This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft File: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json) Hash identifier: 7xMh/60AGvNJLyqaR2iQgoFioXhhl5lOV2YSBC3dQGc= Subject key identifier: 5B:D3:75:AE:D3:D7:F1:BF:0C:5B:F4:7D:A6:1D:02:BB:BA:5C:8E:1C Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06 Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06 Certificate serial: 019BF50736F293EDA3959EED20A467757F97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft Manifest number: 0B6D Signing time: Sun 25 Jan 2026 12:00:49 +0000 Manifest this update: Sun 25 Jan 2026 12:00:49 +0000 Manifest next update: Mon 26 Jan 2026 12:00:49 +0000 Files and hashes: 1: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: tP54vSvvwWZBMC42KKnd/oKmSpSn4eE0EMPsAEdOxPY=) 2: R9CKdSuhKcix03lDYUZNj_9bSZw.roa (hash: 25D9RZgSbgAoxxPe4MQJY7sqqlRu8rIg+8wl9bKE/EI=) 3: mq48_sBKvAEWvtf8WzXrPhnKlKI.roa (hash: 7dt1YErJg3/qsgZU38eup42hAog0One7x1CvO3l5p0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:36:f2:93:ed:a3:95:9e:ed:20:a4:67:75:7f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06 Validity Not Before: Jan 25 12:00:49 2026 GMT Not After : Jan 26 12:00:49 2026 GMT Subject: CN=5bd375aed3d7f1bf0c5bf47da61d02bbba5c8e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ea:fb:3b:56:38:8c:29:a6:01:ee:7b:7f:7a: e8:58:c4:a6:29:2d:a9:a0:3b:19:f2:78:68:fe:eb: 1b:f3:1f:c0:1b:ec:3d:61:38:5b:38:78:37:f4:d9: ae:8e:3f:74:a9:7c:94:c7:76:b5:ef:07:b1:f5:18: 46:bc:5a:60:41:eb:39:e7:f5:4b:82:39:7d:83:bf: b0:7b:c9:cf:bd:da:3d:35:3f:61:b5:24:1f:11:5c: fb:af:88:59:2f:37:64:36:15:8c:dd:a4:c1:65:db: 43:a2:8d:99:9a:98:74:42:6e:12:c9:df:35:29:73: a4:9c:5b:8e:28:91:7a:d7:14:43:fb:ad:83:fa:4f: ea:a4:a3:c6:d2:cc:3a:f3:28:0b:bf:02:39:fd:6c: e9:7e:8b:15:ec:c0:e1:0c:18:9c:a6:cf:ac:6f:85: 36:de:e0:52:ac:d8:5a:18:ff:56:90:95:b6:99:ff: 95:cd:4b:38:23:9e:30:4f:4b:51:05:97:26:85:c6: b0:17:a3:21:9d:0e:00:f5:db:ee:6a:91:93:96:d0: 69:b4:4e:3b:72:bd:b9:7b:49:27:01:b5:35:19:bc: a7:1f:37:61:c2:99:fd:96:6c:33:4b:c2:21:c0:df: 60:a8:d1:83:67:eb:b2:51:f2:51:d9:ce:d1:0b:0f: 1d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D3:75:AE:D3:D7:F1:BF:0C:5B:F4:7D:A6:1D:02:BB:BA:5C:8E:1C X509v3 Authority Key Identifier: keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:4b:1a:e2:a3:4d:66:44:0f:08:a1:ba:a2:06:a4:27:6d:0d: 71:bf:de:10:c3:51:c7:59:90:cb:2f:90:b1:2b:a0:04:db:11: b6:11:04:d8:0a:b3:cf:c4:8a:5f:26:b1:0f:55:bc:e8:a8:41: 43:f1:82:e9:02:e0:a9:3f:eb:a6:3e:cd:4b:75:cc:19:d6:b1: 92:28:09:63:28:fa:3d:44:79:af:ad:bf:a7:3f:3b:1a:f6:d5: 39:25:50:aa:a7:ec:3e:53:57:c3:a1:6c:c2:04:a2:24:83:52: 61:80:43:2a:18:25:45:a9:eb:83:73:56:c8:df:9c:a9:54:b3: 91:41:36:91:72:63:df:b9:d8:d1:de:f6:fc:73:68:34:e6:fa: 65:70:f2:de:d3:3b:31:7b:6a:af:9b:a3:e4:91:e5:a8:f3:b6: 84:95:b5:0d:bc:21:46:12:1b:f7:3b:62:55:3a:d0:a7:7f:e6: d1:b8:e6:e0:b4:54:ff:9c:b6:0f:b0:bf:70:3b:8d:72:c8:92: b9:d7:0b:d4:16:67:a7:fa:40:8f:c0:de:71:47:df:fe:6d:7e: 7b:17:70:f6:f0:17:8f:6f:c2:41:4d:7c:85:f4:61:cd:81:b7: ac:6d:0f:bb:89:43:01:63:ba:6d:f1:45:49:50:21:df:b2:de: 0f:a2:7e:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Bzbyk+2jlZ7tIKRndX+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMDVjYTExMWMwMDkzYjU2NTE0MjE1YmU0NjdiNTE1ZGRh NTZjMDYwHhcNMjYwMTI1MTIwMDQ5WhcNMjYwMTI2MTIwMDQ5WjAzMTEwLwYDVQQD Eyg1YmQzNzVhZWQzZDdmMWJmMGM1YmY0N2RhNjFkMDJiYmJhNWM4ZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6er7O1Y4jCmmAe57f3roWMSmKS2p oDsZ8nho/usb8x/AG+w9YThbOHg39Nmujj90qXyUx3a17wex9RhGvFpgQes55/VL gjl9g7+we8nPvdo9NT9htSQfEVz7r4hZLzdkNhWM3aTBZdtDoo2Zmph0Qm4Syd81 KXOknFuOKJF61xRD+62D+k/qpKPG0sw68ygLvwI5/WzpfosV7MDhDBicps+sb4U2 3uBSrNhaGP9WkJW2mf+VzUs4I54wT0tRBZcmhcawF6MhnQ4A9dvuapGTltBptE47 cr25e0knAbU1GbynHzdhwpn9lmwzS8IhwN9gqNGDZ+uyUfJR2c7RCw8dmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvTda7T1/G/DFv0faYdAru6XI4cMB8GA1UdIwQY MBaAFAwFyhEcAJO1ZRQhW+RntRXdpWwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQt NmEzNjcwNWJiYTZmLzEvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQtNmEzNjcwNWJiYTZm LzEvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUsa4qNN ZkQPCKG6ogakJ20Ncb/eEMNRx1mQyy+QsSugBNsRthEE2Aqzz8SKXyaxD1W86KhB Q/GC6QLgqT/rpj7NS3XMGdaxkigJYyj6PUR5r62/pz87GvbVOSVQqqfsPlNXw6Fs wgSiJINSYYBDKhglRanrg3NWyN+cqVSzkUE2kXJj37nY0d72/HNoNOb6ZXDy3tM7 MXtqr5uj5JHlqPO2hJW1DbwhRhIb9ztiVTrQp3/m0bjm4LRU/5y2D7C/cDuNcsiS udcL1BZnp/pAj8DecUff/m1+exdw9vAXj2/CQU18hfRhzYG3rG0Pu4lDAWO6bfFF SVAh37LeD6J+Vg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:14:11 2026 by rpki-client