This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft File: mWchgxr7izgwe0n1ue5ikq0eWFA.mft (raw, json) Hash identifier: X5ZOeMeynQcz6j167Ey+NVG1lPyzo35S6fN3kPfMpmQ= Subject key identifier: 1F:C4:39:8F:D1:24:3E:8A:AE:DF:F1:A8:79:5D:66:43:22:01:29:88 Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50 Certificate issuer: /CN=996721831afb8b38307b49f5b9ee6292ad1e5850 Certificate serial: 019BDDA3D201A9E094DCD6572B48E1C8C4C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft Manifest number: 17FE Signing time: Tue 20 Jan 2026 23:00:59 +0000 Manifest this update: Tue 20 Jan 2026 23:00:59 +0000 Manifest next update: Wed 21 Jan 2026 23:00:59 +0000 Files and hashes: 1: D0gnpWfBBKSRYWj8s3v4J_aCJMI.roa (hash: 45JN/2vbVLlDusn7s9SwK/NY3HUP/bKxrVAXGIGtMdk=) 2: VE_LZ5OEVy7OtiwnakNbQlXOUx8.roa (hash: nZT5dviNLBhgGj5zg6mzO60GRglFXHbvUdAHc/xzhdo=) 3: m72BlK4pK3nz4quwny73cERWUUU.roa (hash: 3sQVvJAEO+cZVJVe28TC5M0aUTp2A0mSxPgJfwLQboM=) 4: mWchgxr7izgwe0n1ue5ikq0eWFA.crl (hash: cVvFqmcvoK+a7a+XSqP/+tXgi1NbpUIJ/aFmmSIsRVY=) 5: nbN6QTJFxRMXWB7BZSEIH-SMH3g.roa (hash: pyiyGBs40xwh8+LBH6NUqQq8ar9YtwxRrDXfuF15LbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dd:a3:d2:01:a9:e0:94:dc:d6:57:2b:48:e1:c8:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850 Validity Not Before: Jan 20 23:00:59 2026 GMT Not After : Jan 21 23:00:59 2026 GMT Subject: CN=1fc4398fd1243e8aaedff1a8795d664322012988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:74:57:76:74:e6:5f:a5:13:f1:f8:32:3a:13: b7:f1:25:f4:65:95:f0:73:99:35:32:79:ed:b2:11: 7e:b1:5e:27:f7:82:b0:e8:a2:27:80:35:18:2c:d5: 3a:94:6c:f2:cd:d3:06:97:c5:10:f7:ea:2c:f9:15: 8b:5b:47:49:9d:8c:5f:f0:f9:01:bc:7d:73:90:30: 50:12:e0:99:dd:90:bc:a4:3a:2c:51:6f:19:01:b2: 04:7d:a9:9b:20:9b:6e:4d:0e:cd:65:89:56:e6:a2: 34:1b:51:c5:b0:b8:72:17:8d:2e:77:fb:f0:7d:95: 05:56:f0:32:28:4d:72:da:05:0c:6e:43:20:ad:3a: 8c:f5:d8:40:95:07:0d:78:30:7f:40:1a:b8:c2:e5: 1c:c4:69:57:bb:7a:3a:f9:2a:88:e5:71:a0:e5:51: e7:56:02:82:ce:d1:22:da:64:cb:25:56:cb:9f:3e: bd:73:92:b8:20:04:27:d7:6e:eb:ed:9c:85:95:60: 7e:49:bb:80:c6:f6:bd:5a:e5:9e:f1:d2:7c:6e:77: 11:0c:84:8e:18:70:b4:f1:81:bf:c1:8c:aa:87:7b: bb:04:d3:9b:0d:3e:31:f4:16:cc:b4:3e:d1:a7:fa: 38:c0:34:c0:77:12:3c:70:26:e6:c1:92:1b:02:ac: ea:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C4:39:8F:D1:24:3E:8A:AE:DF:F1:A8:79:5D:66:43:22:01:29:88 X509v3 