This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft File: MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json) Hash identifier: k7ldW+e3MNU2pnbQsRmMqr6MhCQGzoDBLi08DhqT2RU= Subject key identifier: 41:C8:82:90:4C:F9:D6:0B:FB:59:0D:FF:2D:B0:15:B9:13:A2:8C:F6 Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A Certificate issuer: /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a Certificate serial: 019BD658F06A90D67E887311BF999810AA0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft Manifest number: 0A14 Signing time: Mon 19 Jan 2026 13:01:51 +0000 Manifest this update: Mon 19 Jan 2026 13:01:51 +0000 Manifest next update: Tue 20 Jan 2026 13:01:51 +0000 Files and hashes: 1: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: VahnnF95wlP6tFvnIa7eHmtw67/ZKPVPU7iPskR4lrI=) 2: b6AmtjEEmlVAVDEZuYD5VDgpfMQ.roa (hash: HS/ySeNB+y1+0+U3UPGT7SxmsyJMK83qGbLhBP5SbrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:58:f0:6a:90:d6:7e:88:73:11:bf:99:98:10:aa:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a Validity Not Before: Jan 19 13:01:51 2026 GMT Not After : Jan 20 13:01:51 2026 GMT Subject: CN=41c882904cf9d60bfb590dff2db015b913a28cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:14:f9:53:f0:30:59:f6:19:28:7e:04:d0:4b: 3f:0f:c1:99:14:a1:b6:7c:5b:41:85:8a:6e:88:26: 6b:3a:93:04:64:df:24:0b:ba:63:c1:aa:94:4a:ab: d0:08:14:1d:9e:c7:ac:c3:9f:19:6b:c2:91:2a:11: d0:76:01:76:cc:02:cc:ae:4e:6e:09:78:73:b5:b7: 24:43:f2:52:1e:93:a1:fe:85:1d:a3:fd:bf:9e:f3: 5c:ed:bf:a4:b7:0f:88:28:97:63:ef:de:75:46:f1: 9d:6b:88:0a:c6:7e:29:83:5c:5a:4c:6a:d6:cd:bc: 3c:ad:d4:a0:cf:bd:ae:f0:75:ec:92:b5:00:13:0b: 6b:92:3b:b1:b1:d5:45:04:a6:0b:3e:03:dc:c0:85: e0:92:61:ae:0b:fa:2e:6c:a3:ee:32:bd:30:a6:ac: e7:06:06:8c:f1:d8:c8:73:2a:0d:ca:4f:e1:f3:fd: 0e:ff:a3:db:de:6a:c5:38:f4:44:29:a4:ed:e9:3a: 37:f9:7e:ad:0a:02:6b:58:f4:07:3a:44:af:ad:a6: 45:2b:03:9f:e5:7a:dd:6f:4d:94:a9:17:0f:a6:3a: 31:2d:e9:3e:c0:75:d2:ef:25:13:1f:f3:b9:2c:f8: cc:95:80:63:c5:14:9b:76:f2:aa:e7:40:ae:21:52: 38:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C8:82:90:4C:F9:D6:0B:FB:59:0D:FF:2D:B0:15:B9:13:A2:8C:F6 X509v3 Authority Key Identifier: keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1a:42:9b:0f:2c:45:1c:28:9d:b2:47:28:c7:e6:68:82:70: 2f:cf:7d:b9:7a:e6:da:e0:9e:47:cf:ff:25:cc:b0:b6:50:5c: 93:42:15:fb:26:80:fe:66:d9:86:fc:dc:f9:1b:06:74:45:15: 29:d6:db:04:df:b1:5c:54:f1:f5:d1:72:a2:f2:1b:d5:2b:0d: 30:10:9d:9b:c9:e7:ab:ab:5f:33:33:74:53:fb:eb:ac:05:a7: 4c:9b:fd:08:80:8f:2e:30:0b:24:61:9c:8f:45:de:64:a9:42: 51:55:16:1a:a3:46:54:10:52:99:13:07:b3:c3:bc:76:fc:bf: 02:f0:47:96:f3:0e:7b:74:fc:01:b0:e5:b5:e5:53:93:6c:6e: ae:fe:dd:e4:d9:e4:e8:d3:73:5c:f4:6e:66:bf:ea:e3:a2:38: 01:7c:fa:91:5e:69:07:5d:45:db:32:b4:c6:95:0c:2e:81:69: 01:3f:ed:1b:bd:d9:e1:e8:9c:88:32:18:d4:60:2b:e3:28:79: 0d:8c:3b:22:97:a3:96:e2:de:a1:dd:7d:31:13:57:f8:57:50: a6:ea:a4:bf:b2:62:a8:a5:37:8c:d7:3c:a7:15:61:7e:83:c6: 4c:0b:37:7b:45:b9:80:df:e0:f7:91:ed:fb:03:8a:a4:c9:7a: 8b:a7:7a:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvWWPBqkNZ+iHMRv5mYEKoPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZDVjOWM4NWZmYjc0NjM5NDVlODEyNjU3MGI3ZTI4NTFi M2ZiN2EwHhcNMjYwMTE5MTMwMTUxWhcNMjYwMTIwMTMwMTUxWjAzMTEwLwYDVQQD Eyg0MWM4ODI5MDRjZjlkNjBiZmI1OTBkZmYyZGIwMTViOTEzYTI4Y2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhT5U/AwWfYZKH4E0Es/D8GZFKG2 fFtBhYpuiCZrOpMEZN8kC7pjwaqUSqvQCBQdnsesw58Za8KRKhHQdgF2zALMrk5u CXhztbckQ/JSHpOh/oUdo/2/nvNc7b+ktw+IKJdj7951RvGda4gKxn4pg1xaTGrW zbw8rdSgz72u8HXskrUAEwtrkjuxsdVFBKYLPgPcwIXgkmGuC/oubKPuMr0wpqzn BgaM8djIcyoNyk/h8/0O/6Pb3mrFOPREKaTt6To3+X6tCgJrWPQHOkSvraZFKwOf 5Xrdb02UqRcPpjoxLek+wHXS7yUTH/O5LPjMlYBjxRSbdvKq50CuIVI4dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHIgpBM+dYL+1kN/y2wFbkTooz2MB8GA1UdIwQY MBaAFDLVychf+3RjlF6BJlcLfihRs/t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZDAzNTEtMDA2Zi00N2FhLWFiMTkt MTljMDVmNGY0YTdiLzEvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9hZDAzNTEtMDA2Zi00N2FhLWFiMTktMTljMDVmNGY0YTdi LzEvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhpCmw8s RRwonbJHKMfmaIJwL899uXrm2uCeR8//JcywtlBck0IV+yaA/mbZhvzc+RsGdEUV KdbbBN+xXFTx9dFyovIb1SsNMBCdm8nnq6tfMzN0U/vrrAWnTJv9CICPLjALJGGc j0XeZKlCUVUWGqNGVBBSmRMHs8O8dvy/AvBHlvMOe3T8AbDlteVTk2xurv7d5Nnk 6NNzXPRuZr/q46I4AXz6kV5pB11F2zK0xpUMLoFpAT/tG73Z4eiciDIY1GAr4yh5 DYw7IpejluLeod19MRNX+FdQpuqkv7JiqKU3jNc8pxVhfoPGTAs3e0W5gN/g95Ht +wOKpMl6i6d6HA== -----END CERTIFICATE-----Generated at Mon Jan 19 18:28:53 2026 by rpki-client