This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft File: MBlcO7BQWGtfTlAEEYAHxIs06uU.mft (raw, json) Hash identifier: TjV6em2GTNBeTldZzP2Qa/S0zIBBnclH6Pfe0VmwefE= Subject key identifier: CE:FD:FF:54:0A:FF:45:52:67:22:05:58:E7:A9:32:26:47:91:D0:DB Authority key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5 Certificate issuer: /CN=30195c3bb050586b5f4e5004118007c48b34eae5 Certificate serial: 019BFD9D4D047C9326B7C4AE8D5F6CF008C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft Manifest number: 17EC Signing time: Tue 27 Jan 2026 04:01:43 +0000 Manifest this update: Tue 27 Jan 2026 04:01:43 +0000 Manifest next update: Wed 28 Jan 2026 04:01:43 +0000 Files and hashes: 1: MBlcO7BQWGtfTlAEEYAHxIs06uU.crl (hash: DXXuI34rIRG49lFtHT42lREou+X0MqUZeK2oLDAk4qw=) 2: qeezGpylFYQWdw5Zzwgz6qTCezQ.roa (hash: 81jQgwS6nCCkT6pNsFrxENxQzb13LmVBgngNENTsUtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:9d:4d:04:7c:93:26:b7:c4:ae:8d:5f:6c:f0:08:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30195c3bb050586b5f4e5004118007c48b34eae5 Validity Not Before: Jan 27 04:01:43 2026 GMT Not After : Jan 28 04:01:43 2026 GMT Subject: CN=cefdff540aff455267220558e7a932264791d0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e5:72:5e:11:f9:c1:1d:6b:65:1a:cf:7a:90: 27:aa:7e:34:d9:1f:35:7f:8d:38:35:f1:c8:56:5e: 2b:9e:74:ba:b1:98:4b:d2:ac:f4:7f:7c:52:57:95: 66:26:05:fa:73:fc:90:ef:06:33:e5:15:20:f5:ea: db:dd:4b:cb:ce:71:bb:d5:b2:9b:51:98:84:81:73: 95:6c:40:90:fd:2f:e7:3d:80:0d:4b:eb:9d:1d:d6: 9c:48:0d:9b:96:a2:3d:78:0a:c9:72:99:3f:1e:69: 6b:34:c4:85:5c:32:6e:53:1d:bc:59:5e:ba:70:d6: 0b:15:41:1e:fd:44:f3:a4:0c:c2:7d:d3:27:be:e4: 86:9a:9e:f0:e5:c7:3b:ae:47:01:c7:06:7e:f9:a4: b0:65:ee:b1:de:d4:7d:3b:35:9b:ba:63:5c:67:5d: 11:e5:b8:a8:27:f6:ed:5b:65:76:60:b8:97:c7:5e: 80:4a:f1:8a:7c:bd:2c:54:1a:73:1d:b4:25:e1:ac: e2:c5:6d:3e:c6:49:40:22:e3:3e:1f:50:69:84:ee: 88:aa:60:f6:79:72:5d:c3:0e:be:0d:2f:43:cb:64: 17:f0:1c:6b:d2:9f:41:1a:45:1e:4a:5e:b2:3d:4c: 62:c5:b9:a5:13:27:d7:e0:db:02:33:32:8b:9d:d3: 22:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FD:FF:54:0A:FF:45:52:67:22:05:58:E7:A9:32:26:47:91:D0:DB X509v3 Authority Key Identifier: keyid:30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:44:5f:56:fe:12:c0:60:42:61:c1:16:91:0f:3b:00:70:11: d1:62:fd:e0:40:0d:38:88:95:05:9b:1e:86:6a:ab:09:63:94: 60:18:7f:ff:60:9c:b9:fd:08:8b:95:2e:88:05:24:59:eb:0d: 52:48:7a:90:d4:38:f0:7d:e2:04:83:9b:15:de:c1:28:fc:80: cc:99:cf:24:83:7f:b3:cf:f9:31:c2:e1:03:aa:a2:95:b5:da: 13:4a:24:d8:b2:a5:53:71:cd:dd:23:bd:88:2b:0d:a8:da:c5: 52:86:3b:a9:6c:e6:52:14:e9:5c:ca:ca:34:bc:50:cc:8b:b2: b4:23:f2:f2:36:dd:28:34:d4:d3:80:2f:ca:f1:00:7d:ed:53: 57:c1:a7:27:05:2a:d4:2c:54:89:f1:ba:c4:4b:80:b9:8d:52: 20:81:85:b6:15:5f:0a:52:1b:71:4a:5f:0d:9c:1b:ec:81:91: e1:26:64:54:44:42:a5:63:85:88:51:30:a5:f7:9d:57:a5:67: 30:84:cd:c6:2f:79:08:7e:6a:09:2d:8d:34:e5:e2:be:02:42: a7:66:6f:c3:b5:30:18:9c:89:5c:2e:6e:68:89:b8:0e:82:b7: 31:b7:13:9d:6d:86:b4:22:df:b3:21:d9:fa:da:71:1a:8d:86: f4:8b:22:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9nU0EfJMmt8SujV9s8AjJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMTk1YzNiYjA1MDU4NmI1ZjRlNTAwNDExODAwN2M0OGIz NGVhZTUwHhcNMjYwMTI3MDQwMTQzWhcNMjYwMTI4MDQwMTQzWjAzMTEwLwYDVQQD EyhjZWZkZmY1NDBhZmY0NTUyNjcyMjA1NThlN2E5MzIyNjQ3OTFkMGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+VyXhH5wR1rZRrPepAnqn402R81 f404NfHIVl4rnnS6sZhL0qz0f3xSV5VmJgX6c/yQ7wYz5RUg9erb3UvLznG71bKb UZiEgXOVbECQ/S/nPYANS+udHdacSA2blqI9eArJcpk/HmlrNMSFXDJuUx28WV66 cNYLFUEe/UTzpAzCfdMnvuSGmp7w5cc7rkcBxwZ++aSwZe6x3tR9OzWbumNcZ10R 5bioJ/btW2V2YLiXx16ASvGKfL0sVBpzHbQl4azixW0+xklAIuM+H1BphO6IqmD2 eXJdww6+DS9Dy2QX8Bxr0p9BGkUeSl6yPUxixbmlEyfX4NsCMzKLndMiBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM79/1QK/0VSZyIFWOepMiZHkdDbMB8GA1UdIwQY MBaAFDAZXDuwUFhrX05QBBGAB8SLNOrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQt YjQyMWMzOGIyZjdmLzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQtYjQyMWMzOGIyZjdm LzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr0RfVv4S wGBCYcEWkQ87AHAR0WL94EANOIiVBZsehmqrCWOUYBh//2Ccuf0Ii5UuiAUkWesN Ukh6kNQ48H3iBIObFd7BKPyAzJnPJIN/s8/5McLhA6qilbXaE0ok2LKlU3HN3SO9 iCsNqNrFUoY7qWzmUhTpXMrKNLxQzIuytCPy8jbdKDTU04AvyvEAfe1TV8GnJwUq 1CxUifG6xEuAuY1SIIGFthVfClIbcUpfDZwb7IGR4SZkVERCpWOFiFEwpfedV6Vn MITNxi95CH5qCS2NNOXivgJCp2Zvw7UwGJyJXC5uaIm4DoK3MbcTnW2GtCLfsyHZ +tpxGo2G9Isiag== -----END CERTIFICATE-----Generated at Tue Jan 27 07:47:22 2026 by rpki-client