This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json) Hash identifier: I5sIyt+1VQlioRgcVOKHqNitZjy3UfIeyaXzBw80V9o= Subject key identifier: 30:4D:D2:80:BC:41:9B:F5:D0:8F:95:0E:74:28:FF:E6:F9:39:0E:F5 Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Certificate serial: 019B9854C15C39373773CC18A7055DCCDD64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft Manifest number: 0792 Signing time: Wed 07 Jan 2026 12:00:49 +0000 Manifest this update: Wed 07 Jan 2026 12:00:49 +0000 Manifest next update: Thu 08 Jan 2026 12:00:49 +0000 Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: Bko23i+x+MhWUlPZziVZZLZTvZ9CPtFgShJp5ZKzwWU=) 2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=) 3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 11:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:98:54:c1:5c:39:37:37:73:cc:18:a7:05:5d:cc:dd:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Validity Not Before: Jan 7 12:00:49 2026 GMT Not After : Jan 8 12:00:49 2026 GMT Subject: CN=304dd280bc419bf5d08f950e7428ffe6f9390ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:63:95:3a:d5:95:19:40:c4:a0:77:f7:92:34: a9:74:f6:51:a4:fa:59:2b:7d:ea:20:ef:8f:a0:20: 8d:fe:b9:f0:f2:96:0b:41:d9:14:0b:d7:91:3c:d2: 6d:11:6c:14:e4:70:5e:62:d5:78:ff:24:d6:2c:b1: 7e:f8:42:1e:37:e4:59:16:b7:c5:fe:e7:67:1d:81: 0b:29:f9:fd:b5:1c:17:59:02:29:ca:3f:3b:4e:43: e0:54:b0:93:37:7f:de:80:f5:ed:49:d8:70:ec:51: 97:7a:7a:16:62:87:5d:fa:c0:5f:63:d1:fd:1b:22: 82:fd:c7:9f:cf:24:82:b2:5d:3d:54:8c:0d:23:9d: f1:2d:8c:97:79:0e:35:0d:f4:f1:7b:ce:e6:cc:ac: fe:e2:56:a6:3d:a4:56:a4:f3:87:09:49:31:de:1d: 03:e3:22:81:41:7f:e9:c9:c8:a9:f0:61:49:e2:53: 53:67:5a:50:b0:21:2a:a0:ac:86:e9:fd:bf:b5:31: 51:c1:d0:86:51:fe:24:cf:2f:a6:91:96:d6:c2:ae: f8:21:2c:8e:19:66:c0:58:40:49:62:b5:5c:db:f1: 33:07:d1:c4:b1:ea:84:44:81:7e:16:94:dd:1d:e1: f9:3c:e0:b8:0c:0c:29:3a:cc:48:dd:25:3d:fc:7a: f8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4D:D2:80:BC:41:9B:F5:D0:8F:95:0E:74:28:FF:E6:F9:39:0E:F5 X509v3 Authority Key Identifier: keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ac:b2:83:7e:19:46:5a:5f:41:28:57:d8:99:01:a2:42:d8: e8:55:e0:35:38:d6:18:39:40:c2:a5:bc:2d:1c:bc:55:60:00: 96:de:a2:b1:67:73:51:70:8f:37:83:94:92:95:a9:1a:8d:af: 1e:b3:7d:2c:a7:52:83:9e:33:dc:e6:83:c7:20:6e:27:33:57: 99:06:e8:de:53:80:2a:a9:a0:44:77:bf:c4:29:b3:1b:9d:92: 95:b4:46:07:54:c7:de:03:13:e9:29:80:5b:e0:22:2f:c5:37: 45:43:43:ba:27:a1:ab:bd:21:07:db:c2:29:26:ee:69:5c:b0: a0:9c:2d:8c:4b:d1:84:18:58:3c:9d:87:bb:05:50:98:4c:9a: ef:ad:d8:cd:2d:24:73:35:6f:44:b7:2b:98:16:90:23:bb:5b: b5:b3:f3:dc:4c:3c:44:d4:d7:6e:47:82:27:5d:81:04:df:0a: 64:ce:3e:b3:df:1a:da:cb:bd:7c:8b:e6:0f:cc:05:0d:c2:3e: 2a:07:91:d5:06:79:3a:47:15:6c:a7:cf:ad:00:d6:4a:5d:ff: 58:dd:69:a6:b2:07:8c:86:84:3a:83:0b:bc:33:1b:d4:44:f8: 5e:12:0c:54:72:66:9e:d4:7a:64:ad:9e:2e:a8:bf:61:e9:7f: cc:16:09:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuYVMFcOTc3c8wYpwVdzN1kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5 NWNkMzQwHhcNMjYwMTA3MTIwMDQ5WhcNMjYwMTA4MTIwMDQ5WjAzMTEwLwYDVQQD EygzMDRkZDI4MGJjNDE5YmY1ZDA4Zjk1MGU3NDI4ZmZlNmY5MzkwZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2OVOtWVGUDEoHf3kjSpdPZRpPpZ K33qIO+PoCCN/rnw8pYLQdkUC9eRPNJtEWwU5HBeYtV4/yTWLLF++EIeN+RZFrfF /udnHYELKfn9tRwXWQIpyj87TkPgVLCTN3/egPXtSdhw7FGXenoWYodd+sBfY9H9 GyKC/cefzySCsl09VIwNI53xLYyXeQ41DfTxe87mzKz+4lamPaRWpPOHCUkx3h0D 4yKBQX/pycip8GFJ4lNTZ1pQsCEqoKyG6f2/tTFRwdCGUf4kzy+mkZbWwq74ISyO GWbAWEBJYrVc2/EzB9HEseqERIF+FpTdHeH5POC4DAwpOsxI3SU9/Hr4bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBN0oC8QZv10I+VDnQo/+b5OQ71MB8GA1UdIwQY MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt NTllNzkyZmUxNGNjLzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqyyg34Z RlpfQShX2JkBokLY6FXgNTjWGDlAwqW8LRy8VWAAlt6isWdzUXCPN4OUkpWpGo2v HrN9LKdSg54z3OaDxyBuJzNXmQbo3lOAKqmgRHe/xCmzG52SlbRGB1TH3gMT6SmA W+AiL8U3RUNDuiehq70hB9vCKSbuaVywoJwtjEvRhBhYPJ2HuwVQmEya763YzS0k czVvRLcrmBaQI7tbtbPz3Ew8RNTXbkeCJ12BBN8KZM4+s98a2su9fIvmD8wFDcI+ KgeR1QZ5OkcVbKfPrQDWSl3/WN1pprIHjIaEOoMLvDMb1ET4XhIMVHJmntR6ZK2e Lqi/Yel/zBYJjA== -----END CERTIFICATE-----Generated at Wed Jan 7 14:43:23 2026 by rpki-client