This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft File: mJB4Bt2stIQwvdAlSJgBnkE6K94.mft (raw, json) Hash identifier: 5CIMmovvQ7iTLOEQR71A3rZ14BPrY0tYUy06c/o0bmI= Subject key identifier: 73:A3:EF:9C:8F:C5:89:03:2A:45:68:23:02:73:DA:04:90:8A:BE:F9 Authority key identifier: 98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE Certificate issuer: /CN=98907806ddacb48430bdd0254898019e413a2bde Certificate serial: 019BFB4052B6D5586E5E8089E7920BBE7B19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft Manifest number: 0ED1 Signing time: Mon 26 Jan 2026 17:00:55 +0000 Manifest this update: Mon 26 Jan 2026 17:00:55 +0000 Manifest next update: Tue 27 Jan 2026 17:00:55 +0000 Files and hashes: 1: mJB4Bt2stIQwvdAlSJgBnkE6K94.crl (hash: Ldh/YtIK25pFVl00g7Kd/Tao1nS790wJtjXxWNXUfbM=) 2: xspnOhir25ohaDEON_nokDMNa54.roa (hash: K76YUwImg7wnbqKcDgw/UjFp86GQnCK+RGi0ceH55xE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:52:b6:d5:58:6e:5e:80:89:e7:92:0b:be:7b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98907806ddacb48430bdd0254898019e413a2bde Validity Not Before: Jan 26 17:00:55 2026 GMT Not After : Jan 27 17:00:55 2026 GMT Subject: CN=73a3ef9c8fc589032a4568230273da04908abef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e8:4e:02:e1:53:54:ba:0a:fd:ee:2e:a5:26: b4:e1:ca:71:20:45:ee:42:ac:f4:43:60:ef:90:66: 00:d7:f5:2f:fb:42:df:a9:4d:e2:c0:eb:7c:75:8b: f1:f9:a2:6a:80:4d:23:84:77:e6:46:1e:61:89:45: 96:34:2f:a9:96:2f:95:da:8a:79:78:b3:c8:62:51: 8a:80:b6:79:57:32:d5:cf:be:99:47:ff:f3:f8:4f: 1c:c8:5d:94:4f:03:6a:00:48:db:85:e8:7b:65:5b: 00:06:db:a0:fc:67:80:7a:5d:84:8c:a2:89:20:94: c4:38:50:11:76:ed:51:98:54:56:11:12:0e:89:63: 52:b1:70:bc:24:05:c1:47:ba:fe:00:30:6f:34:6f: 79:52:a3:18:0d:c6:ce:ca:84:bf:9a:59:cc:0e:55: 83:3d:90:5d:1c:30:19:89:22:f6:85:f8:06:97:0a: b3:0e:8a:5e:e6:e7:f1:07:07:67:43:db:b9:a3:79: 45:56:30:41:de:95:d4:d3:fa:8b:6c:7d:2b:c7:c3: bc:56:b4:e9:54:ca:39:5f:ee:1a:eb:77:51:63:7b: d2:ed:4a:04:5a:94:0a:15:65:b3:1d:25:70:34:dd: 83:ba:62:ff:12:7d:53:22:65:e2:5a:7b:29:3b:be: 57:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A3:EF:9C:8F:C5:89:03:2A:45:68:23:02:73:DA:04:90:8A:BE:F9 X509v3 Authority Key Identifier: keyid:98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:20:01:09:09:6a:8d:bf:93:24:99:7e:d7:8d:ff:03:5b:fd: 1d:47:df:f0:72:93:6b:bd:0a:a9:0f:7e:90:27:f0:fd:0d:95: