This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft File: mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft (raw, json) Hash identifier: IwbmELZqoyvHEBk2V0B8BomQBKyXsWa0x+ZBe7jLDRo= Subject key identifier: BC:79:20:F7:4A:5F:D0:EA:79:DC:06:77:65:4D:7E:53:F6:FE:C2:31 Authority key identifier: 9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1 Certificate issuer: /CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1 Certificate serial: 019C04E8671AF13002ABF04F3D7D15B3F37F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft Manifest number: 1618 Signing time: Wed 28 Jan 2026 14:01:05 +0000 Manifest this update: Wed 28 Jan 2026 14:01:05 +0000 Manifest next update: Thu 29 Jan 2026 14:01:05 +0000 Files and hashes: 1: mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl (hash: pOq22+JBMH1HD1lQhXrIgF0AYJYjbGudWDZlJJS9EYQ=) 2: nks_nylvyyAWgimwBxXdFa9G4BY.roa (hash: EfY1nN8r7wAgqL2Y5iO6rc+wziVBHna5GQmLFyhBJBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 14:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:e8:67:1a:f1:30:02:ab:f0:4f:3d:7d:15:b3:f3:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1 Validity Not Before: Jan 28 14:01:05 2026 GMT Not After : Jan 29 14:01:05 2026 GMT Subject: CN=bc7920f74a5fd0ea79dc0677654d7e53f6fec231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7b:ec:6a:02:6a:bc:a9:a0:1f:97:f3:2b:93: c7:c2:3f:b7:be:f8:ca:10:52:98:ef:f5:1c:70:35: 76:f7:23:36:fb:17:9c:a4:59:d7:4b:86:ce:44:47: aa:f5:b6:06:ce:15:4b:aa:c0:f0:81:70:ec:b8:98: 2d:6f:02:eb:56:f2:d8:52:83:c5:14:95:ef:4f:19: 8b:df:90:d0:f9:81:86:ca:46:6c:77:96:b8:85:38: 0f:c3:b6:b3:72:00:9d:32:a7:01:4b:53:1f:86:d9: a1:c5:ce:d5:92:7c:f3:e1:ad:8b:d8:5e:f4:72:f2: a1:20:d0:c6:9b:d5:77:98:79:25:d2:4f:09:9a:3d: f3:d6:e4:24:a9:d2:d1:3d:13:4e:5b:37:c3:af:c1: df:29:bf:2b:8f:8e:15:fb:1f:d4:e6:22:ab:d3:2c: c0:bd:6c:3c:36:fd:27:79:f7:83:df:a6:f1:3f:95: 32:e8:8d:34:ec:6c:5b:54:56:f2:6f:88:f2:d8:96: 98:5e:98:c3:1f:7a:4a:6a:7b:8b:73:6c:dd:ce:01: 81:a2:b3:e6:cf:62:35:0b:0c:c7:c9:5f:a5:b6:60: 3c:ff:2b:1d:76:39:1b:b5:a7:10:d8:3d:61:5f:42: 06:ac:54:e9:8c:fc:36:5d:5e:a7:54:61:7d:5f:60: 0d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:79:20:F7:4A:5F:D0:EA:79:DC:06:77:65:4D:7E:53:F6:FE:C2:31 X509v3 Authority Key Identifier: keyid:9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:34:de:98:27:05:f0:c6:5e:c3:a2:9c:90:21:47:60:4f:8b: