This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json) Hash identifier: bcwJcbNPCMZ7RKt8PUE9A+SPL6o+7oTAWLsgf0/FgIE= Subject key identifier: 92:DE:E0:50:1F:BA:7A:D8:94:82:2D:8E:1A:C0:0E:46:DE:27:AE:F2 Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0 Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0 Certificate serial: 019BAD5CCC773CA3C9A8A11D45F688278C8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft Manifest number: 17C1 Signing time: Sun 11 Jan 2026 14:01:38 +0000 Manifest this update: Sun 11 Jan 2026 14:01:38 +0000 Manifest next update: Mon 12 Jan 2026 14:01:38 +0000 Files and hashes: 1: BCkDmJhYgCR9TE4jRqDw3_AqqdI.roa (hash: mNQmWHALaV0PGX2z6HR7E/b09jPkjPuON0y07SlXofA=) 2: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: 9nZWqjMPoaZKvrIBvSU/A9zCkd/wfu1bvWOGJg2bJhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:5c:cc:77:3c:a3:c9:a8:a1:1d:45:f6:88:27:8c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0 Validity Not Before: Jan 11 14:01:38 2026 GMT Not After : Jan 12 14:01:38 2026 GMT Subject: CN=92dee0501fba7ad894822d8e1ac00e46de27aef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c8:25:c6:7b:ba:86:b2:72:fb:57:19:ab:6e: 35:62:90:5b:de:3e:56:1d:4e:65:04:20:73:b8:5e: d0:eb:85:eb:ea:1d:f7:6c:70:29:e2:cc:6d:89:ae: 65:f8:4f:d1:ea:68:aa:5b:94:06:14:d4:d4:54:e5: 9f:f9:e5:03:ff:3f:f6:01:67:8b:2c:19:a8:5c:20: 89:77:0a:14:a5:7b:e1:90:84:4d:ab:ff:35:a5:d9: 1e:79:28:94:e9:c1:94:4a:3e:88:e6:70:d0:ab:7e: b0:a5:d5:70:00:b7:af:ee:7b:05:a0:f5:40:91:87: bf:41:59:52:c4:fa:2e:37:67:59:63:7b:84:ce:fb: 36:1b:51:a2:90:08:a7:85:a7:91:1a:46:cc:e4:49: 35:fb:a7:d8:fa:f4:43:fb:83:b8:eb:39:98:42:d1: 19:66:d7:06:fc:a6:81:9b:c0:4a:79:ee:62:d8:49: dc:13:aa:8a:cc:7b:a7:66:f0:50:3e:f9:71:1a:a9: f1:75:16:61:fa:d9:be:29:69:1a:df:16:c2:71:6b: c7:73:d1:2d:74:c7:39:40:be:bb:b2:65:e2:45:76: 70:14:16:77:57:e1:90:bc:f9:0d:18:55:29:57:88: a7:57:7c:79:ac:5a:6d:00:43:86:59:81:05:29:0d: e0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DE:E0:50:1F:BA:7A:D8:94:82:2D:8E:1A:C0:0E:46:DE:27:AE:F2 X509v3 Authority Key Identifier: keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ab:26:e2:2f:2d:43:51:d6:1f:81:e4:6d:85:1c:15:27:be: 65:33:a1:ec:6d:75:4c:e3:91:77:dd:69:4b:a4:bc:af:74:87: f3:8b:e1:9b:73:06:58:cb:af:4b:85:5d:eb:c3:ad:ac:f5:6b: 5d:83:f5:a1:45:34:91:e6:ec:d5:7e:6a:d2:2a:16:88:12:52: b4:18:dd:61:85:29:c0:af:48:3d:00:fc:d9:75:3a:16:08:0a: 61:d1:89:00:96:6b:43:e0:cc:7f:f5:c4:4c:98:a0:88:49:6c: 54:20:d5:3f:86:5c:1e:39:0f:a3:44:80:3d:58:8d:e7:e5:cb: 5d:94:b5:2e:25:d6:01:6a:1e:aa:38:81:2c:33:26:b5:3b:da: e5:49:7d:a4:b6:d9:91:c0:5f:54:08:f1:f1:1e:7a:a6:29:cf: db:f7:de:a3:da:1c:d0:e9:a7:28:fe:b3:d3:cc:72:d0:3c:cb: 04:d6:58:db:1e:80:3c:fb:cd:4a:6f:ef:e7:90:81:ed:1b:08: 80:d6:39:59:ce:84:39:9d:8e:c5:a9:3e:c7:42:c4:c1:8a:64: 60:57:3f:8f:a2:95:8b:76:e8:ee:3d:43:2a:07:cd:8f:e3:b9: 88:88:d9:d6:ad:2f:0a:c3:02:ae:c7:b6:99:df:85:30:84:0b: 92:14:23:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutXMx3PKPJqKEdRfaIJ4yKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjQ5MTIyZDllOWJiYWZhNTc3ZjY0NDdmMjFiOGJlYzc2 YzA1ZjAwHhcNMjYwMTExMTQwMTM4WhcNMjYwMTEyMTQwMTM4WjAzMTEwLwYDVQQD Eyg5MmRlZTA1MDFmYmE3YWQ4OTQ4MjJkOGUxYWMwMGU0NmRlMjdhZWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8glxnu6hrJy+1cZq241YpBb3j5W HU5lBCBzuF7Q64Xr6h33bHAp4sxtia5l+E/R6miqW5QGFNTUVOWf+eUD/z/2AWeL LBmoXCCJdwoUpXvhkIRNq/81pdkeeSiU6cGUSj6I5nDQq36wpdVwALev7nsFoPVA kYe/QVlSxPouN2dZY3uEzvs2G1GikAinhaeRGkbM5Ek1+6fY+vRD+4O46zmYQtEZ ZtcG/KaBm8BKee5i2EncE6qKzHunZvBQPvlxGqnxdRZh+tm+KWka3xbCcWvHc9Et dMc5QL67smXiRXZwFBZ3V+GQvPkNGFUpV4inV3x5rFptAEOGWYEFKQ3gOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLe4FAfunrYlIItjhrADkbeJ67yMB8GA1UdIwQY MBaAFA20kSLZ6buvpXf2RH8huL7HbAXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2Et MTQ2MDBkNTc4MDhhLzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2EtMTQ2MDBkNTc4MDhh LzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqsm4i8t Q1HWH4HkbYUcFSe+ZTOh7G11TOORd91pS6S8r3SH84vhm3MGWMuvS4Vd68OtrPVr XYP1oUU0kebs1X5q0ioWiBJStBjdYYUpwK9IPQD82XU6FggKYdGJAJZrQ+DMf/XE TJigiElsVCDVP4ZcHjkPo0SAPViN5+XLXZS1LiXWAWoeqjiBLDMmtTva5Ul9pLbZ kcBfVAjx8R56pinP2/feo9oc0OmnKP6z08xy0DzLBNZY2x6APPvNSm/v55CB7RsI gNY5Wc6EOZ2Oxak+x0LEwYpkYFc/j6KVi3bo7j1DKgfNj+O5iIjZ1q0vCsMCrse2 md+FMIQLkhQjDQ== -----END CERTIFICATE-----Generated at Sun Jan 11 23:47:58 2026 by rpki-client