This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft File: DY087TLjYPzUbBY1Vt4oqigksZs.mft (raw, json) Hash identifier: 6sK3bhVUf8bwBe3hqDd7rtL/dDpsG5ipbsiOPzPyCa0= Subject key identifier: 8F:74:DB:8E:65:D4:F2:BF:43:D6:20:F0:58:98:76:C6:EE:87:B6:CA Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B Certificate issuer: /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b Certificate serial: 019BF507101ECC7612F240B6A8ADF3D1FE76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft Manifest number: 02C0 Signing time: Sun 25 Jan 2026 12:00:39 +0000 Manifest this update: Sun 25 Jan 2026 12:00:39 +0000 Manifest next update: Mon 26 Jan 2026 12:00:39 +0000 Files and hashes: 1: DY087TLjYPzUbBY1Vt4oqigksZs.crl (hash: LE58f/PM4a8hmSdvI/RkubhwhLkwvQEaYh8OJOI9nOE=) 2: fW8Rb2ydTpsUsTrGa2SivBYDQlA.roa (hash: R0r5msaJunREx2IGezURTBwCC6OaeIbwcDABeHEl6S4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:10:1e:cc:76:12:f2:40:b6:a8:ad:f3:d1:fe:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b Validity Not Before: Jan 25 12:00:39 2026 GMT Not After : Jan 26 12:00:39 2026 GMT Subject: CN=8f74db8e65d4f2bf43d620f0589876c6ee87b6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b9:74:6d:61:3b:15:7b:3c:cb:58:97:92:86: 14:7b:ee:00:f1:31:ee:09:09:86:4a:98:aa:94:43: ca:34:6f:30:35:69:0b:ea:a9:4b:30:88:00:3b:9f: cb:0b:0d:cb:ce:c5:31:e3:bd:7e:a8:ad:d1:c0:98: a1:2e:e0:fd:25:94:09:79:b3:d6:ac:03:3c:05:93: b9:54:c2:01:7c:09:ff:8a:a5:a7:26:c7:40:e9:b2: 6d:60:2a:f2:a8:59:ff:d4:91:71:5a:45:02:5c:4b: 51:a8:60:2f:84:53:be:ff:1e:f7:7d:77:9e:57:1d: 15:85:22:41:70:4e:81:77:a7:f2:46:50:a3:c3:e3: 55:6e:18:38:68:4d:05:da:27:9a:e9:b9:d8:69:3c: c2:d4:a5:35:52:ba:d2:ea:db:1a:da:3e:e7:1d:28: f2:7c:8e:79:00:ef:0c:c6:29:88:6a:71:f8:9a:9a: 25:11:23:20:87:79:61:62:0e:e0:d1:62:53:27:a7: ec:a2:0a:88:f1:3f:d4:35:35:97:28:54:10:67:93: c3:83:6c:77:bb:c1:3f:ff:f2:14:50:6b:63:47:25: ad:d9:ea:35:5f:d6:bd:16:42:0e:1b:39:94:73:f1: fa:32:e8:1b:e8:77:3b:c5:80:61:bf:3a:dd:30:8f: db:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:74:DB:8E:65:D4:F2:BF:43:D6:20:F0:58:98:76:C6:EE:87:B6:CA X509v3 Authority Key Identifier: keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4c:22:64:1e:b4:ec:c7:a7:2a:7a:81:c2:da:7e:72:3f:7d: 6d:13:41:e5:81:d3:1a:0c:64:a7:7a:a2:d6:51:aa:c4:2e:24: 