This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft File: EX-Mmn_H8TZY1ir76285iC2lEcw.mft (raw, json) Hash identifier: TUWhcUSeajTszA83TZimQFtn8qVm7pnX8VUMDBKfN6A= Subject key identifier: B3:A8:E2:4C:65:59:7C:5F:3E:B9:6E:04:93:FD:31:50:42:48:D4:DB Authority key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC Certificate issuer: /CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc Certificate serial: 019BD7A22D091E12A001962509DC488434A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft Manifest number: 17DA Signing time: Mon 19 Jan 2026 19:01:28 +0000 Manifest this update: Mon 19 Jan 2026 19:01:28 +0000 Manifest next update: Tue 20 Jan 2026 19:01:28 +0000 Files and hashes: 1: EX-Mmn_H8TZY1ir76285iC2lEcw.crl (hash: ZJq5ou8ywvk9n6UPRo6VPzIkNBG6nrIZocvUowNnXUw=) 2: yZepWYso39Ktfsnpae8Nahf1b8I.roa (hash: Yiho9bvazJTbyZ+iL2xK6Eorgx+qR/zGpVpEPxoE5ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:a2:2d:09:1e:12:a0:01:96:25:09:dc:48:84:34:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc Validity Not Before: Jan 19 19:01:28 2026 GMT Not After : Jan 20 19:01:28 2026 GMT Subject: CN=b3a8e24c65597c5f3eb96e0493fd31504248d4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ec:9f:4a:dc:90:a9:84:50:b1:0a:8f:04:e5: 43:0f:30:71:c3:1a:52:d2:bd:6d:13:7a:75:25:12: 2a:8d:80:59:68:c1:d9:06:2c:84:bc:51:5a:6e:34: 60:30:fb:d0:72:6f:b4:d3:1f:a0:9b:21:77:5e:be: 6a:1a:c6:d3:73:65:78:00:67:ea:02:cd:cf:16:ea: 0c:25:7e:cc:69:71:42:4f:94:51:c0:67:c9:0c:a0: 1a:e9:c2:a7:f8:e2:ca:ed:1b:c9:ea:cd:96:07:99: 74:77:24:da:24:bc:b7:b5:85:8a:77:ab:3e:5f:6e: 93:8d:4f:ad:3a:85:91:e8:05:20:d8:e1:e4:b7:09: b4:69:88:d4:4b:03:85:e6:2d:1d:0c:a6:3a:38:6a: df:a8:5a:18:c8:d8:55:7e:3a:2c:6b:ac:90:16:63: 94:a9:fd:5f:07:3c:1e:fb:2d:9a:8c:0c:e9:f4:b6: 48:3a:9c:ae:e7:50:b9:59:a3:a7:67:a8:8e:d5:07: 13:04:ba:48:15:32:06:5d:fd:8a:c5:a3:ed:a8:8d: 0f:4a:a7:1d:1e:6a:e9:b8:16:6b:d7:7c:74:72:30: 72:07:a9:85:df:79:69:74:4b:ea:ae:7d:85:3b:9b: 8f:f3:ea:08:9f:42:79:5f:c1:53:3d:c7:90:73:0b: 5a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A8:E2:4C:65:59:7C:5F:3E:B9:6E:04:93:FD:31:50:42:48:D4:DB X509v3 Authority Key Identifier: keyid:11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:6e:89:2b:ee:1a:c0:be:f1:69:bd:3b:30:7f:ae:49:b4:f7: 55:93:fd:c1:de:77:8c:5f:90:13:f0:fb:96:ff:26:e9:50:25: 36:eb:21:81:07:47:35:e4:74:34:04:13:22:a8:dc:f7:7c:a4: 67:30:86:99:13:ca:2e:0d:39:32:8a:a1:fa:68:e5:6a:a1:36: a9:2f:de:d5:49:17:f3:55:ea:52:b6:98:d3:88:5e:0a:c2:04: a8:37:b9:93:0b:0b:da:ca:2a:29:8e:f1:9f:33:63:91:54:91: 88:80:ad:e8:cc:7c:62:9f:08:db:e5:c1:c2:60:10:7f:b7:09: bc:24:e7:b1:1a:74:27:6f:27:ce:80:1f:63:cf:1a:cb:b8:9a: 2f:1b:10:ba:1e:99:7b:77:e0:a5:af:6f:af:f2:36:9d:20:ce: 13:a2:e0:01:f1:33:a1:e0:50:87:a2:7c:ed:f5:54:af:d1:3c: 19:18:84:c8:f6:75:27:10:72:45:98:67:39:7b:16:32:e4:00: 27:3e:81:86:63:d9:c0:62:86:fa:dc:d3:d8:14:4c:d9:eb:67: 7a:1e:03:5a:57:c9:e2:6d:2f:3f:28:d7:f9:55:af:6f:f0:04: 5c:67:44:06:47:f9:33:9b:f3:af:c3:cc:a9:ed:e3:ae:4a:0d: b5:90:0f:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvXoi0JHhKgAZYlCdxIhDSjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y4YzlhN2ZjN2YxMzY1OGQ2MmFmYmViNmYzOTg4MmRh NTExY2MwHhcNMjYwMTE5MTkwMTI4WhcNMjYwMTIwMTkwMTI4WjAzMTEwLwYDVQQD EyhiM2E4ZTI0YzY1NTk3YzVmM2ViOTZlMDQ5M2ZkMzE1MDQyNDhkNGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuyfStyQqYRQsQqPBOVDDzBxwxpS 0r1tE3p1JRIqjYBZaMHZBiyEvFFabjRgMPvQcm+00x+gmyF3Xr5qGsbTc2V4AGfq As3PFuoMJX7MaXFCT5RRwGfJDKAa6cKn+OLK7RvJ6s2WB5l0dyTaJLy3tYWKd6s+ X26TjU+tOoWR6AUg2OHktwm0aYjUSwOF5i0dDKY6OGrfqFoYyNhVfjosa6yQFmOU qf1fBzwe+y2ajAzp9LZIOpyu51C5WaOnZ6iO1QcTBLpIFTIGXf2KxaPtqI0PSqcd HmrpuBZr13x0cjByB6mF33lpdEvqrn2FO5uP8+oIn0J5X8FTPceQcwtaMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOo4kxlWXxfPrluBJP9MVBCSNTbMB8GA1UdIwQY MBaAFBF/jJp/x/E2WNYq++tvOYgtpRHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xMjJiMmQtNWQ4Ny00NzhjLTg1MjIt ODlkNjZhYzcyZTAyLzEvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8xMjJiMmQtNWQ4Ny00NzhjLTg1MjItODlkNjZhYzcyZTAy LzEvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtG6JK+4a wL7xab07MH+uSbT3VZP9wd53jF+QE/D7lv8m6VAlNushgQdHNeR0NAQTIqjc93yk ZzCGmRPKLg05Moqh+mjlaqE2qS/e1UkX81XqUraY04heCsIEqDe5kwsL2soqKY7x nzNjkVSRiICt6Mx8Yp8I2+XBwmAQf7cJvCTnsRp0J28nzoAfY88ay7iaLxsQuh6Z e3fgpa9vr/I2nSDOE6LgAfEzoeBQh6J87fVUr9E8GRiEyPZ1JxByRZhnOXsWMuQA Jz6BhmPZwGKG+tzT2BRM2etneh4DWlfJ4m0vPyjX+VWvb/AEXGdEBkf5M5vzr8PM qe3jrkoNtZAPUw== -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:58 2026 by rpki-client