This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json) Hash identifier: DQR5/VuXKJwicaDw0oxNA/NTF5Rqi7Wbz8L4fUh3szk= Subject key identifier: 19:60:77:31:08:2C:4D:EA:A9:12:EA:25:D7:DC:4E:D2:90:44:68:40 Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01 Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001 Certificate serial: 019BFE0B248E08437BC36B54FB9DB65BF439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft Manifest number: 17ED Signing time: Tue 27 Jan 2026 06:01:41 +0000 Manifest this update: Tue 27 Jan 2026 06:01:41 +0000 Manifest next update: Wed 28 Jan 2026 06:01:41 +0000 Files and hashes: 1: bQVjKkmobhkw7mkwIs0nkBnkqic.roa (hash: 8Om2d8lOTV+LsZTeylJMIewyhtQBsCBhqCI89TKYwM0=) 2: fb4r4sYbkD7wTC4O4Za0r0jaCkg.roa (hash: jpoPaAYyEZL4Wy2tKQ1ADsHsFYkQWRVYKHFCvJk4oKI=) 3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: 63HUAG6s2+pi5yyHdeLIxcohiFdK5e8JOWdBsflDXf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0b:24:8e:08:43:7b:c3:6b:54:fb:9d:b6:5b:f4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001 Validity Not Before: Jan 27 06:01:41 2026 GMT Not After : Jan 28 06:01:41 2026 GMT Subject: CN=19607731082c4deaa912ea25d7dc4ed290446840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c4:ab:cd:ba:bb:d0:bd:b5:68:d1:a3:31:8a: 69:59:37:9c:22:81:ce:27:ef:f8:b2:d1:9f:82:75: 2f:ce:d9:30:ff:4e:01:ab:04:25:91:d6:7a:43:23: 07:30:67:c0:39:5d:b9:c4:7f:c5:1a:23:d9:b0:ca: 70:4d:73:cd:1e:b4:ba:de:d9:24:b1:24:c6:b8:b8: a4:1c:33:b2:e4:04:6b:67:64:3e:e5:69:4b:02:c7: cb:d2:9c:3a:b7:07:da:15:21:23:23:f6:50:af:e4: 32:1a:d7:e0:e1:8d:40:6a:43:53:9d:c5:23:a5:d9: bb:60:5d:e4:e7:8d:56:bd:a7:a4:e8:f0:31:26:12: 80:20:db:a2:f5:0a:14:af:7f:73:ab:1e:6c:b8:6e: 93:8c:af:e7:77:32:d5:3a:7a:c9:a4:6f:d8:c9:01: 26:65:2f:35:a0:5e:d9:89:59:02:c9:18:fb:dd:a4: f7:16:f3:07:5c:7d:1d:9f:f2:d7:2a:47:60:9e:f3: bd:ae:93:6f:dd:42:64:49:9f:af:91:21:6e:ee:2d: 61:d8:dc:f4:1e:77:63:93:e3:44:e0:8e:f5:af:f6: c9:5c:bd:7c:19:1e:89:60:69:fa:61:ce:6b:04:6d: 58:cd:54:f8:da:b8:f0:4d:73:ae:c4:ab:8c:d5:84: 81:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:60:77:31:08:2C:4D:EA:A9:12:EA:25:D7:DC:4E:D2:90:44:68:40 X509v3 Authority Key Identifier: keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:34:60:ce:3f:fc:cb:d4:1f:cf:13:b8:a6:40:86:2e:94:a4: 8c:81:32:85:d1:f2:b3:1a:f7:a2:e7:25:8f:70:60:e9:0c:00: e6:5c:47:e3:b0:54:50:a6:94:5f:b6:48:cf:78:4d:c1:a1:6f: 99:e2:8c:60:5d:48:bb:12:2e:d2:7f:4c:44:ed:42:20:01:be: b4:38:1a:72:0e:db:f7:9b:b3:99:e5:6b:57:09:7c:1b:93:3f: c1:a1:a3:62:1b:8f:4b:d1:3a:fa:02:cc:e2:10:8c:07:7e:75: f5:53:f6:66:23:0b:34:30:d9:88:c6:40:23:60:06:56:50:dd: 44:99:62:dd:94:ca:ea:f4:b5:bb:12:d0:a0:6e:fe:35:4f:ff: 2a:fa:2c:19:65:bb:2c:9f:17:9d:49:f4:47:9d:0b:49:dd:60: 95:21:4c:2f:99:8a:58:67:db:c7:7f:aa:06:12:0e:d2:7e:d5: 61:99:b7:50:41:2c:6a:1c:21:fc:64:72:3e:bb:0b:d4:ba:02: 93:8a:56:34:18:d5:07:b0:05:19:d7:41:e7:70:df:8f:27:b7: 73:85:b9:8b:65:4a:e9:c6:2e:a0:24:37:65:1a:82:5b:4e:7b: 06:35:b9:c3:90:60:47:4e:b5:a1:f1:f5:8c:c9:8f:77:cf:2f: d3:95:b7:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+CySOCEN7w2tU+522W/Q5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MWU0YjE3OWUwOTUzYjllY2M1ODVhZDk4NTlhMDBiZTM1 NjgwMDEwHhcNMjYwMTI3MDYwMTQxWhcNMjYwMTI4MDYwMTQxWjAzMTEwLwYDVQQD EygxOTYwNzczMTA4MmM0ZGVhYTkxMmVhMjVkN2RjNGVkMjkwNDQ2ODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMSrzbq70L21aNGjMYppWTecIoHO J+/4stGfgnUvztkw/04BqwQlkdZ6QyMHMGfAOV25xH/FGiPZsMpwTXPNHrS63tkk sSTGuLikHDOy5ARrZ2Q+5WlLAsfL0pw6twfaFSEjI/ZQr+QyGtfg4Y1AakNTncUj pdm7YF3k541Wvaek6PAxJhKAINui9QoUr39zqx5suG6TjK/ndzLVOnrJpG/YyQEm ZS81oF7ZiVkCyRj73aT3FvMHXH0dn/LXKkdgnvO9rpNv3UJkSZ+vkSFu7i1h2Nz0 Hndjk+NE4I71r/bJXL18GR6JYGn6Yc5rBG1YzVT42rjwTXOuxKuM1YSB6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlgdzEILE3qqRLqJdfcTtKQRGhAMB8GA1UdIwQY MBaAFJkeSxeeCVO57MWFrZhZoAvjVoABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYt ZWY5Yzk1Mjc2OTMyLzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYtZWY5Yzk1Mjc2OTMy LzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDRgzj/8 y9QfzxO4pkCGLpSkjIEyhdHysxr3ouclj3Bg6QwA5lxH47BUUKaUX7ZIz3hNwaFv meKMYF1IuxIu0n9MRO1CIAG+tDgacg7b95uzmeVrVwl8G5M/waGjYhuPS9E6+gLM 4hCMB3519VP2ZiMLNDDZiMZAI2AGVlDdRJli3ZTK6vS1uxLQoG7+NU//KvosGWW7 LJ8XnUn0R50LSd1glSFML5mKWGfbx3+qBhIO0n7VYZm3UEEsahwh/GRyPrsL1LoC k4pWNBjVB7AFGddB53Dfjye3c4W5i2VK6cYuoCQ3ZRqCW057BjW5w5BgR061ofH1 jMmPd88v05W3nQ== -----END CERTIFICATE-----Generated at Tue Jan 27 07:47:34 2026 by rpki-client