This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft File: MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft (raw, json) Hash identifier: GhYTFsav1ONeDk3TSBwT9pQ11v2whpc66/+g0M1HvV0= Subject key identifier: F0:70:DD:18:7C:51:65:48:F3:22:5C:B9:92:3B:E0:4E:20:57:B3:7B Authority key identifier: 31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6 Certificate issuer: /CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6 Certificate serial: 019B9FD847180381796F1F4398BF26117B04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft Manifest number: 12A1 Signing time: Thu 08 Jan 2026 23:01:49 +0000 Manifest this update: Thu 08 Jan 2026 23:01:49 +0000 Manifest next update: Fri 09 Jan 2026 23:01:49 +0000 Files and hashes: 1: 6JYQqrzS3UTPcgvWPbO4TgCoS3k.roa (hash: iOMk6cfEftH8+M5zAq6J+7nYiKbK2CplnfrSukCWdkM=) 2: KiViUlRdp1iVIBpAgxyCpxxK3gQ.roa (hash: Yk/aBj6tG6In28XxnbyhWgRKpfIGrGy/o9iiuy0VDDg=) 3: MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl (hash: 7w54Olmqll78czTFCkGuk6VN4MgBiJUiv0zrWKC0gok=) 4: aZwxLLe27uK7ns0bAgvQ0s7Mqt4.roa (hash: IJFNHlYozh1R/6V0WKyYnkoCMR+po4mStHpa7SQZbq4=) 5: qM92mL8g634Yh9KwZjRzI5vZ9l8.roa (hash: f+n6LoAwAduArbfX5BlVpkBMLZF56N90CkVkSMu7mrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9f:d8:47:18:03:81:79:6f:1f:43:98:bf:26:11:7b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6 Validity Not Before: Jan 8 23:01:49 2026 GMT Not After : Jan 9 23:01:49 2026 GMT Subject: CN=f070dd187c516548f3225cb9923be04e2057b37b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:d0:e9:a3:6b:7f:b1:d0:1f:3e:20:ba:29: 3b:fc:6c:82:85:76:bb:66:4c:7a:5c:a4:53:37:a4: fd:00:a2:31:40:ae:ab:06:a6:ff:6c:13:d6:69:7a: ba:20:9a:48:45:7d:50:1a:5f:0c:58:83:f4:5c:54: fb:0b:ca:bb:54:36:a6:ef:5a:28:cb:eb:25:fc:7b: 37:e4:70:3e:44:19:44:7e:ef:61:5c:80:c6:c3:3a: 40:9e:a4:96:60:99:e7:dc:43:8b:a9:92:9d:6e:70: 2a:91:c8:a5:d1:e5:4d:c5:ac:47:e6:64:0b:df:2c: f9:fe:2a:b5:ca:b7:29:ca:05:6d:05:c7:fb:d5:8d: 52:47:02:d2:0c:11:c0:8c:ae:2c:de:e6:4d:d5:e7: 6d:21:49:9f:b6:ed:02:e1:03:6b:70:ec:02:f5:ba: f9:04:ef:20:0e:f7:ee:59:31:22:82:d1:96:d5:cc: e3:2b:da:a1:23:ae:80:d4:6a:f7:6f:d1:8e:a1:4e: f9:ec:03:67:74:5e:a6:b4:7a:2d:32:dc:a3:a9:6e: 7d:cf:3b:0c:77:12:4b:0b:22:40:45:76:a2:8a:5d: 46:7f:57:91:48:69:e7:c9:c3:8a:bc:d3:c5:15:81: 65:39:cd:31:10:0a:c3:d6:3f:7f:2a:9f:1d:3f:f9: 70:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:70:DD:18:7C:51:65:48:F3:22:5C:B9:92:3B:E0:4E:20:57:B3:7B X509v3 Authority Key Identifier: keyid:31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:eb:bb:f5:a9:df:df:5c:09:50:23:a1:75:52:87:d0:58:9d: 2a:47:6e:ea:06:a9:b6:05:3b:16:10:5b:15:19:e6:2c:58:fa: f7:fe:2c:0f:2a:f4:34:91:67:1c:79:73:b1:c9:1e:34:7f:12: 36:b3:87:6d:e1:06:49:69:ff:6f:c3:98:d2:df:94:d2:5c:0c: f5:93:53:7a:3a:49:e1:fb:d9:98:07:67:17:a2:65:ed:13:b4: 5c:64:ee:da:a9:0e:c1:61:41:f7:ab:0a:89:e7:a8:b4:61:ad: cd:58:6e:9e:67:fd:d6:76:6d:09:f6:b6:c7:34:19:36:e6:48: f0:ce:83:93:f6:bf:45:2d:39:99:6f:ec:28:2e:49:c3:f2:b3: 9d:7f:13:c5:27:25:b8:c2:ec:b4:9d:58:90:d5:2b:20:b1:f2: fb:78:ea:ae:1d:79:22:e7:99:3f:87:fb:a8:00:bb:43:90:9b: 7f:9e:10:17:71:ba:33:f0:1b:c0:f5:f8:64:35:24:66:31:40: 97:7e:0f:e2:57:24:de:b0:80:a5:3c:50:9d:f9:7f:38:5d:d2: 6c:bb:b9:2d:c5:ea:18:a0:6d:b3:3c:46:a5:56:91:7c:55:27: a0:3b:21:b8:bb:3b:35:44:6a:97:4b:d3:1f:d9:ba:89:ac:2a: fe:48:d2:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuf2EcYA4F5bx9DmL8mEXsEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZDRlZTRhZmZmNTVlNjc0NDRkNDdkNDliNTEyYTgzNjhi ZjllZjYwHhcNMjYwMTA4MjMwMTQ5WhcNMjYwMTA5MjMwMTQ5WjAzMTEwLwYDVQQD EyhmMDcwZGQxODdjNTE2NTQ4ZjMyMjVjYjk5MjNiZTA0ZTIwNTdiMzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWLQ6aNrf7HQHz4guik7/GyChXa7 Zkx6XKRTN6T9AKIxQK6rBqb/bBPWaXq6IJpIRX1QGl8MWIP0XFT7C8q7VDam71oo y+sl/Hs35HA+RBlEfu9hXIDGwzpAnqSWYJnn3EOLqZKdbnAqkcil0eVNxaxH5mQL 3yz5/iq1yrcpygVtBcf71Y1SRwLSDBHAjK4s3uZN1edtIUmftu0C4QNrcOwC9br5 BO8gDvfuWTEigtGW1czjK9qhI66A1Gr3b9GOoU757ANndF6mtHotMtyjqW59zzsM dxJLCyJARXaiil1Gf1eRSGnnycOKvNPFFYFlOc0xEArD1j9/Kp8dP/lwNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBw3Rh8UWVI8yJcuZI74E4gV7N7MB8GA1UdIwQY MBaAFDHU7kr/9V5nRE1H1JtRKoNov572MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRUdVN2XzFYbWRFVFVmVW0xRXFnMmlfbnZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lNDRkZWEtOGQ1MS00NDBhLWJjMDIt YmFiNTc2ZTIwMzkzLzEvTWRUdVN2XzFYbWRFVFVmVW0xRXFnMmlfbnZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9lNDRkZWEtOGQ1MS00NDBhLWJjMDItYmFiNTc2ZTIwMzkz LzEvTWRUdVN2XzFYbWRFVFVmVW0xRXFnMmlfbnZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+u79anf 31wJUCOhdVKH0FidKkdu6gaptgU7FhBbFRnmLFj69/4sDyr0NJFnHHlzsckeNH8S NrOHbeEGSWn/b8OY0t+U0lwM9ZNTejpJ4fvZmAdnF6Jl7RO0XGTu2qkOwWFB96sK ieeotGGtzVhunmf91nZtCfa2xzQZNuZI8M6Dk/a/RS05mW/sKC5Jw/KznX8TxScl uMLstJ1YkNUrILHy+3jqrh15IueZP4f7qAC7Q5Cbf54QF3G6M/AbwPX4ZDUkZjFA l34P4lck3rCApTxQnfl/OF3SbLu5LcXqGKBtszxGpVaRfFUnoDshuLs7NURql0vT H9m6iawq/kjSGQ== -----END CERTIFICATE-----Generated at Fri Jan 9 00:53:27 2026 by rpki-client