This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft File: DTVYVGosVLvYEqGSKKqY4HjTqmg.mft (raw, json) Hash identifier: h5lQEgHi9MCTCSyxRFKYbhCKToojLz5knRxU6npN8PI= Subject key identifier: 14:F3:6F:24:60:48:0C:1A:0F:FB:DC:7D:36:BF:9F:64:1B:31:C1:90 Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Certificate serial: 019B7F70F46FD332204C6B19AA48C8441D46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft Manifest number: 0640 Signing time: Fri 02 Jan 2026 16:01:07 +0000 Manifest this update: Fri 02 Jan 2026 16:01:07 +0000 Manifest next update: Sat 03 Jan 2026 16:01:07 +0000 Files and hashes: 1: 0kFTRKOE3jWGCAoyPfo6VNl6gNY.roa (hash: il4KXb3o4UsVQZBTVvlrB+YuKW6gXafGwP3odHFQM4k=) 2: 7dxEnT1CfSxLe7_sqKtwcYTqKsM.roa (hash: QclYUg3Wd/a2IKDACLA5HXN28WB2Yrc+C32YeqYRisk=) 3: 9B82YcNnUprt-4KUyQd_1s9v9Xs.roa (hash: 9bZCGC4PdB/89RTJWYuGX2hvdz0O1wHHsW+fifHAss8=) 4: DTVYVGosVLvYEqGSKKqY4HjTqmg.crl (hash: cMxvruYez8jfbWKNvkX9GciW7xziDqEQrwNiPa+/SNc=) 5: D_vjqcKu-RrA1L9-NPBKRQy6u2w.roa (hash: +7JpMBrIwFcMPab0ahGtI2QPpD0AvXli50PzvLVY2SU=) 6: F6ReykvnwBeQdGSlwzXJzlYN8dg.roa (hash: s4VCcqJJfryWhoNKP5oyEvMnzjY6svyk5wyKPWs9bvE=) 7: Gay3j7r5bMuL1O3lqGZJU_WbCJA.roa (hash: 8Z1yEawpjvuXMIl7aRVa0CurHKu9yij+BtnWRFN4QL4=) 8: HxYp59riIlza87eFARnMPYgySWE.roa (hash: IbWFXF9QrKF/nXu4+XYR7TDUvfZ6vCunnlKcD+Se6xU=) 9: bfjrc-oiggd1qo6rctoBZsBjqBA.roa (hash: gT8ybax2ALNt41GPsw02TSXazlNeSoaU2pZJZ58CxTY=) 10: gy_RIzTwo_3ivq0rBuKmnXuwaM4.roa (hash: tCWSNQOzb9A+PPchWiIZ5rJnBeXKzzZ8nzXvj/Dyy5Y=) 11: magE7Oqvt4vQBy0S0W-6ngBkDPE.roa (hash: lje+xFMlOYI2U2KnAHNmX1xI+2awOlplYxa8y2jo/S0=) 12: vcGSAq_UFOrKcbjq8gwdxfB1Ibo.roa (hash: 3NDxRub2Y5A+FcimvidA2GMSTgfLKOnltwEtyfMEJ1E=) 13: yB_CfrIGe_rOQ30-OH4e0E-bsAk.roa (hash: VN5DLkVVpohVvi5e8W8Tot76S9TCt+6OKSkdhXkpmYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:70:f4:6f:d3:32:20:4c:6b:19:aa:48:c8:44:1d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Validity Not Before: Jan 2 16:01:07 2026 GMT Not After : Jan 3 16:01:07 2026 GMT Subject: CN=14f36f2460480c1a0ffbdc7d36bf9f641b31c190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:63:68:c3:e4:02:68:a1:fb:f5:97:3c:76:e1: e0:5c:14:93:a9:84:1e:2a:31:b4:76:e8:20:2b:a8: 41:1e:93:b0:3f:a5:39:2a:71:27:d4:08:7f:2d:c7: 9f:c7:7d:02:99:fa:05:68:c2:96:6d:1c:a9:73:8c: ef:df:10:89:4b:9c:91:a7:b6:f9:d6:ae:5a:af:64: 44:37:0a:65:59:fc:12:70:10:8f:8b:21:02:fa:90: 44:fc:d7:cb:30:a8:ea:b4:8f:ca:73:25:65:92:00: 59:36:37:4a:5f:fb:77:62:da:07:c7:ce:e4:dd:33: 1c:19:29:78:e6:f2:49:b1:95:bf:84:6c:34:1e:b1: 0c:41:ed:d5:a4:51:49:d2:80:ed:c9:2e:b6:61:c2: c8:7e:b0:44:3d:91:0a:6a:b0:06:d7:fe:17:d6:ce: 