This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft File: Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json) Hash identifier: xBn8C3MrjgYqjXfkRhUbfFp9uQfcng2pLn+mroWA0/s= Subject key identifier: 19:F3:2F:DF:4B:4F:AE:A8:C8:D0:06:9B:86:6F:FA:84:50:7F:81:E6 Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9 Certificate issuer: /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9 Certificate serial: 019B82E052EF504D792E81C66646A70B8440 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft Manifest number: 17AC Signing time: Sat 03 Jan 2026 08:01:37 +0000 Manifest this update: Sat 03 Jan 2026 08:01:37 +0000 Manifest next update: Sun 04 Jan 2026 08:01:37 +0000 Files and hashes: 1: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: /gwYZze1biASZ1CQf36hesZSK/Hrgw6hGxIKySXaJyc=) 2: SAugkdRYnSv4ry8bG61AtXCsozo.roa (hash: sEeAFM3bNI/ojfTwt1bUnazn3tLdAyJRyAzUqk6sRNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 06:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:82:e0:52:ef:50:4d:79:2e:81:c6:66:46:a7:0b:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9 Validity Not Before: Jan 3 08:01:37 2026 GMT Not After : Jan 4 08:01:37 2026 GMT Subject: CN=19f32fdf4b4faea8c8d0069b866ffa84507f81e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e1:2b:f2:3b:17:d2:61:a0:4f:dc:54:95:57: 4d:ab:23:bd:2c:16:f7:74:50:42:6c:85:31:e9:3e: 16:c3:50:1b:18:8b:39:88:a1:9d:80:bf:44:25:00: 58:96:3a:90:7f:e0:90:d6:12:92:b7:11:1e:1a:d5: 88:02:bc:27:50:f3:4f:01:b2:df:7d:99:d4:82:12: 6c:fe:88:01:16:47:d6:47:e7:89:50:b3:00:24:51: 8d:7c:56:f8:33:a2:ea:f8:9d:6d:fa:b0:a4:94:dd: f3:f4:35:d1:81:3c:a0:78:59:a6:e2:34:de:f5:0f: b4:78:4c:c4:2f:92:db:7b:d0:b0:38:e9:7a:b5:5c: 10:b4:f2:94:27:f9:06:75:2d:db:51:78:5b:94:8b: 5f:13:06:04:7d:23:e3:e1:9b:47:d1:b1:23:15:c5: 6c:fc:db:f8:8c:1e:31:be:9c:1f:95:83:78:ad:c7: 69:3c:48:d8:4b:62:45:3a:82:22:1e:f7:06:e7:ad: 4c:82:e0:ff:55:d5:13:6f:2a:6a:1b:34:06:b5:f5: 50:c7:b4:66:d9:9e:7e:70:73:fd:19:35:59:05:99: 00:b9:56:eb:f6:37:66:50:7e:0c:78:eb:8c:fd:a1: 5e:88:75:a5:9f:fc:ed:a3:0c:13:04:d3:81:d9:0f: 00:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F3:2F:DF:4B:4F:AE:A8:C8:D0:06:9B:86:6F:FA:84:50:7F:81:E6 X509v3 Authority Key Identifier: keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:05:b2:5e:56:e2:9f:38:99:53:ac:c8:a9:6a:f0:b0:6e:ac: 1c:bd:e1:a4:d0:a1:a5:7f:82:bd:32:a1:97:c7:f2:1d:1d:34: 7f:ff:f1:c6:2d:69:f8:a9:85:15:c9:67:08:4b:3c:4e:28:5d: 22:ee:7d:13:ed:ac:8f:5e:d5:98:da:c1:3a:7a:0e:87:45:d7: c2:aa:9a:e7:16:16:77:54:76:ab:e1:47:58:3c:39:9f:5b:40: 0b:37:d8:86:2c:55:f7:89:d9:91:ee:a1:6b:75:fd:51:85:eb: 07:c5:ac:59:6c:7b:4d:fd:2e:bc:e4:94:3f:2b:a3:a3:4d:d0: 8c:df:7c:27:66:18:a2:18:67:f3:67:4f:53:65:49:ca:87:60: fb:60:d4:8f:7c:01:10:b3:14:11:19:f2:6b:4b:a0:fc:09:04: 04:4b:13:78:51:4d:60:54:bd:f8:5b:cf:4d:30:d3:7b:69:f6: 17:75:c5:66:c7:52:3c:51:ce:64:ee:c4:26:92:3f:f9:e4:f0: b1:57:b8:18:2f:57:7d:5c:91:a8:dc:c3:6f:c0:d6:12:73:62: 4f:df:f1:51:ad:7f:80:a1:e2:9a:52:4a:24:53:40:8d:7d:a0: 6a:c0:39:ec:86:24:51:a8:e1:41:c5:61:5e:ee:6e:cb:e7:81: 76:fd:b5:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuC4FLvUE15LoHGZkanC4RAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOWUwYWZlYmY1NGE0ZDIxOGFmYmFlZDU0MzA3NzFiYmY3 Nzc3YTkwHhcNMjYwMTAzMDgwMTM3WhcNMjYwMTA0MDgwMTM3WjAzMTEwLwYDVQQD EygxOWYzMmZkZjRiNGZhZWE4YzhkMDA2OWI4NjZmZmE4NDUwN2Y4MWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+Er8jsX0mGgT9xUlVdNqyO9LBb3 dFBCbIUx6T4Ww1AbGIs5iKGdgL9EJQBYljqQf+CQ1hKStxEeGtWIArwnUPNPAbLf fZnUghJs/ogBFkfWR+eJULMAJFGNfFb4M6Lq+J1t+rCklN3z9DXRgTygeFmm4jTe 9Q+0eEzEL5Lbe9CwOOl6tVwQtPKUJ/kGdS3bUXhblItfEwYEfSPj4ZtH0bEjFcVs /Nv4jB4xvpwflYN4rcdpPEjYS2JFOoIiHvcG561MguD/VdUTbypqGzQGtfVQx7Rm 2Z5+cHP9GTVZBZkAuVbr9jdmUH4MeOuM/aFeiHWln/ztowwTBNOB2Q8AXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnzL99LT66oyNAGm4Zv+oRQf4HmMB8GA1UdIwQY MBaAFA6eCv6/VKTSGK+67VQwdxu/d3epMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYt M2VmNTk0ZTZjNjk2LzEvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYtM2VmNTk0ZTZjNjk2 LzEvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigWyXlbi nziZU6zIqWrwsG6sHL3hpNChpX+CvTKhl8fyHR00f//xxi1p+KmFFclnCEs8Tihd Iu59E+2sj17VmNrBOnoOh0XXwqqa5xYWd1R2q+FHWDw5n1tACzfYhixV94nZke6h a3X9UYXrB8WsWWx7Tf0uvOSUPyujo03QjN98J2YYohhn82dPU2VJyodg+2DUj3wB ELMUERnya0ug/AkEBEsTeFFNYFS9+FvPTTDTe2n2F3XFZsdSPFHOZO7EJpI/+eTw sVe4GC9XfVyRqNzDb8DWEnNiT9/xUa1/gKHimlJKJFNAjX2gasA57IYkUajhQcVh Xu5uy+eBdv21Rw== -----END CERTIFICATE-----Generated at Sat Jan 3 12:53:49 2026 by rpki-client