This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft File: Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft (raw, json) Hash identifier: 2EV70FFEFNAHKKfUcDcs6tECzwSayBqKC6ZFszNDP0E= Subject key identifier: 41:8B:11:31:67:A2:C9:5D:C8:63:B5:DC:B8:2F:EC:1E:8A:EA:C2:5D Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42 Certificate issuer: /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042 Certificate serial: 019BF31913C77EE52B0E75D52C8673C0D648 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft Manifest number: 17EE Signing time: Sun 25 Jan 2026 03:01:05 +0000 Manifest this update: Sun 25 Jan 2026 03:01:05 +0000 Manifest next update: Mon 26 Jan 2026 03:01:05 +0000 Files and hashes: 1: Bzo_d6zW3tj-cs4yT8d3sKOXlfg.roa (hash: sB4IjXQ2q1JliT65t5pMashaLGv9OdpiFjT65GllIOg=) 2: Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl (hash: IliTcP2aOmcXZmT9+MdOCk63ETQttbtAHk6S+n0nPN4=) 3: E3W4jp5zsoikKWLmA1V7bWlcpV4.roa (hash: YJ9yEvPcrd1MOHEooUf+VZebkz+BFG/oUSCxEMHiKbk=) 4: aUScLYE7hWlZLrttrbL09JUvQA0.roa (hash: x+eRx80jxSLOtFgW7pQIqcwn52mE8qpARjfDhLVRoV4=) 5: i72bIypIf2CpFKoEg8C1pt-mNRo.roa (hash: IFGCEB1czLr3SQqiMmwkpKpmacuW/s1RIwvjueqrec8=) 6: syHsa3UwI7A4E1vFkZMbu6fpkLc.roa (hash: KLgolmeV6tSpGZyB1XkLi7+L/oDApU24VOgy7S5H3dg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:19:13:c7:7e:e5:2b:0e:75:d5:2c:86:73:c0:d6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042 Validity Not Before: Jan 25 03:01:05 2026 GMT Not After : Jan 26 03:01:05 2026 GMT Subject: CN=418b113167a2c95dc863b5dcb82fec1e8aeac25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:01:6c:f9:40:83:d1:e7:c4:cb:53:b1:f5: eb:08:0f:6c:21:f2:41:ca:09:fe:88:85:8a:b1:44: cf:51:11:0c:3b:b5:b3:27:8f:7a:4e:14:4f:7f:53: 45:e5:89:be:d3:11:a5:c2:fe:df:88:fc:4e:db:aa: 6a:eb:66:2a:b5:ab:82:2d:35:1d:b8:e8:bb:64:a4: 38:1e:6c:0a:75:ea:67:c0:36:4f:95:9a:50:8b:37: 0f:f3:47:5b:a0:c8:81:ef:69:d2:d7:78:34:26:fc: 83:26:87:35:60:52:68:88:90:c4:47:4c:54:e9:60: 78:7a:fc:b9:ba:9c:18:0e:1c:56:51:55:5c:ac:ed: 5e:3c:c4:a9:58:6f:ad:f5:b1:bf:0c:ce:3b:92:71: a2:26:14:9f:35:8c:56:7d:2f:02:e6:27:c4:de:14: be:c1:45:6e:d4:ba:7c:50:2e:88:e4:9d:4b:90:70: dc:a7:b8:21:b3:e6:d7:b5:c3:ad:68:3e:ca:c9:b4: c3:1a:b4:18:a1:ba:ed:48:73:06:3f:46:0b:1c:d9: 10:2b:d2:52:7f:f6:3c:ad:69:58:ef:31:8a:54:8f: 6d:d0:3d:38:43:33:5d:b4:ae:82:34:76:13:7f:f3: f5:73:8b:e3:33:24:7f:eb:14:95:a4:ef:3c:b4:fd: 06:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8B:11:31:67:A2:C9:5D:C8:63:B5:DC:B8:2F:EC:1E:8A:EA:C2:5D X509v3 Authority