This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json) Hash identifier: pQf2ULE9bBUeWiG0kycT9L5OS9RNGHNsLmi3JzfSD9k= Subject key identifier: DC:0D:EF:10:FF:33:5F:31:7B:49:31:97:25:0D:8E:42:35:DE:03:EB Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Certificate serial: 019BD01EF107C419F79FB7114946FA634BA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft Manifest number: 17DB Signing time: Sun 18 Jan 2026 08:00:47 +0000 Manifest this update: Sun 18 Jan 2026 08:00:47 +0000 Manifest next update: Mon 19 Jan 2026 08:00:47 +0000 Files and hashes: 1: 4ULYQtUd4oJTzwLazC-kDlXIDUE.roa (hash: KhGm2r25s8XUb5ohnzrZIMa245c7C+KlzncTxFjIUB4=) 2: 9-60Vxc-2LQ_XkxstJ8I6v1xPNs.roa (hash: WclfYio0mTJ2QQD9rGT9niYV0PM8Tw05+SJZh2ziUhE=) 3: FgD3i787dasnALIIYuH3e6U1ois.roa (hash: IiclAO9/IgFiRpz2R3UneuZ658FynS73rRUd7jq8FE8=) 4: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: lmAke6RDahlbOFJtMAMe2Goj7hUYZbSuT4gNWIkWMWY=) 5: YaZXtt4CBX_dPogFy216OZ32jZ8.roa (hash: MMlcUYaXZ5PcPwOs7IfmUuTH4RAjSxkjD0El5fES9Mc=) 6: kJQetrV-a7PlueelK5ZilEbrbWM.roa (hash: 3ET1YZ9mSVr1pquKi0EboaaGsreV0ZtB2F3dmPlo6j8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:1e:f1:07:c4:19:f7:9f:b7:11:49:46:fa:63:4b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Validity Not Before: Jan 18 08:00:47 2026 GMT Not After : Jan 19 08:00:47 2026 GMT Subject: CN=dc0def10ff335f317b493197250d8e4235de03eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e8:a1:24:0e:48:8f:de:ba:34:75:39:93:31: ee:e8:78:8e:61:c8:4e:9e:22:bf:67:44:2c:5f:f6: fd:d5:98:7c:62:8e:95:b1:62:0b:7f:59:2f:64:ac: 7d:9d:73:34:75:dd:6e:90:bf:de:1e:7d:9e:d6:e3: 75:5b:9c:97:14:5a:d4:3e:f4:82:c8:d3:15:85:1b: 8b:c0:8a:7e:59:c1:05:ec:2d:e6:6e:1e:1c:e0:3b: ba:91:80:d9:d5:85:a5:0a:fb:c3:31:e1:42:bc:be: 1c:0a:7d:6b:c4:5d:26:99:40:81:38:cc:f7:a2:8f: c5:00:05:e6:d8:34:19:05:a4:d7:d2:80:af:3e:ad: 4c:b5:59:88:0f:5a:88:ce:54:9a:e7:ce:51:de:05: 8c:d8:4a:03:1d:01:57:47:c0:32:27:32:1b:99:c7: 32:59:8a:b3:4c:d1:d4:1a:36:d8:e7:38:e5:b2:17: cf:8f:7e:fa:c1:7b:53:9d:f4:de:5d:27:3e:03:ea: 49:df:ea:6b:df:39:a0:ee:36:d4:7a:93:46:8a:75: 52:13:b9:f9:5e:6d:1c:ee:08:88:1c:1b:95:8e:f0: 20:69:c6:7c:0c:1a:3e:4c:fd:84:fd:b4:67:5f:21: a6:a5:02:a1:80:c6:60:b0:00:a3:8f:c3:18:a3:35: c7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0D:EF:10:FF:33:5F:31:7B:49:31:97:25:0D:8E:42:35:DE:03:EB