This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft File: DXj57XHKOklrjVS5fxR5GNrbnFQ.mft (raw, json) Hash identifier: iTTHA9hL1kmZT1ZoJQv/N9uAzjQJ1EShysdxOmrYStY= Subject key identifier: F1:48:C8:B4:76:65:8A:4E:D0:B8:D9:47:56:FC:B4:2F:EB:24:2B:5D Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54 Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54 Certificate serial: 019B95C1E1A5E89F8E7CCD771FF9D69DD31D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft Manifest number: 034E Signing time: Wed 07 Jan 2026 00:01:09 +0000 Manifest this update: Wed 07 Jan 2026 00:01:09 +0000 Manifest next update: Thu 08 Jan 2026 00:01:09 +0000 Files and hashes: 1: DXj57XHKOklrjVS5fxR5GNrbnFQ.crl (hash: 8zy3U0KWDChCCvj3Rtp5zR0DjRRKMHwO4xmxCUvcDGE=) 2: WBE9XqEf7MFyalSUqu-vF0MYUwE.roa (hash: dqMxE1BdW8dFl07KbG3IeIB419vd91Jj1Eyr9ex+Uk0=) 3: WBO5Gvlksp1h2Nj2XcuQWgWe3aM.roa (hash: 21Q33n7ktv9Mw0KQGNV5mbgpviM4S02U0e8hX8gzv14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:95:c1:e1:a5:e8:9f:8e:7c:cd:77:1f:f9:d6:9d:d3:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54 Validity Not Before: Jan 7 00:01:09 2026 GMT Not After : Jan 8 00:01:09 2026 GMT Subject: CN=f148c8b476658a4ed0b8d94756fcb42feb242b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ea:9d:ab:b7:46:04:2d:c2:6e:ce:dd:79:0e: 49:0d:00:c2:2b:55:d3:a3:9e:15:0a:6e:b3:c8:25: 1f:ab:b4:7c:cd:b9:1e:f3:7a:d3:df:5a:a9:2c:4e: c1:5e:27:e5:cb:39:db:4f:cc:6f:4d:8b:46:2a:f7: c6:69:cd:de:12:f0:f2:97:23:bd:1c:b4:9d:c2:37: c2:21:04:75:ee:b3:46:5a:03:94:f4:6a:be:6a:72: 44:79:3b:df:f6:e1:12:4a:5e:d3:b2:d9:4e:86:41: d6:c3:a3:03:be:31:8e:fa:a8:70:74:0b:9f:45:38: cc:01:24:28:15:32:d5:cf:e6:e1:7f:5f:2c:d9:7e: fa:fe:fc:ca:e9:ad:ac:97:e9:11:29:40:03:4d:24: fa:f6:00:b1:b1:81:c7:dd:16:6a:1a:7d:70:d8:21: d2:aa:d3:fb:ad:e4:67:4a:c9:2b:99:10:84:05:f0: 1b:e6:af:47:0c:00:9b:e2:2d:3c:c9:b7:28:b9:72: 83:38:51:b2:49:2d:3b:58:59:c0:79:2d:77:31:b9: ca:14:97:e7:a0:87:69:e1:0e:23:70:31:b1:e3:e3: 3e:de:9d:a8:e3:1a:f3:b8:67:2e:e3:78:66:37:56: 63:8b:f0:c8:fe:0d:f0:15:ea:f0:04:82:4c:c8:7f: fe:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:48:C8:B4:76:65:8A:4E:D0:B8:D9:47:56:FC:B4:2F:EB:24:2B:5D X509v3 Authority Key Identifier: keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:51:4d:5c:c2:c0:9f:79:0c:d5:fd:69:61:d2:cd:d3:48:f1: