This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft File: dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft (raw, json) Hash identifier: V5Dg03nn8zNBN7W2f9cglu6qE1yYQhv0HhHlPaRQSak= Subject key identifier: F2:DE:FE:EF:CC:8C:A0:E7:A5:96:19:A7:F7:14:3E:5D:F8:6A:B3:26 Authority key identifier: 77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC Certificate issuer: /CN=77001bcc69a16503421b88851f47aa16c5cf2dbc Certificate serial: 019B77EE1F6C33F5F216D8A65695FF4FD328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft Manifest number: 0B02 Signing time: Thu 01 Jan 2026 05:00:52 +0000 Manifest this update: Thu 01 Jan 2026 05:00:52 +0000 Manifest next update: Fri 02 Jan 2026 05:00:52 +0000 Files and hashes: 1: dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl (hash: 2bX4n46WfBfuvA5SQNOMYiDQm6Ex3NBHqEXO7jJdMzc=) 2: jgYJrOBGpxmFCRX1q-MlycW-osQ.roa (hash: zjiQPJ4SZc/bB7c5P+iOwvUmdfPHzDJrUsMFIzmnB8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 05:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:ee:1f:6c:33:f5:f2:16:d8:a6:56:95:ff:4f:d3:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77001bcc69a16503421b88851f47aa16c5cf2dbc Validity Not Before: Jan 1 05:00:52 2026 GMT Not After : Jan 2 05:00:52 2026 GMT Subject: CN=f2defeefcc8ca0e7a59619a7f7143e5df86ab326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c8:20:e3:88:70:c5:99:c1:6d:25:be:0b:f7: 4d:c1:09:9a:ca:e6:9e:82:5f:03:ac:1c:de:b7:68: 5b:57:2a:a6:3a:c8:29:6d:12:f0:10:8c:78:4d:5a: 75:2d:9a:79:f8:a2:b2:f0:ba:a8:f5:6f:a8:06:d0: a2:df:e3:27:f5:26:b9:aa:9a:96:e4:50:92:a8:92: 2f:b1:e9:f6:77:fa:96:82:f2:e0:2c:4b:2e:be:73: 84:a6:2c:9e:30:40:52:83:67:94:85:d5:a3:67:f9: 36:9a:f6:4e:00:25:82:b8:c6:0b:2d:ad:86:a6:ac: 13:5c:90:88:95:48:36:e0:33:3b:f4:c2:a6:a2:dd: 91:d4:8e:8d:59:2a:1d:81:d7:e8:38:82:8d:13:8f: c2:22:67:2f:a4:d9:2c:4a:e2:0a:7c:67:84:3f:e2: 0e:74:da:7b:81:4b:ba:1a:88:35:6a:da:31:65:46: 3c:42:d2:27:4e:1b:5b:4f:b6:96:3b:7d:0f:46:a2: db:aa:a5:27:f7:68:59:9d:e9:38:76:9a:f5:58:77: ca:12:f3:dd:3c:0f:f8:c6:f0:be:f1:e1:52:74:2f: 34:2d:68:e9:47:48:20:ad:e5:e3:f8:f6:31:2d:00: 11:29:40:40:82:d7:50:9a:ca:0a:50:a9:53:25:77: 0a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DE:FE:EF:CC:8C:A0:E7:A5:96:19:A7:F7:14:3E:5D:F8:6A:B3:26 X509v3 Authority Key Identifier: keyid:77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:c5:13:d2:c7:58:1c:9b:de:73:27:ef:f4:bc:9c:6d:9c:93: 