This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json) Hash identifier: 4+7Z97a0qPTkTtxk6qK4UutQdMJ61zPKTHPyvN/6mcg= Subject key identifier: 45:C0:18:C8:CB:F8:47:25:35:25:1E:1B:B0:AC:CF:F6:CD:EB:F7:0F Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace Certificate serial: 019BFC89B7D7DAB6AB4C9C4DD4B58D548808 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft Manifest number: 1152 Signing time: Mon 26 Jan 2026 23:00:42 +0000 Manifest this update: Mon 26 Jan 2026 23:00:42 +0000 Manifest next update: Tue 27 Jan 2026 23:00:42 +0000 Files and hashes: 1: RM9PZmEOVXyQOpcKkgGG800BmXs.roa (hash: nkRH5Uf4DOoOcPLvN/gO5xsmS2c1PFe5kD90XYTo/88=) 2: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: pxqzgkJj6SntyouzK8kvrjVggkwTBj3L1PUcCEGNxto=) 3: mbdcwHlSOdMYUPvA5MeJ7d266D4.roa (hash: Pwk94nVN9WQFskxqF8Df/JcvOSkAkt2dNKq7yQ0vd80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:89:b7:d7:da:b6:ab:4c:9c:4d:d4:b5:8d:54:88:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace Validity Not Before: Jan 26 23:00:42 2026 GMT Not After : Jan 27 23:00:42 2026 GMT Subject: CN=45c018c8cbf8472535251e1bb0accff6cdebf70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7c:7c:71:80:56:f2:a8:02:c1:59:3a:56:c3: 3d:6e:ae:c6:2f:af:92:9d:59:af:8d:0d:ad:2f:61: 3b:06:2e:a9:e7:6b:d2:76:76:05:8d:72:38:db:46: d9:99:e5:8e:a4:83:18:0a:85:25:59:de:20:b1:96: b4:71:ad:06:e6:74:e2:7b:ae:42:be:be:95:a2:19: 3b:59:8d:11:d2:57:f2:2d:3f:40:5c:26:18:cd:0b: 6a:e6:7e:9f:29:1a:8e:59:ea:31:12:2e:ec:95:13: 1b:91:18:67:a4:f1:a2:28:b8:2e:2d:c4:1f:94:ad: 9e:ca:70:80:49:c9:74:3b:bb:f7:91:00:ad:71:a1: 3f:5c:70:9b:03:6c:47:27:5a:02:5f:93:51:71:2d: f2:ce:cf:30:53:45:6e:be:29:83:f7:2a:f5:96:10: 8e:84:e4:56:9d:77:8b:f8:54:13:dd:f2:ee:7f:e1: 85:bf:1c:ea:4b:da:5d:09:61:af:53:31:19:bb:38: 77:a5:4e:bd:0b:4f:e3:7b:b9:bb:90:98:7b:d0:a0: 25:89:39:cc:37:1e:cd:44:2d:13:0a:f0:a4:e5:6a: 5e:94:a4:90:83:bb:c3:7d:2f:06:8d:c3:25:41:fd: de:97:c9:15:2d:f3:46:97:07:23:12:d1:5e:26:40: 7c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C0:18:C8:CB:F8:47:25:35:25:1E:1B:B0:AC:CF:F6:CD:EB:F7:0F X509v3 Authority Key Identifier: keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:1e:1b:3e:8c:7b:fc:52:df:3a:22:c8:df:bd:4e:0a:16:0e: f4:00:d1:78:36:37:ac:cf:cc:5f:78:bd:31:e2:d3:e9:7a:13: f6:e1:15:26:75:f4:87:79:21:16:98:16:19:07:b9:68:b0:ef: 