This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft File: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json) Hash identifier: WR5Y0j6nE/LDVQ2cMkE59jMP5SwwdK3K4lXy/HMnBcE= Subject key identifier: A3:5F:8E:67:E1:43:3F:5C:F4:55:13:7F:12:17:A5:F5:B8:29:FD:6F Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204 Certificate serial: 019BFD65EB8CDA85A419E6F03ADCB2845411 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft Manifest number: 11DE Signing time: Tue 27 Jan 2026 03:01:13 +0000 Manifest this update: Tue 27 Jan 2026 03:01:13 +0000 Manifest next update: Wed 28 Jan 2026 03:01:13 +0000 Files and hashes: 1: 5z8L94SxohW89feZF-x7UUHOUGw.roa (hash: J9U9SwJZOAhHbw/+dwZT4u/bEO014TJ7Spfz6aawrAo=) 2: 60ZuDyr70onvZz7b_VP-SDmx33E.roa (hash: twz5MCkaRcivByRDA9QCyxItgQZO9OCdluDvL7eF7Ro=) 3: BlrqBtWblMfctvze6Z4e1h26Vg0.roa (hash: mrpfN/u4KNrOk9l0nXYVVF7vi+rRmvUj9lVXmfONvc8=) 4: NHjW7dPsyIq0Ra6kfJvb1FDPOrc.roa (hash: eNPkOFpshNdBId/GwxgDcZ/1OocRZllruwGL/l+cxaA=) 5: TmO2qs3CJ7nD3brN-Xezi1R7_Eo.roa (hash: r53OH2xwFa4qKn9FoyBvVY4gvGfnLfCBjSGuWq2Tb+U=) 6: e9W3bqM-9Cf9J8NK5NJYdPxtNqQ.roa (hash: fhBttHfpH+r5wDlnd1XHbP4VIUk5mx77G0HB40PrGrc=) 7: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: 6DYRqv9UiiWtfAilmmHDLtjP283iDxxc1dXVBvm11/E=) 8: vLogJj6NuTRQtmEXSY4brF-qnBY.roa (hash: zohFkXr1VCR5q6x1R2Xx5enwasHpy8O1g/gJdKkByho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:eb:8c:da:85:a4:19:e6:f0:3a:dc:b2:84:54:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204 Validity Not Before: Jan 27 03:01:13 2026 GMT Not After : Jan 28 03:01:13 2026 GMT Subject: CN=a35f8e67e1433f5cf455137f1217a5f5b829fd6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1c:cc:77:91:c7:39:c4:f7:da:c8:e0:8b:c8: 04:ee:d5:2e:73:99:64:6a:04:34:77:4c:6a:de:0a: 03:c5:e4:0d:7b:13:86:6f:99:83:3d:ce:73:f5:31: d0:1a:a3:c1:b9:e0:88:cd:21:67:ed:9e:5e:17:8b: ef:0d:1b:44:84:7f:2c:96:f3:36:f3:a6:bc:2c:a1: fc:de:00:17:f6:cc:ab:f2:60:fa:a0:9a:d8:88:09: db:b7:f4:bf:37:42:d4:d4:88:6e:e1:c2:89:4f:7f: d5:c1:5f:91:1e:27:bc:ec:cc:fa:85:31:fb:6b:64: f5:2f:43:a7:90:02:8b:c1:fd:98:d7:30:eb:ed:ff: 2d:a6:c4:32:ee:92:64:4a:92:3f:ab:13:3d:ab:f1: 18:b2:5f:c4:89:3a:af:bb:0b:6f:c5:8c:83:ea:d1: 86:37:d1:7d:e9:33:d1:02:e1:89:5a:e8:34:92:70: ae:3b:b4:44:08:94:3c:98:f6:1e:eb:2f:13:b0:71: 82:ad:03:f5:cf:83:a9:9f:d5:31:1d:be:4e:1f:4b: 37:eb:6e:da:30:f3:52:05:de:c8:44:1c:0a:ff:65: a9:3d:66:69:9a:5c:6a:04:e1:27:03:d3:a3:45:69: 21:bb:7b:9b:cb:82:61:f9:1f:90:9f:aa:d8:6d:64: 50:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5F:8E:67:E1:43:3F:5C:F4:55:13:7F:12:17:A5:F5:B8:29:FD:6F X509v3 Authority Key Identifier: keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d4:9f:d5:7c:63:e4:b8:d7:15:e1:a1:ad:31:7d:ca:61:ee: 20:b8:b2:7b:7e:ce:02:f1:e2:41:7a:5a:b2:67:08:6f:ae:e5: 9c:96:36:db:5b:e8:e8:74:93:27:dd:7a:f2:67:5e:45:ce:27: 49:97:c0:58:88:90:c0:30:09:20:f8:f6:76:46:52:7e:2d:97: c5:93:b8:c9:c4:26:dc:ba:84:a7:6d:d9:f8:bb:e7:f9:48:d8: 2b:df:79:41:20:bc:8e:0f:79:98:1f:63:15:2a:d6:4b:20:45: 3a:c2:95:17:3b:1f:4f:eb:13:41:b1:33:5d:5e:92:3e:35:00: 26:08:4d:d0:ef:e6:2f:a2:6c:fa:08:f4:21:f2:bc:10:02:c9: ea:f2:e9:38:13:47:69:63:ab:f8:bc:13:dd:71:0b:7a:0c:42: d6:db:0c:10:76:e5:c4:87:e6:13:96:58:03:d3:ca:44:36:1e: 5e:44:2f:71:5b:f1:f0:03:1c:ac:d4:72:c7:71:b4:3a:c8:47: bc:2b:6c:ba:0b:4f:56:97:5b:f8:8d:bc:1f:fe:43:ca:e6:b2: 6b:34:1e:59:57:ab:7e:09:3c:36:f9:1f:43:c9:20:87:a3:d8: e2:2a:bd:46:cf:8b:c6:6f:35:8b:0f:4f:a5:cf:2f:20:0d:3a: 87:3b:d6:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZeuM2oWkGebwOtyyhFQRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmVlN2NiZDhlNzhkMWYxNGE0NTNhMDRiOTE2ZjdjMTU4 MWQyMDQwHhcNMjYwMTI3MDMwMTEzWhcNMjYwMTI4MDMwMTEzWjAzMTEwLwYDVQQD EyhhMzVmOGU2N2UxNDMzZjVjZjQ1NTEzN2YxMjE3YTVmNWI4MjlmZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRzMd5HHOcT32sjgi8gE7tUuc5lk agQ0d0xq3goDxeQNexOGb5mDPc5z9THQGqPBueCIzSFn7Z5eF4vvDRtEhH8slvM2 86a8LKH83gAX9syr8mD6oJrYiAnbt/S/N0LU1Ihu4cKJT3/VwV+RHie87Mz6hTH7 a2T1L0OnkAKLwf2Y1zDr7f8tpsQy7pJkSpI/qxM9q/EYsl/EiTqvuwtvxYyD6tGG N9F96TPRAuGJWug0knCuO7RECJQ8mPYe6y8TsHGCrQP1z4Opn9UxHb5OH0s3627a MPNSBd7IRBwK/2WpPWZpmlxqBOEnA9OjRWkhu3uby4Jh+R+Qn6rYbWRQWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNfjmfhQz9c9FUTfxIXpfW4Kf1vMB8GA1UdIwQY MBaAFJn+58vY540fFKRToEuRb3wVgdIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTct MWMyMmVmZjcyODE4LzEvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTctMWMyMmVmZjcyODE4 LzEvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNSf1Xxj 5LjXFeGhrTF9ymHuILiye37OAvHiQXpasmcIb67lnJY221vo6HSTJ9168mdeRc4n SZfAWIiQwDAJIPj2dkZSfi2XxZO4ycQm3LqEp23Z+Lvn+UjYK995QSC8jg95mB9j FSrWSyBFOsKVFzsfT+sTQbEzXV6SPjUAJghN0O/mL6Js+gj0IfK8EALJ6vLpOBNH aWOr+LwT3XELegxC1tsMEHblxIfmE5ZYA9PKRDYeXkQvcVvx8AMcrNRyx3G0OshH vCtsugtPVpdb+I28H/5DyuayazQeWVerfgk8NvkfQ8kgh6PY4iq9Rs+Lxm81iw9P pc8vIA06hzvW+g== -----END CERTIFICATE-----Generated at Tue Jan 27 05:02:37 2026 by rpki-client