Authority Key Identifier: keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:21:87:55:b6:6c:29:cc:9a:4a:7b:3e:c7:40:f1:6c:11:a0: 09:98:6d:32:4e:dd:c6:5e:64:08:31:b4:ca:f8:67:0e:5d:a1: cd:80:8c:6e:b9:17:e7:73:5e:c3:f3:f3:e7:6c:74:ea:55:bc: 84:08:f9:50:9a:d4:f8:b2:31:f1:ab:6e:c6:d6:56:86:61:c9: 3c:50:fb:b9:3d:6f:6f:b9:fc:5b:fc:47:f0:f7:7f:eb:59:de: df:b9:dd:8c:4c:38:20:2c:5f:e2:b5:ef:73:35:53:fb:c3:16: 99:72:a2:eb:74:d1:52:80:58:48:20:9c:a0:02:d3:d4:0e:c1: d6:f6:a9:17:aa:c3:8e:77:27:c4:85:2e:4a:52:be:4c:93:d5: 4e:89:25:be:2a:fb:b0:24:38:56:28:e9:20:89:5f:b1:4c:82: 1f:7e:f8:89:18:7c:e9:9b:15:3b:4d:3f:6b:d5:15:cc:3a:e0: 4c:1e:75:52:25:1e:d6:90:ca:22:c3:87:93:b4:75:f3:59:f3: db:7f:e6:d6:2e:c7:62:e5:e3:29:3a:53:78:21:d2:40:ff:68: 0c:17:6a:8a:4e:89:6e:ba:cc:98:d6:2e:d4:e6:1d:12:73:0f: e0:f5:26:06:d6:a5:ed:39:37:8f:50:47:1a:6f:14:ab:ae:df: 07:ca:48:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvdo9IBqeCU3NZXK0jhyMTAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NjcyMTgzMWFmYjhiMzgzMDdiNDlmNWI5ZWU2MjkyYWQx ZTU4NTAwHhcNMjYwMTIwMjMwMDU5WhcNMjYwMTIxMjMwMDU5WjAzMTEwLwYDVQQD EygxZmM0Mzk4ZmQxMjQzZThhYWVkZmYxYTg3OTVkNjY0MzIyMDEyOTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3RXdnTmX6UT8fgyOhO38SX0ZZXw c5k1MnntshF+sV4n94Kw6KIngDUYLNU6lGzyzdMGl8UQ9+os+RWLW0dJnYxf8PkB vH1zkDBQEuCZ3ZC8pDosUW8ZAbIEfambIJtuTQ7NZYlW5qI0G1HFsLhyF40ud/vw fZUFVvAyKE1y2gUMbkMgrTqM9dhAlQcNeDB/QBq4wuUcxGlXu3o6+SqI5XGg5VHn VgKCztEi2mTLJVbLnz69c5K4IAQn127r7ZyFlWB+SbuAxva9WuWe8dJ8bncRDISO GHC08YG/wYyqh3u7BNObDT4x9BbMtD7Rp/o4wDTAdxI8cCbmwZIbAqzqbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/EOY/RJD6Krt/xqHldZkMiASmIMB8GA1UdIwQY MBaAFJlnIYMa+4s4MHtJ9bnuYpKtHlhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xYzFlYjItMWY2NS00ZjcxLThiMzIt YjRiZmU0NTZkZGUwLzEvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8xYzFlYjItMWY2NS00ZjcxLThiMzItYjRiZmU0NTZkZGUw LzEvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCGHVbZs KcyaSns+x0DxbBGgCZhtMk7dxl5kCDG0yvhnDl2hzYCMbrkX53New/Pz52x06lW8 hAj5UJrU+LIx8atuxtZWhmHJPFD7uT1vb7n8W/xH8Pd/61ne37ndjEw4ICxf4rXv czVT+8MWmXKi63TRUoBYSCCcoALT1A7B1vapF6rDjncnxIUuSlK+TJPVToklvir7 sCQ4VijpIIlfsUyCH374iRh86ZsVO00/a9UVzDrgTB51UiUe1pDKIsOHk7R181nz 23/m1i7HYuXjKTpTeCHSQP9oDBdqik6JbrrMmNYu1OYdEnMP4PUmBtal7Tk3j1BH Gm8Uq67fB8pIhw== -----END CERTIFICATE-----Generated at Wed Jan 21 08:58:31 2026 by rpki-client