This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft File: mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft (raw, json) Hash identifier: CWPGAcrQylsuzDT04FvaAFIzWNxkz6h8GCp0lOIrnXQ= Subject key identifier: 42:87:56:DB:A8:02:F1:46:BD:FF:A2:CF:1F:AD:95:75:6A:BD:46:03 Authority key identifier: 98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B Certificate issuer: /CN=98845584ac8094c1806b73a6f53e46b9a28e812b Certificate serial: 019BF9F6D38C68CC50D5BAB2741652A8BF93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 11:01:01 +0000 Manifest this update: Mon 26 Jan 2026 11:01:01 +0000 Manifest next update: Tue 27 Jan 2026 11:01:01 +0000 Files and hashes: 1: celudLIkwqQs5BVcabVek4AUA_8.roa (hash: Z6ja4JJYaOm0UOAS7DT4QbK0buCK6md62bjvBxBcr0o=) 2: mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl (hash: 9Uhqy77Gj1G53CAc7rXx2oQPBrKjGokugtnVmc6xu6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:d3:8c:68:cc:50:d5:ba:b2:74:16:52:a8:bf:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98845584ac8094c1806b73a6f53e46b9a28e812b Validity Not Before: Jan 26 11:01:01 2026 GMT Not After : Jan 27 11:01:01 2026 GMT Subject: CN=428756dba802f146bdffa2cf1fad95756abd4603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c5:e7:9b:a2:1b:bf:ea:c5:db:18:1e:44:97: 1a:3b:02:2b:73:7c:de:79:d6:ee:a3:32:68:cc:75: 0e:cf:c5:3c:d0:25:42:87:d0:d3:af:91:99:63:ce: be:82:e5:0f:d6:5e:dc:b0:80:48:17:cf:6f:71:bf: 0c:45:34:42:62:62:3f:d9:f9:df:b3:93:7f:89:85: 5a:e6:11:88:fb:7a:f5:67:17:6f:f9:fb:cf:bc:e3: 8d:ba:b5:32:87:7a:30:32:ab:55:a3:60:f5:3d:9a: 4e:63:7c:f1:1e:f4:e9:64:6a:55:94:84:56:f6:68: 16:52:ac:70:d7:6b:e5:6e:e8:2d:b0:81:c4:f3:6c: 88:7d:5b:e6:b1:ba:6f:59:9b:c4:c4:f4:10:3b:10: af:5e:db:d5:b6:b5:dc:cd:81:43:1f:40:cf:1d:46: 7b:f1:d9:88:b9:e3:3d:43:63:da:9f:4a:1f:5f:72: e7:a2:ef:ea:58:43:a3:af:7d:da:9b:af:8c:97:b6: 1b:f0:12:ac:a7:cb:c9:f7:a3:5c:27:81:3b:2c:42: 84:d8:f5:22:2b:e0:c5:74:98:fb:83:65:8d:c7:72: 2c:e5:6e:76:94:c2:60:2a:a2:26:bc:c4:bf:c1:04: 02:ac:2c:ab:2d:d9:a0:a9:0d:f3:b8:8a:1c:b3:0e: dd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:87:56:DB:A8:02:F1:46:BD:FF:A2:CF:1F:AD:95:75:6A:BD:46:03 X509v3 Authority Key Identifier: keyid:98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:4a:43:5f:77:c9:fe:1e:83:ee:99:62:93:c4:87:83:d4:58: 21:fc:b7:6c:cd:36:d0:3c:1d:4d:fb:ca:a4:a1:ae:96:55:80: 