This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json) Hash identifier: D7zcqzdT7IAvIPtS7olNhwgThPXq942ApRmI3vJKojQ= Subject key identifier: 2A:87:23:D0:ED:CF:2D:02:BD:D4:E9:60:7E:75:FA:5D:D0:48:D1:9A Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a Certificate serial: 019BFC1BC18DF78768C2A59591AD6881D47A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft Manifest number: 0E19 Signing time: Mon 26 Jan 2026 21:00:35 +0000 Manifest this update: Mon 26 Jan 2026 21:00:35 +0000 Manifest next update: Tue 27 Jan 2026 21:00:35 +0000 Files and hashes: 1: HJdZ1mCpj2-AoLY7m4n9MRoF6P4.roa (hash: Wpj6xDB6ZWZniyKKXj3suzkRG7+iZ6Vmr0Ts8twpgWA=) 2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: NsM5lgACC5f0bwAXSTf811UdQVbYTCaxfTtgnrEW4QA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1b:c1:8d:f7:87:68:c2:a5:95:91:ad:68:81:d4:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a Validity Not Before: Jan 26 21:00:35 2026 GMT Not After : Jan 27 21:00:35 2026 GMT Subject: CN=2a8723d0edcf2d02bdd4e9607e75fa5dd048d19a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:02:8c:d7:ee:37:66:9e:fa:05:e7:73:ba:f5: b7:c6:56:ed:6a:60:6b:9a:03:e0:eb:18:1b:b5:b3: 05:e4:41:92:be:c5:85:68:b2:36:20:58:7f:63:a3: bd:8c:c9:70:f5:44:a6:af:0d:53:d3:c2:85:31:86: 54:82:98:1e:2b:ad:71:d7:dd:8a:41:78:3c:a5:9f: 31:d6:09:db:07:64:8d:ca:db:29:4f:49:2c:eb:c2: 02:f0:43:0d:39:9d:9d:01:4e:27:84:f5:ad:ee:50: ef:8f:7c:c9:ee:28:3a:b3:20:24:42:e8:e2:fe:1f: e0:e0:64:cf:48:2a:91:25:ed:a4:26:77:95:9c:12: d5:ae:11:99:58:73:2c:85:85:bc:72:9f:2e:f4:4d: c8:75:79:4d:40:b7:cb:e2:b5:09:9b:b1:f8:1c:4b: 33:2e:98:50:d0:b1:3e:fb:d8:d1:2e:97:d4:4b:26: 56:7d:b4:58:d8:56:35:d5:48:31:14:0c:c0:94:71: 69:ee:ae:4e:af:86:b8:55:2b:9d:9d:b3:c2:94:68: 68:aa:e4:27:a3:ee:98:e5:ce:44:26:2a:9d:3c:7e: b6:72:99:f1:ad:76:db:0c:dd:04:1a:4f:0b:28:6e: 25:f9:84:a0:df:dc:34:50:cb:90:9a:dc:56:d0:f2: 06:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:87:23:D0:ED:CF:2D:02:BD:D4:E9:60:7E:75:FA:5D:D0:48:D1:9A X509v3 Authority Key Identifier: keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:cf:cc:1c:81:2c:df:36:04:20:4c:75:c4:90:68:b9:af:73: fb:d4:25:33:fd:ec:b1:f9:e6:09:fd:c7:d6:0c:96:aa:99:8d: d2:9a:49:64:8e:bc:2e:b8:75:96:da:c1:d0:59:67:8e:72:0f: 98:f6:98:2c:ed:05:08:6d:1b:40:05:2b:4b:4e:66:fe:93:d8: 92:c5:0b:b5:cc:d6:ff:6f:2b:ef:1f:73:9f:c5:4c:38:25:88: f4:5d:d4:7c:1e:77:1b:08:e3:af:db:ad:d5:8d:94:c1:1c:b3: 2d:9c:f2:6e:a7:d7:8d:70:07:df:17:96:ed:c7:c1:71:ee:84: a5:aa:0a:82:e4:f6:47:0a:31:b8:c7:db:c6:91:0a:89:53:3d: 59:94:9d:96:65:f8:40:f6:be:5a:be:6e:42:62:93:6b:8c:6a: 53:24:4d:3e:f8:2d:b0:cd:4d:20:54:f4:ba:65:22:28:a4:01: ba:45:86:54:e9:cb:bf:be:84:f7:73:d0:42:f8:3a:bd:c1:b0: 94:52:65:11:a1:75:b3:b6:e4:d8:01:6c:0e:27:bf:2f:42:19: 00:34:ee:0b:80:ec:3b:c6:e1:1d:9e:95:7e:bb:9c:8d:c6:e6: 91:78:7c:bf:cb:fb:07:2e:9a:77:c7:73:02:e0:71:9f:27:19: 72:61:c3:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8G8GN94dowqWVka1ogdR6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYjZlOWI5MzNiZDBjYzkwYzU5OTI0NDZmOGFjODQ3MjY5 MTZiMWEwHhcNMjYwMTI2MjEwMDM1WhcNMjYwMTI3MjEwMDM1WjAzMTEwLwYDVQQD EygyYTg3MjNkMGVkY2YyZDAyYmRkNGU5NjA3ZTc1ZmE1ZGQwNDhkMTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAKM1+43Zp76BedzuvW3xlbtamBr mgPg6xgbtbMF5EGSvsWFaLI2IFh/Y6O9jMlw9USmrw1T08KFMYZUgpgeK61x192K QXg8pZ8x1gnbB2SNytspT0ks68IC8EMNOZ2dAU4nhPWt7lDvj3zJ7ig6syAkQuji /h/g4GTPSCqRJe2kJneVnBLVrhGZWHMshYW8cp8u9E3IdXlNQLfL4rUJm7H4HEsz LphQ0LE++9jRLpfUSyZWfbRY2FY11UgxFAzAlHFp7q5Or4a4VSudnbPClGhoquQn o+6Y5c5EJiqdPH62cpnxrXbbDN0EGk8LKG4l+YSg39w0UMuQmtxW0PIGgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqHI9Dtzy0CvdTpYH51+l3QSNGaMB8GA1UdIwQY MBaAFJq26bkzvQzJDFmSRG+KyEcmkWsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hNDQ0N2MtNGNmMi00MWNhLTg4NTEt NDFhY2UxOTU4MDNhLzEvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9hNDQ0N2MtNGNmMi00MWNhLTg4NTEtNDFhY2UxOTU4MDNh LzEvbXJicHVUTzlETWtNV1pKRWI0cklSeWFSYXhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARc/MHIEs 3zYEIEx1xJBoua9z+9QlM/3ssfnmCf3H1gyWqpmN0ppJZI68Lrh1ltrB0FlnjnIP mPaYLO0FCG0bQAUrS05m/pPYksULtczW/28r7x9zn8VMOCWI9F3UfB53Gwjjr9ut 1Y2UwRyzLZzybqfXjXAH3xeW7cfBce6EpaoKguT2RwoxuMfbxpEKiVM9WZSdlmX4 QPa+Wr5uQmKTa4xqUyRNPvgtsM1NIFT0umUiKKQBukWGVOnLv76E93PQQvg6vcGw lFJlEaF1s7bk2AFsDie/L0IZADTuC4DsO8bhHZ6VfrucjcbmkXh8v8v7By6ad8dz AuBxnycZcmHD+A== -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:21 2026 by rpki-client