This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft File: MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json) Hash identifier: 9uA49ShzuVT5hyX8gNU1DzxVV1XqwE11wTiO8/On7/A= Subject key identifier: 42:CB:B1:6D:7E:6D:80:3A:06:D5:15:41:EE:CF:88:B7:0C:F3:B6:0F Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2 Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2 Certificate serial: 019BA4FE23043130B6E3094AB026D855BD89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft Manifest number: 17C1 Signing time: Fri 09 Jan 2026 23:01:17 +0000 Manifest this update: Fri 09 Jan 2026 23:01:17 +0000 Manifest next update: Sat 10 Jan 2026 23:01:17 +0000 Files and hashes: 1: 1M60qaJhRSuUuSKjtCEiVbyxjWQ.roa (hash: yeb95MQ1jWVaDNletMrd1A7+zn+xP4T23RlauaIghYw=) 2: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: QhQEb843Kt0sw4bTDp7qEVaXVGYbJD50dtwJRfkNpwk=) 3: dPSk-c4bH_WcHIoaoM8dNoTJhZs.roa (hash: N4nD9OuzOng1XYo/p2ucgs7hmPYqTpDYdJHoF2hlGak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a4:fe:23:04:31:30:b6:e3:09:4a:b0:26:d8:55:bd:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2 Validity Not Before: Jan 9 23:01:17 2026 GMT Not After : Jan 10 23:01:17 2026 GMT Subject: CN=42cbb16d7e6d803a06d51541eecf88b70cf3b60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:32:8d:4f:d3:d3:1a:fb:21:6a:70:a9:ec:dd: 57:7a:a5:a9:25:2c:30:a9:94:b5:6c:5d:ce:27:89: 10:80:da:09:fb:ec:3a:a8:95:c9:9a:fd:fb:5c:17: cf:78:3e:eb:96:eb:0f:7f:76:0b:c1:7b:dc:25:6f: 8f:63:d7:21:7e:86:28:54:9a:04:d7:b4:82:d1:01: 36:e4:4a:4c:46:7d:a6:e4:65:66:0c:a0:1b:83:60: 1b:76:7b:b5:f8:73:4c:7a:bd:f0:be:bc:da:d7:94: 26:37:40:a0:5b:83:f9:f7:42:ee:07:06:f6:47:98: 0b:39:87:4f:c0:a1:db:55:b6:f2:1d:19:d0:73:41: 94:d3:19:72:5d:85:c3:8e:e3:95:3f:88:b4:c4:04: 25:6b:17:e1:36:49:d0:93:da:c2:51:93:4e:a6:bd: 48:a2:ea:3e:de:ff:94:82:a7:99:d0:d8:9e:79:1f: e7:5a:de:46:4d:d7:f9:3b:9a:af:2a:c3:95:5a:6d: df:60:fd:fa:d7:10:40:95:77:82:88:b8:33:6c:cf: e5:7e:62:b6:82:ef:70:53:1f:ae:a9:e3:96:63:83: 58:32:f5:7a:3c:d2:dc:78:06:f8:3e:46:ae:96:0d: df:69:6f:7a:f5:d9:67:e7:6c:32:98:3f:e2:43:60: 5c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CB:B1:6D:7E:6D:80:3A:06:D5:15:41:EE:CF:88:B7:0C:F3:B6:0F X509v3 Authority Key Identifier: keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:2f:5a:2a:de:1e:49:85:8f:f9:c7:0e:5c:c3:52:ef:9d:ca: 88:dd:14:c2:4c:50:e3:b1:6b:46:89:d8:cc:2d:af:a9:9f:5c: 1b:61:0f:ab:26:91:3f:f6:ec:af:dc:fa:3f:38:4f:cc:76:c8: 34:c6:59:1e:32:76:84:aa:39:b3:9f:f3:ba:ac:3e:0e:1e:21: 6e:bf:3f:7f:32:71:1e:3f:1c:49:c6:fc:d5:6b:89:47:28:17: 4a:a5:7d:cf:27:25:6e:61:9b:3a:05:5e:01:5c:f3:b4:c9:22: 25:20:41:fc:cd:60:80:6f:79:87:87:05:11:6a:c6:27:6c:d7: 6c:a6:c0:54:d5:23:50:66:d9:56:dc:44:84:e5:ff:3b:2f:9c: 8b:60:cd:d0:fc:1f:a5:fd:4c:b5:b7:55:e9:01:d1:4c:c6:c6: c7:c9:6a:62:84:00:05:73:46:04:6f:a6:af:1e:1f:ac:91:a2: 51:7f:54:92:b3:8b:2b:f8:9b:1c:d4:b1:a9:14:cd:01:32:72: d0:08:3b:61:d4:3c:89:df:45:35:ab:3f:9f:ca:21:bc:65:81: fc:ba:7a:17:26:64:86:e4:9c:e7:09:2e:55:9e:fa:ba:6e:0d: e2:16:db:6f:73:7c:4d:e1:75:18:27:2f:a2:ba:92:e4:8a:e1: f8:8a:86:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuk/iMEMTC24wlKsCbYVb2JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwM2FhZTM3YmYzZWJmOTVmMTRiYWQ4NjQ3ZDNkNThlZjZl NzgzYjIwHhcNMjYwMTA5MjMwMTE3WhcNMjYwMTEwMjMwMTE3WjAzMTEwLwYDVQQD Eyg0MmNiYjE2ZDdlNmQ4MDNhMDZkNTE1NDFlZWNmODhiNzBjZjNiNjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DKNT9PTGvshanCp7N1XeqWpJSww qZS1bF3OJ4kQgNoJ++w6qJXJmv37XBfPeD7rlusPf3YLwXvcJW+PY9chfoYoVJoE 17SC0QE25EpMRn2m5GVmDKAbg2Abdnu1+HNMer3wvrza15QmN0CgW4P590LuBwb2 R5gLOYdPwKHbVbbyHRnQc0GU0xlyXYXDjuOVP4i0xAQlaxfhNknQk9rCUZNOpr1I ouo+3v+UgqeZ0NieeR/nWt5GTdf5O5qvKsOVWm3fYP361xBAlXeCiLgzbM/lfmK2 gu9wUx+uqeOWY4NYMvV6PNLceAb4Pkaulg3faW969dln52wymD/iQ2BcSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELLsW1+bYA6BtUVQe7PiLcM87YPMB8GA1UdIwQY MBaAFDA6rje/Pr+V8UuthkfT1Y7254OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2Qt ZDg1ODUzNjg4YjQzLzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2QtZDg1ODUzNjg4YjQz LzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmy9aKt4e SYWP+ccOXMNS753KiN0UwkxQ47FrRonYzC2vqZ9cG2EPqyaRP/bsr9z6PzhPzHbI NMZZHjJ2hKo5s5/zuqw+Dh4hbr8/fzJxHj8cScb81WuJRygXSqV9zyclbmGbOgVe AVzztMkiJSBB/M1ggG95h4cFEWrGJ2zXbKbAVNUjUGbZVtxEhOX/Oy+ci2DN0Pwf pf1MtbdV6QHRTMbGx8lqYoQABXNGBG+mrx4frJGiUX9UkrOLK/ibHNSxqRTNATJy 0Ag7YdQ8id9FNas/n8ohvGWB/Lp6FyZkhuSc5wkuVZ76um4N4hbbb3N8TeF1GCcv orqS5Irh+IqGtg== -----END CERTIFICATE-----Generated at Sat Jan 10 07:54:22 2026 by rpki-client