This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft File: DvJQ9m3TDDt1RDCoXVMjbxczG38.mft (raw, json) Hash identifier: T1katzahKE56rmGw+o3/xok5m+dLqM4z5Qr6KYivIQw= Subject key identifier: D3:06:F5:AC:2D:78:21:0D:76:CD:45:44:B0:65:83:68:F8:2A:AF:57 Authority key identifier: 0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F Certificate issuer: /CN=0ef250f66dd30c3b754430a85d53236f17331b7f Certificate serial: 019BF6BF212F43D2C82D6503CF3049D6EE13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft Manifest number: 0487 Signing time: Sun 25 Jan 2026 20:01:19 +0000 Manifest this update: Sun 25 Jan 2026 20:01:19 +0000 Manifest next update: Mon 26 Jan 2026 20:01:19 +0000 Files and hashes: 1: DvJQ9m3TDDt1RDCoXVMjbxczG38.crl (hash: pu5P/0rpG+Pc4kXi+i3sNYhsY/1jlMBLC8aYeuthjUQ=) 2: wUZK58GnfnXrFcL-rJ6SW3dQ9lM.roa (hash: tpiKkysQtleOXY8s7JxmnW98sGuzWNG7qUWUKxa7byA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:21:2f:43:d2:c8:2d:65:03:cf:30:49:d6:ee:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef250f66dd30c3b754430a85d53236f17331b7f Validity Not Before: Jan 25 20:01:19 2026 GMT Not After : Jan 26 20:01:19 2026 GMT Subject: CN=d306f5ac2d78210d76cd4544b0658368f82aaf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4f:0f:0a:39:90:ec:52:29:a4:55:bf:8e:f4: 1b:a4:ad:90:e7:cb:8f:12:d5:7f:78:c9:1f:35:f2: 94:2c:18:26:f4:69:44:c6:d0:7f:89:95:fc:dd:38: 62:71:00:6a:26:7f:a1:2c:36:18:e0:b0:16:24:17: 03:87:ea:ad:14:54:84:71:9a:cf:13:04:06:f9:62: 95:bd:fb:d5:ce:1d:89:5d:7c:7f:46:72:e8:bc:0d: 84:4a:ff:10:18:44:2b:ed:72:12:78:93:47:23:11: f3:02:06:c8:8f:0d:d0:f6:63:36:2d:22:05:12:e3: cc:8f:3d:6f:69:7e:29:f1:d5:2a:b2:a9:f9:f8:50: 5a:9d:bc:50:2f:a6:ed:2c:50:fc:1c:56:cc:83:5a: 9c:b0:68:3d:72:a6:00:78:30:44:ab:ec:60:39:dc: 01:f3:af:97:97:21:0a:41:fc:3f:bd:9b:d8:66:e4: 59:fa:5e:50:64:c8:76:0b:a0:09:e8:b4:0d:79:f4: 0e:47:05:35:dc:56:eb:be:4d:07:8e:52:a9:37:5f: 31:18:44:e2:3a:5a:8c:8a:ac:7a:b7:61:1d:0e:9d: 49:09:f0:d7:2a:6d:f2:9e:1c:b6:b8:c2:bc:a8:9e: 00:16:1f:c2:ae:b5:ae:50:8f:56:8d:21:42:59:bd: 9b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:06:F5:AC:2D:78:21:0D:76:CD:45:44:B0:65:83:68:F8:2A:AF:57 X509v3 Authority Key Identifier: keyid:0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:d5:73:52:c5:62:53:a2:dd:4d:2a:ef:fb:f8:8f:c8:82:d1: