This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft File: mGzlJJY15OKWTTdEk9zDeoddBTk.mft (raw, json) Hash identifier: nM6Uai2zHNneo4uAz+PxsD2AUtYFdk8nNPFNzJr1b5U= Subject key identifier: D8:1A:82:2C:09:D8:8C:E9:92:C5:9D:1C:19:64:EE:B7:CE:7D:63:3C Authority key identifier: 98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39 Certificate issuer: /CN=986ce5249635e4e2964d374493dcc37a875d0539 Certificate serial: 019BFB0A37AE31F929ABC0048F3AF28AE7D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 16:01:49 +0000 Manifest this update: Mon 26 Jan 2026 16:01:49 +0000 Manifest next update: Tue 27 Jan 2026 16:01:49 +0000 Files and hashes: 1: ftwoquu3DFj4eBFEtCkmR8T9CQA.roa (hash: 4rlrRLmH28vbIC123d5cUoLsBf7n1zeaVCkiEqiDVnA=) 2: mGzlJJY15OKWTTdEk9zDeoddBTk.crl (hash: Q3FMe9ZETVgVptvnLjvvmKIWw0TXcjyTeSb07TV6iJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:0a:37:ae:31:f9:29:ab:c0:04:8f:3a:f2:8a:e7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=986ce5249635e4e2964d374493dcc37a875d0539 Validity Not Before: Jan 26 16:01:49 2026 GMT Not After : Jan 27 16:01:49 2026 GMT Subject: CN=d81a822c09d88ce992c59d1c1964eeb7ce7d633c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3f:c1:10:2a:3a:37:a1:74:53:16:c0:18:c3: 5b:4e:40:9e:6f:9b:f8:7e:f3:3e:42:f8:de:e3:c6: f9:2b:c6:9e:95:f1:13:03:3b:79:bf:2f:a2:12:7c: 4e:69:e6:5e:8e:c3:16:22:09:9c:68:9e:fb:48:31: 10:a2:57:9d:86:7c:71:24:74:fc:1f:55:89:35:23: 9c:eb:bb:6f:70:8f:f1:40:8d:5e:a1:b7:8c:d6:fc: 07:d2:60:a8:1a:2e:d9:0e:ae:9c:b0:c6:25:35:59: e8:5a:1a:c3:e0:56:ab:fb:29:66:13:5f:70:a6:36: 0c:da:6d:b2:82:74:e7:5a:7d:9f:fd:98:e3:40:ab: 03:f7:df:cb:54:59:e5:3f:f5:9d:c2:71:77:1f:0c: 3e:bc:23:a2:e7:27:be:9f:27:bb:ff:91:cc:60:16: b3:6d:67:1a:ce:4a:fc:5a:a0:8b:0a:1a:31:cc:55: a8:08:e9:97:de:38:f2:b4:ad:ec:0f:5f:a3:0d:ab: c6:5b:e4:b1:6d:e0:20:47:02:17:89:ef:8c:ef:5b: 6c:9d:08:dd:eb:ee:fa:f9:14:d6:d2:26:ec:41:37: 73:f1:3c:81:38:a4:9e:aa:66:ba:00:9c:78:49:ee: 84:6a:d0:e1:9c:2d:2f:73:65:39:26:cd:ce:52:4b: 8d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1A:82:2C:09:D8:8C:E9:92:C5:9D:1C:19:64:EE:B7:CE:7D:63:3C X509v3 Authority Key Identifier: keyid:98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:63:7b:0d:0a:2b:46:ee:3b:55:21:f6:7b:0f:b6:9a:55:cd: 