This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft File: dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft (raw, json) Hash identifier: AfB1xOEpQ97Rriv1hQ8lnUQmGSFvqOqYJUcSoYJHH+U= Subject key identifier: 4D:A6:A6:BE:A3:65:75:75:B0:6F:55:77:B5:F1:C0:09:6F:8A:34:F2 Authority key identifier: 76:07:F6:9D:EE:43:AC:01:D7:DF:EA:CA:9B:76:A2:40:EA:6E:F3:66 Certificate issuer: /CN=7607f69dee43ac01d7dfeaca9b76a240ea6ef366 Certificate serial: 019BAE6FCC7FA646E697DB0B34BF5BA14CA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft Manifest number: 05EE Signing time: Sun 11 Jan 2026 19:02:00 +0000 Manifest this update: Sun 11 Jan 2026 19:02:00 +0000 Manifest next update: Mon 12 Jan 2026 19:02:00 +0000 Files and hashes: 1: dgf2ne5DrAHX3-rKm3aiQOpu82Y.crl (hash: gEeOEq/7bVM4d4+/SuOrXPNW3KJgY7zXAFIiClajy1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft rsync://rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:6f:cc:7f:a6:46:e6:97:db:0b:34:bf:5b:a1:4c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7607f69dee43ac01d7dfeaca9b76a240ea6ef366 Validity Not Before: Jan 11 19:02:00 2026 GMT Not After : Jan 12 19:02:00 2026 GMT Subject: CN=4da6a6bea3657575b06f5577b5f1c0096f8a34f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:96:c4:42:63:37:11:2e:3b:ed:b1:7b:5b:bd: 79:df:05:f4:3a:8c:42:8f:72:1a:1e:0d:ef:c2:3b: e1:cf:b4:50:60:ac:10:8c:80:dc:e2:f2:7c:e7:5c: 1c:ce:8d:4b:12:21:17:eb:11:b6:1a:26:31:46:ea: 4c:60:2c:a1:cb:ce:d3:7b:de:37:6e:57:89:fd:ef: d3:5e:a1:7a:80:ed:74:8b:65:78:a8:95:3d:65:a3: a8:e0:0c:31:3d:a2:2c:aa:b9:23:d6:33:0f:24:07: 77:66:da:10:7d:06:73:a0:43:f9:13:63:ea:cd:4f: fe:5e:37:81:db:69:4d:2e:f8:1c:be:0b:b6:51:e0: 81:1a:3c:c6:bf:87:8d:d0:d4:ec:2e:c3:04:0a:0c: ec:4c:2d:70:1f:c1:70:e6:cd:6c:df:c2:be:c4:83: 17:23:31:1e:f2:2a:c5:8f:b5:50:77:5b:61:1c:b7: 86:96:db:b1:cd:40:ed:42:88:15:6e:6d:69:e7:b8: 3f:35:0b:7d:62:24:d3:fd:77:a7:42:e7:22:92:66: 50:ff:c2:d1:22:9f:30:5c:1d:32:36:52:2f:74:b5: 81:ff:b7:e6:3b:9a:7d:4a:9c:b2:5d:6c:b8:b5:2f: b0:50:23:19:ee:48:1c:5b:49:12:cb:cc:a5:bc:9a: 90:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A6:A6:BE:A3:65:75:75:B0:6F:55:77:B5:F1:C0:09:6F:8A:34:F2 X509v3 Authority Key Identifier: keyid:76:07:F6:9D:EE:43:AC:01:D7:DF:EA:CA:9B:76:A2:40:EA:6E:F3:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8a:48:cb:f3:fe:e2:06:1e:39:53:e5:98:01:25:46:78:7c: 