This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft File: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft (raw, json) Hash identifier: o0aSzYuY+UPUuSFmVvARLMpUtzNgi1RQiDRsYTWAvfI= Subject key identifier: 99:87:8F:C1:67:DF:E2:89:97:0D:3B:EA:5C:08:AA:AB:3B:DF:D4:10 Authority key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78 Certificate issuer: /CN=31d7d9d29cecf8e59122233d716e6b050e718478 Certificate serial: 019BACEF62E490AC0F64C9DB5534DF0B4428 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft Manifest number: 039F Signing time: Sun 11 Jan 2026 12:02:08 +0000 Manifest this update: Sun 11 Jan 2026 12:02:08 +0000 Manifest next update: Mon 12 Jan 2026 12:02:08 +0000 Files and hashes: 1: 9jfmZ8bQaVGPFDWRFHvQHmnS8fo.roa (hash: /DXZZnlzFxIqpfLKa2jzn4JOmraJhYpvlatvoWLWvdY=) 2: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl (hash: Lshyvn1W0ta/+n+izAAKK7MqLRluKPJaZlhuSN5KaIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:ef:62:e4:90:ac:0f:64:c9:db:55:34:df:0b:44:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d7d9d29cecf8e59122233d716e6b050e718478 Validity Not Before: Jan 11 12:02:08 2026 GMT Not After : Jan 12 12:02:08 2026 GMT Subject: CN=99878fc167dfe289970d3bea5c08aaab3bdfd410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:84:e5:c1:8b:c0:85:92:75:85:57:c4:61:42: c8:72:10:a9:fe:ef:11:a3:ce:20:77:36:0c:cb:a0: fb:a7:54:78:f4:06:a6:25:46:8a:5b:6e:90:99:7c: fc:80:5f:b6:fe:6f:2e:3f:c2:e2:5d:e1:02:a5:cf: 1b:71:b6:b8:2f:da:0f:4e:1a:aa:4a:fe:23:52:ce: 0b:95:ce:3c:e7:5a:54:8a:bd:c7:fc:2d:7c:d0:b4: 86:94:0d:32:31:b5:2e:b5:ff:5d:41:5a:cc:db:59: 96:1e:ce:e4:2e:1a:08:7d:a5:86:e9:fa:99:28:72: b6:97:1f:de:93:de:e8:e4:a4:47:96:aa:20:86:28: 23:89:96:fc:a0:af:93:58:6e:5e:0e:3f:80:ea:e3: 54:71:fd:24:38:57:dc:16:5f:af:58:dc:0e:26:66: 39:01:05:77:ed:4a:ff:45:37:90:a3:01:60:6c:ee: ad:5d:40:eb:8c:73:1a:87:3e:b0:69:0d:0c:6f:cc: 2c:44:d0:36:e2:9b:97:16:bd:e7:22:a8:80:78:3e: 87:b4:52:4b:bd:e8:53:7a:66:93:ec:60:38:af:61: 68:28:3c:a3:10:fb:c1:f3:87:fb:93:f8:88:e8:e6: 15:f8:16:24:05:ca:b5:54:93:ea:de:b3:3d:7f:72: ae:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:87:8F:C1:67:DF:E2:89:97:0D:3B:EA:5C:08:AA:AB:3B:DF:D4:10 X509v3 Authority Key Identifier: keyid:31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:aa:d7:b9:1d:41:1c:7a:1e:47:07:f4:e5:7b:e3:72:36:ec: 88:b1:3a:17:18:22:d5:fb:c0:29:fd:e0:f5:dc:26:96:bc:c8: 2f:cd:69:3d:85:97:81:b5:45:6b:3d:19:8f:a8:bf:19:8b:01: 7d:f8:8e:a7:0f:e9:6e:fe:e8:9f:ff:92:4b:68:e7:35:03:e3: 97:6e:58:56:13:7b:d8:6d:9e:9c:27:34:a1:8f:9f:52:1e:00: 2f:21:1b:38:fd:33:17:56:34:ab:6f:8b:a2:c9:5c:ef:eb:0a: 29:43:c2:88:54:58:90:da:2a:9a:91:56:55:d5:ee:9d:fe:44: 96:07:59:dc:4f:b1:a2:25:89:51:91:e9:b2:97:58:1d:2c:3e: 6c:dc:9b:4a:21:00:88:d1:23:18:04:50:f4:cc:12:de:aa:9f: 30:ee:b4:1d:78:32:b3:61:fb:9b:54:28:50:e5:0a:4f:b1:b1: 2e:a3:34:1e:4f:b7:1d:ab:b3:00:9a:fe:2a:41:3e:72:7c:76: 60:8e:23:b6:83:88:db:a6:37:94:eb:83:20:d7:91:bc:e0:4d: 02:c7:2c:6a:8c:9f:b5:5a:85:91:f3:b0:2c:c4:17:ba:85:85: a6:19:ba:f0:69:b6:25:70:a1:48:16:4c:65:98:52:44:8a:a5: 5b:d8:3b:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZus72LkkKwPZMnbVTTfC0QoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZDdkOWQyOWNlY2Y4ZTU5MTIyMjMzZDcxNmU2YjA1MGU3 MTg0NzgwHhcNMjYwMTExMTIwMjA4WhcNMjYwMTEyMTIwMjA4WjAzMTEwLwYDVQQD Eyg5OTg3OGZjMTY3ZGZlMjg5OTcwZDNiZWE1YzA4YWFhYjNiZGZkNDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54TlwYvAhZJ1hVfEYULIchCp/u8R o84gdzYMy6D7p1R49AamJUaKW26QmXz8gF+2/m8uP8LiXeECpc8bcba4L9oPThqq Sv4jUs4Llc4851pUir3H/C180LSGlA0yMbUutf9dQVrM21mWHs7kLhoIfaWG6fqZ KHK2lx/ek97o5KRHlqoghigjiZb8oK+TWG5eDj+A6uNUcf0kOFfcFl+vWNwOJmY5 AQV37Ur/RTeQowFgbO6tXUDrjHMahz6waQ0Mb8wsRNA24puXFr3nIqiAeD6HtFJL vehTemaT7GA4r2FoKDyjEPvB84f7k/iI6OYV+BYkBcq1VJPq3rM9f3KuLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmHj8Fn3+KJlw076lwIqqs739QQMB8GA1UdIwQY MBaAFDHX2dKc7PjlkSIjPXFuawUOcYR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hZjgzMmItYTY0MS00ZTQ2LWE4MzYt NDBmNGM2OGU5YTMxLzEvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hZjgzMmItYTY0MS00ZTQ2LWE4MzYtNDBmNGM2OGU5YTMx LzEvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArKrXuR1B HHoeRwf05XvjcjbsiLE6Fxgi1fvAKf3g9dwmlrzIL81pPYWXgbVFaz0Zj6i/GYsB ffiOpw/pbv7on/+SS2jnNQPjl25YVhN72G2enCc0oY+fUh4ALyEbOP0zF1Y0q2+L oslc7+sKKUPCiFRYkNoqmpFWVdXunf5ElgdZ3E+xoiWJUZHpspdYHSw+bNybSiEA iNEjGARQ9MwS3qqfMO60HXgys2H7m1QoUOUKT7GxLqM0Hk+3HauzAJr+KkE+cnx2 YI4jtoOI26Y3lOuDINeRvOBNAscsaoyftVqFkfOwLMQXuoWFphm68Gm2JXChSBZM ZZhSRIqlW9g78g== -----END CERTIFICATE-----Generated at Sun Jan 11 16:00:18 2026 by rpki-client