This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json) Hash identifier: KAqd+mkiemReFmVGzEqRxWtGi/3v8+4GsHNcsrfHu3E= Subject key identifier: F0:C1:FB:A7:6B:6E:EA:21:51:EC:13:F0:F9:F2:FB:AE:67:4D:D2:B6 Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e Certificate serial: 019BF951B5497E7CC22E99BB933167E866D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 08:00:40 +0000 Manifest this update: Mon 26 Jan 2026 08:00:40 +0000 Manifest next update: Tue 27 Jan 2026 08:00:40 +0000 Files and hashes: 1: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: VjPlgETxmzlXtnRi/3uAj7RN6mZSsTXw2ifGKL9b69U=) 2: a27hhTWfb3ZPwrefxvzFE-4LpOE.roa (hash: YD2HgofzORwQjqE1QvYrEUR0cZCvAl9rAIiyQ1ikAHA=) 3: jEXsJW-dSuLpQO5YOKPLDNwuGDI.roa (hash: UIwmv+B0668akDpzT0mGvVjjYi0KKoE4bndrHcRym44=) 4: kWWdtEhqg1dCNgXGWoYGtZ9BeWA.roa (hash: VUdKbSYy58Sq3hGEUKTZb/1GA0+WdozldyShq/dEyqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:b5:49:7e:7c:c2:2e:99:bb:93:31:67:e8:66:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e Validity Not Before: Jan 26 08:00:40 2026 GMT Not After : Jan 27 08:00:40 2026 GMT Subject: CN=f0c1fba76b6eea2151ec13f0f9f2fbae674dd2b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:69:d8:54:c8:1d:77:1d:e6:70:5c:76:c4:0a: 15:a2:17:b6:c6:ba:20:47:a9:65:2a:e2:61:cd:a1: 86:43:d5:af:1d:90:f5:38:97:58:48:50:df:eb:b1: 7e:4c:39:35:db:be:80:68:2e:1a:83:b1:64:a6:1b: 12:75:75:71:21:b1:c9:77:ef:d5:77:1b:a3:ae:d7: 2c:00:17:5f:e5:11:b1:06:68:19:a7:d7:c3:89:70: 82:57:fd:69:7b:27:8c:97:85:03:ce:5b:37:3d:42: 8e:6f:01:6a:ef:44:8d:d1:9a:86:a9:11:3b:95:d5: f0:d0:3d:10:70:53:69:4a:92:5a:3d:df:d5:9a:dd: 3c:9c:8c:ba:76:ff:40:b7:fa:f2:e7:0b:a0:56:16: 7c:19:eb:04:1d:d3:89:a5:05:4c:db:00:3e:be:15: 98:21:cb:d6:c8:ff:a4:f4:8c:1e:cf:3f:6c:9d:73: 2a:d1:04:40:5b:14:0d:a5:43:6a:ad:1f:19:c0:7b: 69:af:27:03:3b:24:51:8a:17:3a:33:30:e2:e0:b3: 8a:b1:84:80:64:0a:4b:a8:45:73:93:78:69:eb:e4: 0a:4d:2f:ce:8d:ad:63:df:d8:28:2e:3e:c9:4b:18: 23:35:05:f2:41:7e:e9:70:03:1a:53:49:9a:c5:04: d2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C1:FB:A7:6B:6E:EA:21:51:EC:13:F0:F9:F2:FB:AE:67:4D:D2:B6 X509v3 Authority Key Identifier: keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:57:7e:d4:22:66:54:8c:81:73:f1:02:a3:bf:3e:ee:b1:70: 