key identifier: 76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28 Certificate issuer: /CN=76d44d97653a06d846b2443535b83e8cbc39d928 Certificate serial: 019BF23DAE0B10027FD0D3B0441647490737 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft Manifest number: 0455 Signing time: Sat 24 Jan 2026 23:01:26 +0000 Manifest this update: Sat 24 Jan 2026 23:01:26 +0000 Manifest next update: Sun 25 Jan 2026 23:01:26 +0000 Files and hashes: 1: RIKPxzN612TS7QdYx0yhnbfdgCk.roa (hash: 07oY6OiufBnwXNFc8F9BHYyCv8CtgRF58yYSOyMr920=) 2: SLrQ1knzFhgHD__1U04Q5GQJX3U.roa (hash: AVeAooocOWwYiMM4BHVrd1TGE917Rw4KZCVXlSQ+oDM=) 3: dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl (hash: dNOZq/UOCQuu0YeEOrzMYsOSU/3AHj8UicfwzNWNEo0=) 4: ryBPgXvA-kuwL8ute7lp1pTeuxA.roa (hash: aMotHhiy0ZyL5y70ElZdApnRGo5oHKFlodbC24Zl6LA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:3d:ae:0b:10:02:7f:d0:d3:b0:44:16:47:49:07:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76d44d97653a06d846b2443535b83e8cbc39d928 Validity Not Before: Jan 24 23:01:26 2026 GMT Not After : Jan 25 23:01:26 2026 GMT Subject: CN=cc4818e751a220a76362193fd6b3539193ea6167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a3:d4:91:2b:78:64:56:9c:0d:99:1f:65:d5: 48:f2:0d:9d:af:04:37:ff:ce:3c:cd:f0:60:53:1c: 49:da:96:29:b4:5d:8a:ff:c5:54:88:9c:48:42:88: c5:fa:fa:49:82:f2:a4:b7:20:02:ec:6c:ab:03:04: d0:b6:b7:16:89:5f:76:49:2b:d6:93:92:6e:af:36: 21:f1:cd:ba:da:a3:ec:96:ea:5e:4c:9d:f6:6f:cd: ed:a6:e3:d5:91:dc:54:b7:ad:d6:53:5b:a4:30:a0: b8:37:e3:11:82:be:e4:4d:25:55:39:ca:57:e1:fa: 76:ea:a6:67:c2:27:70:5e:fe:03:b7:89:16:4e:4b: 7d:ef:f9:d8:40:36:23:32:a5:1f:d3:89:37:e1:f1: e3:4c:e2:f5:63:50:3a:52:cd:4b:4c:52:6b:72:94: 33:99:e8:be:f4:62:8e:3b:5c:f6:bb:1d:86:e4:c7: 1f:c6:bf:d5:e7:3a:82:9c:d3:27:a1:f2:d6:d5:2a: 63:89:0c:8b:51:2d:0b:80:e2:10:93:c1:39:29:0b: c1:80:f0:27:f6:e8:ef:e0:36:66:88:61:6e:cc:a7: c1:95:68:4b:e5:3e:6e:d9:27:ac:b2:4d:f6:d4:ea: aa:7a:c7:a0:78:20:bb:c2:16:d4:05:40:6f:9c:45: 65:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:48:18:E7:51:A2:20:A7:63:62:19:3F:D6:B3:53:91:93:EA:61:67 X509v3 Authority Key Identifier: keyid:76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ac:d0:7c:39:ad:20:b7:76:58:d3:59:18:4d:5b:3a:ea:f6: 4d:04:42:1c:45:5e:67:12:95:15:c3:1f:8a:73:55:1d:35:62: 