This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json) Hash identifier: rCf1RPYUW7xPOzmr/9CVCvAsLkHFMvMBIfNZZkI0DFM= Subject key identifier: 68:B8:36:72:7C:BC:0B:4B:55:45:1D:B2:55:69:FF:A5:9E:13:A4:03 Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7 Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7 Certificate serial: 019BF6BE940F2B18DF2D8AA5C55F103B7C8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft Manifest number: 12B2 Signing time: Sun 25 Jan 2026 20:00:43 +0000 Manifest this update: Sun 25 Jan 2026 20:00:43 +0000 Manifest next update: Mon 26 Jan 2026 20:00:43 +0000 Files and hashes: 1: PeJEMtupept21vf-rfjqUX1mldY.roa (hash: L3Vq59CQQkeuB9Tb5q+mJV+IQYi3JZHbF6U8aJ9gFYU=) 2: aD0lsDcoNGKfxZpDG-OdR_bzMnU.roa (hash: bvoZBbd9QoLZ+N5I+xfKDL3PeYR6CygFLOwHX1oAOxI=) 3: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: tHLWrpkWOLyQassvM3FeZR4nykAwu1iEzqs1WbnKYwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:94:0f:2b:18:df:2d:8a:a5:c5:5f:10:3b:7c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7 Validity Not Before: Jan 25 20:00:43 2026 GMT Not After : Jan 26 20:00:43 2026 GMT Subject: CN=68b836727cbc0b4b55451db25569ffa59e13a403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bd:42:c2:aa:71:34:6c:c3:40:ba:28:c9:65: 4b:28:87:8e:45:bd:53:99:0b:c0:45:84:8b:c0:f3: 81:bd:76:a4:73:0c:e2:01:c3:b0:f1:39:91:40:66: 13:5c:04:43:d7:d3:fe:0f:77:db:70:8c:6e:7d:c8: 7f:51:3c:59:92:83:70:d1:6c:27:3f:90:5e:f6:36: 71:c6:68:42:00:03:a0:cf:07:20:71:c4:98:8e:73: c2:25:93:7f:88:ec:e4:e8:90:9c:72:0f:95:a2:6f: 92:b4:40:d5:2e:84:68:f4:bf:d3:dd:33:98:d4:ec: 4e:24:3a:e4:e3:84:ea:cc:a3:fd:5b:34:52:0a:00: 54:45:9f:5f:3d:c7:84:f7:b3:36:6a:62:cc:d3:00: d8:6f:3d:3f:2b:5e:00:e1:b7:ce:83:42:1f:0f:c8: f3:d2:69:4e:1e:9a:86:32:56:aa:d1:9d:63:21:fc: fd:ba:61:37:b6:f7:e6:34:7f:73:5f:43:55:12:a6: 73:17:18:c3:76:23:57:e8:86:fa:29:d4:1a:70:44: ef:49:ce:7a:fb:77:39:52:7c:2e:3e:46:14:0a:68: c5:f4:97:0d:05:60:8e:a4:00:b6:5e:7b:14:08:a7: ef:a4:1d:38:0e:5c:4a:5a:17:48:72:72:01:3c:a5: e6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B8:36:72:7C:BC:0B:4B:55:45:1D:B2:55:69:FF:A5:9E:13:A4:03 X509v3 Authority Key Identifier: keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:24:81:30:15:fc:15:49:45:c8:7d:0a:62:77:d4:55:05:89: a6:b8:50:6b:f2:d9:5e:eb:4b:10:7f:66:2b:59:ce:d3:c4:42: 3f:15:88:b8:90:84:06:85:18:e3:40:4c:18:a3:6e:b5:b6:a2: af:91:33:e8:60:91:db:5f:85:2d:d4:ec:a0:a9:ca:f3:e7:c4: 71:38:df:a8:9b:be:a3:31:ed:a1:50:22:99:73:f1:ea:80:69: af:a9:9f:3a:1d:e6:30:f8:ea:83:41:2b:c2:20:1e:4e:f5:2e: 66:f9:13:22:f1:47:cc:b2:c5:a2:ee:67:62:e2:9d:0d:fe:16: a0:79:67:63:89:92:bc:b0:0f:c6:e4:39:fa:45:1f:f7:bb:ca: 60:8e:23:2f:07:65:10:7e:79:9e:4f:f5:0f:0c:87:e8:0f:f6: f7:57:77:7e:09:6f:e7:aa:0a:88:97:82:2c:54:bc:9f:43:2c: bf:27:48:de:71:63:b8:31:59:27:52:1a:82:71:47:65:ba:37: d2:3d:e5:56:14:41:94:33:d3:71:b8:f5:22:bc:2d:9f:99:b3: b5:e9:52:1f:86:24:d9:78:42:8a:b2:d0:bf:d7:39:a2:9c:3e: eb:50:69:85:82:f3:2c:b2:8f:30:9f:c3:5e:ab:5e:55:3d:b6: 24:f8:83:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vpQPKxjfLYqlxV8QO3yNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2Q4NTBjZDEyYTM2M2RkY2RiMGRjMjczZTFkZmM4NjNi NzA1ZjcwHhcNMjYwMTI1MjAwMDQzWhcNMjYwMTI2MjAwMDQzWjAzMTEwLwYDVQQD Eyg2OGI4MzY3MjdjYmMwYjRiNTU0NTFkYjI1NTY5ZmZhNTllMTNhNDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r1CwqpxNGzDQLooyWVLKIeORb1T mQvARYSLwPOBvXakcwziAcOw8TmRQGYTXARD19P+D3fbcIxufch/UTxZkoNw0Wwn P5Be9jZxxmhCAAOgzwcgccSYjnPCJZN/iOzk6JCccg+Vom+StEDVLoRo9L/T3TOY 1OxOJDrk44TqzKP9WzRSCgBURZ9fPceE97M2amLM0wDYbz0/K14A4bfOg0IfD8jz 0mlOHpqGMlaq0Z1jIfz9umE3tvfmNH9zX0NVEqZzFxjDdiNX6Ib6KdQacETvSc56 +3c5UnwuPkYUCmjF9JcNBWCOpAC2XnsUCKfvpB04DlxKWhdIcnIBPKXmpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGi4NnJ8vAtLVUUdslVp/6WeE6QDMB8GA1UdIwQY MBaAFHQ9hQzRKjY93NsNwnPh38hjtwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzIt MWRhZjgwYzUxOWQwLzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzItMWRhZjgwYzUxOWQw LzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSSBMBX8 FUlFyH0KYnfUVQWJprhQa/LZXutLEH9mK1nO08RCPxWIuJCEBoUY40BMGKNutbai r5Ez6GCR21+FLdTsoKnK8+fEcTjfqJu+ozHtoVAimXPx6oBpr6mfOh3mMPjqg0Er wiAeTvUuZvkTIvFHzLLFou5nYuKdDf4WoHlnY4mSvLAPxuQ5+kUf97vKYI4jLwdl EH55nk/1DwyH6A/291d3fglv56oKiJeCLFS8n0MsvydI3nFjuDFZJ1IagnFHZbo3 0j3lVhRBlDPTcbj1Irwtn5mztelSH4Yk2XhCirLQv9c5opw+61BphYLzLLKPMJ/D XqteVT22JPiDPg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:12:00 2026 by rpki-client