This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft File: mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json) Hash identifier: ZR6w0L262Bkrnv5e7SmjDKya730D7jO3g9LaiBhOKOQ= Subject key identifier: EA:C0:AF:DC:E0:8A:FA:E4:B2:40:54:D5:F1:DC:A8:00:C8:F9:A9:4E Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc Certificate serial: 019BFA647AA9CB8FE62E4FE46D0F0040231D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft Manifest number: 1719 Signing time: Mon 26 Jan 2026 13:00:47 +0000 Manifest this update: Mon 26 Jan 2026 13:00:47 +0000 Manifest next update: Tue 27 Jan 2026 13:00:47 +0000 Files and hashes: 1: 1-1b9kIdAlblnsi3fi8wMUDdRXmQ.roa (hash: EHBhiVunuwqspkFW8sGSqvBOxHJnouc2J5HPWr1aeGw=) 2: 9aFjflm38MN581vnLtWpsCX-q7Y.roa (hash: yLjtSs5KlibIMz+VoXmAGRKRF617RWal83eBR+rXqCQ=) 3: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: VP/qbajAwsTvNkHAMDyy07lkAyZ6qx4sFEtzscQZzzI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:7a:a9:cb:8f:e6:2e:4f:e4:6d:0f:00:40:23:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc Validity Not Before: Jan 26 13:00:47 2026 GMT Not After : Jan 27 13:00:47 2026 GMT Subject: CN=eac0afdce08afae4b24054d5f1dca800c8f9a94e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d2:1f:09:30:2b:c8:7c:d6:91:13:5d:09:fe: 0b:ac:4b:6e:1e:8a:a0:65:b8:f1:53:41:d7:0a:c6: 13:88:3e:eb:b8:f7:a5:5e:15:94:c0:03:86:11:d6: 2e:00:6f:61:88:64:d2:a5:c2:2f:62:30:03:ef:05: f9:28:f1:44:46:00:b4:41:88:e4:a3:1a:e4:8a:3c: 6b:e0:cb:73:97:04:b3:92:40:bc:54:31:08:44:08: 07:c5:41:ea:cd:f9:8a:52:6f:78:86:c3:e1:88:9e: f4:5f:ed:52:5d:e6:d4:21:99:48:d1:9c:fb:b5:13: ae:70:34:48:51:da:c9:07:b9:7b:bd:51:74:45:ba: f5:5c:08:3b:e1:87:68:fa:70:58:0b:1e:74:8f:6b: 83:37:d6:54:7e:6e:ea:8b:20:1f:a8:40:91:fc:50: 8b:27:16:58:fa:7e:86:01:09:d1:0b:58:d2:72:53: 69:55:ab:c7:7b:df:24:7e:a6:42:c2:17:ce:3a:c3: 80:cd:c9:b7:ce:88:80:9b:8f:ca:3d:93:ca:6a:d3: 94:be:51:d8:7a:5b:8b:f2:8c:99:a1:41:a1:b5:af: 39:43:e2:11:0b:81:47:25:37:9d:3b:76:03:0d:86: 10:df:10:e2:ea:76:b9:60:bd:cf:52:2f:22:48:5b: d9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C0:AF:DC:E0:8A:FA:E4:B2:40:54:D5:F1:DC:A8:00:C8:F9:A9:4E X509v3 Authority Key Identifier: keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:23:a5:0c:c9:d3:c1:76:52:8c:3f:d7:35:1a:d5:7d:d3:6b: da:d0:fd:de:1c:b1:5f:eb:2f:2a:d3:84:9b:b9:49:0f:d8:b8: 