This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft File: MPjiwMh-k3meIyhPNrhhXbeHg6s.mft (raw, json) Hash identifier: qRAoj+T+n4nqLjMkzwkeu618+NBQnvf9MMgThozf+rI= Subject key identifier: 48:4B:C1:04:D8:0A:58:9D:55:81:D2:C2:CD:BC:C2:9A:85:BD:30:E5 Authority key identifier: 30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB Certificate issuer: /CN=30f8e2c0c87e93799e23284f36b8615db78783ab Certificate serial: 019BFB7738F10DF255122392F5BADEED60CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft Manifest number: 16EA Signing time: Mon 26 Jan 2026 18:00:52 +0000 Manifest this update: Mon 26 Jan 2026 18:00:52 +0000 Manifest next update: Tue 27 Jan 2026 18:00:52 +0000 Files and hashes: 1: MPjiwMh-k3meIyhPNrhhXbeHg6s.crl (hash: CN9y3na5xNu2dJf905xOODI14F+9YSc0RsIjTG8zdvs=) 2: bxJSZ4QkpRqkCuO8un8htf7K_EA.roa (hash: aY6Tszvn+tw4UURnCsUt8otQUMfjQJy4b3YJ7wRT6HQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:38:f1:0d:f2:55:12:23:92:f5:ba:de:ed:60:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f8e2c0c87e93799e23284f36b8615db78783ab Validity Not Before: Jan 26 18:00:52 2026 GMT Not After : Jan 27 18:00:52 2026 GMT Subject: CN=484bc104d80a589d5581d2c2cdbcc29a85bd30e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:31:5a:d4:76:02:17:2b:19:1a:e2:7f:02:33: fe:f4:76:ca:62:c7:0b:a3:90:e0:fe:3b:0b:6e:8b: e0:06:df:67:68:58:61:08:25:e5:eb:2e:c8:58:d3: 0f:1c:bd:2e:25:32:01:22:1b:aa:68:f8:dd:60:0c: 9e:38:08:7c:0e:ac:72:f0:5c:f2:c1:8c:8d:d7:27: 6f:08:35:72:8f:55:d0:d5:34:df:e4:c2:78:05:dd: 9b:10:d3:b0:8f:f4:c8:12:34:8d:81:f7:59:5d:5d: 77:3f:b0:4b:ec:23:c3:1e:47:b0:11:13:6a:c6:d8: a2:19:38:de:81:00:d9:eb:e1:00:97:9c:e6:ff:36: d6:23:1d:06:a8:1b:59:81:54:b4:74:e3:2e:d5:70: 8b:c0:66:8f:e4:ad:cc:46:6d:ed:1d:25:01:03:b8: cc:aa:39:0b:a3:b4:3a:c4:21:4f:19:58:a4:fa:c7: d9:17:a2:75:2b:8c:9a:5a:6d:a5:a2:86:2a:7d:65: 3b:99:1a:28:9b:f1:31:01:5a:e3:66:2d:7f:df:e8: 87:47:a1:bf:1d:a8:8b:cc:d9:6e:81:d0:5a:bb:e1: 45:7e:10:ed:0a:23:aa:42:7e:cd:57:3c:b5:60:b5: b5:58:0e:81:7a:2a:59:e9:99:b0:cc:e8:71:59:45: 2d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4B:C1:04:D8:0A:58:9D:55:81:D2:C2:CD:BC:C2:9A:85:BD:30:E5 X509v3 Authority Key Identifier: keyid:30:F8:E2:C0:C8:7E:93:79:9E:23:28:4F:36:B8:61:5D:B7:87:83:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPjiwMh-k3meIyhPNrhhXbeHg6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/99be4d-f8ec-4430-a9cd-7e12b87d06c2/1/MPjiwMh-k3meIyhPNrhhXbeHg6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ea:0c:d5:bf:d0:4c:93:6e:31:b0:e6:74:ab:54:15:22:99: d6:e6:0b:a9:c6:2c:73:ca:d3:67:2e:be:9b:64:cb:85:18:7c: 41:ce:63:be:d1:9f:b0:67:4b:ce:7b:25:77:41:ba:86:dd:fd: 60:d7:7e:80:c2:05:60:72:71:ea:1e:13:db:a7:00:38:0f:f7: 6f:ed:8a:3d:a9:2a:e3:69:93:ea:4a:0d:30:7a:38:65:ef:2e: f9:8a:4e:3a:2c:2a:0e:4e:4e:62:a9:e1:57:13:b1:c3:80:63: fe:44:f3:fa:bd:9a:54:26:c8:ce:13:ce:30:35:5a:15:ae:f6: bc:5c:e3:22:e9:20:45:94:7c:fb:4d:58:3c:ff:55:d0:02:98: 34:77:97:50:cb:f0:be:c8:01:bd:a7:f7:a8:1d:f8:31:1b:12: dd:95:23:72:2f:49:ae:53:19:73:b9:2e:38:98:9e:2d:1d:dd: 75:9a:7e:fd:e9:83:aa:8e:38:6a:61:1d:c1:3b:0b:8c:20:d3: 01:0a:cf:a5:4f:a3:df:71:8b:6b:78:80:99:f3:69:56:51:85: 54:52:b1:42:6a:02:29:98:91:19:c0:48:00:b6:ae:fb:9a:fd: 95:00:55:74:60:a3:97:bf:a9:1f:2e:89:91:d8:16:c3:89:3d: 72:3a:19:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7dzjxDfJVEiOS9bre7WDMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjhlMmMwYzg3ZTkzNzk5ZTIzMjg0ZjM2Yjg2MTVkYjc4 NzgzYWIwHhcNMjYwMTI2MTgwMDUyWhcNMjYwMTI3MTgwMDUyWjAzMTEwLwYDVQQD Eyg0ODRiYzEwNGQ4MGE1ODlkNTU4MWQyYzJjZGJjYzI5YTg1YmQzMGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjFa1HYCFysZGuJ/AjP+9HbKYscL o5Dg/jsLbovgBt9naFhhCCXl6y7IWNMPHL0uJTIBIhuqaPjdYAyeOAh8Dqxy8Fzy wYyN1ydvCDVyj1XQ1TTf5MJ4Bd2bENOwj/TIEjSNgfdZXV13P7BL7CPDHkewERNq xtiiGTjegQDZ6+EAl5zm/zbWIx0GqBtZgVS0dOMu1XCLwGaP5K3MRm3tHSUBA7jM qjkLo7Q6xCFPGVik+sfZF6J1K4yaWm2looYqfWU7mRoom/ExAVrjZi1/3+iHR6G/ HaiLzNlugdBau+FFfhDtCiOqQn7NVzy1YLW1WA6BeipZ6ZmwzOhxWUUtKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhLwQTYClidVYHSws28wpqFvTDlMB8GA1UdIwQY MBaAFDD44sDIfpN5niMoTza4YV23h4OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85OWJlNGQtZjhlYy00NDMwLWE5Y2Qt N2UxMmI4N2QwNmMyLzEvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85OWJlNGQtZjhlYy00NDMwLWE5Y2QtN2UxMmI4N2QwNmMy LzEvTVBqaXdNaC1rM21lSXloUE5yaGhYYmVIZzZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIeoM1b/Q TJNuMbDmdKtUFSKZ1uYLqcYsc8rTZy6+m2TLhRh8Qc5jvtGfsGdLznsld0G6ht39 YNd+gMIFYHJx6h4T26cAOA/3b+2KPakq42mT6koNMHo4Ze8u+YpOOiwqDk5OYqnh VxOxw4Bj/kTz+r2aVCbIzhPOMDVaFa72vFzjIukgRZR8+01YPP9V0AKYNHeXUMvw vsgBvaf3qB34MRsS3ZUjci9JrlMZc7kuOJieLR3ddZp+/emDqo44amEdwTsLjCDT AQrPpU+j33GLa3iAmfNpVlGFVFKxQmoCKZiRGcBIALau+5r9lQBVdGCjl7+pHy6J kdgWw4k9cjoZcw== -----END CERTIFICATE-----Generated at Tue Jan 27 02:17:18 2026 by rpki-client