This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft File: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft (raw, json) Hash identifier: k7Jxlh4qvQ6vH+jmfRs4pZpJbEGME64BGri4aYgibrc= Subject key identifier: A0:46:A8:7E:96:8A:B6:2A:A5:F1:98:BC:5E:E6:10:DA:9A:47:6E:A6 Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10 Certificate issuer: /CN=9af9d0d4befda09e999eabd0c8724e217364de10 Certificate serial: 019BA18F0B13F9876671834FBF0A41A6B82C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft Manifest number: 091B Signing time: Fri 09 Jan 2026 07:01:04 +0000 Manifest this update: Fri 09 Jan 2026 07:01:04 +0000 Manifest next update: Sat 10 Jan 2026 07:01:04 +0000 Files and hashes: 1: Ju3RYBGHfTVJ0ig9g8xu4WdMw30.roa (hash: 4oJ1sds8f+aiGxncxPG+ThQtMKqUYAuJ1K3qDV4TzDE=) 2: f2WeliHigZNRsPyfnuBo4tGwDZ0.roa (hash: 5slWSGWLG6ATTnZtrmt7Zpoe6VhaQcLSQgvXuDKX6jQ=) 3: j8BCdYiQ_67ATYFHPKfffD1u2xo.roa (hash: GLAbtmkKsyJcTcB7QC4FgMb+NJZzC1QoILdu2duEs9o=) 4: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl (hash: MydrNV80/r1TgKSEvpQK7Ex/bv9v6ABZKTpJ3jYRQ70=) 5: oqYfh27c0a3P7IymPKh064OAmpI.roa (hash: UiP0Xtlv8Zo5+Xl4iVJi1nirSH+i8Crp8bpdlJo3UMs=) 6: q4N1Kb_HBWzfg1hHkp8rrBk9rgg.roa (hash: XdsYOXPA6Krs0VRRvFb/EETf2VCM2Wv0VcaetSGQKaI=) 7: xQPEHMR54qpU7rtPLXUkM_1Hx94.roa (hash: X3FNnLjkWD8kAWDLkX6vbg0ozoLMqd9Yva8zbEk23n4=) 8: zKkJ8cE4zPKRxtqXHT19mxBaT9Q.roa (hash: uRT/X8Hvl3ZU07bilVhDl7B14HKulQ5Y0la+tuqFss4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 07:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:8f:0b:13:f9:87:66:71:83:4f:bf:0a:41:a6:b8:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10 Validity Not Before: Jan 9 07:01:04 2026 GMT Not After : Jan 10 07:01:04 2026 GMT Subject: CN=a046a87e968ab62aa5f198bc5ee610da9a476ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:54:38:0b:9f:f6:80:06:00:ee:17:31:92:34: 85:17:f9:8a:70:90:46:e0:66:d2:cc:b5:6e:a9:fa: 86:fd:2c:93:a5:e1:06:62:59:2e:14:29:07:e6:52: d0:2b:b7:fd:84:8a:11:b7:37:1f:85:b4:87:24:02: 75:5a:3d:c8:eb:40:22:9a:c3:ea:a1:28:2e:2c:c3: 60:0d:8c:ff:a5:a8:12:94:a2:70:d0:7e:a7:c8:0c: 16:44:38:91:a6:02:1f:a6:9f:56:f3:df:c8:41:b7: 66:50:b8:f5:05:01:6b:67:a8:96:23:7e:1f:01:3f: 42:3e:dc:5f:5c:59:d7:a7:21:05:3a:bb:69:d8:a9: 54:54:89:6a:a3:25:e5:30:0c:5d:11:3e:c4:91:ed: 5f:cd:25:d4:e5:d2:2e:45:14:b7:3a:a2:0c:60:69: 86:36:4f:50:20:93:83:a5:79:36:47:d8:b4:a6:a8: e2:52:25:53:5b:30:eb:4a:6e:a7:b4:2f:1a:21:6b: 07:72:a2:ad:99:c0:90:de:5e:a3:f0:89:13:31:60: 84:4d:da:cd:43:0b:0b:30:22:be:49:a4:a5:c5:10: 18:b1:87:82:df:6c:95:a6:70:e0:f7:6d:95:34:94: 