This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft File: MVipNBic8FiR-MTlmdC5iVfplyk.mft (raw, json) Hash identifier: 21L9h3xY9X8Wu8B1HTrD2gdQ1K6UmDPi3nZQ6Is6kUU= Subject key identifier: FA:48:F0:66:09:39:C6:3E:E2:DC:BA:DC:53:6B:C7:FB:D5:3E:D2:79 Authority key identifier: 31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29 Certificate issuer: /CN=3158a934189cf05891f8c4e599d0b98957e99729 Certificate serial: 019BDDDB26ACF5CBED50983C44C782E1DC1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft Manifest number: 0696 Signing time: Wed 21 Jan 2026 00:01:25 +0000 Manifest this update: Wed 21 Jan 2026 00:01:25 +0000 Manifest next update: Thu 22 Jan 2026 00:01:25 +0000 Files and hashes: 1: MVipNBic8FiR-MTlmdC5iVfplyk.crl (hash: wN4icI+nqfr1zUDjQO9hO+j4PHZWaQR4sXuKs9enc78=) 2: SoUQ5tjPimIs5vL0jQz1k3-Y_k4.roa (hash: rxeG5Q9fjMcRXTA3/mQpeB3InL8UbHM8sXy68JYVcRc=) 3: WN6nm9P1utuZWbfPP4NpFvTEUfc.roa (hash: vxFDJKyu6Fl9t1C3JXTJl+d0N1fXG6sGHHUW42DW59s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dd:db:26:ac:f5:cb:ed:50:98:3c:44:c7:82:e1:dc:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3158a934189cf05891f8c4e599d0b98957e99729 Validity Not Before: Jan 21 00:01:25 2026 GMT Not After : Jan 22 00:01:25 2026 GMT Subject: CN=fa48f0660939c63ee2dcbadc536bc7fbd53ed279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ae:fd:95:6e:0c:cf:32:a8:89:54:8e:33:55: 8b:86:68:4c:cb:dd:65:f1:0f:28:17:c3:17:fc:9c: 32:16:8f:55:00:e9:52:a6:ce:a8:83:95:a5:5c:f3: ce:85:4a:77:84:0e:78:09:8d:c7:4a:fa:65:d5:f3: d1:f7:3b:63:8d:6d:9c:28:dc:f0:4b:38:02:b9:dc: b6:49:24:c3:02:20:1d:97:ee:9c:45:10:f1:9f:fa: 91:d3:ed:2f:91:8d:bb:59:35:85:0c:84:97:8b:bd: 5e:42:75:0e:72:e8:eb:b1:d3:1e:55:36:e2:56:3f: 98:62:a2:1f:f2:85:c0:e4:12:a2:85:e4:b8:ab:e7: bc:4f:b9:d9:b1:bb:39:a7:92:86:c5:89:c1:92:c9: 24:8e:5d:8a:df:1e:76:7e:76:85:9e:81:77:b3:20: 91:1d:73:9e:b6:4a:5c:2b:4f:0f:61:44:2d:13:08: dc:00:d4:67:03:6a:7f:9e:a8:91:8d:ac:74:12:73: 5e:46:08:fd:26:d0:5a:d7:67:37:b9:3a:4a:c5:15: 40:b7:6e:80:5a:fb:43:ac:35:4f:67:1f:ba:ab:6f: 09:d5:0c:66:ad:2a:da:a5:48:be:64:bd:00:37:64: ee:0e:d8:d8:67:41:f5:b9:e5:a4:bb:e7:98:cd:7b: 33:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:48:F0:66:09:39:C6:3E:E2:DC:BA:DC:53:6B:C7:FB:D5:3E:D2:79 X509v3 Authority Key Identifier: keyid:31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:41:d7:37:cb:d0:00:39:c0:3a:27:d8:23:79:e1:61:dd:3d: