This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: gxMy3KgwFGcCnllACEiPOwZnvzNTsLPT3lC8eyHN1Xg= Subject key identifier: 38:C3:C6:A0:2A:15:B4:FA:76:C2:77:DC:48:20:ED:B2:55:C3:BF:6E Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 019BFA9C3AEB45B3F315D5ADB4FDA7AD0811 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 17F7 Signing time: Mon 26 Jan 2026 14:01:41 +0000 Manifest this update: Mon 26 Jan 2026 14:01:41 +0000 Manifest next update: Tue 27 Jan 2026 14:01:41 +0000 Files and hashes: 1: 1-5YvMXH0hxTnFsj1sAzG_06N-p8.roa (hash: qtH86zFamX3mvPAvdw+q4UCXn4ioDZi9V1NWUgQSNY4=) 2: FVTkjzWbmN1CXQ1gquYHPct9ixg.roa (hash: O+F6tjESCYzZkWop7KXE+D6dIUDkHaDfPEsn4FO2i5Y=) 3: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: BP33GHZFooH2xoYczNUanvwrB+FdGisBv9809Sf1JpI=) 4: U_NZYpjmvtYZaAL9QOJbt18Da90.roa (hash: ImEoqLKkocpZGN3jliyG2JmnXa2NgKRx1aFT2s7Ccsg=) 5: XjDc2QA9m4quHMdfD5XNqmD-sRU.roa (hash: hUIq0ryrPFUtWnGVn0EVGNy126+7rvo1zZWi0URfcgg=) 6: b-jvFTusq2yMHvQus-EOGvQIcIU.roa (hash: UEESHc2CoqAdsZBnwreDavJ8dh67qE0F5/NXF/uJif0=) 7: eVf9uWw4an4J37lWXFXCY7TXLRA.roa (hash: TLeYBm2fbdmHg6RfdNeCWlTy8uamiAq/QUF9qcFVMZU=) 8: ossK8NVWIjYFpVS_EefAqYZy2IE.roa (hash: /y0pnw5X9uBmKvZNWFvXcQIM9KTs6u2DfBY5eqhbuoU=) 9: tsRs_smMGnXJS6Ngg5EdidV6amo.roa (hash: s9qZIcL7Vpb5CW9P2b/OUKeQv+DX4uJC5U3wk2Lpo2c=) 10: txvH1TOH6wMQ5yQgLlacwoKKBQ4.roa (hash: edU/OVpHTHKV2scSWmXngs1gD9tCdP7QXrGFexnNs6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9c:3a:eb:45:b3:f3:15:d5:ad:b4:fd:a7:ad:08:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Jan 26 14:01:41 2026 GMT Not After : Jan 27 14:01:41 2026 GMT Subject: CN=38c3c6a02a15b4fa76c277dc4820edb255c3bf6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:00:66:2e:a9:19:2c:80:e0:34:34:72:c0:42: 85:72:0c:a0:b8:79:e7:1b:dc:3b:1d:ca:70:46:c2: 64:47:57:7f:33:17:f2:35:0f:0b:09:1b:ae:30:08: 71:a5:4e:a5:de:df:ca:94:1b:6d:39:ca:b7:c8:b9: 48:48:29:0c:6e:87:0d:25:fa:4a:45:39:1e:6a:59: de:c2:7b:1f:25:67:52:f8:c2:dd:9d:71:5b:11:3a: 57:6c:f4:15:6f:47:20:5a:54:26:4d:c4:fd:d4:03: c2:66:1a:81:dc:62:68:c9:07:55:b4:66:e5:57:7b: 19:97:f2:c9:e0:17:33:30:40:1c:8c:8c:13:4f:f5: 0e:a8:29:78:85:a9:09:20:00:cc:00:01:83:0f:e0: 8c:72:19:d5:44:44:ee:50:1c:39:4c:cf:c7:7a:12: 4a:1b:fa:51:87:c7:66:d9:58:de:b6:b1:a9:cc:da: 04:2f:5f:19:39:b4:c2:77:01:04:2e:9e:b1:2e:d4: a5:1f:06:4e:3e:6c:80:2e:4d:7c:88:f0:fa:ad:88: c9:68:69:4d:ad:a3:70:ae:e6:1e:35:f7:02:ca:57: 66:62:cd:b7:bf:11:9e:d1:6d:15:7f:3e:c6:02:b3: af:d3:45:16:3e:f9:09:78:d0:c6:cc:0b:50:27:d4: 57:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C3:C6:A0:2A:15:B4:FA:76:C2:77:DC:48:20:ED:B2:55:C3:BF:6E X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:36:ac:0f:d3:66:72:b6:8f:5b:90:85:69:5a:a6:13:e7:a1: 0e:74:8d:2d:ad:c4:1d:f5:13:53:35:e5:fe:58:d3:fa:c1:b8: a9:e6:47:b0:2f:d0:11:5f:69:d0:cd:d5:3e:9b:f1:49:80:90: 86:55:d3:92:3f:70:84:30:76:8a:86:6e:7e:96:7b:d6:5d:a9: 07:22:0c:d7:24:41:25:f6:29:0b:76:a9:92:e8:0f:a9:77:6c: fa:b1:1e:f4:12:cb:9a:55:75:d7:df:80:3d:3e:50:82:f1:6b: f5:d5:48:ea:1a:df:8c:af:2e:f7:39:6d:35:24:ad:9f:04:86: 9a:8f:12:86:ca:17:bc:e3:80:60:93:cb:2f:1d:fd:1e:36:26: fd:a4:1a:dc:1a:68:bb:25:a5:69:29:50:50:b0:b5:dd:51:72: f8:72:e1:02:e9:94:6c:29:76:f5:cb:7a:33:4f:fc:a8:45:dd: 53:9e:c1:68:80:56:ae:75:e4:30:f7:6c:50:d2:5f:e5:39:b3: 1c:0e:3f:09:29:b4:3b:fb:55:2d:dc:fd:a1:59:e1:28:3d:03: a1:d0:83:ee:2d:c5:60:e3:82:09:d1:1b:4f:0d:e3:ec:46:18: c5:c9:86:fa:d5:5c:ca:f3:c2:ce:d1:3e:f2:c5:33:11:7f:e6: 1e:ed:74:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6nDrrRbPzFdWttP2nrQgRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjYwMTI2MTQwMTQxWhcNMjYwMTI3MTQwMTQxWjAzMTEwLwYDVQQD EygzOGMzYzZhMDJhMTViNGZhNzZjMjc3ZGM0ODIwZWRiMjU1YzNiZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwBmLqkZLIDgNDRywEKFcgyguHnn G9w7HcpwRsJkR1d/MxfyNQ8LCRuuMAhxpU6l3t/KlBttOcq3yLlISCkMbocNJfpK RTkealnewnsfJWdS+MLdnXFbETpXbPQVb0cgWlQmTcT91APCZhqB3GJoyQdVtGbl V3sZl/LJ4BczMEAcjIwTT/UOqCl4hakJIADMAAGDD+CMchnVRETuUBw5TM/HehJK G/pRh8dm2VjetrGpzNoEL18ZObTCdwEELp6xLtSlHwZOPmyALk18iPD6rYjJaGlN raNwruYeNfcCyldmYs23vxGe0W0Vfz7GArOv00UWPvkJeNDGzAtQJ9RXgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjDxqAqFbT6dsJ33Egg7bJVw79uMB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijasD9Nm craPW5CFaVqmE+ehDnSNLa3EHfUTUzXl/ljT+sG4qeZHsC/QEV9p0M3VPpvxSYCQ hlXTkj9whDB2ioZufpZ71l2pByIM1yRBJfYpC3apkugPqXds+rEe9BLLmlV119+A PT5QgvFr9dVI6hrfjK8u9zltNSStnwSGmo8ShsoXvOOAYJPLLx39HjYm/aQa3Bpo uyWlaSlQULC13VFy+HLhAumUbCl29ct6M0/8qEXdU57BaIBWrnXkMPdsUNJf5Tmz HA4/CSm0O/tVLdz9oVnhKD0DodCD7i3FYOOCCdEbTw3j7EYYxcmG+tVcyvPCztE+ 8sUzEX/mHu101w== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:00 2026 by rpki-client