06:06:ca:0a:af:fd:3b:9b:bf:f6:a7:9f:b7:fc:21:1d:36:91: 6d:5f:8e:b3:ff:57:bb:57:5f:a0:6c:5b:bc:6d:8d:f1:f5:a1: dc:cf:84:6b:5f:7e:2a:6a:db:54:60:dc:aa:e5:2d:30:e2:d2: 9b:69:fe:73:f7:43:70:88:af:46:bb:e9:91:bd:0c:67:f5:1e: cf:e5:3e:8e:59:4a:e7:bb:50:e0:d2:71:69:d7:fb:0e:b8:72: 89:bc:59:82:10:d0:b8:d1:d9:1a:5e:d0:d9:5f:a8:c8:e5:a0: e6:f2:c7:12:06:d2:ae:29:3a:12:81:8c:07:9b:c4:98:cf:22: 2a:56:55:97:05:75:a6:22:d5:04:56:58:be:c0:92:ac:c2:d4: d9:de:47:02:34:20:bb:6d:65:68:fe:82:d4:9e:a0:1d:04:0c: 66:61:1b:39:49:69:2b:ca:38:37:e1:bd:7a:08:d3:bf:05:cf: 97:b7:25:69:62:b2:29:b8:00:2a:bf:1a:68:63:f8:28:1c:61: 96:da:c7:20:ae:56:d7:f5:4f:4f:6f:83:79:6f:55:16:ac:49: 45:58:4d:ba:61:f1:d8:f2:79:ca:05:1c:75:08:62:b7:dc:6e: 53:5e:19:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UbVJfnzCLpm7kzFn6GbSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYWZmNzUyMDk2ODRhMzU0NjY5MDYxZDIzZGEyOWY4ZWEy ZjFkNWUwHhcNMjYwMTI2MDgwMDQwWhcNMjYwMTI3MDgwMDQwWjAzMTEwLwYDVQQD EyhmMGMxZmJhNzZiNmVlYTIxNTFlYzEzZjBmOWYyZmJhZTY3NGRkMmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2nYVMgddx3mcFx2xAoVohe2xrog R6llKuJhzaGGQ9WvHZD1OJdYSFDf67F+TDk1276AaC4ag7FkphsSdXVxIbHJd+/V dxujrtcsABdf5RGxBmgZp9fDiXCCV/1peyeMl4UDzls3PUKObwFq70SN0ZqGqRE7 ldXw0D0QcFNpSpJaPd/Vmt08nIy6dv9At/ry5wugVhZ8GesEHdOJpQVM2wA+vhWY IcvWyP+k9Iwezz9snXMq0QRAWxQNpUNqrR8ZwHtprycDOyRRihc6MzDi4LOKsYSA ZApLqEVzk3hp6+QKTS/Oja1j39goLj7JSxgjNQXyQX7pcAMaU0maxQTSIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDB+6drbuohUewT8Pny+65nTdK2MB8GA1UdIwQY MBaAFDCv91IJaEo1RmkGHSPaKfjqLx1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84NDRhMjUtYThkZi00NTYxLWIzZTct OTc4NWEzMzU1NDJhLzEvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84NDRhMjUtYThkZi00NTYxLWIzZTctOTc4NWEzMzU1NDJh LzEvTUtfM1VnbG9TalZHYVFZZEk5b3AtT292SFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFd+1CJm VIyBc/ECo78+7rFwBgbKCq/9O5u/9qeft/whHTaRbV+Os/9Xu1dfoGxbvG2N8fWh 3M+Ea19+KmrbVGDcquUtMOLSm2n+c/dDcIivRrvpkb0MZ/Uez+U+jllK57tQ4NJx adf7DrhyibxZghDQuNHZGl7Q2V+oyOWg5vLHEgbSrik6EoGMB5vEmM8iKlZVlwV1 piLVBFZYvsCSrMLU2d5HAjQgu21laP6C1J6gHQQMZmEbOUlpK8o4N+G9egjTvwXP l7claWKyKbgAKr8aaGP4KBxhltrHIK5W1/VPT2+DeW9VFqxJRVhNumHx2PJ5ygUc dQhit9xuU14ZSg== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:12 2026 by rpki-client