f1:15:dc:98:cd:6a:a5:08:8d:5b:da:08:52:0d:e3:1d:08:b2: 45:cb:51:52:41:4f:5b:bd:72:0e:f7:d3:81:35:c8:4f:41:c5: 77:bd:84:88:f7:98:ef:49:c9:ff:6a:3a:7e:13:73:c9:a5:e6: 2f:9f:ce:34:5a:ec:e2:e0:5e:3d:a7:70:17:a0:44:56:31:e7: c1:40:29:e5:13:5c:93:5e:bb:94:19:60:9a:8f:f7:03:85:40: 9f:c7:00:5d:43:20:19:50:65:cd:4f:59:39:ea:0d:75:5a:f4: a8:16:7e:52:5b:cd:9e:34:fd:76:fc:c5:e0:8d:3e:f2:78:2b: 29:22:03:7b:62:1d:df:da:8a:6f:8e:2f:08:21:96:c1:75:f1: 5d:6d:ac:95:4f:4e:4c:62:5a:06:e8:50:eb:f7:f6:43:73:81: 76:b1:fe:95:fd:3b:49:06:50:3c:0e:46:e8:cf:35:de:30:80: 5d:c0:a6:e6:5e:69:c6:84:95:f5:3c:9f:4b:ad:aa:26:27:be: 2c:46:19:cb:c9:8e:4c:62:f6:ee:1e:b4:51:87:39:8f:f5:97: 02:b5:c3:ad:99:62:aa:32:65:6b:c5:92:38:b5:91:a4:96:f7: bd:32:8d:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwE6Gca8TACq/BPPX0Vs/N/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWEwODY5MmYyMjhkYTBjNDFiMzE3YzZmYTdjYzVjM2Jl YzUxZTEwHhcNMjYwMTI4MTQwMTA1WhcNMjYwMTI5MTQwMTA1WjAzMTEwLwYDVQQD EyhiYzc5MjBmNzRhNWZkMGVhNzlkYzA2Nzc2NTRkN2U1M2Y2ZmVjMjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHvsagJqvKmgH5fzK5PHwj+3vvjK EFKY7/UccDV29yM2+xecpFnXS4bOREeq9bYGzhVLqsDwgXDsuJgtbwLrVvLYUoPF FJXvTxmL35DQ+YGGykZsd5a4hTgPw7azcgCdMqcBS1Mfhtmhxc7Vknzz4a2L2F70 cvKhINDGm9V3mHkl0k8Jmj3z1uQkqdLRPRNOWzfDr8HfKb8rj44V+x/U5iKr0yzA vWw8Nv0nefeD36bxP5Uy6I007GxbVFbyb4jy2JaYXpjDH3pKanuLc2zdzgGBorPm z2I1CwzHyV+ltmA8/ysddjkbtacQ2D1hX0IGrFTpjPw2XV6nVGF9X2ANhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLx5IPdKX9DqedwGd2VNflP2/sIxMB8GA1UdIwQY MBaAFJoaCGkvIo2gxBsxfG+nzFw77FHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWhvSWFTOGlqYURFR3pGOGI2Zk1YRHZzVWVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kMGZhZDEtYjhiMS00OTYwLWI2N2Yt MDJlZGYwOGY3Y2Y4LzEvbWhvSWFTOGlqYURFR3pGOGI2Zk1YRHZzVWVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kMGZhZDEtYjhiMS00OTYwLWI2N2YtMDJlZGYwOGY3Y2Y4 LzEvbWhvSWFTOGlqYURFR3pGOGI2Zk1YRHZzVWVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyzTemCcF 8MZew6KckCFHYE+L8RXcmM1qpQiNW9oIUg3jHQiyRctRUkFPW71yDvfTgTXIT0HF d72EiPeY70nJ/2o6fhNzyaXmL5/ONFrs4uBePadwF6BEVjHnwUAp5RNck167lBlg mo/3A4VAn8cAXUMgGVBlzU9ZOeoNdVr0qBZ+UlvNnjT9dvzF4I0+8ngrKSIDe2Id 39qKb44vCCGWwXXxXW2slU9OTGJaBuhQ6/f2Q3OBdrH+lf07SQZQPA5G6M813jCA XcCm5l5pxoSV9TyfS62qJie+LEYZy8mOTGL27h60UYc5j/WXArXDrZliqjJla8WS OLWRpJb3vTKNog== -----END CERTIFICATE-----Generated at Wed Jan 28 21:05:41 2026 by rpki-client