This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft File: M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json) Hash identifier: S/aVaUSvtbaGqWaWyhHQQGX98XtI/ZmYTaw1n9ftsBk= Subject key identifier: 49:3C:58:42:E9:7F:6A:30:08:5E:E1:3D:08:76:DC:BA:54:FC:84:5A Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 Certificate issuer: /CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Certificate serial: 019BB54D37159C5CBD5189452A55120C6B2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft Manifest number: 07A1 Signing time: Tue 13 Jan 2026 03:01:34 +0000 Manifest this update: Tue 13 Jan 2026 03:01:34 +0000 Manifest next update: Wed 14 Jan 2026 03:01:34 +0000 Files and hashes: 1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: c6wrhekmv1O4zEzBso34JeXZhMgDfeiy3SiSEG4XUhc=) 2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=) 3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b5:4d:37:15:9c:5c:bd:51:89:45:2a:55:12:0c:6b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34 Validity Not Before: Jan 13 03:01:34 2026 GMT Not After : Jan 14 03:01:34 2026 GMT Subject: CN=493c5842e97f6a30085ee13d0876dcba54fc845a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:89:b3:bb:48:9d:8f:72:d3:86:8c:a2:73:db: 34:36:59:1f:95:0c:da:ae:62:be:1e:fe:ee:7e:20: 93:77:3b:aa:ba:83:fc:e4:08:63:3b:27:b9:d1:3c: c3:9e:09:d8:f9:af:fe:0e:c0:7f:71:2d:18:1f:bf: 56:97:a0:a0:d9:b9:7e:38:00:50:02:96:86:bd:fa: a8:18:53:31:1b:b2:75:82:e8:01:a6:08:f5:7e:94: 14:3f:d6:08:93:de:5a:ba:74:ea:e2:2b:18:9b:40: 13:18:85:2b:2d:5f:be:0c:48:d1:5e:07:4c:ce:b9: 0b:c5:f9:65:59:92:41:5e:7b:4e:42:19:9b:5a:0d: 06:b3:48:8c:db:0c:f7:fc:c1:bf:89:bb:95:96:0b: 7f:4d:ce:e5:d2:23:87:2b:6e:7f:85:17:5d:5c:8f: 5e:12:21:4a:c3:5f:af:c1:85:4a:1c:20:a7:4d:a8: cf:01:91:94:e1:d4:4c:f1:b5:2e:9b:1d:3e:34:d7: a6:a2:0d:0a:53:91:1e:09:40:0c:c9:6c:32:2d:97: a1:39:e7:9d:55:99:1a:3c:d1:12:36:85:20:d5:7d: 82:78:8f:80:99:86:b2:53:31:f6:07:56:bd:48:2f: 55:99:e8:0e:ed:03:97:ee:fa:b9:d4:94:4e:34:24: db:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3C:58:42:E9:7F:6A:30:08:5E:E1:3D:08:76:DC:BA:54:FC:84:5A X509v3 Authority Key Identifier: keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:84:9a:1c:e1:f3:38:05:9e:3f:ef:84:1c:9a:61:1b:69:ac: 6c:d0:33:d5:e7:20:fa:ad:70:3c:d7:77:95:1a:c1:c3:52:19: 4d:73:36:a8:72:f0:4b:42:f9:6d:fd:81:6c:c1:fa:a5:61:ad: c5:3d:1c:32:0e:34:e9:47:26:f8:b9:43:e8:7e:0c:4b:f6:ca: ce:0d:8a:f1:04:55:aa:45:46:66:25:bb:a1:a3:9e:ec:4c:fc: ed:0e:63:2e:82:33:cb:19:c1:d6:a7:e7:46:7d:d0:37:07:9c: 77:52:f6:0b:5b:64:ff:e8:68:57:45:58:59:36:8f:b5:55:f9: 7e:40:d2:fb:63:26:f9:23:da:7a:e2:d3:88:d1:c8:be:28:5f: 84:19:48:92:3e:71:19:e2:4f:07:62:3c:c5:32:92:dc:13:c4: f5:64:e4:3d:0b:d5:51:df:ea:83:da:3f:c8:87:2e:50:6d:00: 8b:3c:72:b4:17:8a:40:b5:b7:0a:84:a1:26:e8:ce:24:4e:a4: 4f:45:0d:06:dc:89:3b:3e:c5:97:70:88:3c:87:f0:4b:aa:c3: 99:cb:41:17:31:95:a4:95:d2:fd:9c:f7:4f:59:f2:56:fe:8d: 6f:d3:32:83:95:43:94:c5:91:ce:a8:6e:c0:14:ec:60:04:d2: dc:58:11:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu1TTcVnFy9UYlFKlUSDGsvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5 NWNkMzQwHhcNMjYwMTEzMDMwMTM0WhcNMjYwMTE0MDMwMTM0WjAzMTEwLwYDVQQD Eyg0OTNjNTg0MmU5N2Y2YTMwMDg1ZWUxM2QwODc2ZGNiYTU0ZmM4NDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtImzu0idj3LThoyic9s0NlkflQza rmK+Hv7ufiCTdzuquoP85AhjOye50TzDngnY+a/+DsB/cS0YH79Wl6Cg2bl+OABQ ApaGvfqoGFMxG7J1gugBpgj1fpQUP9YIk95aunTq4isYm0ATGIUrLV++DEjRXgdM zrkLxfllWZJBXntOQhmbWg0Gs0iM2wz3/MG/ibuVlgt/Tc7l0iOHK25/hRddXI9e EiFKw1+vwYVKHCCnTajPAZGU4dRM8bUumx0+NNemog0KU5EeCUAMyWwyLZehOeed VZkaPNESNoUg1X2CeI+AmYayUzH2B1a9SC9VmegO7QOX7vq51JRONCTbjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEk8WELpf2owCF7hPQh23LpU/IRaMB8GA1UdIwQY MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt NTllNzkyZmUxNGNjLzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmoSaHOHz OAWeP++EHJphG2msbNAz1ecg+q1wPNd3lRrBw1IZTXM2qHLwS0L5bf2BbMH6pWGt xT0cMg406Ucm+LlD6H4MS/bKzg2K8QRVqkVGZiW7oaOe7Ez87Q5jLoIzyxnB1qfn Rn3QNwecd1L2C1tk/+hoV0VYWTaPtVX5fkDS+2Mm+SPaeuLTiNHIvihfhBlIkj5x GeJPB2I8xTKS3BPE9WTkPQvVUd/qg9o/yIcuUG0AizxytBeKQLW3CoShJujOJE6k T0UNBtyJOz7Fl3CIPIfwS6rDmctBFzGVpJXS/Zz3T1nyVv6Nb9Myg5VDlMWRzqhu wBTsYATS3FgRRQ== -----END CERTIFICATE-----Generated at Tue Jan 13 06:08:21 2026 by rpki-client