This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft File: DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft (raw, json) Hash identifier: uUQtrSapzwZes7/QYhJvrPfuAKujMlFg6HXZ5gLXjPo= Subject key identifier: 0B:7D:78:F6:13:D9:3E:56:A9:94:A1:FF:55:E1:1F:72:15:8B:A1:D5 Authority key identifier: 0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05 Certificate issuer: /CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605 Certificate serial: 019BF808736DD983F8EE6F18600B6E54A65C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 02:01:01 +0000 Manifest this update: Mon 26 Jan 2026 02:01:01 +0000 Manifest next update: Tue 27 Jan 2026 02:01:01 +0000 Files and hashes: 1: DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl (hash: M8o7gJpr+8m2M1ocy0Ug6ed3u66Paw3kx4xxefMRP0Q=) 2: Eo2yGv92Iskz5EbG0NmCt1URmKk.roa (hash: fxnebqPHQp7jptxrhNUpFE2k+KgOhPZJRXJqh9LjE7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:73:6d:d9:83:f8:ee:6f:18:60:0b:6e:54:a6:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605 Validity Not Before: Jan 26 02:01:01 2026 GMT Not After : Jan 27 02:01:01 2026 GMT Subject: CN=0b7d78f613d93e56a994a1ff55e11f72158ba1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0c:0e:20:13:65:5f:17:6f:10:6b:91:52:90: 27:8d:72:ee:70:a3:10:15:aa:5c:4f:82:78:51:aa: c8:83:cd:b2:28:23:f0:8f:10:47:62:b1:f3:9c:0e: e2:5a:4d:ec:f5:d0:91:1d:8b:ba:06:7d:38:36:9d: bd:21:13:41:e2:56:75:e3:dd:90:77:e5:d6:cc:eb: 64:57:bb:0f:07:06:ed:a2:48:bc:29:4e:84:c0:b7: ae:5f:03:af:35:f4:e9:71:f5:e3:34:c9:1a:67:30: 80:81:92:a5:08:ca:08:6c:73:7b:b0:40:0d:1a:df: 77:9b:7b:c6:c9:3d:3e:f2:dd:b0:3e:fc:0a:0d:82: 9a:5f:bb:bf:b8:9e:5a:6d:94:df:b8:0c:cf:a5:22: 20:93:11:5f:b1:3b:a4:02:49:ef:41:cd:67:19:67: 06:a2:7c:4c:b6:27:2e:9b:12:a7:26:84:2f:0a:8d: 1c:59:ff:51:01:34:7b:5a:95:ea:cb:e2:93:17:6f: 7a:f3:38:f7:73:68:ec:b3:07:ce:e6:da:24:89:0e: a3:f5:37:5f:d7:4f:74:35:05:ab:3e:24:fb:0b:66: ee:46:81:84:11:9d:80:7b:4e:f3:ca:f9:46:c2:36: e1:31:ab:3a:33:65:b7:93:09:93:1d:a3:03:72:4e: 19:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7D:78:F6:13:D9:3E:56:A9:94:A1:FF:55:E1:1F:72:15:8B:A1:D5 X509v3 Authority Key Identifier: keyid:0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:28:bf:7d:f4:1b:ae:81:b5:21:07:60:ab:45:0a:09:a1:82: aa:82:d7:bd:38:9b:1a:ff:b1:30:d2:17:cf:fa:65:2f:9f:f5: 80:3c:fb:43:41:ab:c3:c9:f4:42:8a:df:1d:d0:72:fd:76:d5: 3e:db:98:0a:01:43:ee:d1:a6:87:96:81:c6:ae:e6:1a:17:97: 1c:3e:3a:37:b8:f4:0f:54:2b:92:b3:18:a0:9b:ad:0e:fd:59: 19:b7:23:a7:3e:10:3e:6d:61:30:6e:ae:b2:4a:df:22:14:d9: 03:21:a8:cf:1e:c1:43:98:d8:82:3a:72:7f:2c:9d:91:de:54: 98:ef:94:25:be:36:64:a4:5d:d0:90:31:f2:32:04:60:6b:8a: 20:47:86:01:2a:f1:f9:98:77:e0:7b:50:82:2c:6a:74:79:0b: d0:0d:3a:3c:be:20:da:b8:a6:fd:e4:85:86:02:41:62:23:55: 92:73:de:12:9c:50:b7:46:1c:cb:83:38:55:d6:fe:76:93:2c: 3e:db:03:a7:60:32:e2:c3:b7:a5:b4:dd:19:46:bb:6c:7b:dd: d5:3c:e9:b5:73:e0:1c:d5:62:55:3e:09:e8:66:c5:16:d7:43: 7c:d2:28:66:3f:3f:ee:51:04:54:84:5d:fe:ed:71:27:6e:96: e2:d4:3d:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CHNt2YP47m8YYAtuVKZcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYjUxMGQ3YzkxNWE0YmU2ZGY2YjE2ZmY1ODJmZDJkNmFk MjM2MDUwHhcNMjYwMTI2MDIwMTAxWhcNMjYwMTI3MDIwMTAxWjAzMTEwLwYDVQQD EygwYjdkNzhmNjEzZDkzZTU2YTk5NGExZmY1NWUxMWY3MjE1OGJhMWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQwOIBNlXxdvEGuRUpAnjXLucKMQ FapcT4J4UarIg82yKCPwjxBHYrHznA7iWk3s9dCRHYu6Bn04Np29IRNB4lZ1492Q d+XWzOtkV7sPBwbtoki8KU6EwLeuXwOvNfTpcfXjNMkaZzCAgZKlCMoIbHN7sEAN Gt93m3vGyT0+8t2wPvwKDYKaX7u/uJ5abZTfuAzPpSIgkxFfsTukAknvQc1nGWcG onxMticumxKnJoQvCo0cWf9RATR7WpXqy+KTF2968zj3c2jsswfO5tokiQ6j9Tdf 1090NQWrPiT7C2buRoGEEZ2Ae07zyvlGwjbhMas6M2W3kwmTHaMDck4ZnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAt9ePYT2T5WqZSh/1XhH3IVi6HVMB8GA1UdIwQY MBaAFA61ENfJFaS+bfaxb/WC/S1q0jYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85NmJlM2QtZDdkMi00NzUzLWE3ODMt ZDYzOGEzYmU4OGNhLzEvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi85NmJlM2QtZDdkMi00NzUzLWE3ODMtZDYzOGEzYmU4OGNh LzEvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSi/ffQb roG1IQdgq0UKCaGCqoLXvTibGv+xMNIXz/plL5/1gDz7Q0Grw8n0QorfHdBy/XbV PtuYCgFD7tGmh5aBxq7mGheXHD46N7j0D1QrkrMYoJutDv1ZGbcjpz4QPm1hMG6u skrfIhTZAyGozx7BQ5jYgjpyfyydkd5UmO+UJb42ZKRd0JAx8jIEYGuKIEeGASrx +Zh34HtQgixqdHkL0A06PL4g2rim/eSFhgJBYiNVknPeEpxQt0Ycy4M4Vdb+dpMs PtsDp2Ay4sO3pbTdGUa7bHvd1TzptXPgHNViVT4J6GbFFtdDfNIoZj8/7lEEVIRd /u1xJ26W4tQ93w== -----END CERTIFICATE-----Generated at Mon Jan 26 10:57:36 2026 by rpki-client