This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft File: mk123S9GBosIca1FAKxuV3r-Rpw.mft (raw, json) Hash identifier: 7U/8TbUZswQnRmOBU+jfh3Ez0MbzlddfT5fFPNlqv1M= Subject key identifier: DE:42:D5:21:9E:64:5A:03:B9:2E:FE:B3:9F:7F:0B:4D:5F:B0:2B:6A Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c Certificate serial: 019BFBAE638BC543560B473B44E589DF804F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft Manifest number: 17F6 Signing time: Mon 26 Jan 2026 19:01:08 +0000 Manifest this update: Mon 26 Jan 2026 19:01:08 +0000 Manifest next update: Tue 27 Jan 2026 19:01:08 +0000 Files and hashes: 1: SYtSh6MgqpX8fZ4WHojx0wxmwAU.roa (hash: qfAbswAstxuSdJu35mimEN1jiqsDnLeGp+g0coBMNag=) 2: YIp8U7durT_VOWJi51t_EhaEZmc.roa (hash: uqZNroUU2FsZFyQ6iEi3c3DU2XeoL0O/vrop/BVrvjs=) 3: mk123S9GBosIca1FAKxuV3r-Rpw.crl (hash: pUpMPptAZnTJbu6xsQE7mrZqEBvOTXKD0GptSVw16a0=) 4: pEE9oryUWOVeetd5uFrgO_cdrpE.roa (hash: jDaM82TLaH8oaB0vSE3Avb/s35Fb5rQ5AgRFhpcBjks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:63:8b:c5:43:56:0b:47:3b:44:e5:89:df:80:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c Validity Not Before: Jan 26 19:01:08 2026 GMT Not After : Jan 27 19:01:08 2026 GMT Subject: CN=de42d5219e645a03b92efeb39f7f0b4d5fb02b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a8:70:ed:7e:d9:9f:91:3c:0a:13:87:6c:74: d4:7d:aa:7d:b1:e9:fc:d4:76:80:81:15:41:10:53: cc:77:db:63:84:3b:79:50:7f:90:0c:45:4b:ea:30: 83:80:6c:55:99:28:46:1f:3c:af:bb:8b:3e:7c:41: dc:4d:ba:8b:4b:48:4f:bf:f7:8b:dc:0d:ce:a1:c7: 16:de:bb:cb:9e:6a:c9:a9:e6:d9:ff:94:49:26:5d: c9:7d:26:f3:2b:18:73:78:87:aa:8c:92:fe:5b:d5: 16:5e:aa:65:b5:7a:eb:cf:71:3e:0c:60:07:df:b3: 19:80:a0:41:1c:7a:3d:c7:94:ae:e2:5a:cd:1b:63: 42:4c:67:5a:25:3d:80:8b:32:38:2b:32:84:7b:d9: e7:76:1f:21:78:e8:7e:6e:75:26:2e:3e:ed:79:1c: 22:54:a2:47:cc:42:ca:39:87:c2:0c:3a:83:c5:35: dc:ef:cc:3d:03:47:c3:d5:43:8e:53:0c:4e:67:c1: be:9a:29:03:cd:fd:97:26:d2:44:0f:cd:d2:02:4b: c8:f2:ee:ed:18:5f:19:a7:61:91:94:d3:19:39:c3: 5e:ab:6b:b5:0b:86:8c:0a:4f:4d:8f:05:f6:75:11: e9:be:f6:06:cf:b0:a9:d8:f0:b0:e7:4a:a7:89:76: 78:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:42:D5:21:9E:64:5A:03:B9:2E:FE:B3:9F:7F:0B:4D:5F:B0:2B:6A X509v3 Authority Key Identifier: keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:25:d9:75:c7:57:94:f8:30:55:7c:42:96:ca:86:5e:18:36: 