This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft File: dKjYRykGwgOKrshMez5Wwglr6GA.mft (raw, json) Hash identifier: pqPA6AeuHkOEPPQfRjyZJeWYmegPoJnJ2UkI3uRNirs= Subject key identifier: 30:46:F2:D8:25:9B:13:72:3F:FB:C0:4E:38:52:D8:27:CF:C4:E7:6C Authority key identifier: 74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60 Certificate issuer: /CN=74a8d8472906c2038aaec84c7b3e56c2096be860 Certificate serial: 019BA3EB994CE150077B103ADCF9AB4B7B0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft Manifest number: 14D5 Signing time: Fri 09 Jan 2026 18:01:24 +0000 Manifest this update: Fri 09 Jan 2026 18:01:24 +0000 Manifest next update: Sat 10 Jan 2026 18:01:24 +0000 Files and hashes: 1: dKjYRykGwgOKrshMez5Wwglr6GA.crl (hash: Mmd5mUAiq82dkSaP3CFESlnoZVScefMlCk6svHzffLY=) 2: oQCJF4siUdcpboMPfHP2EbeM0ps.roa (hash: IesKj0DCrmac38Ifbjs7D9byS/qB5f4vRUYllQm6ZFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:eb:99:4c:e1:50:07:7b:10:3a:dc:f9:ab:4b:7b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a8d8472906c2038aaec84c7b3e56c2096be860 Validity Not Before: Jan 9 18:01:24 2026 GMT Not After : Jan 10 18:01:24 2026 GMT Subject: CN=3046f2d8259b13723ffbc04e3852d827cfc4e76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ee:b5:b6:65:79:c3:d7:1e:c6:54:ee:2e:c7: 63:f2:ca:bd:7c:3a:a2:1e:b9:15:1a:1b:1a:f6:42: 9c:48:de:09:67:c5:8a:38:90:01:3c:e1:be:98:0a: 6e:c1:38:67:15:ca:12:90:e0:53:f7:df:46:22:6f: 6d:3e:4c:fe:48:5a:ca:10:4e:65:b1:8c:a8:02:4c: 7e:07:00:c0:cc:27:56:64:86:fb:9e:c0:1d:40:a5: 3b:4e:c5:b3:ef:d4:55:3e:7f:ba:3f:9a:97:20:fc: 1e:0f:cb:ef:2a:b0:1e:be:c9:ee:1d:e8:cd:80:7f: c9:b3:4f:ab:93:d4:68:3e:b8:6f:25:23:f6:84:c1: 7b:9e:90:80:93:86:b6:b7:30:89:14:ef:0b:aa:1d: 6c:6d:5f:80:63:4f:95:db:52:be:fa:d3:af:f6:0b: 2f:03:23:29:f2:7b:8f:44:6f:7e:9a:5b:97:31:47: 7d:9d:62:06:96:b7:c7:99:57:fe:5b:15:41:ce:37: 6e:40:16:5a:f2:de:ee:53:ce:96:14:bf:a0:32:c7: 4f:18:80:06:ef:64:77:85:69:c1:49:b1:ff:c2:19: 3c:7f:f6:5d:ac:3c:c1:b0:da:16:94:e7:81:91:ff: 3b:c3:b6:63:60:f3:69:d8:22:95:91:e7:fb:3a:00: 2d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:46:F2:D8:25:9B:13:72:3F:FB:C0:4E:38:52:D8:27:CF:C4:E7:6C X509v3 Authority Key Identifier: keyid:74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:3c:c5:33:4f:5e:40:65:e0:55:9c:c3:33:06:e4:fb:7f:ba: 