55:90:e5:70:58:ff:24:e3:f2:7f:39:5e:89:47:61:b2:97:67: 0e:5e:97:cd:82:9c:0b:94:b3:e8:69:2b:b3:bc:ce:60:51:3f: 38:9c:b2:3b:b1:f8:d3:75:da:9c:be:e0:eb:d7:b9:88:21:b8: 25:af:44:a3:5d:31:07:f3:2f:29:7c:4e:ce:af:57:00:6e:1b: 55:75:d6:76:e3:f8:f1:0e:7a:cb:74:9a:df:97:ee:ab:3a:f0: 56:b7:92:ea:f7:16:bb:03:d1:cc:66:72:f1:6f:62:a4:be:87: 02:cb:2a:c3:b4:ac:10:ea:9a:45:2b:25:ad:e0:97:7b:08:03: 2d:9e:98:b2:7b:c2:27:d3:4f:fc:99:fe:b3:fa:42:a7:7a:6f: 88:34:93:7f:aa:3c:39:40:3b:50:9b:4f:3a:a0:f3:3f:2d:a4: ce:a6:2d:45:bc:00:2c:bb:37:15:f2:50:8c:98:7c:77:84:c2: ba:09:2a:4b:f3:fe:88:a0:f1:58:2d:ea:2b:1e:8a:19:8b:9c: f4:b0:f7:3b:35:4d:86:aa:ab:d7:82:e0:6e:ef:17:34:ba:ba: cc:e3:e7:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZHqpy4/mLk/kbQ8AQCMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZDM1NjE5ZWQyMTBiZTBhYzI5ZDE3MGEyYmI1Y2Q3NDU1 NjkzYmMwHhcNMjYwMTI2MTMwMDQ3WhcNMjYwMTI3MTMwMDQ3WjAzMTEwLwYDVQQD EyhlYWMwYWZkY2UwOGFmYWU0YjI0MDU0ZDVmMWRjYTgwMGM4ZjlhOTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNIfCTAryHzWkRNdCf4LrEtuHoqg ZbjxU0HXCsYTiD7ruPelXhWUwAOGEdYuAG9hiGTSpcIvYjAD7wX5KPFERgC0QYjk oxrkijxr4MtzlwSzkkC8VDEIRAgHxUHqzfmKUm94hsPhiJ70X+1SXebUIZlI0Zz7 tROucDRIUdrJB7l7vVF0Rbr1XAg74Ydo+nBYCx50j2uDN9ZUfm7qiyAfqECR/FCL JxZY+n6GAQnRC1jSclNpVavHe98kfqZCwhfOOsOAzcm3zoiAm4/KPZPKatOUvlHY eluL8oyZoUGhta85Q+IRC4FHJTedO3YDDYYQ3xDi6na5YL3PUi8iSFvZuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOrAr9zgivrkskBU1fHcqADI+alOMB8GA1UdIwQY MBaAFJnTVhntIQvgrCnRcKK7XNdFVpO8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWROV0dlMGhDLUNzS2RGd29ydGMxMFZXazd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zNGU5MWYtYThhOS00OTM3LTlmYjUt N2EwMWJkZGQ2NTYwLzEvbWROV0dlMGhDLUNzS2RGd29ydGMxMFZXazd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8zNGU5MWYtYThhOS00OTM3LTlmYjUtN2EwMWJkZGQ2NTYw LzEvbWROV0dlMGhDLUNzS2RGd29ydGMxMFZXazd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCOlDMnT wXZSjD/XNRrVfdNr2tD93hyxX+svKtOEm7lJD9i4VZDlcFj/JOPyfzleiUdhspdn Dl6XzYKcC5Sz6Gkrs7zOYFE/OJyyO7H403XanL7g69e5iCG4Ja9Eo10xB/MvKXxO zq9XAG4bVXXWduP48Q56y3Sa35fuqzrwVreS6vcWuwPRzGZy8W9ipL6HAssqw7Ss EOqaRSslreCXewgDLZ6YsnvCJ9NP/Jn+s/pCp3pviDSTf6o8OUA7UJtPOqDzPy2k zqYtRbwALLs3FfJQjJh8d4TCugkqS/P+iKDxWC3qKx6KGYuc9LD3OzVNhqqr14Lg bu8XNLq6zOPnyg== -----END CERTIFICATE-----Generated at Mon Jan 26 19:38:11 2026 by rpki-client