This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft File: dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft (raw, json) Hash identifier: rDSdS8yyxgo2RqV7EdeF5omYGCxBhkuqC4GOZKMMq8U= Subject key identifier: C3:3B:B4:04:9F:73:10:72:95:8F:B7:1F:7D:20:0E:A9:85:09:79:0C Authority key identifier: 76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14 Certificate issuer: /CN=769a0ed13591d4b84ca79a8eb577226076651a14 Certificate serial: 019B79A54ECC5CDC6F658168B28D412ED066 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft Manifest number: 0BB6 Signing time: Thu 01 Jan 2026 13:00:35 +0000 Manifest this update: Thu 01 Jan 2026 13:00:35 +0000 Manifest next update: Fri 02 Jan 2026 13:00:35 +0000 Files and hashes: 1: EN7XiEfKlFXBlZqtNN-oRqqWPD8.roa (hash: hOsYakPKoUo+w1ZXynrtNEWFAogAYXmthy1G2XJLeXc=) 2: dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl (hash: hJBoyHPyFxHuAV30qHd6HvOF3XRe9ibnzN6aDc8J40Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:a5:4e:cc:5c:dc:6f:65:81:68:b2:8d:41:2e:d0:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=769a0ed13591d4b84ca79a8eb577226076651a14 Validity Not Before: Jan 1 13:00:35 2026 GMT Not After : Jan 2 13:00:35 2026 GMT Subject: CN=c33bb4049f731072958fb71f7d200ea98509790c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4e:15:f4:f2:8a:3f:e9:d2:3e:75:71:e1:0b: 8f:14:7a:cb:78:01:8a:10:7d:a6:61:ee:7c:9e:bf: e1:d5:fc:f6:31:b2:e0:4c:24:0e:6a:4a:35:40:f7: 80:ce:4c:ab:94:b2:ff:5f:95:c5:66:80:c0:99:77: c9:c8:9f:6e:48:cd:4e:3a:2d:1d:dd:0d:39:03:e7: 50:eb:ff:f8:ec:a6:f0:d2:f6:e0:fb:71:73:b5:63: fd:46:0d:fe:b9:e1:02:3a:e9:83:6f:b2:2c:3a:b8: 57:42:00:46:91:aa:6f:34:2e:09:95:f8:67:8c:29: 55:21:81:88:c4:23:02:8b:b4:2e:b4:d6:b7:c3:c3: 03:5a:61:c3:cd:3c:a4:d5:3f:4b:4f:8c:0b:3d:7f: 63:79:25:5e:86:a3:98:5f:ed:ee:95:aa:84:9b:01: 3d:4c:f6:48:2a:8a:4d:a6:74:05:d2:fa:2c:5b:7b: 35:b2:07:27:73:72:5e:ba:a2:3c:3c:26:2e:15:00: c0:da:e0:39:66:68:94:8d:b7:fc:64:b9:f9:c9:2b: 58:03:19:4b:2f:f0:43:d6:50:6d:80:3d:1e:10:fb: 2d:a7:4e:67:ea:2c:71:5b:40:e7:7e:cd:63:1e:55: 2a:a7:8d:de:fc:a5:ea:02:e7:b3:c5:e8:29:50:02: 4c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3B:B4:04:9F:73:10:72:95:8F:B7:1F:7D:20:0E:A9:85:09:79:0C X509v3 Authority Key Identifier: keyid:76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:af:60:d1:63:e6:91:12:6d:88:92:67:bb:67:67:3f:1c:f4: 