This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft File: MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json) Hash identifier: kNjWLFAyOFC7floXHtwlwCmbIoiywXqhemB39bBTKl8= Subject key identifier: C7:3D:E5:64:9F:6D:E8:A2:AD:BA:41:21:A5:45:6D:7B:62:73:C2:8B Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90 Certificate issuer: /CN=327557cf22629d058a5114965b2f9df8ef4db690 Certificate serial: 019BFE0AC7D4EF95C20322D6227DAF8D03E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft Manifest number: 0ED3 Signing time: Tue 27 Jan 2026 06:01:17 +0000 Manifest this update: Tue 27 Jan 2026 06:01:17 +0000 Manifest next update: Wed 28 Jan 2026 06:01:17 +0000 Files and hashes: 1: FnV4siConvZq8mk9CbOlR5a9DjI.roa (hash: IZ5c3lykfIm9IkvU3L26cQr7DSQZqq6fwwu8m+5tYDw=) 2: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: PSoqZMhJi++JgVsMWDZ6HqfhBtvlcT6A3tiFJGgHLK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:c7:d4:ef:95:c2:03:22:d6:22:7d:af:8d:03:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690 Validity Not Before: Jan 27 06:01:17 2026 GMT Not After : Jan 28 06:01:17 2026 GMT Subject: CN=c73de5649f6de8a2adba4121a5456d7b6273c28b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bb:a0:c2:0e:4e:64:bd:99:1c:ae:39:c0:26: 20:89:0c:b5:0a:92:3c:1a:f7:2d:6d:74:e4:1d:d5: 5c:e6:8a:11:20:70:f3:84:51:62:da:09:ca:8b:14: 60:24:9c:08:1c:33:87:47:4a:7d:57:94:ca:08:07: b5:eb:b7:19:b8:08:14:39:7f:3d:a9:67:f9:20:25: ee:f9:4a:fe:07:45:a5:9c:f1:ea:9a:25:10:ec:53: 12:8c:95:35:f9:cf:53:1a:a4:ff:9f:55:93:9a:6b: e4:e4:b5:98:90:74:fe:37:d2:a0:7e:d2:5b:8e:f8: af:5f:8c:a7:b5:71:94:01:77:de:12:7b:49:d3:75: 99:89:b3:80:22:89:89:bf:d6:c4:94:32:38:cd:fe: c3:be:41:cf:ac:2c:02:e5:7b:be:f3:b8:2e:e4:65: 58:aa:82:32:6e:d6:9b:30:7b:e5:95:ac:b5:fd:05: f2:6f:cb:86:81:47:5b:08:14:58:70:3f:a3:e2:b3: 06:84:8c:fd:66:65:f5:00:5e:39:6a:6e:56:ab:26: 86:6a:29:e8:48:d3:b2:98:05:1a:c5:21:89:30:71: b2:32:e9:5e:7a:ef:fc:a4:12:fb:e7:95:d0:6a:32: 93:b3:1a:cb:10:26:8b:f6:52:db:8f:c7:a3:7d:de: 84:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3D:E5:64:9F:6D:E8:A2:AD:BA:41:21:A5:45:6D:7B:62:73:C2:8B X509v3 Authority Key Identifier: keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:80:f7:33:95:be:37:36:b1:e0:5d:82:a0:cc:fe:27:27:3c: 1f:50:d4:15:34:a0:b1:c8:0f:a9:7e:44:52:01:f7:c4:3a:29: bd:33:2d:1e:71:d9:6b:ca:f0:5e:76:e5:4a:4c:34:ec:26:e7: af:57:17:6b:e1:15:96:a5:a1:bf:19:c9:67:c0:6f:e9:e7:f1: b4:4e:68:7e:20:e8:80:20:9c:32:19:47:fd:a1:6b:89:30:e8: 6b:26:54:29:d8:69:ce:ff:f7:78:d4:5e:79:87:f1:48:ee:f2: 2e:07:e1:44:ac:5a:41:71:e5:9f:c1:6f:bd:e0:95:77:45:fc: c9:80:00:4d:32:08:47:c3:c3:21:49:66:47:8e:ea:28:32:ed: 30:4b:3f:0a:c9:28:88:d9:a9:ba:e3:6e:24:24:64:9c:f4:d1: e7:74:fa:3d:55:a0:87:d7:03:7e:5c:30:c4:bf:6a:9c:9b:75: 77:4e:07:4c:b9:fd:13:a0:56:89:fe:87:4d:53:d1:05:32:9f: 60:95:b2:f8:92:4a:2f:65:91:62:6e:ab:4e:6b:77:c4:2d:84: c9:1b:23:09:ef:9c:9c:ba:db:c4:f7:07:74:27:d0:df:6d:9a: e5:48:b6:eb:e7:0a:c7:7d:20:43:44:8c:92:e1:37:e1:0e:de: 08:54:12:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+CsfU75XCAyLWIn2vjQPjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNzU1N2NmMjI2MjlkMDU4YTUxMTQ5NjViMmY5ZGY4ZWY0 ZGI2OTAwHhcNMjYwMTI3MDYwMTE3WhcNMjYwMTI4MDYwMTE3WjAzMTEwLwYDVQQD EyhjNzNkZTU2NDlmNmRlOGEyYWRiYTQxMjFhNTQ1NmQ3YjYyNzNjMjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLugwg5OZL2ZHK45wCYgiQy1CpI8 GvctbXTkHdVc5ooRIHDzhFFi2gnKixRgJJwIHDOHR0p9V5TKCAe167cZuAgUOX89 qWf5ICXu+Ur+B0WlnPHqmiUQ7FMSjJU1+c9TGqT/n1WTmmvk5LWYkHT+N9KgftJb jvivX4yntXGUAXfeEntJ03WZibOAIomJv9bElDI4zf7DvkHPrCwC5Xu+87gu5GVY qoIybtabMHvllay1/QXyb8uGgUdbCBRYcD+j4rMGhIz9ZmX1AF45am5WqyaGaino SNOymAUaxSGJMHGyMuleeu/8pBL755XQajKTsxrLECaL9lLbj8ejfd6E5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMc95WSfbeiirbpBIaVFbXtic8KLMB8GA1UdIwQY MBaAFDJ1V88iYp0FilEUllsvnfjvTbaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUt ZmQ3MjViODI1MjkxLzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUtZmQ3MjViODI1Mjkx LzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoD3M5W+ Nzax4F2CoMz+Jyc8H1DUFTSgscgPqX5EUgH3xDopvTMtHnHZa8rwXnblSkw07Cbn r1cXa+EVlqWhvxnJZ8Bv6efxtE5ofiDogCCcMhlH/aFriTDoayZUKdhpzv/3eNRe eYfxSO7yLgfhRKxaQXHln8FvveCVd0X8yYAATTIIR8PDIUlmR47qKDLtMEs/Csko iNmpuuNuJCRknPTR53T6PVWgh9cDflwwxL9qnJt1d04HTLn9E6BWif6HTVPRBTKf YJWy+JJKL2WRYm6rTmt3xC2EyRsjCe+cnLrbxPcHdCfQ322a5Ui26+cKx30gQ0SM kuE34Q7eCFQSXg== -----END CERTIFICATE-----Generated at Tue Jan 27 13:24:30 2026 by rpki-client