a6:48:58:9f:da:9f:97:5f:29:fc:a3:c7:45:02:34:9e:f7:b8: 7e:d7:a1:c4:c3:60:5a:3c:62:43:ff:07:24:c5:b1:23:8b:9f: 4d:14:4f:0f:65:9f:65:2d:46:3a:3c:bc:b1:e3:1e:0c:6f:e6: 44:49:4d:08:e9:d0:6c:0c:5c:61:81:fb:4c:99:66:61:b0:26: 44:0b:13:f8:4e:3b:c4:19:16:0f:08:39:cb:08:a4:41:05:46: 5d:1a:bd:4e:b1:4b:1a:1e:1b:6f:e8:d6:21:0e:c8:66:89:64: 09:fb:c3:a1:35:98:bc:49:36:b2:93:f9:f3:27:94:51:03:d2: 9f:81:1c:d5:0d:af:1f:b5:b6:c6:3d:f8:7d:8c:9d:37:5e:05: ec:fd:99:7b:82:43:6c:f7:6b:8e:7d:c1:4c:df:81:9d:bc:3e: 48:91:75:21:ec:77:f8:cb:37:0d:73:8f:7e:f8:c3:42:e8:8a: 9d:6a:3a:df:6d:44:e8:0b:43:02:51:7f:60:f3:7b:79:29:31: fe:3d:45:9f:08:57:af:bd:7f:ce:a7:9f:a5:d3:2e:55:8e:52: 67:53:02:4e:d7:88:aa:18:72:9f:eb:74:09:dd:15:b4:22:2c: a1:60:4a:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vyEvQ9LILWUDzzBJ1u4TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjI1MGY2NmRkMzBjM2I3NTQ0MzBhODVkNTMyMzZmMTcz MzFiN2YwHhcNMjYwMTI1MjAwMTE5WhcNMjYwMTI2MjAwMTE5WjAzMTEwLwYDVQQD EyhkMzA2ZjVhYzJkNzgyMTBkNzZjZDQ1NDRiMDY1ODM2OGY4MmFhZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU8PCjmQ7FIppFW/jvQbpK2Q58uP EtV/eMkfNfKULBgm9GlExtB/iZX83ThicQBqJn+hLDYY4LAWJBcDh+qtFFSEcZrP EwQG+WKVvfvVzh2JXXx/RnLovA2ESv8QGEQr7XISeJNHIxHzAgbIjw3Q9mM2LSIF EuPMjz1vaX4p8dUqsqn5+FBanbxQL6btLFD8HFbMg1qcsGg9cqYAeDBEq+xgOdwB 86+XlyEKQfw/vZvYZuRZ+l5QZMh2C6AJ6LQNefQORwU13Fbrvk0HjlKpN18xGETi OlqMiqx6t2EdDp1JCfDXKm3ynhy2uMK8qJ4AFh/CrrWuUI9WjSFCWb2bcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMG9awteCENds1FRLBlg2j4Kq9XMB8GA1UdIwQY MBaAFA7yUPZt0ww7dUQwqF1TI28XMxt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85OTlkZDMtODhmNy00MmMyLWFmZjUt ODFkNWFhYzAzNDk2LzEvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85OTlkZDMtODhmNy00MmMyLWFmZjUtODFkNWFhYzAzNDk2 LzEvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAttVzUsVi U6LdTSrv+/iPyILRpkhYn9qfl18p/KPHRQI0nve4ftehxMNgWjxiQ/8HJMWxI4uf TRRPD2WfZS1GOjy8seMeDG/mRElNCOnQbAxcYYH7TJlmYbAmRAsT+E47xBkWDwg5 ywikQQVGXRq9TrFLGh4bb+jWIQ7IZolkCfvDoTWYvEk2spP58yeUUQPSn4Ec1Q2v H7W2xj34fYydN14F7P2Ze4JDbPdrjn3BTN+Bnbw+SJF1Iex3+Ms3DXOPfvjDQuiK nWo6321E6AtDAlF/YPN7eSkx/j1FnwhXr71/zqefpdMuVY5SZ1MCTteIqhhyn+t0 Cd0VtCIsoWBK4A== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:56 2026 by rpki-client