69:8a:1d:b9:13:46:ba:bd:f1:8a:16:d7:1f:c4:a7:87:95:03: 78:63:20:df:39:d1:e2:2e:28:05:46:e1:e3:1d:a9:32:4c:51: 32:ad:47:35:b3:3b:59:66:7b:61:65:9e:ba:2b:30:7a:82:2b: 7a:26:28:2d:5e:3f:0b:5a:bf:fe:6b:53:ef:0e:b6:8f:30:24: 08:f2:65:3f:85:e0:10:a7:3c:a7:a2:da:26:11:5a:8d:c9:ab: 15:01:53:91:ce:92:9f:13:d6:a4:d5:c2:2f:a0:3d:5d:6c:3d: 16:6e:c8:e5:a2:a7:08:d9:94:38:54:14:4d:17:71:5f:af:6a: 6f:47:0e:43:d4:3a:a8:ee:ee:b8:0a:ee:dd:1e:97:5e:94:4c: 1d:b7:0e:af:68:e1:1a:94:77:60:75:a4:53:38:a6:74:10:cb: 4a:dc:c2:00:0d:48:cb:9e:f1:4e:39:58:0b:b3:86:66:84:09: 34:87:fc:55:ca:98:5e:6f:2f:02:a4:57:bf:51:7c:81:47:ad: 64:21:5f:01:b6:07:11:46:29:c1:15:3a:c5:eb:90:fc:cd:19: c5:8b:12:2d:f3:2c:d2:ff:8b:dc:b7:f2:83:7c:2a:d1:6d:c1: 8d:a2:f9:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt37h9sM/XyFtimVpX/T9MoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MDAxYmNjNjlhMTY1MDM0MjFiODg4NTFmNDdhYTE2YzVj ZjJkYmMwHhcNMjYwMTAxMDUwMDUyWhcNMjYwMTAyMDUwMDUyWjAzMTEwLwYDVQQD EyhmMmRlZmVlZmNjOGNhMGU3YTU5NjE5YTdmNzE0M2U1ZGY4NmFiMzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8gg44hwxZnBbSW+C/dNwQmayuae gl8DrBzet2hbVyqmOsgpbRLwEIx4TVp1LZp5+KKy8Lqo9W+oBtCi3+Mn9Sa5qpqW 5FCSqJIvsen2d/qWgvLgLEsuvnOEpiyeMEBSg2eUhdWjZ/k2mvZOACWCuMYLLa2G pqwTXJCIlUg24DM79MKmot2R1I6NWSodgdfoOIKNE4/CImcvpNksSuIKfGeEP+IO dNp7gUu6Gog1atoxZUY8QtInThtbT7aWO30PRqLbqqUn92hZnek4dpr1WHfKEvPd PA/4xvC+8eFSdC80LWjpR0ggreXj+PYxLQARKUBAgtdQmsoKUKlTJXcK3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLe/u/MjKDnpZYZp/cUPl34arMmMB8GA1UdIwQY MBaAFHcAG8xpoWUDQhuIhR9HqhbFzy28MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHdBYnpHbWhaUU5DRzRpRkgwZXFGc1hQTGJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82ZmYyMzAtZTAxMi00NTMxLTg2NmMt MGE4YmQyZjM2YzcyLzEvZHdBYnpHbWhaUU5DRzRpRkgwZXFGc1hQTGJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS82ZmYyMzAtZTAxMi00NTMxLTg2NmMtMGE4YmQyZjM2Yzcy LzEvZHdBYnpHbWhaUU5DRzRpRkgwZXFGc1hQTGJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsUT0sdY HJvecyfv9LycbZyTaYoduRNGur3xihbXH8Snh5UDeGMg3znR4i4oBUbh4x2pMkxR Mq1HNbM7WWZ7YWWeuisweoIreiYoLV4/C1q//mtT7w62jzAkCPJlP4XgEKc8p6La JhFajcmrFQFTkc6SnxPWpNXCL6A9XWw9Fm7I5aKnCNmUOFQUTRdxX69qb0cOQ9Q6 qO7uuAru3R6XXpRMHbcOr2jhGpR3YHWkUzimdBDLStzCAA1Iy57xTjlYC7OGZoQJ NIf8VcqYXm8vAqRXv1F8gUetZCFfAbYHEUYpwRU6xeuQ/M0ZxYsSLfMs0v+L3Lfy g3wq0W3BjaL5lQ== -----END CERTIFICATE-----Generated at Thu Jan 1 10:52:20 2026 by rpki-client