This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft File: MvbeMKm492SENE0M07bAJz6t028.mft (raw, json) Hash identifier: qLK7UOHrXKwbS9s1OS6m69O6savII0lsPefoWaGsrto= Subject key identifier: 99:93:37:AF:58:0C:EA:C6:42:D1:76:FF:9C:67:FC:CC:A0:22:51:2B Authority key identifier: 32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F Certificate issuer: /CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f Certificate serial: 019BA2A2691E444C0856EC45A2B464355DE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft Manifest number: 0469 Signing time: Fri 09 Jan 2026 12:01:51 +0000 Manifest this update: Fri 09 Jan 2026 12:01:51 +0000 Manifest next update: Sat 10 Jan 2026 12:01:51 +0000 Files and hashes: 1: MvbeMKm492SENE0M07bAJz6t028.crl (hash: o1EgpJppFa/7BDEcsttZG/zOaEKWo5fW3tFmTcXgMMY=) 2: fTxk1v0fF8AuZDNoAxUqc_RyNH4.roa (hash: Lw+QNTmoYW+7xrFoYnex4ne1svS2EO7auyLRmtTAxxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:a2:69:1e:44:4c:08:56:ec:45:a2:b4:64:35:5d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f Validity Not Before: Jan 9 12:01:51 2026 GMT Not After : Jan 10 12:01:51 2026 GMT Subject: CN=999337af580ceac642d176ff9c67fccca022512b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c3:23:d3:16:d7:60:95:38:42:cc:d7:3d:86: 26:15:bd:9a:91:0d:90:d8:11:ba:b4:d4:7b:e3:92: 20:8c:e0:62:23:c0:c4:0a:90:8f:75:c3:ea:aa:be: b2:b4:8f:6f:d9:02:a4:42:4f:bb:1c:ff:95:d7:b7: 85:3a:32:59:f2:3f:c8:21:3a:5e:24:8f:f7:c9:3a: 96:fe:88:b7:26:00:1d:73:d6:75:67:3d:4f:d2:b5: dc:f3:6b:18:02:ad:b3:9c:d0:4e:64:d1:27:0e:04: 58:f7:2e:a8:44:40:88:f4:02:43:b2:37:ab:c2:fa: 87:53:0d:3f:c1:be:ae:b0:90:67:ba:f0:0d:d6:8c: 42:b8:93:12:82:4b:10:7f:21:75:ef:eb:99:d1:44: ff:c4:c9:b3:80:ee:73:56:14:bb:06:0d:4b:f0:91: 75:bc:0d:38:c0:b2:e1:6a:3c:27:f5:13:31:f6:31: 52:0c:52:b8:d3:55:28:a6:7d:8c:76:22:4a:4d:9b: df:3d:8c:52:f7:b0:83:47:8c:76:95:22:09:fc:f8: 85:cd:ba:19:8b:e9:e3:f9:44:7d:91:f6:ee:72:87: b9:39:8f:c7:a6:2d:0f:2a:94:db:82:ba:70:3e:24: 5f:b6:3d:00:a9:3d:e8:e3:c1:ea:40:fd:33:2f:e0: 22:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:93:37:AF:58:0C:EA:C6:42:D1:76:FF:9C:67:FC:CC:A0:22:51:2B X509v3 Authority Key Identifier: keyid:32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:54:be:0a:58:66:e5:04:73:65:f2:ed:0b:ee:c3:df:44:2c: 02:fa:ee:76:2a:28:5b:c4:e2:42:5d:8b:8f:68:fe:78:bc:2e: 1f:5e:33:d6:b5:34:72:1a:8e:25:33:8d:d3:b6:a0:0d:9c:d2: ce:01:ca:df:39:49:d1:4c:e9:52:fb:de:18:fa:9a:f9:2f:ac: c9:e4:2d:05:6a:8b:e6:a2:9a:b6:34:6a:96:5e:25:8a:dd:09: 4e:7b:4a:cc:76:a9:a8:0e:78:21:62:63:b6:af:45:e4:3e:e2: e2:b0:d8:5d:31:67:cb:2f:83:69:e3:f3:ec:82:2c:e7:c1:0b: 08:c5:d0:ec:ba:b3:f3:f5:56:e9:97:f9:44:ab:24:b2:01:9e: ee:ae:b6:71:ba:78:7a:6b:5a:bb:70:96:f8:bc:d0:dd:f7:0e: 09:29:4c:42:af:a5:fd:95:e8:53:1f:26:c8:6f:0c:19:16:3b: 87:98:e9:2b:f7:90:72:03:03:51:a1:e2:34:5f:30:c4:3f:d6: 85:01:13:a7:86:6f:9b:d8:36:3a:9e:51:b9:e4:02:4a:dd:b4: a9:a1:45:2d:9f:2f:37:a7:68:57:a0:3d:20:45:d1:d2:a5:ce: 00:f3:44:9e:24:f9:cb:30:e8:b2:fb:f6:c1:0c:9c:47:fc:37: e0:87:78:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuiomkeREwIVuxForRkNV3gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZjZkZTMwYTliOGY3NjQ4NDM0NGQwY2QzYjZjMDI3M2Vh ZGQzNmYwHhcNMjYwMTA5MTIwMTUxWhcNMjYwMTEwMTIwMTUxWjAzMTEwLwYDVQQD Eyg5OTkzMzdhZjU4MGNlYWM2NDJkMTc2ZmY5YzY3ZmNjY2EwMjI1MTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosMj0xbXYJU4QszXPYYmFb2akQ2Q 2BG6tNR745IgjOBiI8DECpCPdcPqqr6ytI9v2QKkQk+7HP+V17eFOjJZ8j/IITpe JI/3yTqW/oi3JgAdc9Z1Zz1P0rXc82sYAq2znNBOZNEnDgRY9y6oRECI9AJDsjer wvqHUw0/wb6usJBnuvAN1oxCuJMSgksQfyF17+uZ0UT/xMmzgO5zVhS7Bg1L8JF1 vA04wLLhajwn9RMx9jFSDFK401Uopn2MdiJKTZvfPYxS97CDR4x2lSIJ/PiFzboZ i+nj+UR9kfbucoe5OY/Hpi0PKpTbgrpwPiRftj0AqT3o48HqQP0zL+AiTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmTN69YDOrGQtF2/5xn/MygIlErMB8GA1UdIwQY MBaAFDL23jCpuPdkhDRNDNO2wCc+rdNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jYmQwNjAtYWQ2OC00ZjVmLWFkNWUt YzA0MDQ0MzdlODViLzEvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9jYmQwNjAtYWQ2OC00ZjVmLWFkNWUtYzA0MDQ0MzdlODVi LzEvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1S+Clhm 5QRzZfLtC+7D30QsAvrudiooW8TiQl2Lj2j+eLwuH14z1rU0chqOJTON07agDZzS zgHK3zlJ0UzpUvveGPqa+S+syeQtBWqL5qKatjRqll4lit0JTntKzHapqA54IWJj tq9F5D7i4rDYXTFnyy+DaePz7IIs58ELCMXQ7Lqz8/VW6Zf5RKsksgGe7q62cbp4 emtau3CW+LzQ3fcOCSlMQq+l/ZXoUx8myG8MGRY7h5jpK/eQcgMDUaHiNF8wxD/W hQETp4Zvm9g2Op5RueQCSt20qaFFLZ8vN6doV6A9IEXR0qXOAPNEniT5yzDosvv2 wQycR/w34Id43Q== -----END CERTIFICATE-----Generated at Fri Jan 9 21:07:32 2026 by rpki-client