This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft File: MGatYcFi3wZQ7gq2DGgHWymiEcg.mft (raw, json) Hash identifier: iKWPudUTGccLfCq7w/o3lGakeVuc2TKO0Gs7WZfoKiQ= Subject key identifier: 66:45:7B:7E:0F:29:97:B2:64:F3:C8:9A:3E:B1:97:94:B1:2B:B1:8C Authority key identifier: 30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8 Certificate issuer: /CN=3066ad61c162df0650ee0ab60c68075b29a211c8 Certificate serial: 019BFBAE171100F8CB7D0E9DECDD1486C094 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 19:00:48 +0000 Manifest this update: Mon 26 Jan 2026 19:00:48 +0000 Manifest next update: Tue 27 Jan 2026 19:00:48 +0000 Files and hashes: 1: J5P3_JUxrLqrnXDXiWzAe9FDnRM.roa (hash: 85ulhRZmPxsRvLMOYGzBL98RjNzzbmxq5th6uCIJYyU=) 2: MGatYcFi3wZQ7gq2DGgHWymiEcg.crl (hash: UMqH1Cp1B0m+FyWHOkDEKHlU4jt4s17pNsxEh8N6Klk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:17:11:00:f8:cb:7d:0e:9d:ec:dd:14:86:c0:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3066ad61c162df0650ee0ab60c68075b29a211c8 Validity Not Before: Jan 26 19:00:48 2026 GMT Not After : Jan 27 19:00:48 2026 GMT Subject: CN=66457b7e0f2997b264f3c89a3eb19794b12bb18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:27:2d:ca:22:8f:d8:f8:b0:6e:34:1f:ca:73: d7:3e:fd:dc:cc:02:fc:01:d0:a8:a7:5a:7a:54:ff: 39:83:ac:df:a0:05:3b:52:99:29:cd:e1:48:66:7b: be:0e:d3:48:36:52:24:12:ec:78:21:d0:4d:9d:01: b2:1b:f8:32:c6:0b:3e:62:f8:c4:e7:44:3f:dd:eb: 53:80:f0:81:af:3b:eb:91:aa:cd:43:f8:ca:e0:59: b1:82:1c:e3:d4:55:46:2b:d0:d6:1f:88:fb:a1:23: 1e:e1:2f:53:37:6a:89:13:a9:f7:ca:08:b5:19:81: 87:cf:58:82:d9:77:7f:7d:fd:de:94:68:72:a5:71: 9d:c8:ca:5c:cd:7a:aa:cb:9f:8d:fe:bd:a3:8b:fc: f2:29:13:68:8c:1a:75:db:43:f0:5d:55:03:cc:44: 13:74:02:49:a0:eb:f1:54:89:fe:70:20:a1:5d:9d: ca:f7:36:50:c0:6d:0d:3b:2c:db:79:a4:73:db:09: 1a:8b:a4:9e:1e:29:cf:18:cd:d3:48:f6:55:14:ef: 05:15:65:36:6b:1e:24:53:f3:15:ba:03:3d:f7:93: 5c:f9:3d:e8:fc:11:70:16:3d:59:73:5f:45:3d:06: d1:07:89:ff:ef:c0:f3:b7:33:aa:e6:42:19:1f:b7: b6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:45:7B:7E:0F:29:97:B2:64:F3:C8:9A:3E:B1:97:94:B1:2B:B1:8C X509v3 Authority Key Identifier: keyid:30:66:AD:61:C1:62:DF:06:50:EE:0A:B6:0C:68:07:5B:29:A2:11:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGatYcFi3wZQ7gq2DGgHWymiEcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9b34b0-301a-41a2-b4c5-a8866aa95c71/1/MGatYcFi3wZQ7gq2DGgHWymiEcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:b6:94:f1:92:a2:7b:08:d3:2a:a4:43:5d:32:a1:f1:e3:36: 