This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft File: MNWOQMbZHzcp5X4zRNMItZkv5G4.mft (raw, json) Hash identifier: 56VlsH4FYFtIF7zYoVnrlN951SW4GpHSDxRzJuNVWE4= Subject key identifier: 36:7C:BD:54:B5:B6:BA:39:3B:B3:F1:65:F1:8F:AE:E7:A7:C0:94:AB Authority key identifier: 30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E Certificate issuer: /CN=30d58e40c6d91f3729e57e3344d308b5992fe46e Certificate serial: 019BA7C8A97C1894DEFE6B5607DE2561C6E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft Manifest number: 0CB9 Signing time: Sat 10 Jan 2026 12:01:44 +0000 Manifest this update: Sat 10 Jan 2026 12:01:44 +0000 Manifest next update: Sun 11 Jan 2026 12:01:44 +0000 Files and hashes: 1: 3aS_biMuk3t6OSrvJyokC_jXDfU.roa (hash: uIA1uRbc2hX8KsAKbb90U8OFKc7TaqfJ9JatfJ5wndY=) 2: 4K-iSTTQ62k9u_ts6FEnNZujPB8.roa (hash: JFw4hB1oA1nXw9shAVgFEoq8dXT9KA58CiXxsf23Cvk=) 3: MNWOQMbZHzcp5X4zRNMItZkv5G4.crl (hash: 5dZfwm32yRPj04lSqDEwvLuApBf0lEjZhd5lhYquQnA=) 4: hLLZvlA7_aLzHqMN-k0zYYWqdoI.roa (hash: 11v4o65bjg9Zi3P8TmWqgVpKzKXaXy9HU3XbxQsjkfA=) 5: whsxlRD8ACtbwVUDR7WD9M1I_Zo.roa (hash: WyhnHPwfaB8TlTtQhX3k0EqL0gIjvm9v03iJPq6dfuQ=) 6: xuAdygYVpRiV81z46OX-kd86p2I.roa (hash: w1oNZfbPGzW3kF1Su2UyFw287xX5XbrHkRu08WfqL70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a7:c8:a9:7c:18:94:de:fe:6b:56:07:de:25:61:c6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d58e40c6d91f3729e57e3344d308b5992fe46e Validity Not Before: Jan 10 12:01:44 2026 GMT Not After : Jan 11 12:01:44 2026 GMT Subject: CN=367cbd54b5b6ba393bb3f165f18faee7a7c094ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9c:5a:56:78:d2:ea:e4:16:1e:f9:57:7a:92: 75:3c:90:c3:44:e2:3b:b2:b0:f1:41:a5:14:93:f3: 83:a9:e0:61:80:0e:8f:8d:57:9b:fc:17:41:86:7d: 2b:32:71:ae:4c:ec:c6:3e:a9:c5:c3:87:9c:ba:87: 43:db:7d:73:d2:d8:ba:8c:88:06:d2:a5:1b:c4:01: b3:df:ac:65:58:07:4f:96:0f:93:ca:e8:41:77:5c: a8:99:98:b7:82:e0:3e:ca:a3:99:a1:2b:b5:14:eb: bb:42:76:29:61:dd:45:ce:38:52:1e:4e:21:d9:ba: 88:79:60:f4:a5:8e:87:01:6c:51:06:fc:42:c1:aa: 34:5a:d8:48:55:9a:7f:f5:43:e9:8f:cd:6d:79:b9: be:0b:ae:c0:31:b5:c7:71:3f:c1:1c:6e:00:dc:06: 76:e9:ca:4e:8f:92:68:e1:7a:9f:97:64:01:83:97: 59:4b:fa:45:98:29:ee:55:6e:78:b2:ca:89:72:c3: fc:d6:1a:de:53:71:29:eb:e3:ef:c7:ec:7f:0f:77: 07:8d:13:b5:c9:c3:46:d4:41:a6:2a:d2:9f:fc:48: dc:86:bd:7d:ac:8b:c4:20:09:08:d2:2d:56:02:59: b7:b3:d4:00:53:54:fe:16:14:82:e5:b8:6d:9b:d0: bb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7C:BD:54:B5:B6:BA:39:3B:B3:F1:65:F1:8F:AE:E7:A7:C0:94:AB X509v3 Authority