37:3b:a8:3b:c2:e7:ad:1d:95:1e:4a:51:21:7f:3d:5e:28:5a: 90:ce:80:0d:61:bf:98:eb:57:16:62:17:84:3c:f9:b7:51:11: 1d:ca:fd:b7:29:a6:36:85:0f:11:76:5c:28:a8:b9:04:88:e1: 02:c0:2f:3a:f9:76:aa:5a:8c:c7:78:17:9a:2b:af:71:8a:ac: c6:0b:b8:1f:be:7d:d0:be:d4:26:a5:83:3b:b7:ba:76:57:ec: 9b:32:e9:f8:94:53:bf:7e:3a:0b:21:0c:89:0c:c0:b7:e0:8a: 9c:05:40:8c:69:d6:5d:21:82:5b:aa:de:76:02:b9:4d:4d:4b: 03:39:1d:6d:1f:7c:c7:f7:f2:cc:36:e6:71:e3:98:c5:ba:9b: aa:04:4b:e3:cb:c7:e0:6d:ba:a5:e8:33:5e:de:12:0b:d1:f4: e0:cd:b0:31:ea:ab:0c:ca:18:c6:0b:1d:88:c1:57:72:4c:75: cd:b7:f0:24:d5:ee:7d:64:47:9a:a8:92:85:41:89:63:10:09: 97:8f:f2:50:b2:1e:08:f1:7f:60:22:3f:d8:6e:06:e6:7d:21: e0:a7:74:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59tOMaMxQ1bqydBZSqL+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ODQ1NTg0YWM4MDk0YzE4MDZiNzNhNmY1M2U0NmI5YTI4 ZTgxMmIwHhcNMjYwMTI2MTEwMTAxWhcNMjYwMTI3MTEwMTAxWjAzMTEwLwYDVQQD Eyg0Mjg3NTZkYmE4MDJmMTQ2YmRmZmEyY2YxZmFkOTU3NTZhYmQ0NjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sXnm6Ibv+rF2xgeRJcaOwIrc3ze edbuozJozHUOz8U80CVCh9DTr5GZY86+guUP1l7csIBIF89vcb8MRTRCYmI/2fnf s5N/iYVa5hGI+3r1Zxdv+fvPvOONurUyh3owMqtVo2D1PZpOY3zxHvTpZGpVlIRW 9mgWUqxw12vlbugtsIHE82yIfVvmsbpvWZvExPQQOxCvXtvVtrXczYFDH0DPHUZ7 8dmIueM9Q2Pan0ofX3Lnou/qWEOjr33am6+Ml7Yb8BKsp8vJ96NcJ4E7LEKE2PUi K+DFdJj7g2WNx3Is5W52lMJgKqImvMS/wQQCrCyrLdmgqQ3zuIocsw7dEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKHVtuoAvFGvf+izx+tlXVqvUYDMB8GA1UdIwQY MBaAFJiEVYSsgJTBgGtzpvU+RrmijoErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUlSVmhLeUFsTUdBYTNPbTlUNUd1YUtPZ1NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84MTMwMTAtYTk2Zi00NTEwLTlkYmMt MjFmNzc1MWNhNzZjLzEvbUlSVmhLeUFsTUdBYTNPbTlUNUd1YUtPZ1NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi84MTMwMTAtYTk2Zi00NTEwLTlkYmMtMjFmNzc1MWNhNzZj LzEvbUlSVmhLeUFsTUdBYTNPbTlUNUd1YUtPZ1NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUpDX3fJ /h6D7plik8SHg9RYIfy3bM020DwdTfvKpKGullWANzuoO8LnrR2VHkpRIX89Xiha kM6ADWG/mOtXFmIXhDz5t1ERHcr9tymmNoUPEXZcKKi5BIjhAsAvOvl2qlqMx3gX miuvcYqsxgu4H7590L7UJqWDO7e6dlfsmzLp+JRTv346CyEMiQzAt+CKnAVAjGnW XSGCW6redgK5TU1LAzkdbR98x/fyzDbmceOYxbqbqgRL48vH4G26pegzXt4SC9H0 4M2wMeqrDMoYxgsdiMFXckx1zbfwJNXufWRHmqiShUGJYxAJl4/yULIeCPF/YCI/ 2G4G5n0h4Kd01A== -----END CERTIFICATE-----Generated at Mon Jan 26 19:15:21 2026 by rpki-client