This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft File: DXj57XHKOklrjVS5fxR5GNrbnFQ.mft (raw, json) Hash identifier: KrVgSqhiZpqn77xQbrtzk+n8NrGZf/15JlY9PslhaF4= Subject key identifier: DA:A0:F9:29:C5:C4:25:36:17:3F:F8:13:D6:02:C6:8C:3F:05:E3:FD Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54 Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54 Certificate serial: 019BF462D62CABCF0612E594B5D219754CB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft Manifest number: 037F Signing time: Sun 25 Jan 2026 09:01:16 +0000 Manifest this update: Sun 25 Jan 2026 09:01:16 +0000 Manifest next update: Mon 26 Jan 2026 09:01:16 +0000 Files and hashes: 1: DXj57XHKOklrjVS5fxR5GNrbnFQ.crl (hash: 7IXyBinkEb1y8QDaAvFWJGANWG+ljbWJ5/INDRXXtzk=) 2: WBE9XqEf7MFyalSUqu-vF0MYUwE.roa (hash: dqMxE1BdW8dFl07KbG3IeIB419vd91Jj1Eyr9ex+Uk0=) 3: WBO5Gvlksp1h2Nj2XcuQWgWe3aM.roa (hash: 21Q33n7ktv9Mw0KQGNV5mbgpviM4S02U0e8hX8gzv14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:d6:2c:ab:cf:06:12:e5:94:b5:d2:19:75:4c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54 Validity Not Before: Jan 25 09:01:16 2026 GMT Not After : Jan 26 09:01:16 2026 GMT Subject: CN=daa0f929c5c42536173ff813d602c68c3f05e3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:98:dc:3b:32:19:e7:aa:5d:b4:85:89:80:78: 07:33:19:f0:a2:79:fd:d1:08:f9:78:21:af:49:e7: f4:8f:6d:93:e6:c1:c5:2c:06:b1:e3:54:06:92:17: 23:55:ff:c4:14:ba:b6:f5:e3:a1:5a:8c:c6:ac:8c: a1:64:db:84:14:d2:ed:f3:a9:cd:22:21:56:c8:58: b8:2d:f8:df:1f:73:ff:df:cb:aa:8b:cb:63:cf:97: 29:cc:5a:5e:f1:0e:59:c5:78:a4:ee:ff:45:cd:26: 05:2b:52:ac:4a:69:c1:0a:e8:3a:f4:87:b1:86:9c: bb:8d:fa:22:e3:31:be:c3:ca:b0:fd:ba:5a:5e:c3: ec:37:41:17:8c:04:f9:25:b2:8a:4f:0b:50:9d:7b: 91:d7:47:48:de:ae:f7:23:3e:5e:72:5f:5d:fa:85: 64:9f:f0:3c:98:81:e3:52:d4:41:ac:97:4d:76:42: c9:43:b4:38:61:d5:d5:d1:6a:90:1c:21:a2:0c:fe: 23:ca:ad:82:ca:66:84:a7:64:a6:cd:6b:0e:9e:de: bd:36:b9:b9:d1:5e:d6:42:d1:d7:5a:0a:bf:7a:0e: e6:fd:d7:af:7e:77:6a:7d:cd:9a:c1:0c:e3:43:f0: 3b:cc:8f:1f:6d:3d:37:6c:df:9e:c2:73:f2:0e:0a: 08:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A0:F9:29:C5:C4:25:36:17:3F:F8:13:D6:02:C6:8C:3F:05:E3:FD X509v3 Authority Key Identifier: keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:10:f4:af:15:4e:1f:92:ff:d1:ba:31:b1:c3:ad:4e:a8:16: 