This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft File: dEMndQQU00na3gIjNJfPR2Vc0-Q.mft (raw, json) Hash identifier: 3eajydY8t0Gk3G2mSAadyLaJOdffo2krm4ohWmNQJNE= Subject key identifier: 9B:11:83:51:5C:85:0F:56:65:4F:06:35:66:E3:43:93:37:7A:E8:B3 Authority key identifier: 74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4 Certificate issuer: /CN=744327750414d349dade02233497cf47655cd3e4 Certificate serial: 019B78CA33B601EAD56E002CE1F43541AE2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft Manifest number: 1179 Signing time: Thu 01 Jan 2026 09:01:15 +0000 Manifest this update: Thu 01 Jan 2026 09:01:15 +0000 Manifest next update: Fri 02 Jan 2026 09:01:15 +0000 Files and hashes: 1: dEMndQQU00na3gIjNJfPR2Vc0-Q.crl (hash: nSNBnohLiGHziqngNWXyH4AkKlxFGffi0vii8zjxc6M=) 2: pw-kmcsXStqEGowMkHLAk5Mf6U4.roa (hash: rRJ79fHcm5M4bm1f6K+EVmHKjAp+H/ZjHlqCTGktjWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:ca:33:b6:01:ea:d5:6e:00:2c:e1:f4:35:41:ae:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744327750414d349dade02233497cf47655cd3e4 Validity Not Before: Jan 1 09:01:15 2026 GMT Not After : Jan 2 09:01:15 2026 GMT Subject: CN=9b1183515c850f56654f063566e34393377ae8b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5e:3d:10:aa:5d:14:53:d0:40:77:03:a3:ac: e8:f1:dd:28:a0:dc:a4:6b:f5:ae:d9:d9:9f:8c:9f: 21:83:ec:18:09:01:1b:7c:70:a5:c7:ad:05:47:76: a2:06:b1:9b:53:c8:85:5a:32:1c:c1:ba:43:89:f4: 33:9d:a4:e4:de:66:d6:9c:a9:65:48:0c:03:ea:18: c4:48:b0:83:7a:c0:89:46:6d:92:83:97:b1:07:27: 14:7b:e0:2c:8e:8f:46:a0:28:9e:c0:70:36:61:c5: 96:26:d4:14:8d:1d:87:07:5d:91:f9:1f:da:68:05: 35:ea:69:9f:ce:e0:e8:ba:c5:39:c6:bc:8e:1e:82: 3f:93:48:85:68:ed:d8:c9:31:d8:0b:08:4b:56:50: 71:8b:43:70:7d:a9:d2:03:57:5b:b1:2d:cd:03:23: d2:19:3a:98:48:2a:b8:fb:43:2f:d7:07:fd:5b:b3: 92:6a:fa:bc:83:cd:2b:30:e8:ba:ef:b9:36:54:bf: 31:62:b0:00:75:cb:a8:ff:d3:05:9d:86:da:60:44: 4e:8d:03:06:6f:8e:70:92:58:de:a2:8f:47:37:1c: f1:78:f0:a2:2b:e7:0d:99:6c:60:9e:07:86:e4:cf: f0:5d:cc:31:29:ac:68:1f:4d:c2:d6:94:48:0f:0a: be:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:11:83:51:5C:85:0F:56:65:4F:06:35:66:E3:43:93:37:7A:E8:B3 X509v3 Authority Key Identifier: keyid:74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:53:0b:64:5f:f9:b5:19:11:f9:28:3f:1a:b7:de:74:58:36: 6b:22:59:de:44:65:60:e2:1d:e6:43:21:97:5d:2c:f2:18:de: 