This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft File: DvFUKKS1vl5z59IoK1HIGa6jj5s.mft (raw, json) Hash identifier: frACT6V8eBna91Mus1tj8is7zBwReGJvWr/pwK43VWg= Subject key identifier: 36:33:8E:71:F5:83:2A:AD:7A:60:6A:EB:F0:62:A7:FD:95:43:FD:58 Authority key identifier: 0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B Certificate issuer: /CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b Certificate serial: 019BB6CE20469A4C7BD67776557B94CDCB6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft Manifest number: 11C2 Signing time: Tue 13 Jan 2026 10:02:00 +0000 Manifest this update: Tue 13 Jan 2026 10:02:00 +0000 Manifest next update: Wed 14 Jan 2026 10:02:00 +0000 Files and hashes: 1: DvFUKKS1vl5z59IoK1HIGa6jj5s.crl (hash: Q+pD4nP6R2nKLj71TRUXbkU3tBiy2LyHYXF3OxAxAuI=) 2: N-AM4196SXnGQPm10SOwk3Kk_fQ.roa (hash: +8w6gH3OBa7d0A6n/57m2bB3Ovd8KSYObWMM+h3ENfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:ce:20:46:9a:4c:7b:d6:77:76:55:7b:94:cd:cb:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b Validity Not Before: Jan 13 10:02:00 2026 GMT Not After : Jan 14 10:02:00 2026 GMT Subject: CN=36338e71f5832aad7a606aebf062a7fd9543fd58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:69:80:6c:20:47:ef:67:7d:a2:47:d3:01:f1: b0:20:e9:01:76:44:5a:b8:b9:a6:8d:64:ac:f6:58: 72:09:48:b7:d0:1b:5f:bb:61:e4:28:54:7c:bf:6d: 5c:d8:07:e2:14:59:32:0e:19:9d:6c:84:05:ea:9a: 60:12:bb:d8:a6:ad:40:76:ac:0a:7d:d9:77:38:2d: 22:a5:be:13:82:35:af:c5:87:1d:e3:a3:f5:ba:01: 6d:0d:99:ed:07:16:98:7a:7a:e5:c5:18:f4:b8:8d: 8a:fe:64:1d:95:b5:bd:12:91:04:9c:8c:36:d7:2f: 6b:07:a6:8f:f4:aa:1c:46:e4:52:5f:f2:93:db:d6: d7:dc:9b:ea:34:a6:fd:91:6c:a6:27:a4:bc:ba:74: b9:4b:f9:93:28:13:ca:fa:a4:45:d8:93:51:2b:30: 85:5a:df:ca:03:55:39:32:95:2f:40:fa:4c:59:a8: 25:bb:65:f5:b5:dd:32:1d:72:23:09:8a:d5:6d:f3: 86:05:28:f7:a2:3f:c5:c9:15:ae:fd:a2:60:57:67: 3b:be:80:77:c7:32:3f:d8:10:28:1f:e6:29:6d:6c: 7b:e5:73:85:ea:38:d2:fa:7c:05:74:2a:a3:1f:b9: b7:df:c0:72:da:06:c0:3d:ce:cd:40:b0:58:6e:91: 59:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:33:8E:71:F5:83:2A:AD:7A:60:6A:EB:F0:62:A7:FD:95:43:FD:58 X509v3 Authority Key Identifier: keyid:0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:43:ad:a2:cd:33:cb:50:4f:ec:88:84:14:3d:85:6c:d9:24: 1e:7d:d3:78:d3:70:20:b1:7f:d7:5b:12:ce:8b:5c:fd:a5:1f: 