This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft File: mMHQO0lQTTRGXcQKPQ-QhsrP244.mft (raw, json) Hash identifier: lj7wnpm8n6aCKmc+xFDc/hOaeXvMmrDPLNsePPNKEGo= Subject key identifier: C8:AB:53:FE:13:F1:B8:FF:FC:B3:5D:CB:FD:D9:5B:06:59:69:CF:A7 Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E Certificate issuer: /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e Certificate serial: 019BD846C840D8475E4091F2510E50D626EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft Manifest number: 05ED Signing time: Mon 19 Jan 2026 22:01:15 +0000 Manifest this update: Mon 19 Jan 2026 22:01:15 +0000 Manifest next update: Tue 20 Jan 2026 22:01:15 +0000 Files and hashes: 1: 1sGhU6MrhqOQe72GVQ3uEjbGwB8.roa (hash: IzX/NeS/gsGTMbDaq8QMW6ohP4ePoSu82S6CGrAjXmE=) 2: 5tzdHJZflY-1x9Dve2csyqwdZbQ.roa (hash: XDL92AsqSxDOcmZ/1ldjanW7KPhyM7Tkp+WIIFretRk=) 3: 7g2RZeaRS9vdn7VTGlUUljooyjg.roa (hash: TDCPm1iHmXQo+Iw8VJeLJKTjPRB1MKrXpudcYi2nCl8=) 4: Ogeb0NIuZiUzdbJ2L0IQMwR8aKE.roa (hash: pgk407tpVqJOpRBfZ29H20iPf3oWY6NCHEs/wV2vLyg=) 5: WQApiK5AqVLXzb2NxG_TG7ltg58.roa (hash: siSt0UVKPrrD5BPPklQPFJzk2EiG13UyW6FUUioZ3+w=) 6: mMHQO0lQTTRGXcQKPQ-QhsrP244.crl (hash: zFphoxRi/qgOydgAakX80wcdwZO8XpQYm1TOWQKs/YQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:46:c8:40:d8:47:5e:40:91:f2:51:0e:50:d6:26:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e Validity Not Before: Jan 19 22:01:15 2026 GMT Not After : Jan 20 22:01:15 2026 GMT Subject: CN=c8ab53fe13f1b8fffcb35dcbfdd95b065969cfa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:71:e8:3e:81:f2:c8:1d:7b:77:58:13:0b:4f: 19:bd:d9:e4:f7:02:4a:d4:83:11:48:c2:b7:5b:9e: 9c:ab:f5:db:42:e2:56:cc:b8:f2:92:27:b9:6f:84: 5f:b7:cd:aa:b4:ce:bf:31:89:69:a0:84:fd:28:1b: 85:ef:9b:34:7c:c5:6e:38:04:d6:e4:4e:ad:e9:2c: 1f:00:5b:71:c3:63:56:a7:59:27:6d:74:60:40:36: 9b:6a:dd:df:55:8e:1a:b7:cf:63:1d:da:63:ed:cc: 23:48:a3:8d:7b:21:68:5c:4c:77:bf:4c:42:53:95: 27:e8:0d:5a:ac:2b:d7:64:97:87:8c:e4:e3:60:e9: 36:6a:1a:fe:65:9f:5c:45:74:e5:16:e0:75:5c:0a: 41:a6:09:b0:1b:f3:b7:07:b0:46:4f:fd:ce:57:01: ef:13:c1:ed:1f:aa:32:92:b5:4f:f1:5b:9f:e1:74: 4d:b6:4b:3c:18:0b:67:02:ad:5f:91:39:16:b3:13: a3:f1:4e:11:6e:aa:00:a4:82:70:fc:20:d7:fd:8e: ce:e1:2f:51:b3:80:9b:c2:00:e3:ca:35:9b:78:fb: da:b3:b1:1e:4d:8f:43:d6:f9:cb:7b:c0:60:d6:65: 00:9f:49:8a:16:41:9a:ac:f1:2e:13:43:91:a5:97: a7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AB:53:FE:13:F1:B8:FF:FC:B3:5D:CB:FD:D9:5B:06:59:69:CF:A7 