This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json) Hash identifier: sCDS6NwRxnKzJwIDk3rXe0/OfYBF1dKEvNewEh87jiA= Subject key identifier: D6:A4:20:AD:AD:31:E8:58:D2:7E:0A:C1:09:1E:87:6E:52:7F:F7:DC Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71 Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71 Certificate serial: 019BFE0A2637D4719F30CFC5F98A903912CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft Manifest number: 17EE Signing time: Tue 27 Jan 2026 06:00:36 +0000 Manifest this update: Tue 27 Jan 2026 06:00:36 +0000 Manifest next update: Wed 28 Jan 2026 06:00:36 +0000 Files and hashes: 1: LRtgsdrMZCWO8Ukau3X5r3di8uY.roa (hash: LgkPjSSmG2fUG8Xv2OSlJ58EB0MKOSo26cfoyY+2UuA=) 2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: bC59bWkmu/4yWKsHW970BC09e07m9RcBF2i+VW4zu5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:26:37:d4:71:9f:30:cf:c5:f9:8a:90:39:12:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71 Validity Not Before: Jan 27 06:00:36 2026 GMT Not After : Jan 28 06:00:36 2026 GMT Subject: CN=d6a420adad31e858d27e0ac1091e876e527ff7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:09:69:18:fb:a4:ec:b3:2f:f5:b7:f7:f4:f9: a1:7e:2a:8d:ac:65:aa:38:86:d6:57:cb:1b:4c:6b: e6:09:1d:b6:d8:76:24:59:70:a8:9b:c1:77:e8:1e: a0:4e:a9:67:09:9f:9e:8c:5b:a1:b3:17:42:3c:ef: c0:8f:7e:59:cf:df:97:45:f4:75:06:ff:e8:b3:d6: 9d:9d:ae:fa:9c:57:eb:2f:d6:d3:36:0d:14:b7:8d: e2:3e:24:ec:5b:26:58:a6:88:0d:2f:73:4d:71:c7: 7e:ac:66:bd:b1:57:71:fc:ca:83:ef:67:3f:f9:0a: 77:5e:6f:71:3a:2b:62:16:e1:a2:04:4b:3e:31:36: 20:51:cc:94:27:ee:58:34:9e:dd:ce:a1:ec:af:fc: 6c:34:c8:14:f6:a3:94:69:c8:ff:a2:c7:93:9d:02: c9:5c:e0:69:f1:64:a5:57:64:1b:ed:ca:c2:fd:6c: 80:4f:cc:ba:e5:e4:1f:30:89:5b:65:fb:99:8a:56: f4:e1:31:e4:29:c1:55:bd:35:f4:a8:a5:5b:14:8d: 99:c7:0e:c0:6c:c5:11:38:fd:7c:1c:0c:68:be:34: 39:b7:8f:50:1b:3c:c8:7c:92:60:c4:a9:a2:23:ca: 2c:ec:4a:42:e7:7f:f9:a2:28:b5:98:37:9c:ac:a9: 50:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A4:20:AD:AD:31:E8:58:D2:7E:0A:C1:09:1E:87:6E:52:7F:F7:DC X509v3 Authority Key Identifier: keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:85:b0:2b:b0:ed:9c:bf:0a:52:e9:cf:00:03:bd:f9:f1:eb: c3:12:c2:ff:36:ea:b8:38:44:02:c9:44:4c:16:09:30:c2:f6: 57:9d:d2:16:17:89:5c:d8:ac:3c:dc:2f:69:ce:4a:db:89:dd: de:e3:f3:0b:d9:cf:7d:05:5f:32:0b:cc:fd:f3:60:be:7c:82: 2e:7d:16:5d:e4:77:c9:13:30:dc:fa:a0:f4:0e:af:9e:1f:c8: a2:f6:6f:34:13:29:b2:c9:0e:d0:80:39:b1:2a:95:e0:7c:19: 16:0c:02:20:12:26:4b:5b:19:de:ad:75:6d:10:d3:59:79:a2: 63:bb:1d:fb:f7:2b:06:16:8d:6e:df:b4:53:97:26:62:68:9e: 5f:93:c3:bd:cb:ad:f2:ae:65:30:b7:cc:ba:c8:22:65:4d:35: 71:19:b9:d0:34:5f:71:9f:5c:c3:79:31:81:b1:e4:d2:2a:44: bb:fd:25:b0:54:5e:06:19:e7:c8:a5:ec:16:43:2a:2b:cb:96: af:56:ea:4b:1a:19:54:95:00:2b:e7:be:1d:70:5d:97:27:89: 85:ac:c9:22:60:8a:95:e8:08:47:70:7c:f7:b3:b0:9c:2d:e9: df:59:cb:eb:2e:97:33:4b:81:db:7b:e7:18:15:c8:3e:98:db: d1:59:60:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+CiY31HGfMM/F+YqQORLKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNjIyMzQ0ZjI5ZTZiNjQyMGJmZWJjMzhiYjY3YTMwZjQ0 NTNmNzEwHhcNMjYwMTI3MDYwMDM2WhcNMjYwMTI4MDYwMDM2WjAzMTEwLwYDVQQD EyhkNmE0MjBhZGFkMzFlODU4ZDI3ZTBhYzEwOTFlODc2ZTUyN2ZmN2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0glpGPuk7LMv9bf39PmhfiqNrGWq OIbWV8sbTGvmCR222HYkWXCom8F36B6gTqlnCZ+ejFuhsxdCPO/Aj35Zz9+XRfR1 Bv/os9adna76nFfrL9bTNg0Ut43iPiTsWyZYpogNL3NNccd+rGa9sVdx/MqD72c/ +Qp3Xm9xOitiFuGiBEs+MTYgUcyUJ+5YNJ7dzqHsr/xsNMgU9qOUacj/oseTnQLJ XOBp8WSlV2Qb7crC/WyAT8y65eQfMIlbZfuZilb04THkKcFVvTX0qKVbFI2Zxw7A bMUROP18HAxovjQ5t49QGzzIfJJgxKmiI8os7EpC53/5oii1mDecrKlQiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNakIK2tMehY0n4KwQkeh25Sf/fcMB8GA1UdIwQY MBaAFDNiI0TynmtkIL/rw4u2ejD0RT9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTct NmM2NjU4YmQ5NTJlLzEvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80YzY4ZTQtNGQ3MS00Njk2LTk1NTctNmM2NjU4YmQ5NTJl LzEvTTJJalJQS2VhMlFndi12RGk3WjZNUFJGUDNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIWwK7Dt nL8KUunPAAO9+fHrwxLC/zbquDhEAslETBYJMML2V53SFheJXNisPNwvac5K24nd 3uPzC9nPfQVfMgvM/fNgvnyCLn0WXeR3yRMw3Pqg9A6vnh/IovZvNBMpsskO0IA5 sSqV4HwZFgwCIBImS1sZ3q11bRDTWXmiY7sd+/crBhaNbt+0U5cmYmieX5PDvcut 8q5lMLfMusgiZU01cRm50DRfcZ9cw3kxgbHk0ipEu/0lsFReBhnnyKXsFkMqK8uW r1bqSxoZVJUAK+e+HXBdlyeJhazJImCKlegIR3B897OwnC3p31nL6y6XM0uB23vn GBXIPpjb0VlgGQ== -----END CERTIFICATE-----Generated at Tue Jan 27 07:46:50 2026 by rpki-client