This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft File: dRWCm38DQRu-IbGiAEmM7r9cBsA.mft (raw, json) Hash identifier: q3NdEfMmYzq99a9/E0WjBa9+X4kZiYxlMRebjctPcvI= Subject key identifier: AD:1A:AE:74:76:6F:04:60:E3:9B:46:4B:81:33:BF:0E:79:4D:4E:0D Authority key identifier: 75:15:82:9B:7F:03:41:1B:BE:21:B1:A2:00:49:8C:EE:BF:5C:06:C0 Certificate issuer: /CN=7515829b7f03411bbe21b1a200498ceebf5c06c0 Certificate serial: 019BF574D0B24D10EE0C412219A9D8868FCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft Manifest number: 60 Signing time: Sun 25 Jan 2026 14:00:32 +0000 Manifest this update: Sun 25 Jan 2026 14:00:32 +0000 Manifest next update: Mon 26 Jan 2026 14:00:32 +0000 Files and hashes: 1: dRWCm38DQRu-IbGiAEmM7r9cBsA.crl (hash: ubC38QASqyBL8LiyCTLrwCMTE6ZgJ+ZFd5dzKd3C6pA=) 2: xtgzbsY4RQgAHqGjGSJ0iMYk8Y4.roa (hash: z72ZDa/NMuWUT8gblQL7edLWi92ZNQzGqAeFXRe+TZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:d0:b2:4d:10:ee:0c:41:22:19:a9:d8:86:8f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7515829b7f03411bbe21b1a200498ceebf5c06c0 Validity Not Before: Jan 25 14:00:32 2026 GMT Not After : Jan 26 14:00:32 2026 GMT Subject: CN=ad1aae74766f0460e39b464b8133bf0e794d4e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:72:57:9d:09:cf:5a:17:93:79:a6:5b:f4:7a: 91:38:dc:65:a4:0d:09:c1:c1:1e:25:e5:d2:4c:b0: 7a:eb:96:60:79:56:6f:ed:ee:d2:17:84:42:72:a3: ae:dc:69:a7:3c:0a:27:e2:d5:4c:a6:b5:e8:5e:fc: 58:ed:b6:70:7e:85:75:d7:88:46:0d:ce:24:53:d7: 67:a5:71:7a:a4:32:ac:c7:9f:78:65:21:14:67:7a: 0b:94:4d:3b:58:09:f2:68:16:d2:cb:ab:8d:7c:f8: a9:04:72:eb:75:70:79:55:f8:e5:2d:fa:e0:f0:eb: d7:0e:4f:6e:87:fb:93:30:d4:b8:35:bb:56:f1:db: 32:08:ee:af:ba:73:75:e2:37:be:cf:63:81:4a:c9: f7:87:b1:40:22:28:a8:70:30:b5:29:c8:2f:4c:26: 9d:27:c4:67:98:48:c9:e5:3d:4f:f7:a1:71:92:dc: 1a:80:87:50:6e:7d:ee:99:92:51:dd:3d:cd:b2:62: 3a:36:34:f6:0c:57:bd:2e:c7:13:3d:23:76:12:e8: 76:26:79:8e:28:18:7b:9f:6d:c0:40:af:25:df:e0: 18:57:b4:65:3f:fc:11:7f:3e:ba:41:1e:f7:4a:d7: 80:d1:6a:ae:7d:e8:c3:af:b8:70:ac:33:49:76:b1: c7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1A:AE:74:76:6F:04:60:E3:9B:46:4B:81:33:BF:0E:79:4D:4E:0D X509v3 Authority Key Identifier: keyid:75:15:82:9B:7F:03:41:1B:BE:21:B1:A2:00:49:8C:EE:BF:5C:06:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:89:36:0e:27:55:66:2a:06:68:51:05:ff:99:5e:d2:20:1d: 