This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json) Hash identifier: zwbLRlcO+yOHXgdn6TRrHBbybY8Vv+JZme8GQa/EdrM= Subject key identifier: 63:13:A5:0A:13:33:78:92:A2:5E:02:19:85:1B:8F:8D:FD:6C:C3:ED Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c Certificate serial: 019BAE38B82A47844D114788EE20AC323F5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft Manifest number: 04B6 Signing time: Sun 11 Jan 2026 18:01:51 +0000 Manifest this update: Sun 11 Jan 2026 18:01:51 +0000 Manifest next update: Mon 12 Jan 2026 18:01:51 +0000 Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: aGtHejDItidzCkAgQi5liazZPAY2/DDr1HinQrhFPgc=) 2: w8wkCFScjGQvdttAQ8x_xzp50Xk.roa (hash: w/c38fhRy3be0XuDkxP9zkUOolRFgZszn3JD1Qb99Vw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:38:b8:2a:47:84:4d:11:47:88:ee:20:ac:32:3f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c Validity Not Before: Jan 11 18:01:51 2026 GMT Not After : Jan 12 18:01:51 2026 GMT Subject: CN=6313a50a13337892a25e0219851b8f8dfd6cc3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1f:b9:93:a8:14:22:96:6e:fd:52:ca:cf:a1: 09:ae:d5:ac:95:bd:65:7f:b5:cb:3e:5c:49:d3:a5: 7c:61:8c:13:27:6b:ed:82:96:7c:68:d6:73:bd:d7: cf:9a:b0:42:6b:5a:88:76:1c:a9:36:63:b7:d9:b9: 54:46:bf:33:57:03:96:e5:47:f0:31:fc:4c:4a:33: 26:76:dd:41:e7:2e:53:ea:81:1d:5d:f5:7a:34:e8: e1:4b:9e:76:99:58:e7:fa:a6:c5:e2:29:a6:00:e9: 78:38:e9:4b:33:77:3b:29:a1:dd:8a:bf:bd:40:32: 03:38:62:c1:fd:48:3e:50:bc:6e:75:c2:d3:37:5b: 26:77:4d:bb:f4:fb:85:37:96:0c:62:21:ea:b1:86: 11:08:61:40:85:f3:31:67:ef:73:ac:7d:66:5e:2d: 95:58:7f:88:c5:e1:4d:b5:64:e7:21:23:89:c4:e9: d1:00:5d:ab:d8:95:bc:23:58:9e:58:c4:4d:00:ad: 42:bb:42:b0:b6:fd:ea:eb:e9:a2:9f:1f:7b:e0:00: 11:ef:5a:e3:bb:ff:e3:a3:02:57:2d:ad:62:b3:cb: 0e:f8:20:c0:ca:89:8e:22:c4:12:cc:95:16:af:42: 7e:97:b9:52:dd:e7:5d:76:0b:fc:d4:d1:38:40:95: 43:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:13:A5:0A:13:33:78:92:A2:5E:02:19:85:1B:8F:8D:FD:6C:C3:ED X509v3 Authority Key Identifier: keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d2:6a:6f:67:f1:6e:61:1d:1d:91:86:24:46:24:cb:d8:7b: fc:77:90:a1:6d:82:e0:1d:f6:f1:81:38:db:6e:0c:ed:2f:26: 9c:67:60:3d:b0:8c:9c:c7:b9:70:20:08:5a:6a:6e:ff:d4:26: cb:52:dc:2e:da:14:31:8b:4a:d5:97:c8:09:87:fc:6f:bd:e5: 38:dc:1b:4b:b4:2f:5c:a5:ef:40:8a:0e:3a:78:64:c8:34:0e: 7a:4a:60:b7:f6:94:43:0a:43:e1:42:f1:de:0d:22:a8:86:b2: 13:a8:4c:95:f9:03:0c:98:10:06:62:1c:9f:6e:fc:45:11:8c: 00:40:62:b6:a3:4b:a6:35:c3:a6:79:d9:e6:fc:a9:0c:ee:6a: 9f:b0:74:82:60:a2:70:7d:13:ce:f5:91:ea:51:c5:73:8d:49: 0a:31:5d:fe:87:b2:c2:0a:df:89:da:12:25:ea:a7:0b:24:3e: 32:c6:2a:a8:f1:fd:28:66:df:a7:67:f1:e6:16:40:2a:b3:0a: 93:7e:6f:54:0b:a5:01:fd:35:cb:99:c4:de:26:ad:cf:3b:9a: 99:73:27:c1:6c:8f:20:d9:8a:a3:10:24:35:54:da:d9:f0:0b: 21:db:80:5a:4d:7f:76:94:cb:b3:2d:7f:7a:be:66:9e:47:3f: 0e:12:21:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuuOLgqR4RNEUeI7iCsMj9dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNWNmNzA3MzA1MTJhZWZhNzAzMDc2NjJjZjU5Mjg4ZThj ZDI2NGMwHhcNMjYwMTExMTgwMTUxWhcNMjYwMTEyMTgwMTUxWjAzMTEwLwYDVQQD Eyg2MzEzYTUwYTEzMzM3ODkyYTI1ZTAyMTk4NTFiOGY4ZGZkNmNjM2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB+5k6gUIpZu/VLKz6EJrtWslb1l f7XLPlxJ06V8YYwTJ2vtgpZ8aNZzvdfPmrBCa1qIdhypNmO32blURr8zVwOW5Ufw MfxMSjMmdt1B5y5T6oEdXfV6NOjhS552mVjn+qbF4immAOl4OOlLM3c7KaHdir+9 QDIDOGLB/Ug+ULxudcLTN1smd0279PuFN5YMYiHqsYYRCGFAhfMxZ+9zrH1mXi2V WH+IxeFNtWTnISOJxOnRAF2r2JW8I1ieWMRNAK1Cu0Kwtv3q6+minx974AAR71rj u//jowJXLa1is8sO+CDAyomOIsQSzJUWr0J+l7lS3edddgv81NE4QJVDRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMTpQoTM3iSol4CGYUbj439bMPtMB8GA1UdIwQY MBaAFAxc9wcwUSrvpwMHZiz1kojozSZMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMt YWRmYzcyZWYwZGZhLzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMtYWRmYzcyZWYwZGZh LzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9Jqb2fx bmEdHZGGJEYky9h7/HeQoW2C4B328YE4224M7S8mnGdgPbCMnMe5cCAIWmpu/9Qm y1LcLtoUMYtK1ZfICYf8b73lONwbS7QvXKXvQIoOOnhkyDQOekpgt/aUQwpD4ULx 3g0iqIayE6hMlfkDDJgQBmIcn278RRGMAEBitqNLpjXDpnnZ5vypDO5qn7B0gmCi cH0TzvWR6lHFc41JCjFd/oeywgrfidoSJeqnCyQ+MsYqqPH9KGbfp2fx5hZAKrMK k35vVAulAf01y5nE3iatzzuamXMnwWyPINmKoxAkNVTa2fALIduAWk1/dpTLsy1/ er5mnkc/DhIhhw== -----END CERTIFICATE-----Generated at Sun Jan 11 23:55:09 2026 by rpki-client