This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: iidzJHobG3Wob/dbRQ52dtcCvrUK/AuvUVG7EnGtyuQ= Subject key identifier: 4A:5B:23:AB:D4:5F:08:18:1F:AB:96:5E:53:41:1B:B5:5D:51:A0:C1 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019BA158DF50CAD7F7064BDB74E0A75B5155 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 1803 Signing time: Fri 09 Jan 2026 06:01:54 +0000 Manifest this update: Fri 09 Jan 2026 06:01:54 +0000 Manifest next update: Sat 10 Jan 2026 06:01:54 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: OyXfW7Ba9AjGfj2gGZlJSklSX5YmKE+GA7CeUhEJx1k=) 3: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 4: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 5: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 6: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 7: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 8: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 9: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 06:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:58:df:50:ca:d7:f7:06:4b:db:74:e0:a7:5b:51:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Jan 9 06:01:54 2026 GMT Not After : Jan 10 06:01:54 2026 GMT Subject: CN=4a5b23abd45f08181fab965e53411bb55d51a0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2a:3f:de:07:64:e6:76:fc:06:ba:79:e0:c5: 3e:36:b4:7b:75:69:fc:a9:c3:72:a2:ac:4d:26:6b: a2:47:05:3d:18:65:4e:c8:26:e5:de:18:35:a2:af: 03:29:c7:d2:11:b4:5e:b4:f5:16:bc:dd:f2:c8:81: bb:2e:b2:7d:37:b1:45:03:74:c8:26:7c:96:76:c7: 5b:cb:3f:09:f1:e9:a5:ce:30:05:e1:7c:3c:dc:92: 4f:86:39:f0:2e:1b:77:29:6c:7c:0e:ae:33:d4:01: 2e:89:16:4d:29:fd:19:1a:de:2b:c6:2e:0f:b0:fd: c8:6f:b2:57:39:88:57:25:27:d6:ab:0f:91:a7:ce: fa:6f:3f:67:17:86:08:7a:58:05:6f:e3:2c:9c:28: 8b:db:d2:59:56:98:4c:73:13:18:73:46:9a:a5:6e: be:09:ca:e5:2c:3e:2e:c0:9d:e9:8c:e1:5c:90:2f: 12:bf:5d:39:1d:9e:b4:d7:fb:a6:23:bf:b3:6d:e2: 40:59:99:0d:75:d1:a2:c7:ed:fe:f7:bf:d9:fd:02: 1e:13:0c:a3:1b:bb:aa:a0:eb:f0:5a:54:c1:4c:9d: b0:43:68:15:a0:a0:67:42:07:e8:00:af:90:1c:54: be:83:99:b2:a7:41:71:0b:17:f9:1f:70:20:87:59: e1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5B:23:AB:D4:5F:08:18:1F:AB:96:5E:53:41:1B:B5:5D:51:A0:C1 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a3:89:ad:45:a5:9c:83:8d:d9:ff:f1:9a:63:44:6a:9f:d4: ae:ed:1a:09:45:8e:d2:66:87:20:b4:2a:74:0b:2b:a1:25:14: 80:6e:30:4b:2a:61:77:fa:28:d1:b8:0c:f7:78:03:c5:df:b5: f4:24:44:af:23:5e:f5:20:ac:00:3f:2d:eb:0a:73:f4:b3:ad: 5a:f2:e2:c3:bb:39:f2:0a:43:32:96:e3:0d:6a:59:70:4e:ba: b1:10:c6:39:7e:d7:04:c4:11:29:f4:cc:9c:1c:f6:d3:a0:02: aa:e9:8a:bb:b7:8a:5e:56:20:72:db:5a:c9:ed:ca:ca:39:5c: c5:13:b6:8c:b4:05:19:e2:7c:d1:23:d0:d6:c9:2c:8a:d7:ed: ce:c7:6e:a6:11:de:70:3d:38:a5:1c:0b:b7:fa:3e:48:d4:81: b0:ae:af:3b:98:1b:fa:1f:1b:11:40:21:ee:eb:8d:1c:5d:49: 34:bb:74:13:bc:fc:8d:fd:95:41:b4:a5:6a:7d:a1:b2:3e:ac: b3:f0:c4:08:60:b5:e5:f8:e5:07:ae:16:07:c3:1f:f3:f4:b6: d5:5c:80:45:41:e9:08:93:f9:ab:b9:f1:88:7a:88:0b:df:b6: d3:9f:89:f6:c6:36:ed:aa:78:fb:9c:16:08:78:fe:72:51:06: 25:e8:44:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuhWN9Qytf3BkvbdOCnW1FVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwMTA5MDYwMTU0WhcNMjYwMTEwMDYwMTU0WjAzMTEwLwYDVQQD Eyg0YTViMjNhYmQ0NWYwODE4MWZhYjk2NWU1MzQxMWJiNTVkNTFhMGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6io/3gdk5nb8Brp54MU+NrR7dWn8 qcNyoqxNJmuiRwU9GGVOyCbl3hg1oq8DKcfSEbRetPUWvN3yyIG7LrJ9N7FFA3TI JnyWdsdbyz8J8emlzjAF4Xw83JJPhjnwLht3KWx8Dq4z1AEuiRZNKf0ZGt4rxi4P sP3Ib7JXOYhXJSfWqw+Rp876bz9nF4YIelgFb+MsnCiL29JZVphMcxMYc0aapW6+ CcrlLD4uwJ3pjOFckC8Sv105HZ601/umI7+zbeJAWZkNddGix+3+97/Z/QIeEwyj G7uqoOvwWlTBTJ2wQ2gVoKBnQgfoAK+QHFS+g5myp0FxCxf5H3Agh1nhGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpbI6vUXwgYH6uWXlNBG7VdUaDBMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKOJrUWl nION2f/xmmNEap/Uru0aCUWO0maHILQqdAsroSUUgG4wSyphd/oo0bgM93gDxd+1 9CREryNe9SCsAD8t6wpz9LOtWvLiw7s58gpDMpbjDWpZcE66sRDGOX7XBMQRKfTM nBz206ACqumKu7eKXlYgcttaye3KyjlcxRO2jLQFGeJ80SPQ1sksitftzsduphHe cD04pRwLt/o+SNSBsK6vO5gb+h8bEUAh7uuNHF1JNLt0E7z8jf2VQbSlan2hsj6s s/DECGC15fjlB64WB8Mf8/S21VyARUHpCJP5q7nxiHqIC9+205+J9sY27ap4+5wW CHj+clEGJehESw== -----END CERTIFICATE-----Generated at Fri Jan 9 13:28:56 2026 by rpki-client