b1:b1:e3:c7:fa:5a:d0:b5:63:d1:96:b7:4b:8c:08:ce:ad:9d: 67:a8:0f:36:ed:62:d4:93:26:8e:d5:42:8f:01:8a:6d:60:02: 89:69:9e:26:a6:d8:5d:4c:42:ab:81:32:24:b2:de:14:57:d4: 7e:a0:06:8a:70:3d:26:89:eb:cc:11:1a:29:6f:f2:52:9b:78: 97:90:75:5c:31:b0:75:5e:5d:c9:44:96:dc:66:1c:d4:02:60: 30:88:45:8d:e3:b8:cc:d1:aa:f0:fa:05:dd:42:4a:3c:1a:6e: 78:e3:67:d4:57:2b:72:43:11:e8:c1:62:e2:2a:e9:ff:a0:28: 47:07:f3:a6:14:91:d1:7a:fe:4a:76:48:63:fc:fc:a6:7c:60: 07:37:0d:83:4e:08:42:35:f9:7e:d5:18:af:99:da:c7:17:81: 05:9c:d1:e2:53:27:9e:eb:81:39:13:f0:f3:0b:67:91:51:07: 45:b4:64:90:f1:62:fb:10:1b:46:16:75:a1:7d:08:28:b1:45: df:d2:48:d5:8a:9b:57:46:86:2e:12:d4:16:cc:f3:13:a5:9c: 55:e3:c0:48:26:d8:0d:f6:dd:a9:3c:47:54:ba:a2:b3:a5:22: 5b:31:69:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvd2yas9cvtUJg8RMeC4dweMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNThhOTM0MTg5Y2YwNTg5MWY4YzRlNTk5ZDBiOTg5NTdl OTk3MjkwHhcNMjYwMTIxMDAwMTI1WhcNMjYwMTIyMDAwMTI1WjAzMTEwLwYDVQQD EyhmYTQ4ZjA2NjA5MzljNjNlZTJkY2JhZGM1MzZiYzdmYmQ1M2VkMjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva79lW4MzzKoiVSOM1WLhmhMy91l 8Q8oF8MX/JwyFo9VAOlSps6og5WlXPPOhUp3hA54CY3HSvpl1fPR9ztjjW2cKNzw SzgCudy2SSTDAiAdl+6cRRDxn/qR0+0vkY27WTWFDISXi71eQnUOcujrsdMeVTbi Vj+YYqIf8oXA5BKiheS4q+e8T7nZsbs5p5KGxYnBkskkjl2K3x52fnaFnoF3syCR HXOetkpcK08PYUQtEwjcANRnA2p/nqiRjax0EnNeRgj9JtBa12c3uTpKxRVAt26A WvtDrDVPZx+6q28J1QxmrSrapUi+ZL0AN2TuDtjYZ0H1ueWku+eYzXszWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpI8GYJOcY+4ty63FNrx/vVPtJ5MB8GA1UdIwQY MBaAFDFYqTQYnPBYkfjE5ZnQuYlX6ZcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVZpcE5CaWM4RmlSLU1UbG1kQzVpVmZwbHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9jY2NmOGItMDI3NC00YmIyLThkYmIt ZDM4NmQyMDQ5MDQyLzEvTVZpcE5CaWM4RmlSLU1UbG1kQzVpVmZwbHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9jY2NmOGItMDI3NC00YmIyLThkYmItZDM4NmQyMDQ5MDQy LzEvTVZpcE5CaWM4RmlSLU1UbG1kQzVpVmZwbHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUHXN8vQ ADnAOifYI3nhYd09sbHjx/pa0LVj0Za3S4wIzq2dZ6gPNu1i1JMmjtVCjwGKbWAC iWmeJqbYXUxCq4EyJLLeFFfUfqAGinA9JonrzBEaKW/yUpt4l5B1XDGwdV5dyUSW 3GYc1AJgMIhFjeO4zNGq8PoF3UJKPBpueONn1FcrckMR6MFi4irp/6AoRwfzphSR 0Xr+SnZIY/z8pnxgBzcNg04IQjX5ftUYr5naxxeBBZzR4lMnnuuBORPw8wtnkVEH RbRkkPFi+xAbRhZ1oX0IKLFF39JI1YqbV0aGLhLUFszzE6WcVePASCbYDfbdqTxH VLqis6UiWzFpsw== -----END CERTIFICATE-----Generated at Wed Jan 21 08:58:26 2026 by rpki-client