0c:6a:ea:d5:8b:18:6e:54:e9:02:f3:1d:ef:d5:0e:83:09:4e: ce:59:92:2b:03:1d:07:de:70:ee:19:8e:13:45:eb:be:c2:a7: 01:c1:4b:d1:b5:fb:44:6d:50:97:78:f0:de:7f:f3:b2:93:d9: 8f:0c:80:c0:88:16:ee:47:0b:84:c4:38:11:b8:31:3e:50:a0: bd:2b:c9:75:90:36:13:63:13:6f:9d:aa:39:91:52:1c:5a:e2: a0:4f:3b:b3:da:70:88:35:f4:ac:63:63:ba:fc:27:42:65:7b: b4:24:b8:03:e2:d1:b3:ed:2f:a6:af:5e:d9:92:29:ec:ff:4d: f9:47:e6:3a:1e:47:66:59:c4:16:00:3f:25:c6:5f:91:f5:1e: 9b:12:5f:85:cd:4b:90:fe:92:29:ab:2d:5a:1b:b4:97:87:46: cf:31:d8:ac:7f:31:e5:13:5c:8c:f5:37:50:36:6d:96:c2:f2: 2d:77:ae:97:f1:69:2b:e2:15:1d:ae:6c:23:01:43:0d:59:67: 38:a7:9a:83:49:c1:e2:bf:12:bf:d6:ea:0e:05:c7:ca:fc:7b: 38:9e:ec:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4yjO2AerVbgAs4fQ1Qa4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NDMyNzc1MDQxNGQzNDlkYWRlMDIyMzM0OTdjZjQ3NjU1 Y2QzZTQwHhcNMjYwMTAxMDkwMTE1WhcNMjYwMTAyMDkwMTE1WjAzMTEwLwYDVQQD Eyg5YjExODM1MTVjODUwZjU2NjU0ZjA2MzU2NmUzNDM5MzM3N2FlOGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF49EKpdFFPQQHcDo6zo8d0ooNyk a/Wu2dmfjJ8hg+wYCQEbfHClx60FR3aiBrGbU8iFWjIcwbpDifQznaTk3mbWnKll SAwD6hjESLCDesCJRm2Sg5exBycUe+Asjo9GoCiewHA2YcWWJtQUjR2HB12R+R/a aAU16mmfzuDousU5xryOHoI/k0iFaO3YyTHYCwhLVlBxi0NwfanSA1dbsS3NAyPS GTqYSCq4+0Mv1wf9W7OSavq8g80rMOi677k2VL8xYrAAdcuo/9MFnYbaYEROjQMG b45wkljeoo9HNxzxePCiK+cNmWxgngeG5M/wXcwxKaxoH03C1pRIDwq+NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsRg1FchQ9WZU8GNWbjQ5M3euizMB8GA1UdIwQY MBaAFHRDJ3UEFNNJ2t4CIzSXz0dlXNPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEVNbmRRUVUwMG5hM2dJak5KZlBSMlZjMC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82MTA4NzItYjViNS00NDJmLWI2MzAt ZTVkMWFmNTlkZWE2LzEvZEVNbmRRUVUwMG5hM2dJak5KZlBSMlZjMC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi82MTA4NzItYjViNS00NDJmLWI2MzAtZTVkMWFmNTlkZWE2 LzEvZEVNbmRRUVUwMG5hM2dJak5KZlBSMlZjMC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlMLZF/5 tRkR+Sg/GrfedFg2ayJZ3kRlYOId5kMhl10s8hjeDGrq1YsYblTpAvMd79UOgwlO zlmSKwMdB95w7hmOE0XrvsKnAcFL0bX7RG1Ql3jw3n/zspPZjwyAwIgW7kcLhMQ4 EbgxPlCgvSvJdZA2E2MTb52qOZFSHFrioE87s9pwiDX0rGNjuvwnQmV7tCS4A+LR s+0vpq9e2ZIp7P9N+UfmOh5HZlnEFgA/JcZfkfUemxJfhc1LkP6SKastWhu0l4dG zzHYrH8x5RNcjPU3UDZtlsLyLXeul/FpK+IVHa5sIwFDDVlnOKeag0nB4r8Sv9bq DgXHyvx7OJ7s1A== -----END CERTIFICATE-----Generated at Thu Jan 1 10:52:21 2026 by rpki-client