This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json) Hash identifier: a1BwL2mbZALVqii2/stc3hf91TE7ZfkMylBJjZZPpQg= Subject key identifier: 03:01:62:6D:81:3F:3B:C5:A8:B4:A4:95:58:11:3C:8F:DC:D9:3F:60 Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2 Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2 Certificate serial: 019BA2D94A3CDEDC41EA4A76A375784ECC3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft Manifest number: 17C0 Signing time: Fri 09 Jan 2026 13:01:47 +0000 Manifest this update: Fri 09 Jan 2026 13:01:47 +0000 Manifest next update: Sat 10 Jan 2026 13:01:47 +0000 Files and hashes: 1: 8SPFx32KgvVe9lcWznI2Snmx0Rc.roa (hash: nh58H0C13D89s99FYORfNnZ+pFC6NWZms6nXMjb65c0=) 2: CkgoFwT2gaRyCRHQ9kf-YZ7WXx4.roa (hash: ElBC6RLnYPiPMuL0QaxoL/y5M23xIxFx5PXxpI7qDgQ=) 3: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: FV0kbxytVrEoSy4IrRBQX26zwzo8AOBxohw/gBqKTzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:d9:4a:3c:de:dc:41:ea:4a:76:a3:75:78:4e:cc:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2 Validity Not Before: Jan 9 13:01:47 2026 GMT Not After : Jan 10 13:01:47 2026 GMT Subject: CN=0301626d813f3bc5a8b4a49558113c8fdcd93f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:52:39:b6:5f:d2:07:7a:27:29:c2:15:26:26: e6:64:35:2f:ac:19:97:b6:ee:27:4d:d4:63:fc:02: 4e:4d:5a:c7:b1:7d:85:fd:75:eb:2a:cc:57:9f:8c: 78:df:7a:29:f3:85:b1:8c:25:de:ba:d5:bc:63:04: 16:8f:47:26:3d:fb:b1:54:81:74:b3:5e:d6:f2:66: ab:2a:9d:4f:59:a1:1e:d3:11:ca:68:ab:7d:0c:0b: a7:00:01:7c:59:c5:cd:da:af:ed:da:b8:f8:87:a2: 37:17:15:e7:db:69:42:24:99:4a:cf:5f:26:27:bd: 58:3c:4f:0d:82:15:e6:ff:d6:be:b9:9e:f6:d8:14: f4:e9:91:3d:1f:e4:1a:2d:25:f2:7b:ee:98:e2:bc: 2d:af:da:a6:58:d0:28:a6:df:1f:53:cb:97:bf:6f: 27:04:37:43:f9:2f:31:06:0c:84:09:f5:b4:a8:7e: bb:2c:c8:a4:25:22:4f:59:b2:f3:92:68:e0:1f:97: 2f:03:38:2e:d7:27:8a:e8:a8:d6:e4:a7:ff:fe:3b: 0f:cb:0c:7f:db:87:54:51:c4:ca:8c:a9:8b:eb:e2: 66:e2:fe:e5:ae:eb:f8:6b:47:cb:9a:33:42:43:d5: 23:9e:b4:dd:c6:bd:7e:cb:dc:04:a1:7f:7b:18:81: cc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:01:62:6D:81:3F:3B:C5:A8:B4:A4:95:58:11:3C:8F:DC:D9:3F:60 X509v3 Authority Key Identifier: keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:da:e0:ff:c0:cf:85:ae:35:90:d5:7f:7c:96:6e:6b:07:bc: 74:00:b0:05:27:77:af:41:1c:db:3d:de:a5:53:b0:83:2f:68: c5:d3:aa:cd:97:f5:23:af:bc:a8:4d:cc:2c:0a:bb:8c:b0:02: c7:7d:8f:72:6d:44:9a:d6:b4:d2:6c:1f:1f:40:de:1a:ca:31: fd:8e:1e:1f:5e:18:e9:50:be:b0:92:52:6c:b1:3d:3e:05:5a: a2:03:2d:12:00:ed:b9:4c:84:32:cf:0f:30:4b:fc:d2:fa:45: 46:c9:67:83:c5:27:ce:54:0f:2c:c3:67:65:6a:15:c9:1a:2f: 51:e4:b4:71:0f:b7:aa:ce:86:f5:15:02:d1:ae:43:20:4d:7a: 4f:21:ab:e4:6d:1b:c0:a8:98:f6:5b:ed:fe:7c:1d:73:39:46: b3:9d:cc:a5:d4:e2:3a:f2:23:1a:e9:cd:4b:3b:5b:86:78:5d: 37:20:fd:a6:4d:fc:6b:5d:44:1a:65:b5:8b:66:e8:ff:0b:15: e7:1e:23:72:c8:8a:a4:f7:ba:cc:d4:8b:bd:1e:2a:4e:be:89: 00:a4:d7:de:6c:4c:39:b6:db:b3:68:ff:a9:90:22:27:4d:a6: 78:e7:47:85:93:c8:f2:2f:1b:9d:1f:b9:bf:fe:ea:28:71:61: ae:77:fd:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZui2Uo83txB6kp2o3V4Tsw7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNzA2YjJiOTU1ODhkNzgwZTM2ZWY4MmE4ZjU0YTMxN2Q1 ODY5ZTIwHhcNMjYwMTA5MTMwMTQ3WhcNMjYwMTEwMTMwMTQ3WjAzMTEwLwYDVQQD EygwMzAxNjI2ZDgxM2YzYmM1YThiNGE0OTU1ODExM2M4ZmRjZDkzZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1I5tl/SB3onKcIVJibmZDUvrBmX tu4nTdRj/AJOTVrHsX2F/XXrKsxXn4x433op84WxjCXeutW8YwQWj0cmPfuxVIF0 s17W8marKp1PWaEe0xHKaKt9DAunAAF8WcXN2q/t2rj4h6I3FxXn22lCJJlKz18m J71YPE8NghXm/9a+uZ722BT06ZE9H+QaLSXye+6Y4rwtr9qmWNAopt8fU8uXv28n BDdD+S8xBgyECfW0qH67LMikJSJPWbLzkmjgH5cvAzgu1yeK6KjW5Kf//jsPywx/ 24dUUcTKjKmL6+Jm4v7lruv4a0fLmjNCQ9UjnrTdxr1+y9wEoX97GIHMSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMBYm2BPzvFqLSklVgRPI/c2T9gMB8GA1UdIwQY MBaAFDBwayuVWI14Djbvgqj1SjF9WGniMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yOGRlYmItM2E1OS00ZWUxLWJkMzct ODRlZDkxZWMxYzY1LzEvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yOGRlYmItM2E1OS00ZWUxLWJkMzctODRlZDkxZWMxYzY1 LzEvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdrg/8DP ha41kNV/fJZuawe8dACwBSd3r0Ec2z3epVOwgy9oxdOqzZf1I6+8qE3MLAq7jLAC x32Pcm1Emta00mwfH0DeGsox/Y4eH14Y6VC+sJJSbLE9PgVaogMtEgDtuUyEMs8P MEv80vpFRslng8UnzlQPLMNnZWoVyRovUeS0cQ+3qs6G9RUC0a5DIE16TyGr5G0b wKiY9lvt/nwdczlGs53MpdTiOvIjGunNSztbhnhdNyD9pk38a11EGmW1i2bo/wsV 5x4jcsiKpPe6zNSLvR4qTr6JAKTX3mxMObbbs2j/qZAiJ02meOdHhZPI8i8bnR+5 v/7qKHFhrnf9LQ== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:30 2026 by rpki-client