This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft File: mxl1igh4doFtwZNh6vHpQS3nP4Y.mft (raw, json) Hash identifier: tzirJB4BRK+nBhe90wZ94VOOKpC9WDdrXcL20E/SxZ0= Subject key identifier: B3:6E:7B:CF:B3:53:22:C7:1D:84:87:9A:4C:1B:F5:08:72:22:70:29 Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86 Certificate issuer: /CN=9b19758a087876816dc19361eaf1e9412de73f86 Certificate serial: 019BFB4060AEE0ABB908F652F9097DD988BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft Manifest number: 089F Signing time: Mon 26 Jan 2026 17:00:58 +0000 Manifest this update: Mon 26 Jan 2026 17:00:58 +0000 Manifest next update: Tue 27 Jan 2026 17:00:58 +0000 Files and hashes: 1: 4YRS6EEeuTI9ZfzO53iKNIfSN4s.roa (hash: Tv3HULU0Zra1BolAPc2Q/gu/Km7IonOCAUA8ZpZ63Jo=) 2: _RoC_RNXE3s_SWdnfBHgPoNrU2M.roa (hash: wPRRqYY5EWMxD0w+AF1woDBkV71SkgmmKkudFef6WP0=) 3: _no2T5wGNnY26JGUD4kdd2oqfik.roa (hash: cAZL1uQQoGuptZEdg5D0yO2UPDl/TjYUL4Qg8BJ2wIg=) 4: kt9wkvMfUjDBISQAMhIZ_H3acrA.roa (hash: 2eym/C1FIDZNxIwzhAk1LB/uLTJl3u4Wtgxo8cZEAdo=) 5: mxl1igh4doFtwZNh6vHpQS3nP4Y.crl (hash: N1B9Oa6QqV+oo1ofT3dR1ymfg88/C9VJMWmBes4YpTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:60:ae:e0:ab:b9:08:f6:52:f9:09:7d:d9:88:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86 Validity Not Before: Jan 26 17:00:58 2026 GMT Not After : Jan 27 17:00:58 2026 GMT Subject: CN=b36e7bcfb35322c71d84879a4c1bf50872227029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:74:d8:fc:0b:e9:e5:fe:98:65:42:61:22:98: 12:cb:c6:04:14:60:99:53:65:cd:3c:89:94:c8:6e: 5b:cf:1f:c8:f9:d0:30:f1:ed:10:f2:ed:56:1d:c6: 65:8c:bf:fc:46:fd:ca:93:c7:33:e1:a0:7c:38:32: 3f:4e:54:73:93:a7:88:04:7a:7f:17:1a:37:3b:e8: 27:b2:50:96:82:d4:fd:f3:50:ee:ff:7a:0f:69:98: 00:ce:5f:75:30:d9:48:a2:6e:05:72:96:42:c4:62: 1f:7c:ab:51:ca:1f:84:83:c1:ce:14:0d:02:0e:51: 02:dc:db:0b:d1:fb:31:7a:58:e3:ea:52:77:90:15: 29:69:0e:1e:a1:83:93:1f:73:4e:4f:dc:0d:50:4f: 9c:10:a8:60:77:6f:01:1e:9d:a9:a9:81:7e:d3:55: ef:4e:01:c9:ed:6f:37:09:5c:d3:5a:81:58:64:4f: dd:42:ca:cd:81:18:30:9a:3d:d2:be:0c:26:f1:8b: be:da:b6:e8:aa:9e:33:71:2c:ea:17:5a:0f:0c:cc: 09:ab:69:f9:70:bb:c1:c2:92:51:07:50:d7:4d:5d: 2b:82:84:e8:d3:54:14:24:ec:06:83:68:0f:7f:3d: bc:a4:f4:2f:ed:97:ac:f3:e3:a3:e5:15:7c:81:1c: 85:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6E:7B:CF:B3:53:22:C7:1D:84:87:9A:4C:1B:F5:08:72:22:70:29 X509v3 Authority Key Identifier: keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:6a:6e:6e:22:22:ea:43:24:87:95:3c:74:7c:7d:4b:62:66: 