This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft File: DwJfo1fCCrvxGEJiNGWOYtfccHY.mft (raw, json) Hash identifier: 7zGXDJuyW8W1y/fl0q3G5rNb/nWgMcf8ED+ffg3wSfo= Subject key identifier: DD:66:B0:8D:2A:5A:4E:56:B9:4B:02:AD:A6:E8:9A:F7:FA:07:82:D7 Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76 Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076 Certificate serial: 019BF79A5E57C3EB8156EB63D13E70B74664 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft Manifest number: 056C Signing time: Mon 26 Jan 2026 00:00:47 +0000 Manifest this update: Mon 26 Jan 2026 00:00:47 +0000 Manifest next update: Tue 27 Jan 2026 00:00:47 +0000 Files and hashes: 1: DwJfo1fCCrvxGEJiNGWOYtfccHY.crl (hash: GXr2P+ol9aq3eosLpmnqxPIMmlN/od4SXfbq3C6BRBY=) 2: elu1abDHd3RfzpApGEKnDnwdAcI.roa (hash: HHOSPK0nfYS+xwtq8H1DXb/qJlWmVpm7P0B6dxlEAcU=) 3: ygV7k6nVaZCAnScNFHt4paZc8MM.roa (hash: Fv0BlTXpeeDK0QHZ/q3zQcl9lKT33vm1AnUd5vQrW08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:5e:57:c3:eb:81:56:eb:63:d1:3e:70:b7:46:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076 Validity Not Before: Jan 26 00:00:47 2026 GMT Not After : Jan 27 00:00:47 2026 GMT Subject: CN=dd66b08d2a5a4e56b94b02ada6e89af7fa0782d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b3:89:04:1d:9f:33:0a:b5:22:d3:d8:cd:f6: c2:b2:e6:7b:08:7d:dc:37:ed:db:b7:88:73:d7:52: 75:d7:c8:51:79:0d:2b:aa:40:59:e4:94:d5:e2:93: 19:2e:5e:66:09:04:f5:a0:d3:ed:fb:1e:ea:ac:9b: 5e:91:e6:b5:53:75:c2:c6:f1:a3:a6:6e:2b:80:76: 9b:b9:15:fa:82:3f:7b:a3:12:57:ca:af:44:10:0f: 4f:35:73:4d:50:ca:82:a6:09:9a:d0:c3:25:e8:5f: e8:12:ab:b0:77:a8:bf:ad:2d:5f:a9:73:d2:2b:e1: 21:e5:90:bd:33:c5:f7:fe:fb:23:7a:9f:08:3b:47: 14:f1:aa:4b:3d:9d:81:35:1b:4f:c4:d3:18:fd:7e: 2a:02:ed:55:6b:94:9d:1d:73:d9:a2:77:d7:6f:4d: dd:c2:2a:57:dd:d8:9e:92:af:7f:e7:62:e9:81:68: a8:db:1b:93:03:91:06:ec:c5:3f:0b:72:d2:5e:0c: 28:4a:34:05:78:29:59:3c:50:3a:a5:bb:de:c5:41: 42:f3:87:99:3d:81:48:b0:12:97:15:d5:bd:a4:b7: cd:09:df:18:07:03:0c:31:c0:4e:64:21:ba:b5:c2: 77:2a:0e:7e:e7:fc:df:36:db:10:7f:5d:aa:30:f9: 87:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:66:B0:8D:2A:5A:4E:56:B9:4B:02:AD:A6:E8:9A:F7:FA:07:82:D7 X509v3 Authority Key Identifier: keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:0e:fc:c5:80:ab:61:7c:d2:72:72:7e:ef:0f:68:5b:d0:42: 