This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft File: DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json) Hash identifier: efszfYXSlzH0wvQaqjYuNg85Ta5372kRb9S4Bi5k3Hg= Subject key identifier: 58:12:62:8B:2B:79:E9:FB:BD:FC:91:84:57:15:8B:7C:08:C5:18:A8 Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d Certificate serial: 019BF61A2D2CCD048D0F33CC71A1BF2EA3D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 17:01:09 +0000 Manifest this update: Sun 25 Jan 2026 17:01:09 +0000 Manifest next update: Mon 26 Jan 2026 17:01:09 +0000 Files and hashes: 1: 8TaBsBYidW6NwN4w-r-_-frpmPw.roa (hash: d3cj9imIBJIrG7w+OMuxucJCXGk/PoAG60c7YkaGWUU=) 2: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: 3ARsnA9k5dA26jp1oXsH2+XMHxMWYRz3asMS89TMYLU=) 3: cfuyV7WY5uCzefphkg9dkFiDF4o.roa (hash: 56j+8wClcw9KajdQHM4PT6tZ5VXaRrrlOf4m/1pMO8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:2d:2c:cd:04:8d:0f:33:cc:71:a1:bf:2e:a3:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d Validity Not Before: Jan 25 17:01:09 2026 GMT Not After : Jan 26 17:01:09 2026 GMT Subject: CN=5812628b2b79e9fbbdfc918457158b7c08c518a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b3:2b:79:11:98:dc:32:10:0c:fa:eb:27:7a: 00:6b:a4:8d:73:ee:51:ef:ff:aa:a3:e6:d2:36:30: 42:b4:e3:fc:0e:3c:55:86:92:9e:4f:40:0b:ca:9c: 5c:50:37:84:df:92:c8:2f:63:f3:41:0c:94:ba:5a: 5d:a7:40:14:b2:8e:c4:b0:cf:5f:38:e6:15:50:df: ec:e6:af:ba:c3:e9:e4:18:96:63:46:7f:8d:d1:88: 1c:39:8b:47:d5:28:e1:66:b7:67:89:18:ba:22:5c: b7:a3:b0:3c:64:20:eb:36:0e:df:19:6d:8b:30:e3: 0a:9b:07:29:77:51:6b:dc:ee:8b:eb:69:b6:d8:c0: 7b:7b:80:c8:1a:d3:44:82:44:c1:38:b3:99:45:7f: cc:67:a1:0d:90:ae:b8:af:f0:9f:88:51:1c:9a:6d: 2d:ef:ea:04:9d:6e:e2:af:91:1d:23:4a:51:91:b0: 8e:2e:9d:dc:fb:dd:9f:72:c8:4d:e7:f7:6a:86:0c: 5b:25:af:ec:58:93:0c:66:65:90:eb:95:bc:c5:59: dd:79:eb:d8:07:c5:a9:85:ce:e5:71:c1:16:e7:19: d0:70:b5:84:b3:58:8c:07:5c:26:f8:5a:8f:a0:33: 9b:e4:89:56:bf:9f:2f:06:3e:2c:cc:c7:43:a3:53: d2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:12:62:8B:2B:79:E9:FB:BD:FC:91:84:57:15:8B:7C:08:C5:18:A8 X509v3 Authority Key Identifier: keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:bc:6f:fc:61:10:7c:ea:71:bd:84:12:da:18:5c:b5:1e:dd: ec:cb:bb:c9:84:47:26:df:62:82:0d:2c:c0:28:e8:0f:95:56: ba:24:38:c2:55:14:d5:79:cd:ae:3b:8f:4d:d7:10:2c:2c:f6: 66:5d:99:d4:fa:30:43:4b:97:6a:e5:d0:66:ea:52:23:6a:6d: 7c:b1:f8:da:3e:2a:38:39:b6:22:7e:09:88:9a:ba:45:b3:76: 10:ea:49:71:a9:87:34:bc:3d:54:d4:a5:35:04:5a:82:5f:53: 8b:8b:b6:1b:08:39:b7:60:9e:a7:4e:93:c1:e4:72:99:c9:b5: 87:63:a4:c9:b1:65:92:27:31:fc:f7:02:28:1e:ed:55:33:86: ae:fe:42:6d:66:5c:2e:4d:ba:b0:42:7c:9f:7e:a5:d3:42:dd: a5:e1:44:ce:78:97:a6:eb:51:22:18:7e:82:f8:6d:37:e5:c8: 4b:09:68:26:1d:90:15:cb:64:f5:14:20:e4:fa:fc:1d:a1:fd: c8:94:e7:88:29:fd:be:34:22:a8:43:50:33:e6:c7:8d:22:f8: 35:6f:87:93:1e:84:07:83:88:84:7a:3e:79:32:3a:4b:fd:64: 82:d8:e9:bd:0a:78:8c:9f:ac:5c:4e:dd:2b:db:f6:18:3c:45: 78:c4:2e:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gi0szQSNDzPMcaG/LqPRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMDEzNGZhZmJhNzJlMDYzMzljYWRjNTVkNWYxM2JhZTQ4 MmIxMmQwHhcNMjYwMTI1MTcwMTA5WhcNMjYwMTI2MTcwMTA5WjAzMTEwLwYDVQQD Eyg1ODEyNjI4YjJiNzllOWZiYmRmYzkxODQ1NzE1OGI3YzA4YzUxOGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LMreRGY3DIQDPrrJ3oAa6SNc+5R 7/+qo+bSNjBCtOP8DjxVhpKeT0ALypxcUDeE35LIL2PzQQyUulpdp0AUso7EsM9f OOYVUN/s5q+6w+nkGJZjRn+N0YgcOYtH1SjhZrdniRi6Ily3o7A8ZCDrNg7fGW2L MOMKmwcpd1Fr3O6L62m22MB7e4DIGtNEgkTBOLOZRX/MZ6ENkK64r/CfiFEcmm0t 7+oEnW7ir5EdI0pRkbCOLp3c+92fcshN5/dqhgxbJa/sWJMMZmWQ65W8xVndeevY B8Wphc7lccEW5xnQcLWEs1iMB1wm+FqPoDOb5IlWv58vBj4szMdDo1PS8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgSYosreen7vfyRhFcVi3wIxRioMB8GA1UdIwQY MBaAFA4BNPr7py4GM5ytxV1fE7rkgrEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hODIxZGYtNmI0OS00NDg5LThhNzct ZDEyNDZjYzJjMzRlLzEvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9hODIxZGYtNmI0OS00NDg5LThhNzctZDEyNDZjYzJjMzRl LzEvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7xv/GEQ fOpxvYQS2hhctR7d7Mu7yYRHJt9igg0swCjoD5VWuiQ4wlUU1XnNrjuPTdcQLCz2 Zl2Z1PowQ0uXauXQZupSI2ptfLH42j4qODm2In4JiJq6RbN2EOpJcamHNLw9VNSl NQRagl9Ti4u2Gwg5t2Cep06TweRymcm1h2OkybFlkicx/PcCKB7tVTOGrv5CbWZc Lk26sEJ8n36l00LdpeFEzniXputRIhh+gvhtN+XISwloJh2QFctk9RQg5Pr8HaH9 yJTniCn9vjQiqENQM+bHjSL4NW+Hkx6EB4OIhHo+eTI6S/1kgtjpvQp4jJ+sXE7d K9v2GDxFeMQuoA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:54 2026 by rpki-client