5c:19:9c:31:3e:56:7c:b8:b3:24:b1:99:fb:75:d2: 88:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:46:A8:7E:96:8A:B6:2A:A5:F1:98:BC:5E:E6:10:DA:9A:47:6E:A6 X509v3 Authority Key Identifier: keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:4d:91:a8:5b:9f:dc:d8:83:6a:22:a3:98:70:be:41:80:7d: e2:00:ca:87:87:70:82:a3:a9:28:d2:82:50:95:ff:da:65:d9: 08:cf:63:0d:bd:b3:af:4b:27:4a:93:19:e1:08:c8:29:3d:5e: 5b:b1:f8:cb:4f:7c:72:09:7b:7f:9e:fc:be:99:5f:b9:29:3a: bc:28:02:a1:20:1e:1c:30:13:e9:b4:ff:79:5c:3a:a6:06:c2: 46:f7:85:99:25:56:26:fb:07:63:70:73:10:d5:60:9e:62:ce: a9:60:83:93:be:64:dc:3d:95:a0:ee:af:a9:bb:46:78:c0:4d: 81:7a:a9:1c:d5:f3:ba:11:25:ea:eb:ba:01:ff:59:4f:75:04: 11:ff:9f:3f:f4:a4:cb:c4:3f:60:5f:1d:26:59:8e:aa:78:a5: db:c0:57:54:a6:74:29:5a:a9:e2:38:19:4a:88:0c:14:57:c5: 92:4e:cf:b1:1c:6f:64:52:7d:ee:13:e7:18:61:c4:4b:eb:c1: 52:83:e7:3d:06:ef:5a:55:58:04:38:51:0e:34:12:29:58:cb: b3:32:37:d1:21:f6:64:01:8a:af:6b:99:e6:3e:90:25:2a:8c: d4:19:94:63:f1:4a:1e:d1:f6:21:50:04:8b:d5:d6:a7:ad:99: ea:46:7f:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuhjwsT+YdmcYNPvwpBprgsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZjlkMGQ0YmVmZGEwOWU5OTllYWJkMGM4NzI0ZTIxNzM2 NGRlMTAwHhcNMjYwMTA5MDcwMTA0WhcNMjYwMTEwMDcwMTA0WjAzMTEwLwYDVQQD EyhhMDQ2YTg3ZTk2OGFiNjJhYTVmMTk4YmM1ZWU2MTBkYTlhNDc2ZWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlQ4C5/2gAYA7hcxkjSFF/mKcJBG 4GbSzLVuqfqG/SyTpeEGYlkuFCkH5lLQK7f9hIoRtzcfhbSHJAJ1Wj3I60AimsPq oSguLMNgDYz/pagSlKJw0H6nyAwWRDiRpgIfpp9W89/IQbdmULj1BQFrZ6iWI34f AT9CPtxfXFnXpyEFOrtp2KlUVIlqoyXlMAxdET7Eke1fzSXU5dIuRRS3OqIMYGmG Nk9QIJODpXk2R9i0pqjiUiVTWzDrSm6ntC8aIWsHcqKtmcCQ3l6j8IkTMWCETdrN QwsLMCK+SaSlxRAYsYeC32yVpnDg922VNJRcGZwxPlZ8uLMksZn7ddKIfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBGqH6WirYqpfGYvF7mENqaR26mMB8GA1UdIwQY MBaAFJr50NS+/aCemZ6r0MhyTiFzZN4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wMWQ5ZmUtZTE0YS00MGE0LTg0NTgt MjY3MDFiMTYyZmMzLzEvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wMWQ5ZmUtZTE0YS00MGE0LTg0NTgtMjY3MDFiMTYyZmMz LzEvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkU2RqFuf 3NiDaiKjmHC+QYB94gDKh4dwgqOpKNKCUJX/2mXZCM9jDb2zr0snSpMZ4QjIKT1e W7H4y098cgl7f578vplfuSk6vCgCoSAeHDAT6bT/eVw6pgbCRveFmSVWJvsHY3Bz ENVgnmLOqWCDk75k3D2VoO6vqbtGeMBNgXqpHNXzuhEl6uu6Af9ZT3UEEf+fP/Sk y8Q/YF8dJlmOqnil28BXVKZ0KVqp4jgZSogMFFfFkk7PsRxvZFJ97hPnGGHES+vB UoPnPQbvWlVYBDhRDjQSKVjLszI30SH2ZAGKr2uZ5j6QJSqM1BmUY/FKHtH2IVAE i9XWp62Z6kZ/0g== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:32 2026 by rpki-client