40:46:cf:cc:85:94:d5:4f:ec:60:9b:f5:44:66:9c: 68:2a:c1:8c:70:3f:87:b4:02:50:6b:31:94:33:0a: 2d:a4:b6:1f:f2:da:5e:2c:bb:c8:32:fc:55:f2:64: de:77:54:af:08:1d:06:e9:b7:74:41:35:24:9f:7c: 6c:f3:00:b4:82:cd:cc:9a:ca:08:35:b5:12:cc:dd: dc:19:88:63:8f:6c:50:6d:4e:15:b4:65:83:f3:a1: 2a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F3:6F:24:60:48:0C:1A:0F:FB:DC:7D:36:BF:9F:64:1B:31:C1:90 X509v3 Authority Key Identifier: keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:a9:11:4c:d4:94:a2:62:3a:11:7e:85:56:20:48:d4:9e:28: e0:dd:a5:0d:b5:d2:1f:d7:56:78:45:cc:f6:af:b4:a7:53:bf: aa:32:de:cf:ef:e0:5a:f5:5c:d3:b5:e4:2d:29:5e:a0:f3:c5: 2b:fa:20:4e:34:2f:a3:a0:bf:17:dd:ed:90:a0:94:ac:4b:42: 85:1b:e4:c3:5d:c1:0b:77:95:b3:1f:49:33:28:76:d4:13:72: 9e:8e:15:ff:c9:39:76:75:a4:70:45:8d:aa:12:0c:33:82:8b: cf:c9:82:ba:e6:f9:36:c6:a3:c8:5c:a9:50:52:b4:6d:6c:8c: 6e:08:c8:04:42:6d:30:68:16:9a:d7:3c:9d:48:38:cf:06:3d: 07:86:59:eb:97:a1:90:d1:9c:d2:15:9c:a6:be:c5:ad:44:09: 3f:f2:47:07:d3:a6:85:6e:b2:42:bf:a4:cb:78:39:2e:ea:1c: b0:82:86:79:01:ec:d9:78:5f:fd:0f:78:a8:81:01:bc:ed:02: fc:5d:01:61:43:30:90:a8:b9:46:dc:4a:71:ae:02:18:0f:d8: ce:39:e5:47:c3:5a:89:9c:34:34:d5:86:10:a8:97:c2:b6:4a: 14:32:a0:19:60:b1:66:7d:44:03:04:35:23:20:01:e4:33:55: d5:92:16:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/cPRv0zIgTGsZqkjIRB1GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk M2FhNjgwHhcNMjYwMTAyMTYwMTA3WhcNMjYwMTAzMTYwMTA3WjAzMTEwLwYDVQQD EygxNGYzNmYyNDYwNDgwYzFhMGZmYmRjN2QzNmJmOWY2NDFiMzFjMTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmNow+QCaKH79Zc8duHgXBSTqYQe KjG0duggK6hBHpOwP6U5KnEn1Ah/Lcefx30CmfoFaMKWbRypc4zv3xCJS5yRp7b5 1q5ar2RENwplWfwScBCPiyEC+pBE/NfLMKjqtI/KcyVlkgBZNjdKX/t3YtoHx87k 3TMcGSl45vJJsZW/hGw0HrEMQe3VpFFJ0oDtyS62YcLIfrBEPZEKarAG1/4X1s5A Rs/MhZTVT+xgm/VEZpxoKsGMcD+HtAJQazGUMwotpLYf8tpeLLvIMvxV8mTed1Sv CB0G6bd0QTUkn3xs8wC0gs3MmsoINbUSzN3cGYhjj2xQbU4VtGWD86EqrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTzbyRgSAwaD/vcfTa/n2QbMcGQMB8GA1UdIwQY MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt MTMyZmZjOGJkZTQ2LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2 LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKkRTNSU omI6EX6FViBI1J4o4N2lDbXSH9dWeEXM9q+0p1O/qjLez+/gWvVc07XkLSleoPPF K/ogTjQvo6C/F93tkKCUrEtChRvkw13BC3eVsx9JMyh21BNyno4V/8k5dnWkcEWN qhIMM4KLz8mCuub5NsajyFypUFK0bWyMbgjIBEJtMGgWmtc8nUg4zwY9B4ZZ65eh kNGc0hWcpr7FrUQJP/JHB9OmhW6yQr+ky3g5LuocsIKGeQHs2Xhf/Q94qIEBvO0C /F0BYUMwkKi5RtxKca4CGA/YzjnlR8NaiZw0NNWGEKiXwrZKFDKgGWCxZn1EAwQ1 IyAB5DNV1ZIWBA== -----END CERTIFICATE-----Generated at Fri Jan 2 23:29:25 2026 by rpki-client