This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft File: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft (raw, json) Hash identifier: 3QvHsaG0F3rFkVJ5wSmaXIwyGL4uGoynJYOZtnXhdi4= Subject key identifier: 04:F4:E3:B3:88:68:03:E5:26:2F:E0:68:9D:C2:88:22:4E:D4:B7:E9 Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84 Certificate issuer: /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84 Certificate serial: 019BFC89AC1429AE0C8F89A84CC387CE2D9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft Manifest number: 0813 Signing time: Mon 26 Jan 2026 23:00:39 +0000 Manifest this update: Mon 26 Jan 2026 23:00:39 +0000 Manifest next update: Tue 27 Jan 2026 23:00:39 +0000 Files and hashes: 1: 1D6YY4AfNvV2NepuuxtkGVV-rLg.roa (hash: LNZLVcujqagQzwW2q2V4qRkT/sBDkvN16A/NWVzLzWU=) 2: HOYPj4fxlJpMEgvz-DEwT478Zw0.roa (hash: 7P50ZlqJyO8nhGQCGcuWiJXDncM9pWzrp0URwjErvl4=) 3: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl (hash: CxTFhR2cVPm3pzqM7RaYCbBaiQzCNdJWlAI80uHTO60=) 4: UtBuOFJeA4gPyVPmFEGgkw2zEFA.roa (hash: eu9hciCdi48z/WHUFfgsqnitXTRgtMV120uloxDdTDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:89:ac:14:29:ae:0c:8f:89:a8:4c:c3:87:ce:2d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84 Validity Not Before: Jan 26 23:00:39 2026 GMT Not After : Jan 27 23:00:39 2026 GMT Subject: CN=04f4e3b3886803e5262fe0689dc288224ed4b7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ac:33:e6:06:a2:36:dc:d9:25:4c:5e:fd:7c: e5:2c:48:ee:08:88:60:05:55:ee:ec:62:a9:37:58: e6:5d:24:e1:85:79:72:4d:c0:78:af:35:e2:ba:ff: 31:d6:9a:35:89:b3:43:10:1a:5b:1e:06:c2:8d:55: e8:cc:6c:ca:67:2a:67:4a:2b:e2:fc:b7:30:06:6d: e5:94:03:5b:45:ad:20:6e:b0:63:3a:b9:27:c9:fa: db:ab:36:ff:30:83:7b:b0:0b:09:60:03:6e:d5:ab: b8:cc:59:ab:8b:32:2f:05:85:15:22:49:92:44:88: a4:71:bb:bc:17:c8:c9:ac:17:b7:57:39:e4:e9:30: d2:2c:d7:43:be:8b:23:39:a2:2e:47:44:9c:ba:4f: 4d:a0:6a:d3:46:d7:bd:88:0f:f3:53:ef:d1:ef:c8: 8f:d0:47:36:ac:66:26:78:9a:fd:61:0d:59:22:38: 6c:0f:70:35:8c:dc:d8:77:19:50:b7:09:c0:37:23: 9c:c8:43:10:95:3a:0a:b4:b3:97:e3:70:59:2e:cc: d6:77:56:be:a8:ab:41:2e:be:c3:cd:ac:91:39:0f: da:de:14:23:f2:03:4e:52:a2:52:d6:ba:c6:23:53: f1:2b:26:98:67:14:53:74:9f:be:70:88:17:e7:bb: c7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F4:E3:B3:88:68:03:E5:26:2F:E0:68:9D:C2:88:22:4E:D4:B7:E9 X509v3 Authority Key Identifier: keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ea:b3:10:79:4c:e6:d7:06:2c:3c:ef:d4:9a:55:e0:07:46: d1:0d:de:75:76:09:db:24:d7:a2:e2:76:9e:93:85:d1:88:6d: 2e:03:82:69:7e:61:0e:e8:bf:c5:03:12:92:3b:9e:c2:39:83: a7:42:f8:c6:5b:9e:5e:a7:df:94:c8:9c:84:32:de:45:d0:30: dc:ef:a8:b2:c2:e8:72:c7:43:a2:a5:27:65:50:c3:8a:d7:9f: 3d:af:04:4d:aa:9d:c4:9e:7d:af:aa:6e:24:8d:a0:2a:e8:d8: 6f:9c:3e:13:c2:cb:f7:9f:14:58:b5:cf:60:1b:72:e8:a4:67: 19:d1:c8:84:2d:9d:9f:7b:36:6c:02:86:51:36:ad:20:4d:e2: aa:60:ae:b9:32:c3:66:b1:e2:b3:9d:45:12:08:06:fb:39:10: 31:0e:7b:23:84:6a:43:4d:71:32:17:17:dc:65:b3:ff:26:b8: ca:fc:b4:da:e4:fa:32:32:f8:ef:58:30:be:9d:81:68:c5:fd: bc:47:93:1f:7e:b4:95:84:2c:9e:db:c3:b3:4e:19:bf:be:ea: 36:f3:21:b3:52:9c:ae:54:57:a0:cb:07:0c:38:ea:db:3b:21: 3e:95:ff:02:f9:a9:81:1d:8d:3f:39:fe:fe:78:8f:24:45:f3: ca:90:a6:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8iawUKa4Mj4moTMOHzi2eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYTljN2JkZjJiODJlMzQzZWM0MjY2N2Q2ZWVkZTRiODA2 MTBjODQwHhcNMjYwMTI2MjMwMDM5WhcNMjYwMTI3MjMwMDM5WjAzMTEwLwYDVQQD EygwNGY0ZTNiMzg4NjgwM2U1MjYyZmUwNjg5ZGMyODgyMjRlZDRiN2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Kwz5gaiNtzZJUxe/XzlLEjuCIhg BVXu7GKpN1jmXSThhXlyTcB4rzXiuv8x1po1ibNDEBpbHgbCjVXozGzKZypnSivi /LcwBm3llANbRa0gbrBjOrknyfrbqzb/MIN7sAsJYANu1au4zFmrizIvBYUVIkmS RIikcbu8F8jJrBe3Vznk6TDSLNdDvosjOaIuR0Scuk9NoGrTRte9iA/zU+/R78iP 0Ec2rGYmeJr9YQ1ZIjhsD3A1jNzYdxlQtwnANyOcyEMQlToKtLOX43BZLszWd1a+ qKtBLr7DzayROQ/a3hQj8gNOUqJS1rrGI1PxKyaYZxRTdJ++cIgX57vHPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAT047OIaAPlJi/gaJ3CiCJO1LfpMB8GA1UdIwQY MBaAFDOpx73yuC40PsQmZ9bu3kuAYQyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTZuSHZmSzRMalEteENabjF1N2VTNEJoRElRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8yZjY1OTUtZDNkMS00M2VhLWE0YTMt YWIzYjdjM2U4MjE1LzEvTTZuSHZmSzRMalEteENabjF1N2VTNEJoRElRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8yZjY1OTUtZDNkMS00M2VhLWE0YTMtYWIzYjdjM2U4MjE1 LzEvTTZuSHZmSzRMalEteENabjF1N2VTNEJoRElRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+qzEHlM 5tcGLDzv1JpV4AdG0Q3edXYJ2yTXouJ2npOF0YhtLgOCaX5hDui/xQMSkjuewjmD p0L4xlueXqfflMichDLeRdAw3O+ossLocsdDoqUnZVDDitefPa8ETaqdxJ59r6pu JI2gKujYb5w+E8LL958UWLXPYBty6KRnGdHIhC2dn3s2bAKGUTatIE3iqmCuuTLD ZrHis51FEggG+zkQMQ57I4RqQ01xMhcX3GWz/ya4yvy02uT6MjL471gwvp2BaMX9 vEeTH360lYQsntvDs04Zv77qNvMhs1KcrlRXoMsHDDjq2zshPpX/AvmpgR2NPzn+ /niPJEXzypCmnQ== -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:50 2026 by rpki-client