77:83:f7:92:41:a7:6e:02:27:c5:ea:98:66:45:29:4e:d7:7a: 45:b7:3b:e5:28:49:97:75:3e:8b:44:c7:e4:91:81:a2:99:48: cf:21:eb:29:ef:69:a8:fb:8a:f5:4e:f1:c8:29:2e:29:3c:60: 96:82:94:ba:0a:ba:25:91:23:ca:38:b1:a1:a3:4d:8e:c6:5c: f1:27:9e:01:8c:a7:16:63:f5:0e:5a:56:8b:df:ef:7d:f7:fb: a9:ae:cb:05:34:c9:e2:dd:3e:92:5f:14:b9:6e:71:5f:56:e4: 67:d4:1e:f1:60:01:51:54:bf:f8:f9:2a:6d:82:6b:44:3e:5a: 47:5d:cb:fe:06:54:90:55:fa:e4:99:24:48:91:73:a6:55:a4: 63:79:de:2d:bb:59:d9:3e:b3:32:97:58:ba:ae:bb:52:04:e5: e2:e5:dc:a4:41:ef:d4:2e:2d:be:dd:a8:9e:f4:e0:70:11:bf: 53:87:94:69:00:61:3b:97:70:a2:f7:a9:7f:e3:5d:6b:1a:f0: 09:ac:70:10:57:ce:d8:cd:53:db:15:68:d6:44:a0:ae:dc:44: ab:b0:77:91:11:7d:ba:ea:ab:46:ac:c3:38:89:1a:54:04:da: 8c:6e:27:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CjeuMfkpq8AEjzryiufRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NmNlNTI0OTYzNWU0ZTI5NjRkMzc0NDkzZGNjMzdhODc1 ZDA1MzkwHhcNMjYwMTI2MTYwMTQ5WhcNMjYwMTI3MTYwMTQ5WjAzMTEwLwYDVQQD EyhkODFhODIyYzA5ZDg4Y2U5OTJjNTlkMWMxOTY0ZWViN2NlN2Q2MzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT/BECo6N6F0UxbAGMNbTkCeb5v4 fvM+Qvje48b5K8aelfETAzt5vy+iEnxOaeZejsMWIgmcaJ77SDEQoledhnxxJHT8 H1WJNSOc67tvcI/xQI1eobeM1vwH0mCoGi7ZDq6csMYlNVnoWhrD4Far+ylmE19w pjYM2m2ygnTnWn2f/ZjjQKsD99/LVFnlP/WdwnF3Hww+vCOi5ye+nye7/5HMYBaz bWcazkr8WqCLChoxzFWoCOmX3jjytK3sD1+jDavGW+SxbeAgRwIXie+M71tsnQjd 6+76+RTW0ibsQTdz8TyBOKSeqma6AJx4Se6EatDhnC0vc2U5Js3OUkuNGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgagiwJ2IzpksWdHBlk7rfOfWM8MB8GA1UdIwQY MBaAFJhs5SSWNeTilk03RJPcw3qHXQU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mYjQyZTYtY2M1MS00ZDJiLTg2Mzct YTI0M2NiZmFhZWYzLzEvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9mYjQyZTYtY2M1MS00ZDJiLTg2MzctYTI0M2NiZmFhZWYz LzEvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGN7DQor Ru47VSH2ew+2mlXNd4P3kkGnbgInxeqYZkUpTtd6Rbc75ShJl3U+i0TH5JGBoplI zyHrKe9pqPuK9U7xyCkuKTxgloKUugq6JZEjyjixoaNNjsZc8SeeAYynFmP1DlpW i9/vfff7qa7LBTTJ4t0+kl8UuW5xX1bkZ9Qe8WABUVS/+PkqbYJrRD5aR13L/gZU kFX65JkkSJFzplWkY3neLbtZ2T6zMpdYuq67UgTl4uXcpEHv1C4tvt2onvTgcBG/ U4eUaQBhO5dwovepf+NdaxrwCaxwEFfO2M1T2xVo1kSgrtxEq7B3kRF9uuqrRqzD OIkaVATajG4nUg== -----END CERTIFICATE-----Generated at Mon Jan 26 18:22:55 2026 by rpki-client