0f:4e:3a:52:bc:f5:d9:75:23:64:7d:d1:95:ed:c6:6c:e6:20: df:17:7a:67:e0:4a:04:ca:04:9a:0c:5b:c8:76:61:65:8c:34: 68:63:50:4f:98:7e:da:cf:9b:02:49:82:42:f8:b0:51:0b:95: cc:b4:89:48:e2:37:a8:03:dc:bd:5b:72:d2:48:6e:e2:32:13: 2d:1b:72:d1:ad:56:e2:60:da:9d:87:02:a7:2e:27:43:9a:08: 24:98:31:da:d3:44:91:ef:27:28:d7:3a:58:cc:64:93:e6:e3: 51:37:82:c6:21:cf:86:e4:2b:30:6e:46:11:b9:07:19:e1:a6: 49:29:67:44:b7:a4:2e:4f:02:67:91:c5:08:d4:ee:01:c7:f7: e0:35:e9:37:17:10:b5:4d:4f:5d:f2:3d:47:a7:6c:a3:7e:30: 1d:04:a5:c3:bf:98:b3:ce:2c:66:96:e0:5b:1e:2e:e9:50:48: a0:78:d9:5f:de:5c:4f:70:bc:7c:e9:c2:54:56:f6:1d:8f:d6: a7:53:f2:de:1b:f5:89:eb:7f:a6:3d:6e:22:66:d1:1a:d1:22: d5:fc:6a:bd:41:4c:c2:9e:c3:93:fb:7b:8e:56:d3:df:0e:ff: 3b:16:16:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5pU7MXNxvZYFoso1BLtBmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OWEwZWQxMzU5MWQ0Yjg0Y2E3OWE4ZWI1NzcyMjYwNzY2 NTFhMTQwHhcNMjYwMTAxMTMwMDM1WhcNMjYwMTAyMTMwMDM1WjAzMTEwLwYDVQQD EyhjMzNiYjQwNDlmNzMxMDcyOTU4ZmI3MWY3ZDIwMGVhOTg1MDk3OTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq04V9PKKP+nSPnVx4QuPFHrLeAGK EH2mYe58nr/h1fz2MbLgTCQOako1QPeAzkyrlLL/X5XFZoDAmXfJyJ9uSM1OOi0d 3Q05A+dQ6//47Kbw0vbg+3FztWP9Rg3+ueECOumDb7IsOrhXQgBGkapvNC4Jlfhn jClVIYGIxCMCi7QutNa3w8MDWmHDzTyk1T9LT4wLPX9jeSVehqOYX+3ulaqEmwE9 TPZIKopNpnQF0vosW3s1sgcnc3JeuqI8PCYuFQDA2uA5ZmiUjbf8ZLn5yStYAxlL L/BD1lBtgD0eEPstp05n6ixxW0Dnfs1jHlUqp43e/KXqAuezxegpUAJM3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMM7tASfcxBylY+3H30gDqmFCXkMMB8GA1UdIwQY MBaAFHaaDtE1kdS4TKeajrV3ImB2ZRoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHBvTzBUV1IxTGhNcDVxT3RYY2lZSFpsR2hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni82OGMwMDgtNjlkMy00MzZmLWFkMzMt MmRiZTc4NTQyMmY4LzEvZHBvTzBUV1IxTGhNcDVxT3RYY2lZSFpsR2hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni82OGMwMDgtNjlkMy00MzZmLWFkMzMtMmRiZTc4NTQyMmY4 LzEvZHBvTzBUV1IxTGhNcDVxT3RYY2lZSFpsR2hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYa9g0WPm kRJtiJJnu2dnPxz0D046Urz12XUjZH3Rle3GbOYg3xd6Z+BKBMoEmgxbyHZhZYw0 aGNQT5h+2s+bAkmCQviwUQuVzLSJSOI3qAPcvVty0khu4jITLRty0a1W4mDanYcC py4nQ5oIJJgx2tNEke8nKNc6WMxkk+bjUTeCxiHPhuQrMG5GEbkHGeGmSSlnRLek Lk8CZ5HFCNTuAcf34DXpNxcQtU1PXfI9R6dso34wHQSlw7+Ys84sZpbgWx4u6VBI oHjZX95cT3C8fOnCVFb2HY/Wp1Py3hv1iet/pj1uImbRGtEi1fxqvUFMwp7Dk/t7 jlbT3w7/OxYWvg== -----END CERTIFICATE-----Generated at Thu Jan 1 17:16:04 2026 by rpki-client