f1:4c:82:b2:c2:3d:f2:f5:8b:24:57:22:df:6e:ab:73:8a:53: 0e:be:66:8a:35:99:8b:60:35:15:25:e8:a9:e5:84:c2:b2:80: e3:52:6f:22:23:5d:25:e8:f7:c3:76:28:e4:bb:ef:45:65:06: 51:c8:24:3d:51:5f:bb:47:f1:54:d2:d7:b7:79:26:fa:c9:65: 2a:23:b1:cf:10:2c:f0:d9:53:1c:24:42:d7:0c:4c:d2:44:79: 39:b7:fd:83:60:43:db:e1:c2:c6:e9:79:f7:df:a8:37:2d:dc: b2:1a:26:70:3d:b6:1e:f6:10:ce:53:0d:ea:10:4f:13:b0:17: 88:d6:e8:a3:8b:78:8a:0c:d9:eb:79:80:93:39:cb:d6:e0:08: 19:d2:15:79:33:b7:12:fd:1b:09:c6:7a:e0:01:44:29:d6:88: c4:94:a0:cd:24:72:45:4f:82:6a:b2:de:96:3d:21:9b:89:ad: 1c:8e:18:41:47:d9:3c:a3:9b:be:90:16:51:f3:5c:1c:2a:14: 0d:38:54:0d:ce:01:49:79:25:90:2b:5a:af:13:0d:29:e9:0c: 84:b3:72:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QFK21VhuXoCJ55ILvnsZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4OTA3ODA2ZGRhY2I0ODQzMGJkZDAyNTQ4OTgwMTllNDEz YTJiZGUwHhcNMjYwMTI2MTcwMDU1WhcNMjYwMTI3MTcwMDU1WjAzMTEwLwYDVQQD Eyg3M2EzZWY5YzhmYzU4OTAzMmE0NTY4MjMwMjczZGEwNDkwOGFiZWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+hOAuFTVLoK/e4upSa04cpxIEXu Qqz0Q2DvkGYA1/Uv+0LfqU3iwOt8dYvx+aJqgE0jhHfmRh5hiUWWNC+pli+V2op5 eLPIYlGKgLZ5VzLVz76ZR//z+E8cyF2UTwNqAEjbheh7ZVsABtug/GeAel2EjKKJ IJTEOFARdu1RmFRWERIOiWNSsXC8JAXBR7r+ADBvNG95UqMYDcbOyoS/mlnMDlWD PZBdHDAZiSL2hfgGlwqzDope5ufxBwdnQ9u5o3lFVjBB3pXU0/qLbH0rx8O8VrTp VMo5X+4a63dRY3vS7UoEWpQKFWWzHSVwNN2DumL/En1TImXiWnspO75XBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOj75yPxYkDKkVoIwJz2gSQir75MB8GA1UdIwQY MBaAFJiQeAbdrLSEML3QJUiYAZ5BOiveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUpCNEJ0MnN0SVF3dmRBbFNKZ0Jua0U2Szk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zZTNiMTctODRjOS00NDcyLWJkMzMt MTI2NzRlNjYxZTEzLzEvbUpCNEJ0MnN0SVF3dmRBbFNKZ0Jua0U2Szk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zZTNiMTctODRjOS00NDcyLWJkMzMtMTI2NzRlNjYxZTEz LzEvbUpCNEJ0MnN0SVF3dmRBbFNKZ0Jua0U2Szk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiABCQlq jb+TJJl+143/A1v9HUff8HKTa70KqQ9+kCfw/Q2V8UyCssI98vWLJFci326rc4pT Dr5mijWZi2A1FSXoqeWEwrKA41JvIiNdJej3w3Yo5LvvRWUGUcgkPVFfu0fxVNLX t3km+sllKiOxzxAs8NlTHCRC1wxM0kR5Obf9g2BD2+HCxul599+oNy3cshomcD22 HvYQzlMN6hBPE7AXiNboo4t4igzZ63mAkznL1uAIGdIVeTO3Ev0bCcZ64AFEKdaI xJSgzSRyRU+CarLelj0hm4mtHI4YQUfZPKObvpAWUfNcHCoUDThUDc4BSXklkCta rxMNKekMhLNyAg== -----END CERTIFICATE-----Generated at Mon Jan 26 19:44:52 2026 by rpki-client