Key Identifier: keyid:30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:4e:cd:02:86:ff:d2:ee:68:49:9a:12:13:f7:e8:ff:fc:fd: 80:43:13:ce:21:ec:85:e1:e9:15:85:f9:35:6f:27:f0:2e:50: 9f:c3:3e:ea:d5:b6:af:51:2c:78:c4:30:e4:2f:6a:4f:0a:67: e5:57:08:54:6b:20:6d:51:a8:dc:6b:8e:d2:af:55:53:09:3c: 6f:3a:76:85:4e:7d:ab:ba:22:d6:99:18:0f:7b:44:7f:bf:4c: d4:95:84:b1:a8:c7:e7:93:9b:24:8e:76:60:84:e3:3e:c4:c0: f1:3f:1b:40:02:f4:b0:be:56:b3:e0:8f:54:ef:7b:62:6d:fa: 8a:4f:ab:cc:93:7b:e0:64:91:30:b9:cf:1d:c7:96:fc:b7:37: 54:a2:1e:28:25:93:eb:f8:20:9a:6d:41:a3:32:d6:00:4a:67: c9:c7:7f:23:df:84:c5:6e:e6:a8:4e:fd:ec:3c:62:62:b8:dd: bc:81:f4:db:2b:3a:83:e8:03:dd:ca:f9:26:7d:0a:b5:ae:27: 99:ed:5d:ee:67:63:0a:6a:3a:d9:c7:46:dd:6b:9d:28:e7:5d: 2b:c8:25:89:28:e7:94:ca:23:61:1f:cb:c8:46:25:f7:32:09: 3b:cd:b3:51:ba:d3:ed:68:3a:31:c5:2b:3a:ef:af:1c:de:5c: 13:a9:54:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZunyKl8GJTe/mtWB94lYcbgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZDU4ZTQwYzZkOTFmMzcyOWU1N2UzMzQ0ZDMwOGI1OTky ZmU0NmUwHhcNMjYwMTEwMTIwMTQ0WhcNMjYwMTExMTIwMTQ0WjAzMTEwLwYDVQQD EygzNjdjYmQ1NGI1YjZiYTM5M2JiM2YxNjVmMThmYWVlN2E3YzA5NGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZxaVnjS6uQWHvlXepJ1PJDDROI7 srDxQaUUk/ODqeBhgA6PjVeb/BdBhn0rMnGuTOzGPqnFw4ecuodD231z0ti6jIgG 0qUbxAGz36xlWAdPlg+TyuhBd1yomZi3guA+yqOZoSu1FOu7QnYpYd1FzjhSHk4h 2bqIeWD0pY6HAWxRBvxCwao0WthIVZp/9UPpj81tebm+C67AMbXHcT/BHG4A3AZ2 6cpOj5Jo4Xqfl2QBg5dZS/pFmCnuVW54ssqJcsP81hreU3Ep6+Pvx+x/D3cHjRO1 ycNG1EGmKtKf/Ejchr19rIvEIAkI0i1WAlm3s9QAU1T+FhSC5bhtm9C71wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZ8vVS1tro5O7PxZfGPruenwJSrMB8GA1UdIwQY MBaAFDDVjkDG2R83KeV+M0TTCLWZL+RuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU5XT1FNYlpIemNwNVg0elJOTUl0Wmt2NUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82MjVhMzAtM2E2Yi00NjYxLTg0MGEt ZjgyYjcwZDhhMGE3LzEvTU5XT1FNYlpIemNwNVg0elJOTUl0Wmt2NUc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy82MjVhMzAtM2E2Yi00NjYxLTg0MGEtZjgyYjcwZDhhMGE3 LzEvTU5XT1FNYlpIemNwNVg0elJOTUl0Wmt2NUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGE7NAob/ 0u5oSZoSE/fo//z9gEMTziHsheHpFYX5NW8n8C5Qn8M+6tW2r1EseMQw5C9qTwpn 5VcIVGsgbVGo3GuO0q9VUwk8bzp2hU59q7oi1pkYD3tEf79M1JWEsajH55ObJI52 YITjPsTA8T8bQAL0sL5Ws+CPVO97Ym36ik+rzJN74GSRMLnPHceW/Lc3VKIeKCWT 6/ggmm1BozLWAEpnycd/I9+ExW7mqE797DxiYrjdvIH02ys6g+gD3cr5Jn0Kta4n me1d7mdjCmo62cdG3WudKOddK8gliSjnlMojYR/LyEYl9zIJO82zUbrT7Wg6McUr Ou+vHN5cE6lUew== -----END CERTIFICATE-----Generated at Sat Jan 10 14:05:16 2026 by rpki-client