This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json) Hash identifier: YW/c20fKcS87gwwgwAhjwy+bBmP49d3ayEvk9+s32yo= Subject key identifier: DE:38:62:4F:29:0A:E7:AF:60:F4:34:A4:CC:E6:78:01:04:E8:EA:D1 Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd Certificate serial: 019BA37D80088CA6A94B8FD6C5F3191DC4CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft Manifest number: 0312 Signing time: Fri 09 Jan 2026 16:01:09 +0000 Manifest this update: Fri 09 Jan 2026 16:01:09 +0000 Manifest next update: Sat 10 Jan 2026 16:01:09 +0000 Files and hashes: 1: 2FWfjreR50s05nG8c3Epkp-QpOk.roa (hash: QKVrsfHtk1frMC5gbyYQSs+jJV5TW9T1z5wCTl60joI=) 2: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: PWyNf/Qe1qAdvLbXCU8gYFfyUAMmhHwCyvRJFZBSaBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:7d:80:08:8c:a6:a9:4b:8f:d6:c5:f3:19:1d:c4:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd Validity Not Before: Jan 9 16:01:09 2026 GMT Not After : Jan 10 16:01:09 2026 GMT Subject: CN=de38624f290ae7af60f434a4cce6780104e8ead1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:eb:02:0e:2c:fd:b8:67:af:39:c4:15:a1:e4: 5b:33:ad:c3:82:76:9f:49:26:ae:de:e2:f5:c7:75: 7b:90:c3:58:27:e1:6e:0b:81:4d:7b:da:59:88:16: cf:8a:96:1a:21:a9:83:5a:29:e6:ba:b7:d4:92:9e: c5:e7:db:43:89:b3:1a:f0:7f:34:a7:db:d8:00:49: 8f:a0:62:f1:a3:dc:27:d0:15:2b:67:f4:64:fd:5b: 7e:ed:cd:9c:fb:7d:97:81:60:65:c8:44:a4:57:60: 08:25:9e:ce:5f:74:05:26:90:47:31:9e:2a:5e:82: a8:5b:d1:a4:87:ab:81:29:e8:e4:fa:6c:37:a0:e8: c1:00:ba:03:ac:24:23:04:f7:79:52:52:83:9f:b3: 91:04:3f:6a:1c:32:ba:6f:cd:5e:e5:0f:84:b3:94: 66:a9:e8:0d:15:01:b4:8c:06:db:ad:33:44:30:bf: 55:1f:97:f5:15:53:e3:fb:45:cb:e8:06:fc:dc:67: e1:0c:d3:e1:89:52:58:86:0a:49:5b:e5:48:4c:f2: 7d:5e:46:73:50:8a:0e:a4:bf:c0:3a:46:4f:33:76: 31:84:af:6d:5f:25:2a:6a:c3:c3:a6:0d:5a:85:d2: 9b:11:1e:47:1a:d2:a6:f3:01:7d:a2:db:7c:3c:c2: 9c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:38:62:4F:29:0A:E7:AF:60:F4:34:A4:CC:E6:78:01:04:E8:EA:D1 X509v3 Authority Key Identifier: keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:87:61:ed:ab:e3:5f:b6:d4:b2:ad:95:50:68:75:8c:a6:d3: 18:46:de:16:58:65:08:fb:4d:86:ed:99:57:02:8f:7e:6a:35: ee:f7:91:9e:e1:06:3d:d2:39:7a:0e:9f:c2:54:1e:4c:c0:1f: 