This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft File: mRQlj7nTZXszdhQr_GPazk-CEcQ.mft (raw, json) Hash identifier: xew/kNPDZiBGvL/eSgFkBiq9Z9TB7F4yGfnooiPKjFs= Subject key identifier: 2D:44:DA:51:54:DA:7A:64:8B:28:80:B3:B6:89:89:E5:69:EE:0A:AE Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4 Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4 Certificate serial: 019BFBE519ECC78894B890D24F6294647689 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 20:00:54 +0000 Manifest this update: Mon 26 Jan 2026 20:00:54 +0000 Manifest next update: Tue 27 Jan 2026 20:00:54 +0000 Files and hashes: 1: YeKyHo-fPzS0PXLTVc_ZhuOAnDE.roa (hash: JasqN/dFTwUl8qybymMvb6Z/5LOD9789U3Jts0vT2yw=) 2: mRQlj7nTZXszdhQr_GPazk-CEcQ.crl (hash: C7RmQbiPPC8fPD4BCx+NriypZ0Kb/Ds5NCmAwP9//WE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e5:19:ec:c7:88:94:b8:90:d2:4f:62:94:64:76:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4 Validity Not Before: Jan 26 20:00:54 2026 GMT Not After : Jan 27 20:00:54 2026 GMT Subject: CN=2d44da5154da7a648b2880b3b68989e569ee0aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:8b:4a:da:30:9d:9a:3f:0a:81:3c:6a:32: ca:7c:98:42:39:0e:c4:53:e5:75:fe:c7:45:fe:ec: 12:25:26:33:5f:05:95:6a:e3:79:c8:8a:a1:8e:f7: 5c:63:3e:04:ae:53:df:64:c0:ec:d0:34:b3:77:9b: dc:e8:4e:ed:da:fc:78:0b:d3:35:57:c2:f6:a7:5b: fe:ef:27:bb:bf:ce:36:d6:09:d0:fe:6d:86:07:4f: e6:e0:24:5c:a0:6b:8f:44:e6:a8:81:1f:fd:3c:9a: 06:0a:84:26:85:de:fc:60:e0:80:19:f8:b6:b9:4b: 0c:62:b8:5c:ac:0f:23:a7:3c:f0:40:98:53:a8:e0: fb:c6:2e:8b:6a:f9:9e:62:5b:b3:e0:6f:4a:a3:32: c1:67:5b:49:cf:81:ea:14:ab:ed:56:4f:bb:c7:9a: f3:c8:e1:f2:bd:69:39:08:d1:79:36:c6:0f:11:d9: 02:a2:7b:a0:f1:f2:9f:9f:f4:67:95:b5:50:df:3a: a0:ba:18:f0:64:56:21:a9:dc:3a:85:74:d2:86:96: 75:47:b2:a4:c4:d6:2c:5f:c1:0b:56:bd:49:da:b7: c1:62:6f:90:c5:01:02:01:ed:11:2b:36:0d:82:ea: d5:9f:11:fe:f5:18:14:ad:26:7c:be:91:8d:25:77: e9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:44:DA:51:54:DA:7A:64:8B:28:80:B3:B6:89:89:E5:69:EE:0A:AE X509v3 Authority Key Identifier: keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:58:33:e8:82:36:06:20:07:0d:c4:fd:3f:90:d9:76:75:7c: 26:ad:2b:fc:08:92:73:c4:1b:14:09:e0:f0:e4:6f:0e:6d:95: b7:98:1e:02:6d:43:c5:32:69:30:b0:75:74:65:91:3b:b8:e9: d8:b2:9a:db:3a:43:51:0d:92:7c:b3:2e:05:95:19:83:d3:0a: 1c:42:4e:35:37:56:11:98:2e:ba:65:9c:6d:f3:09:76:e5:e0: e8:4d:f5:20:2f:79:8c:ef:d5:89:ec:79:b8:4c:a3:17:68:2d: 13:e3:91:1c:e0:7d:0e:8a:13:a7:36:06:63:35:f7:5e:c0:c2: c7:f4:ce:91:72:c2:b4:e3:08:67:c1:e4:59:ef:71:ae:85:da: 90:d2:d0:8f:54:db:76:27:de:9a:7c:2a:22:eb:90:d1:44:0b: de:93:5f:d7:17:3e:32:3f:35:14:12:fe:48:53:fd:7a:34:b5: 4b:7f:16:17:62:ac:b7:8f:61:9a:bf:d8:d5:b0:67:5d:29:5f: 1c:9c:42:7e:d7:3f:f0:cc:6d:96:a6:ec:ec:b9:49:00:2d:87: 35:cd:3f:3e:9b:31:ae:ae:f8:95:5d:f0:53:85:b1:6e:6b:b8: 38:d0:51:8b:54:0e:96:68:3d:43:89:be:74:63:58:a0:8d:6d: 36:90:78:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75Rnsx4iUuJDST2KUZHaJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MTQyNThmYjlkMzY1N2IzMzc2MTQyYmZjNjNkYWNlNGY4 MjExYzQwHhcNMjYwMTI2MjAwMDU0WhcNMjYwMTI3MjAwMDU0WjAzMTEwLwYDVQQD EygyZDQ0ZGE1MTU0ZGE3YTY0OGIyODgwYjNiNjg5ODllNTY5ZWUwYWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY2LStownZo/CoE8ajLKfJhCOQ7E U+V1/sdF/uwSJSYzXwWVauN5yIqhjvdcYz4ErlPfZMDs0DSzd5vc6E7t2vx4C9M1 V8L2p1v+7ye7v8421gnQ/m2GB0/m4CRcoGuPROaogR/9PJoGCoQmhd78YOCAGfi2 uUsMYrhcrA8jpzzwQJhTqOD7xi6LavmeYluz4G9KozLBZ1tJz4HqFKvtVk+7x5rz yOHyvWk5CNF5NsYPEdkConug8fKfn/RnlbVQ3zqguhjwZFYhqdw6hXTShpZ1R7Kk xNYsX8ELVr1J2rfBYm+QxQECAe0RKzYNgurVnxH+9RgUrSZ8vpGNJXfpXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1E2lFU2npkiyiAs7aJieVp7gquMB8GA1UdIwQY MBaAFJkUJY+502V7M3YUK/xj2s5PghHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVJRbGo3blRaWHN6ZGhRcl9HUGF6ay1DRWNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84NjY0MWUtNjY5Yy00YThkLWFlMGIt ZmUzNDFiMzAwNWUzLzEvbVJRbGo3blRaWHN6ZGhRcl9HUGF6ay1DRWNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS84NjY0MWUtNjY5Yy00YThkLWFlMGItZmUzNDFiMzAwNWUz LzEvbVJRbGo3blRaWHN6ZGhRcl9HUGF6ay1DRWNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVgz6II2 BiAHDcT9P5DZdnV8Jq0r/AiSc8QbFAng8ORvDm2Vt5geAm1DxTJpMLB1dGWRO7jp 2LKa2zpDUQ2SfLMuBZUZg9MKHEJONTdWEZguumWcbfMJduXg6E31IC95jO/Viex5 uEyjF2gtE+ORHOB9DooTpzYGYzX3XsDCx/TOkXLCtOMIZ8HkWe9xroXakNLQj1Tb difemnwqIuuQ0UQL3pNf1xc+Mj81FBL+SFP9ejS1S38WF2Kst49hmr/Y1bBnXSlf HJxCftc/8Mxtlqbs7LlJAC2HNc0/Ppsxrq74lV3wU4Wxbmu4ONBRi1QOlmg9Q4m+ dGNYoI1tNpB4WA== -----END CERTIFICATE-----Generated at Tue Jan 27 00:10:04 2026 by rpki-client