68:94:25:3b:8a:80:46:2c:a8:d3:fd:b9:6b:0a:7a:e0:20:7c: f3:a7:5e:66:ef:50:1a:7d:37:8a:29:f8:4b:0a:23:3d:4a:3b: 78:d2:d7:2b:8e:43:2f:51:7a:0d:ee:b9:a3:64:a1:e6:1e:fa: c7:b2:b7:6b:ba:f7:87:22:d1:83:13:7c:b9:2c:a7:65:aa:5f: 77:d1:dc:04:55:0a:03:59:4e:f9:30:dd:85:ff:e9:e8:f8:ad: 7e:25:ee:65:fa:13:d3:49:3d:30:5d:ca:fc:cc:99:0e:70:7a: b1:90:10:f3:6b:85:06:08:5c:0c:02:8f:db:c6:82:83:a9:66: e5:26:59:84:8a:15:64:98:33:51:5a:75:fa:fa:2a:8f:57:42: b5:26:b9:19:bf:c3:e7:da:23:4b:63:c2:5d:37:28:3a:cc:2e: f0:d2:1d:77:89:65:78:b1:5b:57:6e:a3:ea:9f:65:8e:b5:fc: 9d:2a:71:fa:9d:60:75:69:a3:93:9f:b1:f7:d2:b3:59:a9:e0: 24:62:d6:a9:e6:f0:aa:81:ed:d8:56:00:21:f2:f6:31:66:82: 5d:e9:3f:38:9c:b4:05:8b:d3:c4:c9:97:e7:1c:cb:a1:34:14: b4:9e:01:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3ml5Xw+uBVutj0T5wt0ZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMDI1ZmEzNTdjMjBhYmJmMTE4NDI2MjM0NjU4ZTYyZDdk YzcwNzYwHhcNMjYwMTI2MDAwMDQ3WhcNMjYwMTI3MDAwMDQ3WjAzMTEwLwYDVQQD EyhkZDY2YjA4ZDJhNWE0ZTU2Yjk0YjAyYWRhNmU4OWFmN2ZhMDc4MmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbOJBB2fMwq1ItPYzfbCsuZ7CH3c N+3bt4hz11J118hReQ0rqkBZ5JTV4pMZLl5mCQT1oNPt+x7qrJtekea1U3XCxvGj pm4rgHabuRX6gj97oxJXyq9EEA9PNXNNUMqCpgma0MMl6F/oEquwd6i/rS1fqXPS K+Eh5ZC9M8X3/vsjep8IO0cU8apLPZ2BNRtPxNMY/X4qAu1Va5SdHXPZonfXb03d wipX3diekq9/52LpgWio2xuTA5EG7MU/C3LSXgwoSjQFeClZPFA6pbvexUFC84eZ PYFIsBKXFdW9pLfNCd8YBwMMMcBOZCG6tcJ3Kg5+5/zfNtsQf12qMPmH/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1msI0qWk5WuUsCrabomvf6B4LXMB8GA1UdIwQY MBaAFA8CX6NXwgq78RhCYjRljmLX3HB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xMTRhMTAtOGVmNy00OTAzLTk2M2Ut ZDRkNTlhMDk1YzdmLzEvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xMTRhMTAtOGVmNy00OTAzLTk2M2UtZDRkNTlhMDk1Yzdm LzEvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQ78xYCr YXzScnJ+7w9oW9BCaJQlO4qARiyo0/25awp64CB886deZu9QGn03iin4SwojPUo7 eNLXK45DL1F6De65o2Sh5h76x7K3a7r3hyLRgxN8uSynZapfd9HcBFUKA1lO+TDd hf/p6PitfiXuZfoT00k9MF3K/MyZDnB6sZAQ82uFBghcDAKP28aCg6lm5SZZhIoV ZJgzUVp1+voqj1dCtSa5Gb/D59ojS2PCXTcoOswu8NIdd4lleLFbV26j6p9ljrX8 nSpx+p1gdWmjk5+x99KzWangJGLWqebwqoHt2FYAIfL2MWaCXek/OJy0BYvTxMmX 5xzLoTQUtJ4B0A== -----END CERTIFICATE-----Generated at Mon Jan 26 08:02:23 2026 by rpki-client