79:22:16:0d:99:44:1b:d1:32:d8:f9:da:56:87:a6:56:ab:5e: b4:68:e8:e7:e6:3f:a1:21:3b:bb:0e:5c:cd:1e:03:13:30:20: 6a:36:1d:29:15:8b:3a:e7:a0:d5:fa:b8:48:3b:df:ac:61:58: 7c:32:d8:b2:3a:ec:05:7d:d6:2a:43:e3:da:ba:4b:38:7c:5d: 5c:e7:8c:98:7d:c9:08:d7:3a:39:d0:4a:4c:69:ce:93:48:9a: f9:4f:c6:d7:15:b0:d0:f0:cc:97:ac:18:f6:63:47:66:04:58: 49:25:7c:7a:66:5e:9a:e9:c1:c8:41:a6:10:15:e7:0b:8e:a6: 71:2f:69:da:f0:8b:20:f1:91:6f:16:93:86:70:d6:2c:5c:8b: 61:ec:51:f8:59:bc:e7:ac:16:5f:fa:ca:3a:db:e0:d8:c1:00: 51:48:8a:27:47:75:9b:bf:14:1c:92:63:8f:6c:d2:cc:0f:b2: f7:34:62:d0:28:f6:b1:08:ea:f9:a7:19:ec:12:a6:92:62:8f: 3a:fa:21:cb:3f:b1:09:2f:13:99:3b:c7:c6:dd:e8:25:fc:21: ae:df:d4:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyPa4LEAJ/0NOwRBZHSQc3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZDQ0ZDk3NjUzYTA2ZDg0NmIyNDQzNTM1YjgzZThjYmMz OWQ5MjgwHhcNMjYwMTI0MjMwMTI2WhcNMjYwMTI1MjMwMTI2WjAzMTEwLwYDVQQD EyhjYzQ4MThlNzUxYTIyMGE3NjM2MjE5M2ZkNmIzNTM5MTkzZWE2MTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6PUkSt4ZFacDZkfZdVI8g2drwQ3 /848zfBgUxxJ2pYptF2K/8VUiJxIQojF+vpJgvKktyAC7GyrAwTQtrcWiV92SSvW k5JurzYh8c262qPslupeTJ32b83tpuPVkdxUt63WU1ukMKC4N+MRgr7kTSVVOcpX 4fp26qZnwidwXv4Dt4kWTkt97/nYQDYjMqUf04k34fHjTOL1Y1A6Us1LTFJrcpQz mei+9GKOO1z2ux2G5Mcfxr/V5zqCnNMnofLW1SpjiQyLUS0LgOIQk8E5KQvBgPAn 9ujv4DZmiGFuzKfBlWhL5T5u2Sessk321OqqesegeCC7whbUBUBvnEVlwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxIGOdRoiCnY2IZP9azU5GT6mFnMB8GA1UdIwQY MBaAFHbUTZdlOgbYRrJENTW4Poy8OdkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHRSTmwyVTZCdGhHc2tRMU5iZy1qTHc1MlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi82YTMwNjktYWQzYy00Mzg4LWIxZTgt MGMyN2FkYjc1Y2RmLzEvZHRSTmwyVTZCdGhHc2tRMU5iZy1qTHc1MlNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi82YTMwNjktYWQzYy00Mzg4LWIxZTgtMGMyN2FkYjc1Y2Rm LzEvZHRSTmwyVTZCdGhHc2tRMU5iZy1qTHc1MlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqzQfDmt ILd2WNNZGE1bOur2TQRCHEVeZxKVFcMfinNVHTVieSIWDZlEG9Ey2PnaVoemVqte tGjo5+Y/oSE7uw5czR4DEzAgajYdKRWLOueg1fq4SDvfrGFYfDLYsjrsBX3WKkPj 2rpLOHxdXOeMmH3JCNc6OdBKTGnOk0ia+U/G1xWw0PDMl6wY9mNHZgRYSSV8emZe munByEGmEBXnC46mcS9p2vCLIPGRbxaThnDWLFyLYexR+Fm856wWX/rKOtvg2MEA UUiKJ0d1m78UHJJjj2zSzA+y9zRi0Cj2sQjq+acZ7BKmkmKPOvohyz+xCS8TmTvH xt3oJfwhrt/UGA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:45 2026 by rpki-client