This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft File: 2iTDCzw_6UYGKD_phemmuouP38s.mft (raw, json) Hash identifier: J/mbgNFTWYt1N1jsnucPQXSgLnLkUTqklrwHneCS1bo= Subject key identifier: A9:30:97:9F:75:CE:86:78:E3:B6:D1:5D:50:47:18:71:DD:A3:AE:95 Authority key identifier: DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB Certificate issuer: /CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb Certificate serial: 019BF42BD10805D609E8B728A64FAA174195 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft Manifest number: 09F3 Signing time: Sun 25 Jan 2026 08:01:10 +0000 Manifest this update: Sun 25 Jan 2026 08:01:10 +0000 Manifest next update: Mon 26 Jan 2026 08:01:10 +0000 Files and hashes: 1: 2iTDCzw_6UYGKD_phemmuouP38s.crl (hash: rqmy1zl5pTfusiG9YRGxMwqJ8YhF+t/sVrNfHqIraYg=) 2: Kwvod_z55fwrRW_RYmo9DsA7VRc.roa (hash: CHlhi2uEpeLokyavWdzV+621noAdgR6SEaHKnR6rYN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:d1:08:05:d6:09:e8:b7:28:a6:4f:aa:17:41:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb Validity Not Before: Jan 25 08:01:10 2026 GMT Not After : Jan 26 08:01:10 2026 GMT Subject: CN=a930979f75ce8678e3b6d15d50471871dda3ae95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8d:d9:3d:6b:e2:fc:27:34:8b:9a:a0:44:fa: 65:d0:ce:38:94:70:5f:07:af:1b:bf:0b:83:88:c0: 42:c4:c8:21:a6:3e:ee:60:1e:df:30:38:79:33:d6: 39:61:4b:f9:e1:86:69:fd:82:dd:da:78:74:2a:3d: bf:af:fe:1b:3e:aa:5d:fb:b5:d2:1e:46:7d:3c:25: 1a:5c:3d:40:cf:e2:68:40:7b:a6:a0:2e:ca:e1:3c: 3b:54:46:63:e7:98:ee:51:fc:ce:e0:29:03:f8:cb: ce:40:ad:e5:97:77:35:46:2c:dd:18:2e:0b:b8:f9: fc:71:3d:3d:dc:81:b3:9d:c2:44:41:c5:52:21:35: 56:10:a2:d9:98:d3:56:a5:ee:88:a2:3f:dc:3a:ad: 46:0c:f5:fc:a6:e8:90:85:5e:ae:ab:df:29:18:c0: 03:a8:33:51:e3:70:da:89:4a:5d:09:f2:df:0a:f7: b4:10:c8:70:22:f3:b2:ea:76:c8:5c:b6:3f:2c:1e: 8e:83:b0:30:02:eb:bf:19:7b:4b:f2:6b:90:ce:32: f5:9e:94:6c:2c:21:8a:68:0a:0e:4d:01:a5:41:97: 06:0b:1c:9f:ad:7a:d3:9f:21:53:50:41:3d:d6:69: eb:ba:0b:e8:03:1d:94:f7:d2:bc:0b:78:25:64:ab: ca:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:30:97:9F:75:CE:86:78:E3:B6:D1:5D:50:47:18:71:DD:A3:AE:95 X509v3 Authority Key Identifier: keyid:DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:11:45:75:cf:95:f3:d4:f9:7f:bd:5d:e7:33:84:f2:98:9d: 09:c3:c2:86:f6:de:50:40:ac:b9:b7:e1:a0:44:54:40:ca:44: 01:91:be:b8:b2:74:1b:d6:05:bd:78:fc:21:e6:ca:4e:83:e6: 63:e1:c4:53:1a:f3:78:6f:cd:45:75:28:96:b9:75:21:54:31: df:d6:4f:ef:50:fd:08:24:8b:aa:57:85:93:21:07:9f:b9:03: d7:93:79:6a:1f:47:c7:8b:2c:1d:77:de:c6:d2:49:c0:60:da: 3e:d5:a0:e0:b7:3a:2d:ed:12:6f:c2:70:ad:92:dd:0f:d9:84: 1e:99:6e:74:5c:df:12:8e:62:c8:00:f2:19:4d:88:0f:bc:7a: 78:52:9e:34:21:d2:77:ec:8d:0a:ee:16:3a:fe:91:a9:e8:db: 7a:83:73:29:ad:d7:f3:61:b6:84:fb:b1:9f:86:9e:67:25:32: 06:ff:36:94:9a:cc:b6:6c:19:e1:10:9d:15:01:ee:c5:cd:05: df:62:c5:6b:bf:c6:e7:c8:d3:10:a9:c7:38:81:3f:ac:e6:44: 1d:11:5d:23:bf:0f:74:ad:69:80:9f:c7:9f:47:20:d0:3b:d7: 79:fa:75:d1:70:15:64:eb:c0:2c:68:01:e4:4a:5d:ab:d2:0f: bc:49:d1:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K9EIBdYJ6Lcopk+qF0GVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMjRjMzBiM2MzZmU5NDYwNjI4M2ZlOTg1ZTlhNmJhOGI4 ZmRmY2IwHhcNMjYwMTI1MDgwMTEwWhcNMjYwMTI2MDgwMTEwWjAzMTEwLwYDVQQD EyhhOTMwOTc5Zjc1Y2U4Njc4ZTNiNmQxNWQ1MDQ3MTg3MWRkYTNhZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI3ZPWvi/Cc0i5qgRPpl0M44lHBf B68bvwuDiMBCxMghpj7uYB7fMDh5M9Y5YUv54YZp/YLd2nh0Kj2/r/4bPqpd+7XS HkZ9PCUaXD1Az+JoQHumoC7K4Tw7VEZj55juUfzO4CkD+MvOQK3ll3c1RizdGC4L uPn8cT093IGzncJEQcVSITVWEKLZmNNWpe6Ioj/cOq1GDPX8puiQhV6uq98pGMAD qDNR43DaiUpdCfLfCve0EMhwIvOy6nbIXLY/LB6Og7AwAuu/GXtL8muQzjL1npRs LCGKaAoOTQGlQZcGCxyfrXrTnyFTUEE91mnrugvoAx2U99K8C3glZKvKOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkwl591zoZ447bRXVBHGHHdo66VMB8GA1UdIwQY MBaAFNokwws8P+lGBig/6YXpprqLj9/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81ZWU2ZjktYjAyNS00OGEzLWFkODUt ZjA2YmJmYjg0MDhmLzEvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS81ZWU2ZjktYjAyNS00OGEzLWFkODUtZjA2YmJmYjg0MDhm LzEvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRFFdc+V 89T5f71d5zOE8pidCcPChvbeUECsubfhoERUQMpEAZG+uLJ0G9YFvXj8IebKToPm Y+HEUxrzeG/NRXUolrl1IVQx39ZP71D9CCSLqleFkyEHn7kD15N5ah9Hx4ssHXfe xtJJwGDaPtWg4Lc6Le0Sb8JwrZLdD9mEHpludFzfEo5iyADyGU2ID7x6eFKeNCHS d+yNCu4WOv6RqejbeoNzKa3X82G2hPuxn4aeZyUyBv82lJrMtmwZ4RCdFQHuxc0F 32LFa7/G58jTEKnHOIE/rOZEHRFdI78PdK1pgJ/Hn0cg0DvXefp10XAVZOvALGgB 5Epdq9IPvEnRCw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:25:05 2026 by rpki-client