This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft File: dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json) Hash identifier: SOa5UxL5etaD+VHGHdlVNQiKij+elHfwEgDCN2Y/Wj4= Subject key identifier: FF:4F:B2:8B:C3:31:0F:E1:62:95:9A:AF:EF:90:15:4D:6E:3D:32:DB Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6 Certificate issuer: /CN=750ac67c5776835df091998310960e83c23d9dc6 Certificate serial: 019BB0CB25502B3A522F7AF401BFAB2C7D84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft Manifest number: 0BAF Signing time: Mon 12 Jan 2026 06:01:01 +0000 Manifest this update: Mon 12 Jan 2026 06:01:01 +0000 Manifest next update: Tue 13 Jan 2026 06:01:01 +0000 Files and hashes: 1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: wFkF3YN0KVgH2I1eg617y83H2XI1UKYztLZOBYGBJ04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:cb:25:50:2b:3a:52:2f:7a:f4:01:bf:ab:2c:7d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6 Validity Not Before: Jan 12 06:01:01 2026 GMT Not After : Jan 13 06:01:01 2026 GMT Subject: CN=ff4fb28bc3310fe162959aafef90154d6e3d32db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f2:42:9b:f9:19:4f:f8:81:7c:e1:7b:1e:41: 5b:5e:3b:7e:19:38:a0:dc:73:46:07:2f:26:28:18: 01:68:44:ae:9d:7d:37:b7:4d:93:cb:e9:3a:75:8b: 58:e0:b1:8a:0c:22:22:28:50:c0:c2:63:f6:43:71: 18:6a:7b:ed:b8:31:62:d4:46:7f:7b:7d:5f:ce:71: 9f:0f:47:be:24:9e:d2:d4:23:12:5f:e7:c1:6c:2e: a9:d8:25:9e:b0:f1:7f:cd:ae:0d:7e:0d:ef:3f:92: 17:f2:5f:6f:ad:c2:d8:95:8e:d5:37:31:ca:7b:01: 14:4a:32:34:01:ad:a6:26:e9:66:7e:a8:85:dc:29: b0:8f:7f:a0:7a:17:1b:48:53:65:30:b9:0b:a4:df: 65:08:0c:e1:e6:39:3e:07:88:5e:e4:c6:e2:61:0c: 58:36:d5:c7:77:32:11:b5:04:35:dd:4a:25:25:51: 09:6f:6c:23:45:94:49:db:79:ea:d4:7a:43:05:4f: 7e:48:31:f8:6b:56:ec:f0:c7:a5:7f:c9:bb:05:fd: 4e:ea:c8:04:8e:54:82:11:c4:df:28:2f:69:6d:22: eb:d1:29:a4:dd:8e:c8:51:5a:b4:58:70:3f:2d:16: 3a:2f:fa:6e:47:a5:c9:76:32:1a:c6:ed:df:62:72: 0f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4F:B2:8B:C3:31:0F:E1:62:95:9A:AF:EF:90:15:4D:6E:3D:32:DB X509v3 Authority Key Identifier: keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:09:68:4b:92:4a:11:3b:2f:68:e2:f0:86:32:79:0d:16:63: 29:02:ad:30:0d:4c:6c:9d:d1:f1:26:e2:3c:cf:04:55:43:9f: 58:85:06:77:27:ba:48:c8:fa:89:db:3d:05:a6:f5:66:31:fd: 7c:c5:f8:63:6b:d6:bd:32:5b:7b:20:6c:df:b2:32:6a:b6:6d: 09:05:0c:52:a1:4b:e0:00:d3:90:90:f4:bf:2c:88:5b:c6:57: 95:c8:dd:e8:62:86:ef:11:9f:50:28:b6:3e:a9:ca:d6:2d:df: cf:6a:c0:af:62:15:86:cb:15:57:ae:46:87:23:27:42:56:d0: 91:07:02:fe:0f:65:6d:4a:d9:9f:ed:b4:41:ac:b2:d5:38:d8: 3d:e2:ec:95:f7:e9:84:5a:fd:42:2b:b7:08:d0:fc:3e:a8:9e: 79:b9:29:4c:da:ea:72:cd:8e:2b:58:aa:58:86:42:9c:ac:99: 54:b2:82:e5:7d:dd:1f:27:72:8e:b3:34:19:18:4b:93:62:47: 90:ff:a4:3b:26:2e:66:7c:cb:6c:55:ea:92:cd:c3:13:44:64: f9:be:99:fb:56:dd:e4:53:19:19:79:d7:b2:bf:ea:0f:77:e9: b2:83:80:94:a6:33:81:2e:26:6f:79:84:8f:54:63:65:74:0e: e4:c0:1e:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwyyVQKzpSL3r0Ab+rLH2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MGFjNjdjNTc3NjgzNWRmMDkxOTk4MzEwOTYwZTgzYzIz ZDlkYzYwHhcNMjYwMTEyMDYwMTAxWhcNMjYwMTEzMDYwMTAxWjAzMTEwLwYDVQQD EyhmZjRmYjI4YmMzMzEwZmUxNjI5NTlhYWZlZjkwMTU0ZDZlM2QzMmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/JCm/kZT/iBfOF7HkFbXjt+GTig 3HNGBy8mKBgBaESunX03t02Ty+k6dYtY4LGKDCIiKFDAwmP2Q3EYanvtuDFi1EZ/ e31fznGfD0e+JJ7S1CMSX+fBbC6p2CWesPF/za4Nfg3vP5IX8l9vrcLYlY7VNzHK ewEUSjI0Aa2mJulmfqiF3Cmwj3+gehcbSFNlMLkLpN9lCAzh5jk+B4he5MbiYQxY NtXHdzIRtQQ13UolJVEJb2wjRZRJ23nq1HpDBU9+SDH4a1bs8Melf8m7Bf1O6sgE jlSCEcTfKC9pbSLr0Smk3Y7IUVq0WHA/LRY6L/puR6XJdjIaxu3fYnIPmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9PsovDMQ/hYpWar++QFU1uPTLbMB8GA1UdIwQY MBaAFHUKxnxXdoNd8JGZgxCWDoPCPZ3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83Mjc3OGItYzA3Zi00OWJiLTllMWQt MWYwYjAzNTQ0ODEwLzEvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS83Mjc3OGItYzA3Zi00OWJiLTllMWQtMWYwYjAzNTQ0ODEw LzEvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQloS5JK ETsvaOLwhjJ5DRZjKQKtMA1MbJ3R8SbiPM8EVUOfWIUGdye6SMj6ids9Bab1ZjH9 fMX4Y2vWvTJbeyBs37IyarZtCQUMUqFL4ADTkJD0vyyIW8ZXlcjd6GKG7xGfUCi2 PqnK1i3fz2rAr2IVhssVV65GhyMnQlbQkQcC/g9lbUrZn+20Qayy1TjYPeLslffp hFr9Qiu3CND8PqieebkpTNrqcs2OK1iqWIZCnKyZVLKC5X3dHydyjrM0GRhLk2JH kP+kOyYuZnzLbFXqks3DE0Rk+b6Z+1bd5FMZGXnXsr/qD3fpsoOAlKYzgS4mb3mE j1RjZXQO5MAebw== -----END CERTIFICATE-----Generated at Mon Jan 12 13:47:21 2026 by rpki-client