This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft File: DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft (raw, json) Hash identifier: wdqaMyDBfMklm2AkF5jDNCncY4gw6sqcXCLsSMjxtjQ= Subject key identifier: 5F:8F:4A:40:8F:90:7A:76:72:2D:D1:0D:02:C9:E9:B6:1D:3D:59:FD Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11 Certificate issuer: /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611 Certificate serial: 019BF9F711937E51D1BAB2F837F37C834629 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft Manifest number: 148A Signing time: Mon 26 Jan 2026 11:01:17 +0000 Manifest this update: Mon 26 Jan 2026 11:01:17 +0000 Manifest next update: Tue 27 Jan 2026 11:01:17 +0000 Files and hashes: 1: DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl (hash: 2WqOoxpjVp3imLHlumaxyXhPfxdiFelfM/4kelsuvik=) 2: u6dKU2x8O3xV7S3OaviPva82180.roa (hash: 9A10Ud5zhJp6APcwr5M/hOCYfKIxkVszIE4bdVZOg/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f7:11:93:7e:51:d1:ba:b2:f8:37:f3:7c:83:46:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611 Validity Not Before: Jan 26 11:01:17 2026 GMT Not After : Jan 27 11:01:17 2026 GMT Subject: CN=5f8f4a408f907a76722dd10d02c9e9b61d3d59fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:67:35:de:d5:0b:f8:a0:22:6b:20:22:d9:08: 0b:ab:b5:65:e1:ca:a2:be:b3:7b:c1:27:de:aa:36: cc:68:6a:32:2e:a7:9b:fd:c5:62:94:50:89:85:41: de:9a:7b:ba:af:98:ad:68:ac:89:26:1c:71:5d:9f: ed:be:c4:9c:5f:43:b7:f0:a3:a4:84:d3:5f:7f:8d: 24:35:1a:30:a8:1b:c0:23:c8:19:c4:6a:ad:46:11: 73:8f:ce:85:49:0b:83:3f:19:ac:69:65:ad:1c:a6: cf:74:5e:b6:cf:b6:9c:98:1e:21:f9:c9:9e:5d:06: ae:35:30:ce:db:98:dc:bf:d3:ff:69:99:e7:81:8b: b7:c0:a1:5e:54:c2:c9:e5:5f:61:8e:07:d7:6b:14: fd:9d:ba:58:03:5f:8b:b6:28:96:13:c1:cd:9b:74: 42:6e:b6:09:c0:f9:ed:8e:90:62:71:a2:28:07:ff: 02:30:83:36:77:01:32:fe:7a:2f:04:39:74:07:91: d7:bd:41:32:b4:ea:ae:50:02:05:4a:a2:d8:f1:c9: 11:ae:18:68:38:28:93:b5:e4:cf:b3:46:81:85:e4: 4f:ff:4d:50:fe:38:c0:6c:14:86:12:24:49:14:44: e0:db:c4:fb:db:24:eb:d0:a0:ea:d4:9b:e4:d2:a7: 49:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8F:4A:40:8F:90:7A:76:72:2D:D1:0D:02:C9:E9:B6:1D:3D:59:FD X509v3 Authority Key Identifier: keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:35:0c:d1:43:91:61:1a:fb:b8:85:cb:97:d5:68:31:a2:bb: c6:8c:5e:43:9d:17:ce:93:c1:85:61:94:f4:0c:58:04:11:e7: c1:f8:bb:3a:19:65:ce:b6:cb:f0:6f:40:53:56:08:4c:74:18: 0d:c8:d8:61:dd:a3:2f:d1:44:fb:87:5b:96:75:49:f7:ae:ae: 2d:78:22:06:3c:91:18:56:b2:15:b7:e0:58:44:bf:f9:77:bb: 98:fb:cb:d6:ce:bc:51:7c:48:9d:48:66:7e:f6:d3:50:17:6a: 63:94:0e:e0:b6:66:55:27:d5:38:40:a2:d7:5a:d1:6d:a2:d8: 39:2c:73:d2:f5:35:37:cc:00:cb:b1:13:b0:2e:a2:8c:7e:f4: d5:d3:26:c1:e2:01:13:a7:de:2b:2d:28:49:96:0c:59:1c:57: 0f:ba:5d:86:a6:b6:ef:6e:a0:e9:2a:90:20:a4:86:b6:f4:99: a0:e8:0e:79:a3:48:b1:9d:d8:7b:8a:e6:2e:e0:75:6d:9a:f4: 66:61:c4:6c:d2:c6:3b:82:45:74:29:63:ac:f4:e7:ae:88:f6: 3d:44:ab:ed:a3:ac:fe:89:ee:b9:2a:92:b3:a6:78:5d:20:68: 20:05:d8:c4:a4:0c:f7:7f:0f:6c:2c:cf:22:ce:38:52:41:57: b8:d8:cf:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59xGTflHRurL4N/N8g0YpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNmZhMTU2YzU3YzRlODg1YjllNmFmODIzMGI2NTRkNzk2 YTU2MTEwHhcNMjYwMTI2MTEwMTE3WhcNMjYwMTI3MTEwMTE3WjAzMTEwLwYDVQQD Eyg1ZjhmNGE0MDhmOTA3YTc2NzIyZGQxMGQwMmM5ZTliNjFkM2Q1OWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2c13tUL+KAiayAi2QgLq7Vl4cqi vrN7wSfeqjbMaGoyLqeb/cVilFCJhUHemnu6r5itaKyJJhxxXZ/tvsScX0O38KOk hNNff40kNRowqBvAI8gZxGqtRhFzj86FSQuDPxmsaWWtHKbPdF62z7acmB4h+cme XQauNTDO25jcv9P/aZnngYu3wKFeVMLJ5V9hjgfXaxT9nbpYA1+LtiiWE8HNm3RC brYJwPntjpBicaIoB/8CMIM2dwEy/novBDl0B5HXvUEytOquUAIFSqLY8ckRrhho OCiTteTPs0aBheRP/01Q/jjAbBSGEiRJFETg28T72yTr0KDq1Jvk0qdJ+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+PSkCPkHp2ci3RDQLJ6bYdPVn9MB8GA1UdIwQY MBaAFAxvoVbFfE6IW55q+CMLZU15alYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQt YjhjMzZlY2VkYWQ4LzEvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQtYjhjMzZlY2VkYWQ4 LzEvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjUM0UOR YRr7uIXLl9VoMaK7xoxeQ50XzpPBhWGU9AxYBBHnwfi7OhllzrbL8G9AU1YITHQY DcjYYd2jL9FE+4dblnVJ966uLXgiBjyRGFayFbfgWES/+Xe7mPvL1s68UXxInUhm fvbTUBdqY5QO4LZmVSfVOECi11rRbaLYOSxz0vU1N8wAy7ETsC6ijH701dMmweIB E6feKy0oSZYMWRxXD7pdhqa2726g6SqQIKSGtvSZoOgOeaNIsZ3Ye4rmLuB1bZr0 ZmHEbNLGO4JFdCljrPTnroj2PUSr7aOs/onuuSqSs6Z4XSBoIAXYxKQM938PbCzP Is44UkFXuNjPzA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:42 2026 by rpki-client