5b:c1:d3:52:af:52:f0:8f:93:71:d0:ec:24:d5:82:86:0e:84: b3:ab:69:71:cb:82:7a:37:c0:66:55:17:41:1e:cc:80:d4:23: ea:5d:eb:8e:c8:56:b3:14:34:ae:e3:4a:7c:5d:55:63:63:5b: 91:88:d4:a6:ce:32:7c:d2:fd:3d:d8:ec:70:5a:4c:72:c6:fb: de:71:f9:c3:69:e8:0d:ff:21:0f:a0:5a:94:d6:8d:6d:07:40: 62:eb:69:cf:5b:b1:55:c3:2c:80:d0:55:0e:ff:ff:e6:ed:a9: 35:5c:9c:ce:9a:91:0f:1f:d3:9e:aa:55:02:37:7d:c7:1d:fc: e0:ef:59:c5:5f:36:3e:03:a9:f2:b2:64:47:25:66:46:d9:04: 10:fc:a2:c9:b5:df:f7:a4:fa:b1:de:e1:df:68:e2:69:b0:c8: 77:99:8a:8b:2b:9f:4d:c6:af:f1:1c:f8:bd:b9:99:78:9a:a3: d1:d2:48:9e:15:b6:62:7c:34:66:a1:5e:4f:9d:8d:3c:51:d4: b0:f8:40:6a:5a:1b:cc:de:4e:f7:78:90:b5:c8:3f:41:33:b3: ed:da:01:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BxAezHYS8kC2qK3z0f52MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkOGQzY2VkMzJlMzYwZmNkNDZjMTYzNTU2ZGUyOGFhMjgy NGIxOWIwHhcNMjYwMTI1MTIwMDM5WhcNMjYwMTI2MTIwMDM5WjAzMTEwLwYDVQQD Eyg4Zjc0ZGI4ZTY1ZDRmMmJmNDNkNjIwZjA1ODk4NzZjNmVlODdiNmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbl0bWE7FXs8y1iXkoYUe+4A8THu CQmGSpiqlEPKNG8wNWkL6qlLMIgAO5/LCw3LzsUx471+qK3RwJihLuD9JZQJebPW rAM8BZO5VMIBfAn/iqWnJsdA6bJtYCryqFn/1JFxWkUCXEtRqGAvhFO+/x73fXee Vx0VhSJBcE6Bd6fyRlCjw+NVbhg4aE0F2iea6bnYaTzC1KU1UrrS6tsa2j7nHSjy fI55AO8MximIanH4mpolESMgh3lhYg7g0WJTJ6fsogqI8T/UNTWXKFQQZ5PDg2x3 u8E///IUUGtjRyWt2eo1X9a9FkIOGzmUc/H6Mugb6Hc7xYBhvzrdMI/bXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI90245l1PK/Q9Yg8FiYdsbuh7bKMB8GA1UdIwQY MBaAFA2NPO0y42D81GwWNVbeKKooJLGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFkwODdUTGpZUHpVYkJZMVZ0NG9xaWdrc1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jYjZmN2UtZTNiOC00ZDBjLTgyOTMt YTQ5N2I4Y2JmMTc3LzEvRFkwODdUTGpZUHpVYkJZMVZ0NG9xaWdrc1pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9jYjZmN2UtZTNiOC00ZDBjLTgyOTMtYTQ5N2I4Y2JmMTc3 LzEvRFkwODdUTGpZUHpVYkJZMVZ0NG9xaWdrc1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0wiZB60 7MenKnqBwtp+cj99bRNB5YHTGgxkp3qi1lGqxC4kW8HTUq9S8I+TcdDsJNWChg6E s6tpccuCejfAZlUXQR7MgNQj6l3rjshWsxQ0ruNKfF1VY2NbkYjUps4yfNL9Pdjs cFpMcsb73nH5w2noDf8hD6BalNaNbQdAYutpz1uxVcMsgNBVDv//5u2pNVyczpqR Dx/TnqpVAjd9xx384O9ZxV82PgOp8rJkRyVmRtkEEPyiybXf96T6sd7h32jiabDI d5mKiyufTcav8Rz4vbmZeJqj0dJInhW2Ynw0ZqFeT52NPFHUsPhAalobzN5O93iQ tcg/QTOz7doBCg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:53 2026 by rpki-client