90:25:00:3f:7a:af:fa:8b:21:47:35:c8:b4:f7:1a:c3:87:12: f3:3a:2b:7a:7a:0d:37:d4:ab:93:f4:ff:33:5f:2e:72:fb:23: bd:9f:f4:5f:c5:5a:a4:3a:a6:d1:39:8f:1c:d5:cc:68:cb:9a: 49:c7:7f:f5:7e:41:ba:08:14:00:11:1c:e2:75:db:f6:57:69: 7b:b8:f7:1e:8b:80:26:40:04:da:15:64:d7:8a:24:fc:b5:d3: 7e:4f:4e:91:ed:45:48:f1:b9:8c:1f:b0:cc:57:b0:dc:a0:98: 49:eb:fe:4c:47:53:65:b3:72:a9:96:1f:d0:37:6a:ea:00:b8: e1:a2:e1:c3:b9:2d:45:22:67:5e:62:17:2b:bc:4d:b2:a1:39: 2f:73:0d:f8:47:9d:d4:5f:50:f9:58:42:d6:97:b3:1f:c5:99: c9:c8:a9:a8:7f:7c:ee:11:49:82:32:08:8e:e0:d0:6c:96:af: 4c:c2:ee:76:80:33:fe:24:7b:bd:d3:5a:f7:bd:e1:f8:66:a1: 9b:a1:ee:4f:91:f5:97:2d:81:ad:99:06:37:ff:55:7e:9b:0c: 47:55:b5:c5:46:c5:fd:dc:c3:e6:ae:8c:3f:d4:da:fa:70:00: 4c:58:f1:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuj65lM4VAHexA63PmrS3sMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YThkODQ3MjkwNmMyMDM4YWFlYzg0YzdiM2U1NmMyMDk2 YmU4NjAwHhcNMjYwMTA5MTgwMTI0WhcNMjYwMTEwMTgwMTI0WjAzMTEwLwYDVQQD EygzMDQ2ZjJkODI1OWIxMzcyM2ZmYmMwNGUzODUyZDgyN2NmYzRlNzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO61tmV5w9cexlTuLsdj8sq9fDqi HrkVGhsa9kKcSN4JZ8WKOJABPOG+mApuwThnFcoSkOBT999GIm9tPkz+SFrKEE5l sYyoAkx+BwDAzCdWZIb7nsAdQKU7TsWz79RVPn+6P5qXIPweD8vvKrAevsnuHejN gH/Js0+rk9RoPrhvJSP2hMF7npCAk4a2tzCJFO8Lqh1sbV+AY0+V21K++tOv9gsv AyMp8nuPRG9+mluXMUd9nWIGlrfHmVf+WxVBzjduQBZa8t7uU86WFL+gMsdPGIAG 72R3hWnBSbH/whk8f/ZdrDzBsNoWlOeBkf87w7ZjYPNp2CKVkef7OgAt+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBG8tglmxNyP/vATjhS2CfPxOdsMB8GA1UdIwQY MBaAFHSo2EcpBsIDiq7ITHs+VsIJa+hgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kNGQ1MTktZTc3NC00MTVhLTkzYWIt Mzk1NmU1NmMxODM1LzEvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kNGQ1MTktZTc3NC00MTVhLTkzYWItMzk1NmU1NmMxODM1 LzEvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDzFM09e QGXgVZzDMwbk+3+6kCUAP3qv+oshRzXItPcaw4cS8zorenoNN9Srk/T/M18ucvsj vZ/0X8VapDqm0TmPHNXMaMuaScd/9X5BuggUABEc4nXb9ldpe7j3HouAJkAE2hVk 14ok/LXTfk9Oke1FSPG5jB+wzFew3KCYSev+TEdTZbNyqZYf0Ddq6gC44aLhw7kt RSJnXmIXK7xNsqE5L3MN+Eed1F9Q+VhC1pezH8WZycipqH987hFJgjIIjuDQbJav TMLudoAz/iR7vdNa973h+Gahm6HuT5H1ly2BrZkGN/9VfpsMR1W1xUbF/dzD5q6M P9Ta+nAATFjxeg== -----END CERTIFICATE-----Generated at Fri Jan 9 23:48:04 2026 by rpki-client