X509v3 Authority Key Identifier: keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:d0:6d:9f:45:f3:7a:30:d8:1c:66:78:20:c1:a4:20:da:6f: 38:9e:6c:0e:ca:a9:9f:40:58:b3:93:a4:af:1f:b0:d3:c1:2c: a7:bc:75:d7:22:a1:5c:45:b2:81:eb:fd:20:67:7b:df:2d:4d: e3:59:d8:5c:92:9b:93:7f:da:fd:fc:da:db:d4:dd:e2:36:d7: e9:10:9a:57:fc:49:c2:48:52:c7:8a:d9:fc:61:af:d7:7a:1c: 95:4a:f6:88:d0:9c:ec:67:00:81:53:82:2c:f2:3a:a4:15:4e: f6:89:dc:40:8a:37:1d:4d:ce:91:41:7b:bc:50:04:48:35:e8: 2f:fc:85:cb:82:4d:62:4e:f5:99:f7:16:65:ed:c0:aa:73:70: 9d:9e:7b:96:29:71:a1:77:ec:8f:a1:20:b8:fe:81:c5:2b:27: 56:a6:1c:c2:60:43:d6:a6:21:18:3f:77:c6:22:12:dc:b1:87: fd:e8:2d:c4:16:6c:78:0f:cf:0c:99:e3:f3:fc:fe:a9:a1:33: 13:dc:ba:2a:e8:88:3a:c0:e6:15:14:44:25:34:9a:82:d9:59: df:a6:0a:29:8a:51:6f:87:8e:8d:31:ba:d4:f6:9b:98:31:a1: 28:e8:cf:b2:58:19:48:80:37:a0:7f:ee:a0:f3:16:38:7a:ae: e1:e9:de:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvQHvEHxBn3n7cRSUb6Y0upMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMjdhNjMxYmI2NzM4ZWI2OGJiNmVhNmM0MjRlZjRhN2Qx NGMzY2IwHhcNMjYwMTE4MDgwMDQ3WhcNMjYwMTE5MDgwMDQ3WjAzMTEwLwYDVQQD EyhkYzBkZWYxMGZmMzM1ZjMxN2I0OTMxOTcyNTBkOGU0MjM1ZGUwM2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuihJA5Ij966NHU5kzHu6HiOYchO niK/Z0QsX/b91Zh8Yo6VsWILf1kvZKx9nXM0dd1ukL/eHn2e1uN1W5yXFFrUPvSC yNMVhRuLwIp+WcEF7C3mbh4c4Du6kYDZ1YWlCvvDMeFCvL4cCn1rxF0mmUCBOMz3 oo/FAAXm2DQZBaTX0oCvPq1MtVmID1qIzlSa585R3gWM2EoDHQFXR8AyJzIbmccy WYqzTNHUGjbY5zjlshfPj376wXtTnfTeXSc+A+pJ3+pr3zmg7jbUepNGinVSE7n5 Xm0c7giIHBuVjvAgacZ8DBo+TP2E/bRnXyGmpQKhgMZgsACjj8MYozXH1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwN7xD/M18xe0kxlyUNjkI13gPrMB8GA1UdIwQY MBaAFDAnpjG7ZzjraLtupsQk70p9FMPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYt MWRkNmQyODFjODhhLzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYtMWRkNmQyODFjODhh LzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsdBtn0Xz ejDYHGZ4IMGkINpvOJ5sDsqpn0BYs5Okrx+w08Esp7x11yKhXEWygev9IGd73y1N 41nYXJKbk3/a/fza29Td4jbX6RCaV/xJwkhSx4rZ/GGv13oclUr2iNCc7GcAgVOC LPI6pBVO9oncQIo3HU3OkUF7vFAESDXoL/yFy4JNYk71mfcWZe3AqnNwnZ57lilx oXfsj6EguP6BxSsnVqYcwmBD1qYhGD93xiIS3LGH/egtxBZseA/PDJnj8/z+qaEz E9y6KuiIOsDmFRREJTSagtlZ36YKKYpRb4eOjTG61PabmDGhKOjPslgZSIA3oH/u oPMWOHqu4eneSg== -----END CERTIFICATE-----Generated at Sun Jan 18 10:09:19 2026 by rpki-client