9d:e4:41:7a:51:89:ff:54:35:e1:c3:8e:45:98:28:50:ef:4b: 8e:2c:7c:ae:ca:74:d7:25:78:2d:6d:28:0d:e3:2b:d9:5b:3b: 5e:05:32:54:f4:6e:1a:7a:4c:6e:cc:45:85:59:ce:88:a2:74: 05:37:df:0e:6c:48:67:ba:e4:a5:89:2c:ce:a9:d9:0f:a5:e5: c6:1f:f1:5b:b0:e0:80:7e:b0:bc:93:2f:59:69:e8:bc:76:e6: a2:59:32:ae:8a:bc:4b:e7:8b:8f:bf:da:48:b9:96:f1:56:e9: 4b:98:b3:93:6e:55:a5:59:8a:85:ec:eb:9b:bb:71:09:b9:c5: 6a:92:ea:e2:1c:61:a8:69:22:b5:64:fe:15:ca:df:b7:0b:30: 98:64:2f:b2:8f:f2:63:22:60:90:59:00:c7:47:6a:1c:70:f5: fc:ca:37:68:5e:96:b7:78:2b:c5:0f:30:af:4c:9b:89:10:b0: b0:20:1b:38:74:1b:09:93:15:3d:f2:a9:e9:99:7c:04:a9:6b: 64:b3:bc:f4:f4:05:ed:d6:64:58:ca:3f:0d:e4:b4:2a:7b:07: 1a:d3:f9:fd:fd:4e:66:6c:98:e7:dc:8f:4a:dd:66:12:92:bb: 1f:5f:11:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QGCu4Ku5CPZS+Ql92Yi9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMTk3NThhMDg3ODc2ODE2ZGMxOTM2MWVhZjFlOTQxMmRl NzNmODYwHhcNMjYwMTI2MTcwMDU4WhcNMjYwMTI3MTcwMDU4WjAzMTEwLwYDVQQD EyhiMzZlN2JjZmIzNTMyMmM3MWQ4NDg3OWE0YzFiZjUwODcyMjI3MDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHTY/Avp5f6YZUJhIpgSy8YEFGCZ U2XNPImUyG5bzx/I+dAw8e0Q8u1WHcZljL/8Rv3Kk8cz4aB8ODI/TlRzk6eIBHp/ Fxo3O+gnslCWgtT981Du/3oPaZgAzl91MNlIom4FcpZCxGIffKtRyh+Eg8HOFA0C DlEC3NsL0fsxeljj6lJ3kBUpaQ4eoYOTH3NOT9wNUE+cEKhgd28BHp2pqYF+01Xv TgHJ7W83CVzTWoFYZE/dQsrNgRgwmj3Svgwm8Yu+2rboqp4zcSzqF1oPDMwJq2n5 cLvBwpJRB1DXTV0rgoTo01QUJOwGg2gPfz28pPQv7Zes8+Oj5RV8gRyFxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNue8+zUyLHHYSHmkwb9QhyInApMB8GA1UdIwQY MBaAFJsZdYoIeHaBbcGTYerx6UEt5z+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXhsMWlnaDRkb0Z0d1pOaDZ2SHBRUzNuUDRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9iYTZmM2UtZTk1Yi00OGQyLTg0MTkt NDEzZGE2NjdhOGJlLzEvbXhsMWlnaDRkb0Z0d1pOaDZ2SHBRUzNuUDRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9iYTZmM2UtZTk1Yi00OGQyLTg0MTktNDEzZGE2NjdhOGJl LzEvbXhsMWlnaDRkb0Z0d1pOaDZ2SHBRUzNuUDRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWpubiIi 6kMkh5U8dHx9S2JmneRBelGJ/1Q14cOORZgoUO9Ljix8rsp01yV4LW0oDeMr2Vs7 XgUyVPRuGnpMbsxFhVnOiKJ0BTffDmxIZ7rkpYkszqnZD6Xlxh/xW7DggH6wvJMv WWnovHbmolkyroq8S+eLj7/aSLmW8VbpS5izk25VpVmKhezrm7txCbnFapLq4hxh qGkitWT+FcrftwswmGQvso/yYyJgkFkAx0dqHHD1/Mo3aF6Wt3grxQ8wr0ybiRCw sCAbOHQbCZMVPfKp6Zl8BKlrZLO89PQF7dZkWMo/DeS0KnsHGtP5/f1OZmyY59yP St1mEpK7H18R7A== -----END CERTIFICATE-----Generated at Tue Jan 27 00:09:53 2026 by rpki-client