98:85:a8:13:eb:8b:fd:84:89:2e:ad:cd:31:82:3a:66:89:af: 27:2f:44:e9:d2:6a:3e:94:e1:cc:65:2e:2c:a5:2b:07:28:31: 3c:b2:50:db:53:a7:3e:3a:18:37:9d:9d:fd:4e:29:8a:2e:d3: 09:de:e2:72:41:bc:b4:30:04:00:b8:8f:80:bb:d2:9c:c1:f3: a9:04:9f:52:4a:39:ca:3e:bd:10:b0:e7:bd:81:22:3b:1c:2c: 9a:45:c2:94:4a:16:82:0a:0e:11:f1:34:4d:87:c6:c7:cc:92: 60:b4:8f:92:bc:15:2c:c8:32:80:ef:92:0b:72:01:ef:a8:d7: f5:97:d1:46:29:17:58:46:d5:40:c8:47:db:56:7d:27:49:8d: 31:3f:11:f7:52:df:09:ce:25:64:86:67:0c:d6:9d:c6:34:b0: d5:cc:f3:2e:5c:62:07:a1:35:9d:a5:22:6d:0a:f6:96:06:8a: e1:50:e9:f3:86:12:94:6e:26:d1:ed:42:bb:c0:2c:56:7c:42: dd:f8:85:de:f0:b2:1a:68:b9:da:38:8f:57:da:75:c3:d3:89: 8c:c3:19:bf:c5:81:64:04:d2:d4:0e:b1:49:4a:97:f7:a7:fa: 81:e2:88:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rhcRAPjLfQ6d7N0UhsCUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjZhZDYxYzE2MmRmMDY1MGVlMGFiNjBjNjgwNzViMjlh MjExYzgwHhcNMjYwMTI2MTkwMDQ4WhcNMjYwMTI3MTkwMDQ4WjAzMTEwLwYDVQQD Eyg2NjQ1N2I3ZTBmMjk5N2IyNjRmM2M4OWEzZWIxOTc5NGIxMmJiMThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyctyiKP2PiwbjQfynPXPv3czAL8 AdCop1p6VP85g6zfoAU7UpkpzeFIZnu+DtNINlIkEux4IdBNnQGyG/gyxgs+YvjE 50Q/3etTgPCBrzvrkarNQ/jK4Fmxghzj1FVGK9DWH4j7oSMe4S9TN2qJE6n3ygi1 GYGHz1iC2Xd/ff3elGhypXGdyMpczXqqy5+N/r2ji/zyKRNojBp120PwXVUDzEQT dAJJoOvxVIn+cCChXZ3K9zZQwG0NOyzbeaRz2wkai6SeHinPGM3TSPZVFO8FFWU2 ax4kU/MVugM995Nc+T3o/BFwFj1Zc19FPQbRB4n/78DztzOq5kIZH7e2hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZFe34PKZeyZPPImj6xl5SxK7GMMB8GA1UdIwQY MBaAFDBmrWHBYt8GUO4KtgxoB1spohHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YjM0YjAtMzAxYS00MWEyLWI0YzUt YTg4NjZhYTk1YzcxLzEvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC85YjM0YjAtMzAxYS00MWEyLWI0YzUtYTg4NjZhYTk1Yzcx LzEvTUdhdFljRmkzd1pRN2dxMkRHZ0hXeW1pRWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbaU8ZKi ewjTKqRDXTKh8eM2mIWoE+uL/YSJLq3NMYI6ZomvJy9E6dJqPpThzGUuLKUrBygx PLJQ21OnPjoYN52d/U4pii7TCd7ickG8tDAEALiPgLvSnMHzqQSfUko5yj69ELDn vYEiOxwsmkXClEoWggoOEfE0TYfGx8ySYLSPkrwVLMgygO+SC3IB76jX9ZfRRikX WEbVQMhH21Z9J0mNMT8R91LfCc4lZIZnDNadxjSw1czzLlxiB6E1naUibQr2lgaK 4VDp84YSlG4m0e1Cu8AsVnxC3fiF3vCyGmi52jiPV9p1w9OJjMMZv8WBZATS1A6x SUqX96f6geKI/Q== -----END CERTIFICATE-----Generated at Tue Jan 27 01:33:14 2026 by rpki-client