This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft File: CDfJmypMBi1cIGePnc8yB679Xng.mft (raw, json) Hash identifier: iHcYCcVIOi6rgkvz0+xkQv8S2qxYmXAHCJ0qxSZmSro= Subject key identifier: ED:98:A9:8D:62:89:DE:27:F6:2A:5E:3E:04:F9:96:40:56:BD:7A:12 Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78 Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78 Certificate serial: 019BF53EDBA3AAB04D3044B71C1573C1765A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft Manifest number: 20 Signing time: Sun 25 Jan 2026 13:01:35 +0000 Manifest this update: Sun 25 Jan 2026 13:01:35 +0000 Manifest next update: Mon 26 Jan 2026 13:01:35 +0000 Files and hashes: 1: 97nEgc4A4sVjs4YgAX5Sm9-LJbk.roa (hash: 3MLozR2LySFs3MSUPZHuRrx2i4ALDNqaZIuRMZWvSoQ=) 2: CDfJmypMBi1cIGePnc8yB679Xng.crl (hash: SwzPOsbM5ih+QifmqTRUx17H3aq+2CB2K5V1OYbPhC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:db:a3:aa:b0:4d:30:44:b7:1c:15:73:c1:76:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78 Validity Not Before: Jan 25 13:01:35 2026 GMT Not After : Jan 26 13:01:35 2026 GMT Subject: CN=ed98a98d6289de27f62a5e3e04f9964056bd7a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0c:e8:b9:57:f5:c2:96:c0:34:94:5e:c7:f7: ae:8b:d0:6c:c4:ca:13:9e:85:f9:15:db:2b:10:88: ea:dc:86:a1:84:65:6d:1f:c3:82:af:a2:5e:71:38: 45:8b:95:8e:c8:5f:20:d1:83:35:06:31:f2:25:fd: 51:3c:0d:7f:23:75:8c:54:89:eb:0a:4d:c2:69:4e: 88:1a:1a:5c:1d:2e:de:b6:6c:b4:6a:09:60:02:8d: 6e:48:2c:06:2c:57:80:27:56:25:09:f8:7b:b9:95: f4:2c:36:bc:17:53:ba:90:a9:03:91:f8:e7:d5:d0: 3b:5b:be:ad:84:9e:85:c9:01:34:50:a6:0a:2e:17: 89:58:9d:21:18:02:3a:83:77:10:d7:f9:f1:85:95: 23:b7:27:98:e5:c6:cd:f8:91:51:3c:53:de:37:af: bc:17:7e:1a:69:3c:f7:4a:9c:c6:b2:18:bd:f3:f4: 8c:25:84:a6:52:b0:23:28:b0:ac:c3:48:ff:12:a0: 4c:b1:12:44:8e:cf:72:23:54:f6:97:09:cc:0d:40: 38:6d:11:ab:1b:7f:d4:55:4a:a2:d9:7d:fa:6f:b4: 21:f3:04:86:24:15:96:63:a0:07:7a:3f:fc:66:dd: 11:d2:31:1c:38:3f:7f:76:7f:35:bd:ad:87:bf:93: b4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:98:A9:8D:62:89:DE:27:F6:2A:5E:3E:04:F9:96:40:56:BD:7A:12 X509v3 Authority Key Identifier: keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:d3:23:99:b8:f3:c8:ca:3a:59:9e:77:c9:f5:2f:b9:57:62: 11:bb:d1:16:ca:33:af:e8:dc:bb:fd:88:9b:81:e7:d0:73:84: 3f:12:12:d3:6b:13:fc:99:8f:85:01:78:ff:2c:fd:1d:dd:6e: 64:55:ed:bd:c1:6a:3f:55:a0:fe:c7:03:0b:38:a5:54:87:85: 75:bf:5f:36:d6:2b:18:bb:d9:13:19:e6:94:5f:9c:19:a3:79: a3:38:c7:79:00:30:ad:81:fd:d8:44:e4:20:03:5c:80:a5:38: 2b:47:32:96:23:37:65:5b:1c:36:03:c9:ad:71:49:e0:f5:10: f6:fb:5b:ee:4c:cf:0f:e6:f5:c8:a0:48:59:2b:97:fa:a5:a2: d2:ac:c6:8a:77:7c:d4:f9:e5:59:f5:0c:b6:a8:f1:75:78:d7: 8e:bd:41:06:fe:19:1f:c3:04:1b:d1:a9:6e:bb:d2:f5:cb:f5: 69:ba:11:2d:1a:69:eb:c0:0c:c8:5f:7d:69:d6:4c:fc:e0:c1: 02:c1:a2:e2:b5:99:23:e0:6b:12:11:3c:55:20:bc:6f:75:1c: 18:9e:7b:87:66:73:96:14:65:e6:52:6e:f0:9c:bf:52:42:a1: c1:61:73:cf:50:10:dc:8d:95:3f:7e:5f:8e:5d:2e:2c:46:de: 82:d7:2b:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PtujqrBNMES3HBVzwXZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzdjOTliMmE0YzA2MmQ1YzIwNjc4ZjlkY2YzMjA3YWVm ZDVlNzgwHhcNMjYwMTI1MTMwMTM1WhcNMjYwMTI2MTMwMTM1WjAzMTEwLwYDVQQD EyhlZDk4YTk4ZDYyODlkZTI3ZjYyYTVlM2UwNGY5OTY0MDU2YmQ3YTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AzouVf1wpbANJRex/eui9BsxMoT noX5FdsrEIjq3IahhGVtH8OCr6JecThFi5WOyF8g0YM1BjHyJf1RPA1/I3WMVInr Ck3CaU6IGhpcHS7etmy0aglgAo1uSCwGLFeAJ1YlCfh7uZX0LDa8F1O6kKkDkfjn 1dA7W76thJ6FyQE0UKYKLheJWJ0hGAI6g3cQ1/nxhZUjtyeY5cbN+JFRPFPeN6+8 F34aaTz3SpzGshi98/SMJYSmUrAjKLCsw0j/EqBMsRJEjs9yI1T2lwnMDUA4bRGr G3/UVUqi2X36b7Qh8wSGJBWWY6AHej/8Zt0R0jEcOD9/dn81va2Hv5O0vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO2YqY1iid4n9ipePgT5lkBWvXoSMB8GA1UdIwQY MBaAFAg3yZsqTAYtXCBnj53PMgeu/V54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEt ZjEyMzdmNGM1Y2Y2LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEtZjEyMzdmNGM1Y2Y2 LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs9Mjmbjz yMo6WZ53yfUvuVdiEbvRFsozr+jcu/2Im4Hn0HOEPxIS02sT/JmPhQF4/yz9Hd1u ZFXtvcFqP1Wg/scDCzilVIeFdb9fNtYrGLvZExnmlF+cGaN5ozjHeQAwrYH92ETk IANcgKU4K0cyliM3ZVscNgPJrXFJ4PUQ9vtb7kzPD+b1yKBIWSuX+qWi0qzGind8 1PnlWfUMtqjxdXjXjr1BBv4ZH8MEG9GpbrvS9cv1aboRLRpp68AMyF99adZM/ODB AsGi4rWZI+BrEhE8VSC8b3UcGJ57h2ZzlhRl5lJu8Jy/UkKhwWFzz1AQ3I2VP35f jl0uLEbegtcrMg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:39 2026 by rpki-client