This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json) Hash identifier: bkPNBIwMLsctJGAwe/QCI/T6WQHxqGmKLuDtJSFdh2o= Subject key identifier: CD:18:39:CF:CA:E5:E7:E3:7E:AF:88:FB:67:F8:A7:E0:44:FE:B5:A0 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019B8C1A221BBF1AB855D0593C62382A3782 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft Manifest number: 17F8 Signing time: Mon 05 Jan 2026 03:01:21 +0000 Manifest this update: Mon 05 Jan 2026 03:01:21 +0000 Manifest next update: Tue 06 Jan 2026 03:01:21 +0000 Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=) 2: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: VWrKNVYGavXvF6YMLPmC5FzO8Byjfr7SOGFDav7AVxM=) 3: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=) 4: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=) 5: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=) 6: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=) 7: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=) 8: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=) 9: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 23:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8c:1a:22:1b:bf:1a:b8:55:d0:59:3c:62:38:2a:37:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Jan 5 03:01:21 2026 GMT Not After : Jan 6 03:01:21 2026 GMT Subject: CN=cd1839cfcae5e7e37eaf88fb67f8a7e044feb5a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0d:98:74:ef:3e:ff:c4:c7:db:4e:4e:28:1a: f4:50:59:c6:c2:16:07:08:c2:47:5d:3d:88:a3:dd: cc:9d:4d:82:76:86:55:38:25:c0:8e:93:14:f9:c2: 05:32:22:ba:05:3a:7d:c0:bf:df:5d:7e:4b:b5:85: 60:81:7d:46:fb:d8:52:85:4d:4b:c1:b7:d4:9f:7a: 3a:92:43:f7:6e:5b:d2:77:65:d7:f8:b6:5c:64:91: b8:26:74:04:26:d2:b9:4a:57:84:4c:b5:d2:61:db: 6d:b7:60:8f:61:0f:c8:e9:b9:98:33:a7:94:44:40: 2c:df:b6:00:17:bb:29:5a:ed:1c:8b:0e:69:6a:78: 5d:01:45:0a:32:25:3d:c3:55:33:c4:77:9b:36:22: a9:c2:28:79:13:62:26:e2:87:c0:ce:e5:d2:04:59: eb:47:14:64:97:83:b5:6d:8b:7b:5d:98:58:78:ac: 98:5f:2f:63:91:5e:29:76:3d:0c:99:fc:ff:83:47: 2c:87:b5:08:48:b8:fd:6c:83:ec:a3:2a:13:22:db: 93:50:4e:a7:85:0c:a5:f4:5c:a7:e7:e6:33:90:4d: 21:d2:9e:f6:76:d8:93:d1:39:f3:da:2d:23:96:5e: c4:1f:ed:25:1a:01:ec:35:76:84:10:af:d8:49:16: 4a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:18:39:CF:CA:E5:E7:E3:7E:AF:88:FB:67:F8:A7:E0:44:FE:B5:A0 X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:4b:90:39:16:a6:56:ce:b4:b3:c6:95:c2:2e:08:ca:c2:74: dd:66:7d:c5:2c:ab:e6:b5:07:4f:b7:81:b0:3b:5a:d3:24:e7: 51:4a:e8:59:30:94:86:87:f3:f7:4f:46:40:8d:52:84:bc:7f: 9e:50:c4:d4:58:db:46:58:99:8a:93:6c:cb:6e:e2:d7:14:d3: af:fd:dc:c6:9b:75:ee:8c:51:c2:52:19:69:67:59:6b:c5:b3: 82:e8:4d:2e:82:82:3a:71:66:79:eb:09:9d:12:65:a9:c8:3a: f3:7c:dc:f2:4f:14:2c:7d:fb:06:d2:d4:46:4b:56:b3:39:f2: c9:c3:28:f7:15:33:0c:45:36:c6:4a:02:14:96:e1:b7:6c:61: db:af:cc:a1:39:84:79:62:48:a4:91:d1:06:1c:99:43:e2:24: 39:41:ec:5c:bd:4a:29:28:bc:74:f9:60:f1:5f:05:3c:c5:0e: 0a:29:d5:81:4d:e0:d9:14:4f:46:c7:d3:c7:cb:34:7d:35:21: 8e:32:e7:25:b9:5b:99:c8:67:f0:eb:ab:4f:e9:83:ff:d9:5b: 63:0c:5a:67:cf:76:47:47:3a:d5:73:0f:59:ad:be:e0:34:0e: 3d:89:da:6d:9b:9c:09:a3:5a:e1:2e:d3:4b:8a:b0:32:9f:cf: 9c:af:7e:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuMGiIbvxq4VdBZPGI4KjeCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwMTA1MDMwMTIxWhcNMjYwMTA2MDMwMTIxWjAzMTEwLwYDVQQD EyhjZDE4MzljZmNhZTVlN2UzN2VhZjg4ZmI2N2Y4YTdlMDQ0ZmViNWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA2YdO8+/8TH205OKBr0UFnGwhYH CMJHXT2Io93MnU2CdoZVOCXAjpMU+cIFMiK6BTp9wL/fXX5LtYVggX1G+9hShU1L wbfUn3o6kkP3blvSd2XX+LZcZJG4JnQEJtK5SleETLXSYdttt2CPYQ/I6bmYM6eU REAs37YAF7spWu0ciw5panhdAUUKMiU9w1UzxHebNiKpwih5E2Im4ofAzuXSBFnr RxRkl4O1bYt7XZhYeKyYXy9jkV4pdj0Mmfz/g0csh7UISLj9bIPsoyoTItuTUE6n hQyl9Fyn5+YzkE0h0p72dtiT0Tnz2i0jll7EH+0lGgHsNXaEEK/YSRZKWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0YOc/K5efjfq+I+2f4p+BE/rWgMB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0uQORam Vs60s8aVwi4IysJ03WZ9xSyr5rUHT7eBsDta0yTnUUroWTCUhofz909GQI1ShLx/ nlDE1FjbRliZipNsy27i1xTTr/3cxpt17oxRwlIZaWdZa8WzguhNLoKCOnFmeesJ nRJlqcg683zc8k8ULH37BtLURktWsznyycMo9xUzDEU2xkoCFJbht2xh26/MoTmE eWJIpJHRBhyZQ+IkOUHsXL1KKSi8dPlg8V8FPMUOCinVgU3g2RRPRsfTx8s0fTUh jjLnJblbmchn8OurT+mD/9lbYwxaZ892R0c61XMPWa2+4DQOPYnabZucCaNa4S7T S4qwMp/PnK9+6g== -----END CERTIFICATE-----Generated at Mon Jan 5 07:30:16 2026 by rpki-client