X509v3 Authority Key Identifier: keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:45:06:2b:7b:06:c8:16:21:09:5b:5b:15:15:4b:08:c6:c4: e7:ed:8f:25:e8:29:2e:17:15:16:b4:c8:87:26:ca:83:12:fc: bd:e8:b5:63:9d:26:8a:7f:c9:13:20:f8:e8:be:a7:c6:d4:e6: 47:c2:c5:e7:e7:55:92:d2:a6:9b:58:6d:ae:22:55:84:c4:55: 96:96:43:de:0c:1f:ad:0e:8a:7d:f2:d0:ec:5a:05:48:98:92: c0:f6:28:38:94:19:da:54:2c:cc:87:6a:a9:2c:0d:a2:06:f5: cd:da:ce:b2:9e:9d:44:62:55:70:74:13:9e:d7:ad:dd:5e:e2: 85:9e:01:88:8a:ce:bb:f3:f3:60:e3:2e:db:13:0f:17:d4:83: 73:f1:f5:d4:4c:ed:11:e1:a7:6c:f9:d9:75:71:02:23:d2:da: 08:f8:07:2e:cb:b0:43:35:77:11:04:3f:96:5a:99:39:2f:68: de:ba:7e:43:e5:66:89:eb:ae:87:1b:55:50:60:2d:0b:2c:5c: be:b8:65:9f:53:fe:e1:94:f5:9a:bb:e6:08:e4:c6:98:28:96: d2:91:40:9f:53:e8:a2:e3:1b:d7:ff:4b:70:aa:c9:7f:3d:90: 56:54:f5:8e:ad:e7:72:5b:01:e2:50:23:98:6c:44:bf:6f:af: 20:f4:39:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYRshA2EdeQJHyUQ5Q1ibuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YzFkMDNiNDk1MDRkMzQ0NjVkYzQwYTNkMGY5MDg2Y2Fj ZmRiOGUwHhcNMjYwMTE5MjIwMTE1WhcNMjYwMTIwMjIwMTE1WjAzMTEwLwYDVQQD EyhjOGFiNTNmZTEzZjFiOGZmZmNiMzVkY2JmZGQ5NWIwNjU5NjljZmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynHoPoHyyB17d1gTC08Zvdnk9wJK 1IMRSMK3W56cq/XbQuJWzLjykie5b4Rft82qtM6/MYlpoIT9KBuF75s0fMVuOATW 5E6t6SwfAFtxw2NWp1knbXRgQDabat3fVY4at89jHdpj7cwjSKONeyFoXEx3v0xC U5Un6A1arCvXZJeHjOTjYOk2ahr+ZZ9cRXTlFuB1XApBpgmwG/O3B7BGT/3OVwHv E8HtH6oykrVP8Vuf4XRNtks8GAtnAq1fkTkWsxOj8U4RbqoApIJw/CDX/Y7O4S9R s4CbwgDjyjWbePvas7EeTY9D1vnLe8Bg1mUAn0mKFkGarPEuE0ORpZenuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMirU/4T8bj//LNdy/3ZWwZZac+nMB8GA1UdIwQY MBaAFJjB0DtJUE00Rl3ECj0PkIbKz9uOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kNmMyNTctZjUwMS00Nzk2LWFhNjEt YzMxYmRlNTEwMDg1LzEvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kNmMyNTctZjUwMS00Nzk2LWFhNjEtYzMxYmRlNTEwMDg1 LzEvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUUGK3sG yBYhCVtbFRVLCMbE5+2PJegpLhcVFrTIhybKgxL8vei1Y50min/JEyD46L6nxtTm R8LF5+dVktKmm1htriJVhMRVlpZD3gwfrQ6KffLQ7FoFSJiSwPYoOJQZ2lQszIdq qSwNogb1zdrOsp6dRGJVcHQTntet3V7ihZ4BiIrOu/PzYOMu2xMPF9SDc/H11Ezt EeGnbPnZdXECI9LaCPgHLsuwQzV3EQQ/llqZOS9o3rp+Q+VmieuuhxtVUGAtCyxc vrhln1P+4ZT1mrvmCOTGmCiW0pFAn1PoouMb1/9LcKrJfz2QVlT1jq3nclsB4lAj mGxEv2+vIPQ50w== -----END CERTIFICATE-----Generated at Tue Jan 20 02:34:24 2026 by rpki-client