9b:57:dd:2b:bc:02:9c:89:ae:7b:0a:34:1d:d0:ac:3d:45:87: 21:53:a1:e9:b0:cb:c5:e4:6c:3f:c2:22:d9:a5:e4:59:7a:b2: 0c:aa:ff:39:d1:84:94:be:a3:e7:3c:df:62:27:0a:13:9a:2c: 6e:a6:e3:fc:25:9e:2e:26:98:cc:43:ef:47:d5:c1:b6:89:bf: b9:e8:e0:36:c6:d7:6f:24:e2:eb:4c:3c:e9:97:de:da:b9:09: 91:0a:f5:9c:76:79:6f:87:bc:43:4f:e9:2d:fa:bf:93:c3:79: 53:09:9f:35:b4:5b:90:48:ed:20:90:78:36:b5:d0:40:d7:c8: ce:13:bd:8c:69:50:0b:80:8e:dd:20:46:cc:6d:69:6d:fc:2c: 2e:e5:a1:e0:ab:70:60:d6:d8:ce:8e:91:9b:ac:b3:9d:d8:4c: 28:bf:fe:c6:4a:23:30:74:0c:f0:95:4e:63:d3:3a:45:91:e5: f3:d1:56:af:65:db:45:75:89:4f:26:71:71:62:b6:eb:d2:31: 17:33:6a:24:63:25:c4:8a:96:0c:cb:92:d7:58:ac:d4:f2:12: 60:dc:e8:8d:41:b7:dc:12:66:eb:99:cb:75:90:07:f8:ec:b0: b1:cd:32:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YtYsq88GEuWUtdIZdUy2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzhmOWVkNzFjYTNhNDk2YjhkNTRiOTdmMTQ3OTE4ZGFk YjljNTQwHhcNMjYwMTI1MDkwMTE2WhcNMjYwMTI2MDkwMTE2WjAzMTEwLwYDVQQD EyhkYWEwZjkyOWM1YzQyNTM2MTczZmY4MTNkNjAyYzY4YzNmMDVlM2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZjcOzIZ56pdtIWJgHgHMxnwonn9 0Qj5eCGvSef0j22T5sHFLAax41QGkhcjVf/EFLq29eOhWozGrIyhZNuEFNLt86nN IiFWyFi4LfjfH3P/38uqi8tjz5cpzFpe8Q5ZxXik7v9FzSYFK1KsSmnBCug69Iex hpy7jfoi4zG+w8qw/bpaXsPsN0EXjAT5JbKKTwtQnXuR10dI3q73Iz5ecl9d+oVk n/A8mIHjUtRBrJdNdkLJQ7Q4YdXV0WqQHCGiDP4jyq2CymaEp2SmzWsOnt69Nrm5 0V7WQtHXWgq/eg7m/devfndqfc2awQzjQ/A7zI8fbT03bN+ewnPyDgoIWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqg+SnFxCU2Fz/4E9YCxow/BeP9MB8GA1UdIwQY MBaAFA14+e1xyjpJa41UuX8UeRja25xUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mN2QwZjAtYTU3MS00NTdjLTkxNTQt OGU4Njc1Y2IwOTJmLzEvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mN2QwZjAtYTU3MS00NTdjLTkxNTQtOGU4Njc1Y2IwOTJm LzEvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBD0rxVO H5L/0boxscOtTqgWm1fdK7wCnImuewo0HdCsPUWHIVOh6bDLxeRsP8Ii2aXkWXqy DKr/OdGElL6j5zzfYicKE5osbqbj/CWeLiaYzEPvR9XBtom/uejgNsbXbyTi60w8 6Zfe2rkJkQr1nHZ5b4e8Q0/pLfq/k8N5UwmfNbRbkEjtIJB4NrXQQNfIzhO9jGlQ C4CO3SBGzG1pbfwsLuWh4KtwYNbYzo6Rm6yzndhMKL/+xkojMHQM8JVOY9M6RZHl 89FWr2XbRXWJTyZxcWK269IxFzNqJGMlxIqWDMuS11is1PISYNzojUG33BJm65nL dZAH+Oywsc0y+Q== -----END CERTIFICATE-----Generated at Sun Jan 25 12:15:53 2026 by rpki-client