This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft File: Dj8xyerObwpezNuN8rAcc1FWhoY.mft (raw, json) Hash identifier: fQMJkdK1IVErAwHEc7OmkYOIajNSIz6sOPwiPMNaD+E= Subject key identifier: CE:25:F1:69:8F:2B:6E:CB:03:19:D7:5F:37:0F:8E:74:19:87:C6:6E Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86 Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686 Certificate serial: 019BB0270E9646F402F6B5BC29B7E51D990B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft Manifest number: 1780 Signing time: Mon 12 Jan 2026 03:01:48 +0000 Manifest this update: Mon 12 Jan 2026 03:01:48 +0000 Manifest next update: Tue 13 Jan 2026 03:01:48 +0000 Files and hashes: 1: Dj8xyerObwpezNuN8rAcc1FWhoY.crl (hash: G0PXVhsfuczyc5sCYH2Kx6glcWFA1CO8PEH1NjuPac8=) 2: KG2bwdMHpiZ-qNVrmFbejxgZnXw.roa (hash: /SATlKhWfLl21S+M8PJymfOJAuNbA6mH3Elkc2JeqqY=) 3: P36bForyKz3A1xYxUt5uRvnbjGo.roa (hash: CVAU2pcmHNPpR0Ea2g62GxYoWi/yJ4n8I1Gjfyzzm7o=) 4: uZHn0r02l2agjVRMRfZ3xICbMLw.roa (hash: YR/6cl0OhmlwCiQwg5TQ7bSWNguLPLl/GP2GOc23T+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:27:0e:96:46:f4:02:f6:b5:bc:29:b7:e5:1d:99:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686 Validity Not Before: Jan 12 03:01:48 2026 GMT Not After : Jan 13 03:01:48 2026 GMT Subject: CN=ce25f1698f2b6ecb0319d75f370f8e741987c66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4b:bb:42:28:37:f7:3c:88:e7:d3:5c:24:59: fa:2b:cc:07:3b:83:ec:d6:c2:f9:e2:48:42:a9:57: 1d:aa:d2:fc:37:5a:f3:c5:e6:6d:d4:bd:5d:8e:89: be:47:93:1a:e6:a5:c4:45:b3:99:32:58:6b:7c:97: 37:52:d4:cc:a3:87:ee:5c:52:c4:78:87:7c:2f:44: 75:50:5f:89:e2:97:bd:7b:e0:9e:48:0d:f7:52:e3: 83:7a:c7:20:c0:0d:b4:5b:14:10:cc:a8:a0:02:ea: 85:6c:89:47:db:bb:da:3d:c3:92:12:11:24:02:ab: 4b:ab:00:30:ea:0f:6f:22:4e:af:a7:c1:65:5a:e4: b7:bf:d5:ce:e3:3a:c5:d1:79:d8:73:4c:e8:d4:da: 99:14:d4:49:81:90:2c:20:38:4f:e6:c8:84:e8:1e: 50:a2:4d:0e:cf:b6:29:3e:ff:ff:a4:03:a2:d0:2b: b4:df:5d:c8:83:1d:60:ce:ff:dd:de:c0:12:93:bb: c4:ec:c4:4a:68:b2:c4:a4:5d:65:2d:2d:03:ad:50: a3:62:7e:a0:97:b2:e8:09:9d:e4:39:70:2d:86:2d: 6c:37:11:df:1a:8f:05:4f:fb:6e:87:fe:1d:53:de: 35:03:65:97:b5:19:4c:c0:68:e3:f5:99:62:f0:ed: 2a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:25:F1:69:8F:2B:6E:CB:03:19:D7:5F:37:0F:8E:74:19:87:C6:6E X509v3 Authority Key Identifier: keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:cc:27:95:0a:d2:5f:e5:96:f1:f4:fc:a1:80:d7:d6:67:f4: e8:ac:e3:f6:14:f6:07:82:3c:4f:4e:ab:c2:f4:4e:b1:fd:2b: 3f:d9:97:0b:d0:9b:21:7d:74:98:88:38:14:03:00:3f:38:a8: 3d:53:14:18:ec:37:53:27:12:dc:ac:4c:a0:80:12:c8:ae:7b: ef:83:29:d3:27:b7:85:01:a5:f1:45:4b:6a:a1:37:c6:aa:7d: 96:9b:1c:1f:a2:d7:f8:9d:ab:6b:56:cb:56:0c:54:56:f8:de: eb:94:e3:dc:f5:78:da:08:6d:81:6b:33:0e:35:8f:5d:6c:d6: 2a:cf:84:11:00:e2:f3:1b:82:c2:7d:16:8f:2a:23:e3:55:41: a1:d3:81:23:c7:95:60:9b:57:d3:20:57:ea:fb:b4:16:59:3a: 4c:95:42:7f:18:7c:c6:e4:86:77:2f:1f:9d:0b:9d:0a:1e:b2: 26:f1:b9:6b:ec:af:c1:4c:e7:70:c8:a7:d4:36:14:14:4b:b6: e2:66:6e:15:95:5e:46:62:84:c0:5c:03:02:50:f7:1e:67:72: 08:d8:b3:63:7f:f0:a3:13:9c:4c:7b:4c:5c:d0:a7:10:9d:4a: 5c:a6:b5:54:6d:f7:65:d5:82:c2:15:7b:02:c7:25:97:d8:9d: 20:cf:58:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwJw6WRvQC9rW8KbflHZkLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlM2YzMWM5ZWFjZTZmMGE1ZWNjZGI4ZGYyYjAxYzczNTE1 Njg2ODYwHhcNMjYwMTEyMDMwMTQ4WhcNMjYwMTEzMDMwMTQ4WjAzMTEwLwYDVQQD EyhjZTI1ZjE2OThmMmI2ZWNiMDMxOWQ3NWYzNzBmOGU3NDE5ODdjNjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Uu7Qig39zyI59NcJFn6K8wHO4Ps 1sL54khCqVcdqtL8N1rzxeZt1L1djom+R5Ma5qXERbOZMlhrfJc3UtTMo4fuXFLE eId8L0R1UF+J4pe9e+CeSA33UuODescgwA20WxQQzKigAuqFbIlH27vaPcOSEhEk AqtLqwAw6g9vIk6vp8FlWuS3v9XO4zrF0XnYc0zo1NqZFNRJgZAsIDhP5siE6B5Q ok0Oz7YpPv//pAOi0Cu0313Igx1gzv/d3sASk7vE7MRKaLLEpF1lLS0DrVCjYn6g l7LoCZ3kOXAthi1sNxHfGo8FT/tuh/4dU941A2WXtRlMwGjj9Zli8O0qDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4l8WmPK27LAxnXXzcPjnQZh8ZuMB8GA1UdIwQY MBaAFA4/Mcnqzm8KXszbjfKwHHNRVoaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYt ZGQ1ZGRkMDVkYjBiLzEvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYtZGQ1ZGRkMDVkYjBi LzEvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMwnlQrS X+WW8fT8oYDX1mf06Kzj9hT2B4I8T06rwvROsf0rP9mXC9CbIX10mIg4FAMAPzio PVMUGOw3UycS3KxMoIASyK5774Mp0ye3hQGl8UVLaqE3xqp9lpscH6LX+J2ra1bL VgxUVvje65Tj3PV42ghtgWszDjWPXWzWKs+EEQDi8xuCwn0Wjyoj41VBodOBI8eV YJtX0yBX6vu0Flk6TJVCfxh8xuSGdy8fnQudCh6yJvG5a+yvwUzncMin1DYUFEu2 4mZuFZVeRmKEwFwDAlD3HmdyCNizY3/woxOcTHtMXNCnEJ1KXKa1VG33ZdWCwhV7 Ascll9idIM9Yow== -----END CERTIFICATE-----Generated at Mon Jan 12 10:19:28 2026 by rpki-client