This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json) Hash identifier: cos0jgvjyKfH+Skrmeao+b0UqP+7i27OJx1Samq2iJk= Subject key identifier: 28:21:E6:20:26:E5:D4:C7:5F:9C:75:D7:29:8D:81:99:23:D8:04:AD Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b Certificate serial: 019C2698F32193432B9571A5F54BC2D786E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft Manifest number: 1803 Signing time: Wed 04 Feb 2026 03:01:23 +0000 Manifest this update: Wed 04 Feb 2026 03:01:23 +0000 Manifest next update: Thu 05 Feb 2026 03:01:23 +0000 Files and hashes: 1: pCYaE1miR-GUQiTETVWdX8bOgRE.roa (hash: oUes+claOJXex9WS4ZOvL+WR5ipZZwtqoFIaT61iF3Y=) 2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: tp1Wn0WR8gP+lEOf9n3O/bQpiSjlj5p5DNwuFMTPtuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 03:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:26:98:f3:21:93:43:2b:95:71:a5:f5:4b:c2:d7:86:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b Validity Not Before: Feb 4 03:01:23 2026 GMT Not After : Feb 5 03:01:23 2026 GMT Subject: CN=2821e62026e5d4c75f9c75d7298d819923d804ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:39:dc:21:d7:41:27:73:96:96:d3:40:23:ab: 71:cb:9a:87:e0:ac:b6:c6:43:48:8f:48:7f:c3:68: 8b:e6:1d:a7:d1:19:83:68:31:6b:e2:6f:35:f7:9e: 76:39:a3:84:80:4e:80:83:1f:52:e1:d5:10:08:08: 07:b5:16:82:66:b7:31:a8:37:00:84:79:03:0a:ab: 6f:ee:63:2a:6f:05:35:ae:fd:d0:2c:e7:84:e7:9e: 6a:14:2f:3b:4f:2b:36:f1:f5:69:d7:de:72:18:ab: 7d:3a:17:aa:8a:37:97:66:5b:bc:8f:be:81:ef:f6: fc:c5:38:d6:f9:fd:7a:04:88:33:c0:d3:b7:43:92: 0a:f1:08:ac:8d:84:f9:71:9a:10:0e:75:ff:6f:7f: 88:9b:0c:e5:bd:eb:a4:f2:7a:19:00:32:51:6f:21: 27:bc:55:bb:1d:7e:0b:fd:e6:50:b6:1f:18:f2:12: 80:07:62:1d:f4:fb:e1:17:f9:63:8b:f5:2d:68:e5: 04:ab:06:ff:f7:ac:b2:1d:66:9e:58:53:73:b9:42: 71:e0:b8:fd:b2:34:2b:80:29:0f:50:98:d4:13:9a: 0c:a0:4a:05:1b:bf:fe:17:28:49:2a:6d:48:bf:53: 90:5a:5f:dd:74:39:0b:8d:65:56:79:3a:c8:78:53: fe:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:21:E6:20:26:E5:D4:C7:5F:9C:75:D7:29:8D:81:99:23:D8:04:AD X509v3 Authority Key Identifier: keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a9:91:e1:07:15:59:9f:7e:0d:31:c2:5d:21:f9:e1:ef:4d: 1f:27:0c:ed:99:a3:21:23:40:74:04:60:28:5a:4d:0c:ac:39: 86:53:16:ee:62:cc:60:5a:88:24:d8:ac:6f:3b:7d:07:7a:ad: 89:86:35:6b:1f:97:28:c7:d4:5b:fb:3e:6f:f0:4f:63:4b:c0: 8a:4c:41:f7:1b:0e:8e:e5:01:d6:21:b2:9d:55:b7:59:5d:a5: 62:45:05:3f:e2:91:6d:b6:b7:51:f7:b1:7d:33:e6:8f:97:7e: 5d:1d:6b:be:ff:da:22:82:2a:1a:53:85:d3:86:ce:bc:1f:2e: d4:dd:1d:f1:a9:0a:57:00:f5:02:7e:14:74:69:89:51:3f:23: 48:ff:0b:0c:86:2b:1d:64:2e:55:59:57:c6:d6:78:a7:8b:da: 7e:08:35:8e:ee:c3:53:7f:24:48:ab:70:30:14:65:b0:d5:df: 99:cf:18:f9:50:04:c0:05:24:35:e8:54:39:18:48:ff:36:df: 98:56:4e:a0:97:ab:57:db:48:1b:90:86:bd:3f:7c:56:32:ed: 8a:f9:1a:21:ea:81:b3:8c:0f:41:8d:a4:ce:80:25:22:e2:ea: 47:d5:8b:ca:9e:3f:7c:0d:62:99:9b:28:76:ee:10:13:9c:c5: 92:56:65:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwmmPMhk0MrlXGl9UvC14biMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYzE5YThjN2YxNzQxMTQ0OWM3ZDQ4ZmY5MzA4ZDI0ODMy ZTk1MmIwHhcNMjYwMjA0MDMwMTIzWhcNMjYwMjA1MDMwMTIzWjAzMTEwLwYDVQQD EygyODIxZTYyMDI2ZTVkNGM3NWY5Yzc1ZDcyOThkODE5OTIzZDgwNGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jncIddBJ3OWltNAI6txy5qH4Ky2 xkNIj0h/w2iL5h2n0RmDaDFr4m819552OaOEgE6Agx9S4dUQCAgHtRaCZrcxqDcA hHkDCqtv7mMqbwU1rv3QLOeE555qFC87Tys28fVp195yGKt9OheqijeXZlu8j76B 7/b8xTjW+f16BIgzwNO3Q5IK8QisjYT5cZoQDnX/b3+Imwzlveuk8noZADJRbyEn vFW7HX4L/eZQth8Y8hKAB2Id9PvhF/lji/UtaOUEqwb/96yyHWaeWFNzuUJx4Lj9 sjQrgCkPUJjUE5oMoEoFG7/+FyhJKm1Iv1OQWl/ddDkLjWVWeTrIeFP+PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgh5iAm5dTHX5x11ymNgZkj2AStMB8GA1UdIwQY MBaAFKzBmox/F0EUScfUj/kwjSSDLpUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck1HYWpIOFhRUlJKeDlTUC1UQ05KSU11bFNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNDA1YTItNGUzZS00NjIxLTk3MWQt YmY4ZjNkNDM4ODRmLzEvck1HYWpIOFhRUlJKeDlTUC1UQ05KSU11bFNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mNDA1YTItNGUzZS00NjIxLTk3MWQtYmY4ZjNkNDM4ODRm LzEvck1HYWpIOFhRUlJKeDlTUC1UQ05KSU11bFNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqmR4QcV WZ9+DTHCXSH54e9NHycM7ZmjISNAdARgKFpNDKw5hlMW7mLMYFqIJNisbzt9B3qt iYY1ax+XKMfUW/s+b/BPY0vAikxB9xsOjuUB1iGynVW3WV2lYkUFP+KRbba3Ufex fTPmj5d+XR1rvv/aIoIqGlOF04bOvB8u1N0d8akKVwD1An4UdGmJUT8jSP8LDIYr HWQuVVlXxtZ4p4vafgg1ju7DU38kSKtwMBRlsNXfmc8Y+VAEwAUkNehUORhI/zbf mFZOoJerV9tIG5CGvT98VjLtivkaIeqBs4wPQY2kzoAlIuLqR9WLyp4/fA1imZso du4QE5zFklZlyw== -----END CERTIFICATE-----Generated at Wed Feb 4 10:58:28 2026 by rpki-client