61:f1:82:88:04:99:e3:47:f8:cf:2e:9a:b6:e6:94:4c:56:7a: 2d:22:f1:bf:cb:0f:81:bd:38:9f:64:c8:63:60:86:d7:2d:35: 83:ea:b3:bd:72:7b:6a:97:5e:0a:d0:d8:db:91:56:be:f4:f3: ef:63:f6:06:6d:94:84:56:49:ce:b1:c9:bc:48:aa:b0:bb:64: 65:42:73:f8:36:73:2e:29:bf:26:ef:3a:71:96:dc:f1:f4:fe: 5a:3d:1b:b8:82:e7:a8:64:4c:d7:fd:eb:5d:5d:60:16:38:9a: ce:f3:32:0c:60:fd:48:dc:1f:88:2a:11:c2:b3:06:32:2c:c3: 06:a6:77:62:d4:61:8e:88:b3:88:b4:5c:7e:40:7f:e1:0a:7a: 92:d7:28:10:87:52:a9:d4:46:0b:a3:2d:72:b5:02:29:a4:2a: aa:cc:25:2c:36:c8:15:1e:b5:5a:17:4c:ea:51:15:e9:ed:89: 80:2e:f9:74:8a:0b:07:7d:32:5a:7f:d3:05:cf:41:bd:56:1b: 3a:38:09:da:39:84:75:e7:2c:19:28:b2:d3:9f:50:ed:ff:65: ca:84:19:76:35:21:4c:b2:c9:c4:3e:10:4a:b1:11:ca:ea:35: 7d:fd:05:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dNCyTRDuDEEiGanYho/OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MTU4MjliN2YwMzQxMWJiZTIxYjFhMjAwNDk4Y2VlYmY1 YzA2YzAwHhcNMjYwMTI1MTQwMDMyWhcNMjYwMTI2MTQwMDMyWjAzMTEwLwYDVQQD EyhhZDFhYWU3NDc2NmYwNDYwZTM5YjQ2NGI4MTMzYmYwZTc5NGQ0ZTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXJXnQnPWheTeaZb9HqRONxlpA0J wcEeJeXSTLB665ZgeVZv7e7SF4RCcqOu3GmnPAon4tVMprXoXvxY7bZwfoV114hG Dc4kU9dnpXF6pDKsx594ZSEUZ3oLlE07WAnyaBbSy6uNfPipBHLrdXB5VfjlLfrg 8OvXDk9uh/uTMNS4NbtW8dsyCO6vunN14je+z2OBSsn3h7FAIiiocDC1KcgvTCad J8RnmEjJ5T1P96FxktwagIdQbn3umZJR3T3NsmI6NjT2DFe9LscTPSN2Euh2JnmO KBh7n23AQK8l3+AYV7RlP/wRfz66QR73SteA0WqufejDr7hwrDNJdrHH6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0arnR2bwRg45tGS4Ezvw55TU4NMB8GA1UdIwQY MBaAFHUVgpt/A0EbviGxogBJjO6/XAbAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFJXQ20zOERRUnUtSWJHaUFFbU03cjljQnNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zZjdjZGEtMTA2Mi00YjdjLWFmZDkt OWQwZGZkMzhkOTQ5LzEvZFJXQ20zOERRUnUtSWJHaUFFbU03cjljQnNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zZjdjZGEtMTA2Mi00YjdjLWFmZDktOWQwZGZkMzhkOTQ5 LzEvZFJXQ20zOERRUnUtSWJHaUFFbU03cjljQnNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcok2DidV ZioGaFEF/5le0iAdYfGCiASZ40f4zy6atuaUTFZ6LSLxv8sPgb04n2TIY2CG1y01 g+qzvXJ7apdeCtDY25FWvvTz72P2Bm2UhFZJzrHJvEiqsLtkZUJz+DZzLim/Ju86 cZbc8fT+Wj0buILnqGRM1/3rXV1gFjiazvMyDGD9SNwfiCoRwrMGMizDBqZ3YtRh joiziLRcfkB/4Qp6ktcoEIdSqdRGC6MtcrUCKaQqqswlLDbIFR61WhdM6lEV6e2J gC75dIoLB30yWn/TBc9BvVYbOjgJ2jmEdecsGSiy059Q7f9lyoQZdjUhTLLJxD4Q SrERyuo1ff0FxA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:06:32 2026 by rpki-client