Key Identifier: keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:79:e8:ab:68:a1:79:ac:1c:3c:da:b4:9d:ec:76:ed:b7:3f: b5:75:6c:41:a3:41:b5:fc:3c:8c:ce:46:28:00:a0:3d:51:2b: c3:b4:55:03:b5:45:45:1a:31:58:2b:af:de:76:20:7a:5a:8c: 3d:3f:8b:29:9e:68:e0:7c:88:d9:1d:74:1c:b2:b3:a8:30:46: 77:12:ca:37:56:93:86:b5:30:e8:21:fc:38:ed:b5:96:94:85: b7:9e:8c:f7:67:44:8c:9b:c2:59:10:09:c6:1d:51:89:4a:13: b1:ac:57:3c:2f:71:82:38:75:4c:75:76:95:fd:20:ac:3f:87: 43:d1:6c:96:9e:37:08:5b:12:c5:4b:26:55:ff:25:7b:04:2d: e5:c5:28:2f:7a:cf:d0:25:bf:7a:6f:be:d1:a1:c9:7f:fa:24: d5:72:2a:92:a9:27:82:5e:b7:3e:1e:1f:27:67:b9:54:cf:46: 42:ef:af:d9:52:7c:2f:f5:53:e9:0a:76:63:67:a9:13:1a:65: c5:20:41:22:64:31:49:6c:cb:0f:06:34:18:d7:62:aa:d9:c4: 16:fc:4a:71:d6:13:e1:09:ca:d6:4f:8a:44:34:50:e6:8b:84: f3:13:23:e8:8e:aa:10:83:79:d8:19:77:4c:2a:03:e8:58:a5: b9:22:45:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGRPHfuUrDnXVLIZzwNZIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMmU0ZmQyMTlmNWI3N2NlODBjZGZhZjllM2E2NDQxZGVj NTAwNDIwHhcNMjYwMTI1MDMwMTA1WhcNMjYwMTI2MDMwMTA1WjAzMTEwLwYDVQQD Eyg0MThiMTEzMTY3YTJjOTVkYzg2M2I1ZGNiODJmZWMxZThhZWFjMjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsIBbPlAg9HnxMtTsfXrCA9sIfJB ygn+iIWKsUTPUREMO7WzJ496ThRPf1NF5Ym+0xGlwv7fiPxO26pq62YqtauCLTUd uOi7ZKQ4HmwKdepnwDZPlZpQizcP80dboMiB72nS13g0JvyDJoc1YFJoiJDER0xU 6WB4evy5upwYDhxWUVVcrO1ePMSpWG+t9bG/DM47knGiJhSfNYxWfS8C5ifE3hS+ wUVu1Lp8UC6I5J1LkHDcp7ghs+bXtcOtaD7KybTDGrQYobrtSHMGP0YLHNkQK9JS f/Y8rWlY7zGKVI9t0D04QzNdtK6CNHYTf/P1c4vjMyR/6xSVpO88tP0GJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGLETFnosldyGO13Lgv7B6K6sJdMB8GA1UdIwQY MBaAFA4uT9IZ9bd86Azfr546ZEHexQBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGk1UDBobjF0M3pvRE4tdm5qcGtRZDdGQUVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lMTEyMjQtNjFjNy00Nzg2LTg2ZTkt MjM4ZmVlNjkyNDMwLzEvRGk1UDBobjF0M3pvRE4tdm5qcGtRZDdGQUVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lMTEyMjQtNjFjNy00Nzg2LTg2ZTktMjM4ZmVlNjkyNDMw LzEvRGk1UDBobjF0M3pvRE4tdm5qcGtRZDdGQUVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXnoq2ih eawcPNq0nex27bc/tXVsQaNBtfw8jM5GKACgPVErw7RVA7VFRRoxWCuv3nYgelqM PT+LKZ5o4HyI2R10HLKzqDBGdxLKN1aThrUw6CH8OO21lpSFt56M92dEjJvCWRAJ xh1RiUoTsaxXPC9xgjh1THV2lf0grD+HQ9Fslp43CFsSxUsmVf8lewQt5cUoL3rP 0CW/em++0aHJf/ok1XIqkqkngl63Ph4fJ2e5VM9GQu+v2VJ8L/VT6Qp2Y2epExpl xSBBImQxSWzLDwY0GNdiqtnEFvxKcdYT4QnK1k+KRDRQ5ouE8xMj6I6qEIN52Bl3 TCoD6FiluSJFFg== -----END CERTIFICATE-----Generated at Sun Jan 25 06:14:47 2026 by rpki-client