This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft File: Mwe9udWFUeFJKsQ6I7m2KWac624.mft (raw, json) Hash identifier: i56/jfhOmmPswcVKc7fscorW2xeEH9h+3LW+o4cKHyg= Subject key identifier: 7F:55:98:B9:9D:BF:27:E4:05:D0:06:84:40:7F:72:72:0F:3E:5F:6F Authority key identifier: 33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E Certificate issuer: /CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e Certificate serial: 019BFCC0FB2218C474A0DE8BB919621B8441 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft Manifest number: 02CA Signing time: Tue 27 Jan 2026 00:01:04 +0000 Manifest this update: Tue 27 Jan 2026 00:01:04 +0000 Manifest next update: Wed 28 Jan 2026 00:01:04 +0000 Files and hashes: 1: 5CsJQbk37xiXoy3hwH8D-YG-5Ks.roa (hash: gMzNQr0CHei7E1lRV/ytteIthIW9m0i5qgAObYiInOc=) 2: Mwe9udWFUeFJKsQ6I7m2KWac624.crl (hash: z4irwPVjYo7+BplxM1y3YfeVQ4tESGBYku5r+CyCXYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c0:fb:22:18:c4:74:a0:de:8b:b9:19:62:1b:84:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e Validity Not Before: Jan 27 00:01:04 2026 GMT Not After : Jan 28 00:01:04 2026 GMT Subject: CN=7f5598b99dbf27e405d00684407f72720f3e5f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7e:53:35:03:21:8f:fe:f4:07:c7:8f:a4:2e: e7:ee:ec:e7:2d:50:3f:65:7e:3a:86:ed:41:66:b6: 85:0c:63:64:27:91:17:97:7f:17:d7:d4:55:a1:c3: f0:65:17:cc:ae:56:7e:51:ea:ea:e4:5d:38:42:37: 00:4b:bf:7a:ca:11:29:0d:86:54:38:61:4f:4f:b0: 58:ca:e1:5c:99:47:d1:67:60:8c:f0:a2:c0:05:b8: 19:2c:59:de:a8:4b:86:3a:09:62:2b:e7:5b:1a:fb: 9d:a6:57:fe:5c:76:85:a2:e2:b4:68:1a:67:72:00: da:fa:a2:54:54:81:e9:64:3f:cf:e1:c3:ef:62:ff: e6:d5:57:95:ee:51:f5:77:02:fb:01:d2:ee:d3:c2: a3:35:d2:3d:6f:4e:61:df:64:6f:c8:76:36:d0:ee: e9:a5:aa:85:0a:6d:fe:97:6b:74:ec:2b:17:f4:c5: da:d1:59:f0:cb:02:6e:56:97:67:ee:ba:a1:28:a5: 9e:38:81:64:86:44:e5:24:23:2d:db:37:6f:ab:71: a2:39:f2:9a:2d:09:e3:4f:7c:e4:db:16:29:e9:58: 79:61:43:42:00:51:11:36:96:fc:7e:fe:b4:4b:c5: 49:c9:58:07:7c:db:47:ff:69:2f:35:7a:f5:f5:ba: f3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:55:98:B9:9D:BF:27:E4:05:D0:06:84:40:7F:72:72:0F:3E:5F:6F X509v3 Authority Key Identifier: keyid:33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:55:13:00:e2:b7:17:d1:fa:7a:95:8e:98:f9:6e:dd:b6:a2: 3d:01:5c:7f:aa:5e:33:c7:91:71:e9:db:b5:df:c8:df:ab:18: ab:6d:b4:2c:4c:a9:35:de:66:88:4a:0c:a0:0a:84:c0:b1:7d: a7:5f:e4:cc:86:7a:e4:82:84:5e:1f:40:db:14:1b:e2:2f:e9: 41:d2:94:4a:61:4d:89:bd:4f:61:c1:be:78:53:4a:c6:16:01: b8:d4:c3:6e:41:89:02:f2:9f:6c:ad:40:42:8c:1f:21:36:35: 3f:4a:82:d8:79:07:6e:fe:5d:41:5c:9c:d3:73:bd:1b:78:47: a2:7b:7f:bf:04:4d:c1:64:ed:b2:50:19:fe:67:ce:79:57:ca: c5:e8:15:4c:28:5b:19:f3:5d:57:f7:9e:54:4a:03:11:f6:41: 7c:84:4d:e5:05:2b:3c:77:63:bb:48:99:19:a1:a6:2e:54:c8: 97:68:de:de:e5:a3:0a:70:cf:0b:65:a7:d8:75:93:6d:bb:e4: 73:f7:f0:c4:4d:4d:8c:50:96:8a:bb:76:45:e0:8e:db:e5:c1: b4:53:b0:eb:bb:7b:68:a8:0e:67:32:b5:1b:cf:f5:89:d1:a5: f2:06:78:b7:92:41:1e:b7:71:5f:ce:cc:97:88:36:1f:39:dc: 57:e5:24:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wPsiGMR0oN6LuRliG4RBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMDdiZGI5ZDU4NTUxZTE0OTJhYzQzYTIzYjliNjI5NjY5 Y2ViNmUwHhcNMjYwMTI3MDAwMTA0WhcNMjYwMTI4MDAwMTA0WjAzMTEwLwYDVQQD Eyg3ZjU1OThiOTlkYmYyN2U0MDVkMDA2ODQ0MDdmNzI3MjBmM2U1ZjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX5TNQMhj/70B8ePpC7n7uznLVA/ ZX46hu1BZraFDGNkJ5EXl38X19RVocPwZRfMrlZ+Uerq5F04QjcAS796yhEpDYZU OGFPT7BYyuFcmUfRZ2CM8KLABbgZLFneqEuGOgliK+dbGvudplf+XHaFouK0aBpn cgDa+qJUVIHpZD/P4cPvYv/m1VeV7lH1dwL7AdLu08KjNdI9b05h32RvyHY20O7p paqFCm3+l2t07CsX9MXa0VnwywJuVpdn7rqhKKWeOIFkhkTlJCMt2zdvq3GiOfKa LQnjT3zk2xYp6Vh5YUNCAFERNpb8fv60S8VJyVgHfNtH/2kvNXr19brzlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9VmLmdvyfkBdAGhEB/cnIPPl9vMB8GA1UdIwQY MBaAFDMHvbnVhVHhSSrEOiO5tilmnOtuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zODA4NjQtMjE1NC00N2Q5LWE4YjAt MWIxYzgyNmU3YjhlLzEvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8zODA4NjQtMjE1NC00N2Q5LWE4YjAtMWIxYzgyNmU3Yjhl LzEvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlUTAOK3 F9H6epWOmPlu3baiPQFcf6peM8eRcenbtd/I36sYq220LEypNd5miEoMoAqEwLF9 p1/kzIZ65IKEXh9A2xQb4i/pQdKUSmFNib1PYcG+eFNKxhYBuNTDbkGJAvKfbK1A QowfITY1P0qC2HkHbv5dQVyc03O9G3hHont/vwRNwWTtslAZ/mfOeVfKxegVTChb GfNdV/eeVEoDEfZBfIRN5QUrPHdju0iZGaGmLlTIl2je3uWjCnDPC2Wn2HWTbbvk c/fwxE1NjFCWirt2ReCO2+XBtFOw67t7aKgOZzK1G8/1idGl8gZ4t5JBHrdxX87M l4g2HzncV+UkOg== -----END CERTIFICATE-----Generated at Tue Jan 27 09:13:50 2026 by rpki-client