2c:ae:cc:b6:5b:d7:d2:37:5a:74:80:72:f8:cf:a0:46:b6:a1: 23:43:0e:62:5f:d2:ab:1f:47:83:c3:f6:22:cb:9a:99:e6:63: c1:38:f4:dc:5d:3e:02:69:6c:7e:a1:01:73:34:1a:b8:04:e6: ab:6f:db:38:0c:e5:98:8e:d2:3a:80:a1:9b:40:04:b4:c4:de: f3:da:d9:7b:3c:ca:d3:6d:7a:81:34:a4:b0:a9:63:49:f3:0c: 32:50:c4:96:12:a4:b0:3e:e6:f0:43:eb:4a:a5:00:38:9e:cd: eb:99:ac:3c:80:80:15:c4:2b:63:2b:69:41:e6:02:bf:0c:a9: 0e:4b:be:6c:3b:09:1a:97:49:e6:a7:87:fb:35:2c:28:a6:11: 72:3b:b1:06:60:ef:d7:c9:28:9d:d8:0a:e9:2a:03:4f:c8:12: 85:e5:ed:6a:4a:57:e6:fd:f2:90:fd:45:dc:9e:38:9f:a6:ff: 42:f7:22:57:01:36:b7:f6:b2:2d:df:fa:1f:5e:ac:10:40:f0: e4:27:79:64:de:1f:ad:5a:64:16:5b:a3:76:9d:df:1c:0c:95: 0d:7a:0f:39:bc:4c:a0:21:e5:8a:a1:e9:35:5c:08:48:a2:9a: d1:a7:8d:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rmOLxUNWC0c7ROWJ34BPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNGQ3NmRkMmY0NjA2OGIwODcxYWQ0NTAwYWM2ZTU3N2Fm ZTQ2OWMwHhcNMjYwMTI2MTkwMTA4WhcNMjYwMTI3MTkwMTA4WjAzMTEwLwYDVQQD EyhkZTQyZDUyMTllNjQ1YTAzYjkyZWZlYjM5ZjdmMGI0ZDVmYjAyYjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzahw7X7Zn5E8ChOHbHTUfap9sen8 1HaAgRVBEFPMd9tjhDt5UH+QDEVL6jCDgGxVmShGHzyvu4s+fEHcTbqLS0hPv/eL 3A3OoccW3rvLnmrJqebZ/5RJJl3JfSbzKxhzeIeqjJL+W9UWXqpltXrrz3E+DGAH 37MZgKBBHHo9x5Su4lrNG2NCTGdaJT2AizI4KzKEe9nndh8heOh+bnUmLj7teRwi VKJHzELKOYfCDDqDxTXc78w9A0fD1UOOUwxOZ8G+mikDzf2XJtJED83SAkvI8u7t GF8Zp2GRlNMZOcNeq2u1C4aMCk9NjwX2dRHpvvYGz7Cp2PCw50qniXZ4fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5C1SGeZFoDuS7+s59/C01fsCtqMB8GA1UdIwQY MBaAFJpNdt0vRgaLCHGtRQCsbld6/kacMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lZDdjOGEtMzk1Mi00NDAxLTlkZDQt NDQ2OTJkYmNjYjMyLzEvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9lZDdjOGEtMzk1Mi00NDAxLTlkZDQtNDQ2OTJkYmNjYjMy LzEvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCXZdcdX lPgwVXxClsqGXhg2LK7MtlvX0jdadIBy+M+gRrahI0MOYl/Sqx9Hg8P2IsuameZj wTj03F0+AmlsfqEBczQauATmq2/bOAzlmI7SOoChm0AEtMTe89rZezzK0216gTSk sKljSfMMMlDElhKksD7m8EPrSqUAOJ7N65msPICAFcQrYytpQeYCvwypDku+bDsJ GpdJ5qeH+zUsKKYRcjuxBmDv18kondgK6SoDT8gSheXtakpX5v3ykP1F3J44n6b/ QvciVwE2t/ayLd/6H16sEEDw5Cd5ZN4frVpkFlujdp3fHAyVDXoPObxMoCHliqHp NVwISKKa0aeNEA== -----END CERTIFICATE-----Generated at Tue Jan 27 01:19:29 2026 by rpki-client