This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json) Hash identifier: gR8yqgyWyLdN9Iy+put0O5Lq5OK2CPNhWVwzgIZPEA8= Subject key identifier: BC:AB:A0:D2:4B:6A:A8:A7:DE:5C:7D:59:04:B3:08:48:CC:C3:10:8F Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5 Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5 Certificate serial: 019C040CC79BB9B75D9C47B30A8300E64B0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft Manifest number: 1419 Signing time: Wed 28 Jan 2026 10:01:12 +0000 Manifest this update: Wed 28 Jan 2026 10:01:12 +0000 Manifest next update: Thu 29 Jan 2026 10:01:12 +0000 Files and hashes: 1: 49TpwXNTbP9jREpz2sa2Jtt7mT4.roa (hash: 29rndF3r0S7bzK9ai7WqeiKlzm9ig1QMwR9Nz9BHg9o=) 2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: h/V9yWeQ1/G3T+zBLVEQtJRV3KtFioRJXss5WwDYEHY=) 3: dCWLRmBaBQxy6eoWVHKXPq8UnbY.roa (hash: GnpPZWGTVcUqisrQyyHLCMNBiEUZ8MM+stWTYBQynzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:0c:c7:9b:b9:b7:5d:9c:47:b3:0a:83:00:e6:4b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5 Validity Not Before: Jan 28 10:01:12 2026 GMT Not After : Jan 29 10:01:12 2026 GMT Subject: CN=bcaba0d24b6aa8a7de5c7d5904b30848ccc3108f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:db:44:8d:33:6a:ba:24:f6:25:1c:e8:84: df:1e:a1:55:26:60:29:ec:28:25:a6:3c:40:c4:46: 19:f2:73:78:2e:16:c1:54:19:74:bd:34:7c:09:2c: e3:11:4b:c1:99:34:b9:73:b4:99:81:28:31:18:91: 81:cf:98:d4:b8:ce:38:d5:85:77:0d:af:44:bf:c4: e5:77:09:fe:2a:0d:f9:1b:7e:5f:13:bd:bc:b9:a6: 29:f1:0d:7b:83:0a:37:33:95:58:33:50:38:85:8a: db:b3:c4:3c:de:d0:83:b5:87:4b:16:3e:c3:14:65: c1:ce:1a:06:09:1b:13:5c:0b:97:04:29:80:46:45: 89:59:6d:9d:af:36:7e:9d:08:c8:94:96:38:c1:0b: 04:e7:94:cd:3f:67:04:f0:64:d8:8e:8a:5b:3f:58: ca:8d:0b:e8:32:58:4f:4b:4e:f5:28:9b:32:80:47: 73:de:c9:fd:9f:3b:d6:11:9d:c9:a2:0b:04:59:8a: 73:3f:88:ef:1a:7d:8a:72:0f:56:af:87:43:0c:e5: cf:07:54:03:bf:8b:68:90:e9:de:e0:ba:69:58:8d: 59:82:3b:05:36:54:a9:05:8d:66:a9:60:1c:43:76: 57:3d:48:1b:1a:49:3c:2d:ab:57:93:83:c2:cb:cf: d9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AB:A0:D2:4B:6A:A8:A7:DE:5C:7D:59:04:B3:08:48:CC:C3:10:8F X509v3 Authority Key Identifier: keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:41:02:e5:5e:25:57:95:f9:ac:a4:e7:e5:e7:e5:c2:23:c4: ed:29:8a:8b:4d:38:f2:48:b9:10:03:70:ae:11:44:cb:bd:96: 71:6c:4a:9b:c6:d4:12:d2:0d:ca:aa:19:58:0b:6e:39:3a:83: 17:b1:2a:bf:fb:eb:19:1c:21:b7:90:04:f5:b6:d6:a1:9d:e8: 41:e3:a1:e3:7d:17:73:da:8a:56:b4:6e:7f:90:da:05:77:72: 7f:68:cf:d5:66:b5:7d:aa:5e:3a:ee:87:f2:7e:9a:6e:56:d6: cc:04:1d:6f:78:5a:7a:4b:a7:b2:13:f7:32:85:e9:c2:fe:8f: df:30:48:c9:84:35:70:f0:1a:50:ea:58:af:92:ce:8b:55:e8: 4c:f9:55:7e:b0:72:43:7a:9d:56:a9:58:27:d0:dd:63:2f:06: 0c:88:53:9f:97:bd:ae:96:21:2f:44:2e:02:17:ab:d3:3b:ee: b4:37:bb:74:cc:be:ff:f7:05:5f:d0:70:a2:c8:53:c4:b7:9a: 68:d4:79:46:64:cd:5c:cf:dd:78:d0:44:51:bc:66:07:eb:9f: e3:0a:d3:f2:83:ad:c5:b1:25:f7:54:c1:3e:14:a4:47:62:91: a0:9b:6e:ce:31:21:01:14:2e:56:fb:32:77:9f:df:39:fa:25: bc:3b:de:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwEDMebubddnEezCoMA5ksNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYzZiYmFmNDA5ZjVmZDZkNzA5YzRkN2QyNDM0NGEyOTJh M2NhYTUwHhcNMjYwMTI4MTAwMTEyWhcNMjYwMTI5MTAwMTEyWjAzMTEwLwYDVQQD EyhiY2FiYTBkMjRiNmFhOGE3ZGU1YzdkNTkwNGIzMDg0OGNjYzMxMDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMzbRI0zarok9iUc6ITfHqFVJmAp 7CglpjxAxEYZ8nN4LhbBVBl0vTR8CSzjEUvBmTS5c7SZgSgxGJGBz5jUuM441YV3 Da9Ev8Tldwn+Kg35G35fE728uaYp8Q17gwo3M5VYM1A4hYrbs8Q83tCDtYdLFj7D FGXBzhoGCRsTXAuXBCmARkWJWW2drzZ+nQjIlJY4wQsE55TNP2cE8GTYjopbP1jK jQvoMlhPS071KJsygEdz3sn9nzvWEZ3JogsEWYpzP4jvGn2Kcg9Wr4dDDOXPB1QD v4tokOne4LppWI1ZgjsFNlSpBY1mqWAcQ3ZXPUgbGkk8LatXk4PCy8/ZfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyroNJLaqin3lx9WQSzCEjMwxCPMB8GA1UdIwQY MBaAFDHGu69An1/W1wnE19JDRKKSo8qlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMt NDFjM2NmOTA4ZTk3LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMtNDFjM2NmOTA4ZTk3 LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkEC5V4l V5X5rKTn5eflwiPE7SmKi0048ki5EANwrhFEy72WcWxKm8bUEtINyqoZWAtuOTqD F7Eqv/vrGRwht5AE9bbWoZ3oQeOh430Xc9qKVrRuf5DaBXdyf2jP1Wa1fapeOu6H 8n6ablbWzAQdb3haekunshP3MoXpwv6P3zBIyYQ1cPAaUOpYr5LOi1XoTPlVfrBy Q3qdVqlYJ9DdYy8GDIhTn5e9rpYhL0QuAher0zvutDe7dMy+//cFX9BwoshTxLea aNR5RmTNXM/deNBEUbxmB+uf4wrT8oOtxbEl91TBPhSkR2KRoJtuzjEhARQuVvsy d5/fOfolvDveYQ== -----END CERTIFICATE-----Generated at Wed Jan 28 17:55:16 2026 by rpki-client