49:a6:97:fa:2f:bf:ff:37:81:78:f6:9c:cf:bd:0d:6c:b5:f1: 5e:36:2e:6c:db:fa:ff:ab:d1:85:ec:13:eb:49:e1:9f:af:74: 5e:23:04:58:37:b3:84:53:0b:32:c1:14:32:b8:5b:6c:7c:68: 86:3c:d7:38:d9:08:e7:cb:80:18:b4:ba:bd:d1:db:40:09:3f: eb:a6:64:0c:0e:4f:b0:2c:42:75:f3:00:ab:ed:38:3b:d9:89: 18:8c:9e:7b:8d:b9:9b:ed:a9:55:a2:18:aa:40:a1:35:b8:e9: 07:f9:ee:b5:8a:ae:9e:63:83:89:0e:a4:02:f8:69:19:c3:8d: 02:b7:d3:41:bc:58:fc:5f:7b:69:2d:54:e4:6b:91:de:fc:16: 77:6d:c6:00:b7:ef:45:98:b1:cb:7e:8a:f4:61:34:d9:4f:a6: 39:24:b2:38:d8:75:d3:51:be:03:e1:38:c0:93:65:86:a7:01: 15:1b:2a:26:54:67:0f:eb:86:fd:1f:ce:4c:df:cb:0b:74:f1: f7:c4:b7:47:65:aa:1f:74:1d:53:b0:02:d9:10:72:e6:06:ac: b3:6b:18:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu2ziBGmkx71nd2VXuUzctuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjE1NDI4YTRiNWJlNWU3M2U3ZDIyODJiNTFjODE5YWVh MzhmOWIwHhcNMjYwMTEzMTAwMjAwWhcNMjYwMTE0MTAwMjAwWjAzMTEwLwYDVQQD EygzNjMzOGU3MWY1ODMyYWFkN2E2MDZhZWJmMDYyYTdmZDk1NDNmZDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2mAbCBH72d9okfTAfGwIOkBdkRa uLmmjWSs9lhyCUi30Btfu2HkKFR8v21c2AfiFFkyDhmdbIQF6ppgErvYpq1AdqwK fdl3OC0ipb4TgjWvxYcd46P1ugFtDZntBxaYenrlxRj0uI2K/mQdlbW9EpEEnIw2 1y9rB6aP9KocRuRSX/KT29bX3JvqNKb9kWymJ6S8unS5S/mTKBPK+qRF2JNRKzCF Wt/KA1U5MpUvQPpMWaglu2X1td0yHXIjCYrVbfOGBSj3oj/FyRWu/aJgV2c7voB3 xzI/2BAoH+YpbWx75XOF6jjS+nwFdCqjH7m338By2gbAPc7NQLBYbpFZiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYzjnH1gyqtemBq6/Bip/2VQ/1YMB8GA1UdIwQY MBaAFA7xVCiktb5ec+fSKCtRyBmuo4+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZGVUtLUzF2bDV6NTlJb0sxSElHYTZqajVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84MDUzNTYtOTU5Zi00MWM1LTk5YjYt OTI3NDkyMGRjYWExLzEvRHZGVUtLUzF2bDV6NTlJb0sxSElHYTZqajVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS84MDUzNTYtOTU5Zi00MWM1LTk5YjYtOTI3NDkyMGRjYWEx LzEvRHZGVUtLUzF2bDV6NTlJb0sxSElHYTZqajVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUOtos0z y1BP7IiEFD2FbNkkHn3TeNNwILF/11sSzotc/aUfSaaX+i+//zeBePacz70NbLXx XjYubNv6/6vRhewT60nhn690XiMEWDezhFMLMsEUMrhbbHxohjzXONkI58uAGLS6 vdHbQAk/66ZkDA5PsCxCdfMAq+04O9mJGIyee425m+2pVaIYqkChNbjpB/nutYqu nmODiQ6kAvhpGcONArfTQbxY/F97aS1U5GuR3vwWd23GALfvRZixy36K9GE02U+m OSSyONh101G+A+E4wJNlhqcBFRsqJlRnD+uG/R/OTN/LC3Tx98S3R2WqH3QdU7AC 2RBy5gass2sYrQ== -----END CERTIFICATE-----Generated at Tue Jan 13 14:35:53 2026 by rpki-client