37:e5:30:ab:d6:cc:b7:6a:86:7e:03:5f:4f:1f:ad:f6:2e:5a: 03:83:86:44:9a:b0:08:1e:82:b6:c2:56:39:c1:16:77:00:3e: 34:8c:af:d5:cd:52:cd:4d:b3:05:5c:26:e8:d9:6a:9e:59:53: 3a:c6:04:41:3e:1f:28:e5:c1:81:7d:8b:2c:df:53:58:ce:f4: 61:c3:1a:9f:72:1d:ea:81:49:ec:d6:21:8b:c4:7a:e0:10:da: 77:b9:1b:e6:62:f4:21:07:5e:50:86:0f:dd:fa:f7:c9:7e:13: 59:58:d3:b9:9e:b7:1f:bd:ca:9f:db:a3:da:52:62:c0:76:1e: 8f:87:89:a4:3c:d3:7b:c8:d7:18:a2:ac:76:63:ba:81:06:f3: 4e:d6:58:52:de:c0:5c:7d:a3:f5:78:9a:32:1b:e8:25:98:97: 93:9f:02:3c:16:d3:62:e2:12:7b:ac:b8:ef:51:06:7a:10:e1: 6f:01:4b:67:94:40:54:d7:a4:e6:58:0e:2d:28:83:b7:c9:64: 06:1e:c3:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZujfYAIjKapS4/WxfMZHcTMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMzA2ZjgzZGQ5YzY4ZDFiYjVhZTkxYjUwYzI2ZTkyOWM4 MWQyZmQwHhcNMjYwMTA5MTYwMTA5WhcNMjYwMTEwMTYwMTA5WjAzMTEwLwYDVQQD EyhkZTM4NjI0ZjI5MGFlN2FmNjBmNDM0YTRjY2U2NzgwMTA0ZThlYWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOsCDiz9uGevOcQVoeRbM63Dgnaf SSau3uL1x3V7kMNYJ+FuC4FNe9pZiBbPipYaIamDWinmurfUkp7F59tDibMa8H80 p9vYAEmPoGLxo9wn0BUrZ/Rk/Vt+7c2c+32XgWBlyESkV2AIJZ7OX3QFJpBHMZ4q XoKoW9Gkh6uBKejk+mw3oOjBALoDrCQjBPd5UlKDn7ORBD9qHDK6b81e5Q+Es5Rm qegNFQG0jAbbrTNEML9VH5f1FVPj+0XL6Ab83GfhDNPhiVJYhgpJW+VITPJ9XkZz UIoOpL/AOkZPM3YxhK9tXyUqasPDpg1ahdKbER5HGtKm8wF9ott8PMKcEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN44Yk8pCuevYPQ0pMzmeAEE6OrRMB8GA1UdIwQY MBaAFDMwb4PdnGjRu1rpG1DCbpKcgdL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXpCdmc5MmNhTkc3V3VrYlVNSnVrcHlCMHYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80MDhlMzctZmFlMi00OGI1LWJkMTUt NzNkOTRjYjU0NTI2LzEvTXpCdmc5MmNhTkc3V3VrYlVNSnVrcHlCMHYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80MDhlMzctZmFlMi00OGI1LWJkMTUtNzNkOTRjYjU0NTI2 LzEvTXpCdmc5MmNhTkc3V3VrYlVNSnVrcHlCMHYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIdh7avj X7bUsq2VUGh1jKbTGEbeFlhlCPtNhu2ZVwKPfmo17veRnuEGPdI5eg6fwlQeTMAf N+Uwq9bMt2qGfgNfTx+t9i5aA4OGRJqwCB6CtsJWOcEWdwA+NIyv1c1SzU2zBVwm 6NlqnllTOsYEQT4fKOXBgX2LLN9TWM70YcMan3Id6oFJ7NYhi8R64BDad7kb5mL0 IQdeUIYP3fr3yX4TWVjTuZ63H73Kn9uj2lJiwHYej4eJpDzTe8jXGKKsdmO6gQbz TtZYUt7AXH2j9XiaMhvoJZiXk58CPBbTYuISe6y471EGehDhbwFLZ5RAVNek5lgO LSiDt8lkBh7DZw== -----END CERTIFICATE-----Generated at Fri Jan 9 21:39:34 2026 by rpki-client