a7:49:71:04:4e:82:51:97:9a:dc:80:46:14:ed:34:73:f2:b4: f0:89:5c:b4:b9:eb:68:6b:41:38:e5:ae:9d:26:fc:6b:34:6d: 76:19:b5:ef:2f:d8:12:a7:6f:9c:1e:39:3f:11:b1:8f:f6:bc: 84:5e:11:84:d5:8d:e3:f8:ac:24:33:12:d9:b1:36:b0:ef:d6: 48:9d:b9:d0:a3:09:6f:16:1a:6b:ee:57:52:4c:a0:34:45:1a: e4:a3:c3:4a:dd:5b:36:1f:90:96:79:f6:4f:b5:98:af:36:64: b1:fc:f0:b8:d6:29:4a:a9:a6:3e:9d:bb:92:72:7d:7b:48:b5: 81:1f:3a:1a:40:e0:2f:71:59:0b:ca:e1:24:9b:0c:14:95:98: 3a:e9:06:34:9f:39:41:eb:4f:31:29:46:90:3b:01:2e:e6:11: 11:11:f1:fd:09:04:41:4a:1f:49:50:9d:b0:5b:34:54:e3:9d: df:37:fe:ce:4a:5c:51:71:b5:99:c4:2f:61:92:ef:c2:7f:d1: ea:32:01:7c:fc:39:95:54:4f:46:64:14:48:e9:07:ec:e6:49: 6a:e2:50:28:d8:17:92:ed:bf:25:43:45:2e:01:28:6c:29:91: 66:47:b6:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuVweGl6J+OfM13H/nWndMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzhmOWVkNzFjYTNhNDk2YjhkNTRiOTdmMTQ3OTE4ZGFk YjljNTQwHhcNMjYwMTA3MDAwMTA5WhcNMjYwMTA4MDAwMTA5WjAzMTEwLwYDVQQD EyhmMTQ4YzhiNDc2NjU4YTRlZDBiOGQ5NDc1NmZjYjQyZmViMjQyYjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleqdq7dGBC3Cbs7deQ5JDQDCK1XT o54VCm6zyCUfq7R8zbke83rT31qpLE7BXiflyznbT8xvTYtGKvfGac3eEvDylyO9 HLSdwjfCIQR17rNGWgOU9Gq+anJEeTvf9uESSl7TstlOhkHWw6MDvjGO+qhwdAuf RTjMASQoFTLVz+bhf18s2X76/vzK6a2sl+kRKUADTST69gCxsYHH3RZqGn1w2CHS qtP7reRnSskrmRCEBfAb5q9HDACb4i08ybcouXKDOFGySS07WFnAeS13MbnKFJfn oIdp4Q4jcDGx4+M+3p2o4xrzuGcu43hmN1Zji/DI/g3wFerwBIJMyH/+7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFIyLR2ZYpO0LjZR1b8tC/rJCtdMB8GA1UdIwQY MBaAFA14+e1xyjpJa41UuX8UeRja25xUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mN2QwZjAtYTU3MS00NTdjLTkxNTQt OGU4Njc1Y2IwOTJmLzEvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mN2QwZjAtYTU3MS00NTdjLTkxNTQtOGU4Njc1Y2IwOTJm LzEvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1FNXMLA n3kM1f1pYdLN00jxp0lxBE6CUZea3IBGFO00c/K08IlctLnraGtBOOWunSb8azRt dhm17y/YEqdvnB45PxGxj/a8hF4RhNWN4/isJDMS2bE2sO/WSJ250KMJbxYaa+5X UkygNEUa5KPDSt1bNh+Qlnn2T7WYrzZksfzwuNYpSqmmPp27knJ9e0i1gR86GkDg L3FZC8rhJJsMFJWYOukGNJ85QetPMSlGkDsBLuYRERHx/QkEQUofSVCdsFs0VOOd 3zf+zkpcUXG1mcQvYZLvwn/R6jIBfPw5lVRPRmQUSOkH7OZJauJQKNgXku2/JUNF LgEobCmRZke2Ew== -----END CERTIFICATE-----Generated at Wed Jan 7 07:00:17 2026 by rpki-client