2f:a6:bd:ff:f7:c7:3c:57:63:a7:cb:47:09:79:c2:b7:1d:07: f6:9a:4b:a0:a4:9e:d3:09:64:7b:ca:4f:fb:65:4c:3f:53:54: c1:2d:7b:a4:50:44:0f:2a:6e:54:38:b6:69:2d:bf:5f:85:af: 37:4a:db:c9:03:94:4c:a5:65:59:e4:c9:7b:f2:01:b2:9c:1c: 5d:1e:98:6b:94:e0:c5:22:a6:91:52:ed:19:8d:8c:fd:ab:d1: 46:37:41:09:ac:7f:2f:ad:92:99:92:3b:4b:8d:96:85:1f:39: 8b:6e:2f:18:e7:dd:2f:95:c2:ad:18:79:f1:48:65:b0:9d:b0: 75:f7:d7:89:85:74:22:72:6d:61:30:78:50:6b:f6:22:db:cf: bf:3a:87:a9:3f:df:28:42:0c:4d:e1:46:ae:4a:2a:a8:a7:d8: 35:4b:89:08:85:b1:0c:41:07:07:04:6e:bb:dd:00:6f:85:d4: bf:1e:d5:3e:16:85:69:4c:85:87:93:2e:7e:66:32:1c:31:71: 87:0d:e1:cf:55:c4:0b:54:10:13:58:dd:5d:41:9e:5d:ea:ba: 54:18:de:1a:58:ba:d8:cc:38:d5:20:5f:c8:d4:a9:e2:bc:b7: 60:ce:30:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuub8x/pkbml9sLNL9boUyjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MDdmNjlkZWU0M2FjMDFkN2RmZWFjYTliNzZhMjQwZWE2 ZWYzNjYwHhcNMjYwMTExMTkwMjAwWhcNMjYwMTEyMTkwMjAwWjAzMTEwLwYDVQQD Eyg0ZGE2YTZiZWEzNjU3NTc1YjA2ZjU1NzdiNWYxYzAwOTZmOGEzNGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5bEQmM3ES477bF7W7153wX0OoxC j3IaHg3vwjvhz7RQYKwQjIDc4vJ851wczo1LEiEX6xG2GiYxRupMYCyhy87Te943 bleJ/e/TXqF6gO10i2V4qJU9ZaOo4AwxPaIsqrkj1jMPJAd3ZtoQfQZzoEP5E2Pq zU/+XjeB22lNLvgcvgu2UeCBGjzGv4eN0NTsLsMECgzsTC1wH8Fw5s1s38K+xIMX IzEe8irFj7VQd1thHLeGltuxzUDtQogVbm1p57g/NQt9YiTT/XenQucikmZQ/8LR Ip8wXB0yNlIvdLWB/7fmO5p9SpyyXWy4tS+wUCMZ7kgcW0kSy8ylvJqQfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2mpr6jZXV1sG9Vd7XxwAlvijTyMB8GA1UdIwQY MBaAFHYH9p3uQ6wB19/qypt2okDqbvNmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGdmMm5lNURyQUhYMy1yS20zYWlRT3B1ODJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yY2RiM2QtYWI0My00NTI2LTgzNTct YzAyNDNhM2JkYWZiLzEvZGdmMm5lNURyQUhYMy1yS20zYWlRT3B1ODJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8yY2RiM2QtYWI0My00NTI2LTgzNTctYzAyNDNhM2JkYWZi LzEvZGdmMm5lNURyQUhYMy1yS20zYWlRT3B1ODJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYpIy/P+ 4gYeOVPlmAElRnh8L6a9//fHPFdjp8tHCXnCtx0H9ppLoKSe0wlke8pP+2VMP1NU wS17pFBEDypuVDi2aS2/X4WvN0rbyQOUTKVlWeTJe/IBspwcXR6Ya5TgxSKmkVLt GY2M/avRRjdBCax/L62SmZI7S42WhR85i24vGOfdL5XCrRh58UhlsJ2wdffXiYV0 InJtYTB4UGv2ItvPvzqHqT/fKEIMTeFGrkoqqKfYNUuJCIWxDEEHBwRuu90Ab4XU vx7VPhaFaUyFh5MufmYyHDFxhw3hz1XEC1QQE1jdXUGeXeq6VBjeGli62Mw41SBf yNSp4ry3YM4wgA== -----END CERTIFICATE-----Generated at Sun Jan 11 23:54:46 2026 by rpki-client