This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json) Hash identifier: CfWzkar1ArtKXYeY51ORRRi9R/hXH0J7sNiAkEX96dU= Subject key identifier: F8:33:EA:AB:45:26:C4:A6:EB:B9:8D:87:95:26:9C:F5:C4:3E:45:8E Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c Certificate serial: 019BF3BE2997E6317C5E96C9E316E12E94D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft Manifest number: 04DA Signing time: Sun 25 Jan 2026 06:01:24 +0000 Manifest this update: Sun 25 Jan 2026 06:01:24 +0000 Manifest next update: Mon 26 Jan 2026 06:01:24 +0000 Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: 6x4ExxRXh+VR0mk/krPwByGAEtmI5+zDpcTxxCYr0f0=) 2: w8wkCFScjGQvdttAQ8x_xzp50Xk.roa (hash: w/c38fhRy3be0XuDkxP9zkUOolRFgZszn3JD1Qb99Vw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:be:29:97:e6:31:7c:5e:96:c9:e3:16:e1:2e:94:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c Validity Not Before: Jan 25 06:01:24 2026 GMT Not After : Jan 26 06:01:24 2026 GMT Subject: CN=f833eaab4526c4a6ebb98d8795269cf5c43e458e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:d4:23:c4:79:71:20:5d:54:72:05:ee:56: 76:e7:09:71:ae:71:fc:85:5f:44:64:a9:42:8b:86: bf:08:63:6d:6e:cf:8c:91:0a:fc:2a:1e:58:97:14: b3:8d:79:16:3a:fd:36:a8:dd:12:07:6d:cb:78:0e: 98:25:77:8a:2c:2f:09:55:61:a4:cd:aa:ae:35:f5: f9:0d:d2:5f:67:35:b2:38:d1:97:2a:aa:e3:b6:c4: dd:cd:a2:4b:7f:2c:34:47:34:0e:a8:55:98:10:eb: 47:99:e9:f1:72:0e:bc:cd:3a:da:57:3a:65:ee:b9: f3:eb:e2:bf:a4:6b:38:26:49:7e:ab:75:4c:f3:b0: d3:67:ea:4a:fe:96:f3:15:5b:cc:97:b3:61:a1:fd: 92:1a:8e:87:34:75:a1:83:86:90:e5:9d:be:5f:f2: 73:f0:52:29:fd:b0:95:67:ad:ce:fc:60:a3:36:a0: fc:c3:6b:d0:69:cb:02:d8:f5:3b:f9:c6:b6:da:57: 8f:09:5f:49:bd:61:7e:03:b0:7f:11:f7:76:6a:0c: 2b:3d:90:db:6a:5c:b0:fe:09:5f:a1:13:2e:86:db: 81:7d:6a:37:2b:7f:0d:31:e4:d7:7b:4b:16:d2:04: 39:22:7b:8f:25:8a:59:67:d8:06:f9:ee:f7:fc:0c: f1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:33:EA:AB:45:26:C4:A6:EB:B9:8D:87:95:26:9C:F5:C4:3E:45:8E X509v3 Authority Key Identifier: keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:b3:fd:c0:49:d5:8d:ba:1f:5d:0c:a1:25:51:e7:c6:2d:e4: e9:f8:9a:54:fb:8f:e1:63:aa:ed:36:84:7a:77:14:16:de:b0: 93:99:51:f7:71:f1:63:64:73:d0:69:38:39:73:7c:d0:ac:3d: b8:53:93:70:4a:b1:07:44:18:52:50:26:ff:8a:42:ca:89:d8: 24:2a:f5:ac:be:6a:b7:1d:ff:eb:03:ba:85:1b:e8:d4:33:1f: 7a:d5:6c:a6:a7:33:df:2b:e9:92:4c:8f:eb:44:ba:fe:f7:2e: f0:5b:5c:5f:9c:cc:e3:ee:d1:c0:ac:f7:a0:42:84:a1:85:c8: 32:63:d3:47:14:a5:c6:9d:86:9d:23:c3:e8:9a:e9:c5:d4:c8: 36:52:24:a5:4b:5f:2f:2d:e7:fe:14:18:20:f3:df:c2:56:27: 7f:57:cb:0c:39:b7:f9:7b:ac:8d:11:84:68:44:99:aa:c5:17: e0:a2:4d:29:9c:ec:4d:8b:c0:25:38:01:74:f9:dc:10:3f:b8: b1:e2:c7:72:8a:47:e2:ab:87:11:89:df:44:45:41:7f:68:b9: 19:5f:b4:0e:a9:1d:e1:47:fd:f3:ff:43:12:ee:1e:5e:4f:53: 12:1f:87:d7:bb:d5:0e:27:b3:94:cc:b5:22:91:61:3d:5d:6b: 8b:97:c6:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvimX5jF8XpbJ4xbhLpTUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNWNmNzA3MzA1MTJhZWZhNzAzMDc2NjJjZjU5Mjg4ZThj ZDI2NGMwHhcNMjYwMTI1MDYwMTI0WhcNMjYwMTI2MDYwMTI0WjAzMTEwLwYDVQQD EyhmODMzZWFhYjQ1MjZjNGE2ZWJiOThkODc5NTI2OWNmNWM0M2U0NThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql3UI8R5cSBdVHIF7lZ25wlxrnH8 hV9EZKlCi4a/CGNtbs+MkQr8Kh5YlxSzjXkWOv02qN0SB23LeA6YJXeKLC8JVWGk zaquNfX5DdJfZzWyONGXKqrjtsTdzaJLfyw0RzQOqFWYEOtHmenxcg68zTraVzpl 7rnz6+K/pGs4Jkl+q3VM87DTZ+pK/pbzFVvMl7Nhof2SGo6HNHWhg4aQ5Z2+X/Jz 8FIp/bCVZ63O/GCjNqD8w2vQacsC2PU7+ca22lePCV9JvWF+A7B/Efd2agwrPZDb alyw/glfoRMuhtuBfWo3K38NMeTXe0sW0gQ5InuPJYpZZ9gG+e73/AzxywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgz6qtFJsSm67mNh5UmnPXEPkWOMB8GA1UdIwQY MBaAFAxc9wcwUSrvpwMHZiz1kojozSZMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMt YWRmYzcyZWYwZGZhLzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMtYWRmYzcyZWYwZGZh LzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAurP9wEnV jbofXQyhJVHnxi3k6fiaVPuP4WOq7TaEencUFt6wk5lR93HxY2Rz0Gk4OXN80Kw9 uFOTcEqxB0QYUlAm/4pCyonYJCr1rL5qtx3/6wO6hRvo1DMfetVspqcz3yvpkkyP 60S6/vcu8FtcX5zM4+7RwKz3oEKEoYXIMmPTRxSlxp2GnSPD6JrpxdTINlIkpUtf Ly3n/hQYIPPfwlYnf1fLDDm3+XusjRGEaESZqsUX4KJNKZzsTYvAJTgBdPncED+4 seLHcopH4quHEYnfREVBf2i5GV+0Dqkd4Uf98/9DEu4eXk9TEh+H17vVDiezlMy1 IpFhPV1ri5fGEQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:08:51 2026 by rpki-client