56:fd:45:67:b7:12:44:2b:13:14:f1:c4:5c:ab:f4:30:61:0b: 22:3c:b7:fb:33:9a:90:59:75:28:7b:1b:a0:8a:85:63:ee:09: f7:b5:b4:f6:8a:b0:64:df:fd:f7:e3:39:cf:79:8c:e3:4e:12: aa:20:43:a9:41:af:17:06:83:85:dd:88:2f:2a:ec:8f:05:cc: 67:8e:01:13:79:f2:65:71:b6:52:b3:0e:85:10:99:8d:79:17: 76:99:4d:16:68:15:dd:81:ec:12:17:14:e9:78:79:75:9b:5d: 15:41:65:fd:e1:ba:dc:ce:cb:9c:fe:8f:3b:9c:58:31:9c:34: 42:b4:6f:f9:5c:21:bb:59:72:94:5f:f2:a0:ed:07:79:42:a0: 59:9e:5e:4b:28:9d:29:11:ee:7c:a6:5d:41:66:5e:29:7f:63: d2:7e:2c:46:1d:de:6e:b5:05:ef:18:4e:5b:0c:07:b9:ad:5e: e5:39:0e:bd:9a:68:45:f3:b2:0b:aa:5a:0a:d7:2d:9e:38:77: 57:ee:5a:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ibfX2rarTJxN1LWNVIgIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzN2UxNzdmNzY2NjMxNjZjNzUxOTBlMmQyMDkzMzVhNmFh ZTVhY2UwHhcNMjYwMTI2MjMwMDQyWhcNMjYwMTI3MjMwMDQyWjAzMTEwLwYDVQQD Eyg0NWMwMThjOGNiZjg0NzI1MzUyNTFlMWJiMGFjY2ZmNmNkZWJmNzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nx8cYBW8qgCwVk6VsM9bq7GL6+S nVmvjQ2tL2E7Bi6p52vSdnYFjXI420bZmeWOpIMYCoUlWd4gsZa0ca0G5nTie65C vr6Vohk7WY0R0lfyLT9AXCYYzQtq5n6fKRqOWeoxEi7slRMbkRhnpPGiKLguLcQf lK2eynCAScl0O7v3kQCtcaE/XHCbA2xHJ1oCX5NRcS3yzs8wU0VuvimD9yr1lhCO hORWnXeL+FQT3fLuf+GFvxzqS9pdCWGvUzEZuzh3pU69C0/je7m7kJh70KAliTnM Nx7NRC0TCvCk5WpelKSQg7vDfS8GjcMlQf3el8kVLfNGlwcjEtFeJkB8nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXAGMjL+EclNSUeG7Csz/bN6/cPMB8GA1UdIwQY MBaAFIN+F392ZjFmx1GQ4tIJM1pqrlrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzM0WGYzWm1NV2JIVVpEaTBna3pXbXF1V3M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83MGMxOWYtMjljYS00YjYyLWFjNjIt OGJhNzY4MDIyNzYzLzEvZzM0WGYzWm1NV2JIVVpEaTBna3pXbXF1V3M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My83MGMxOWYtMjljYS00YjYyLWFjNjItOGJhNzY4MDIyNzYz LzEvZzM0WGYzWm1NV2JIVVpEaTBna3pXbXF1V3M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQh4bPox7 /FLfOiLI371OChYO9ADReDY3rM/MX3i9MeLT6XoT9uEVJnX0h3khFpgWGQe5aLDv Vv1FZ7cSRCsTFPHEXKv0MGELIjy3+zOakFl1KHsboIqFY+4J97W09oqwZN/99+M5 z3mM404SqiBDqUGvFwaDhd2ILyrsjwXMZ44BE3nyZXG2UrMOhRCZjXkXdplNFmgV 3YHsEhcU6Xh5dZtdFUFl/eG63M7LnP6PO5xYMZw0QrRv+Vwhu1lylF/yoO0HeUKg WZ5eSyidKRHufKZdQWZeKX9j0n4sRh3ebrUF7xhOWwwHua1e5TkOvZpoRfOyC6pa Ctctnjh3V+5aFA== -----END CERTIFICATE-----Generated at Tue Jan 27 03:55:57 2026 by rpki-client