This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft File: MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json) Hash identifier: VDcOGu2/EutczaY3T2u8mcy9/XMopJgA8yDU7Oig9+o= Subject key identifier: 5C:AA:D8:70:A4:4A:40:E6:A8:82:11:43:A7:13:37:1F:21:6B:CB:47 Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Certificate serial: 019BF35031691ECC847937A134274E368CE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft Manifest number: 17F0 Signing time: Sun 25 Jan 2026 04:01:17 +0000 Manifest this update: Sun 25 Jan 2026 04:01:17 +0000 Manifest next update: Mon 26 Jan 2026 04:01:17 +0000 Files and hashes: 1: 4ULYQtUd4oJTzwLazC-kDlXIDUE.roa (hash: KhGm2r25s8XUb5ohnzrZIMa245c7C+KlzncTxFjIUB4=) 2: 9-60Vxc-2LQ_XkxstJ8I6v1xPNs.roa (hash: WclfYio0mTJ2QQD9rGT9niYV0PM8Tw05+SJZh2ziUhE=) 3: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: Q0BBL211oFfYUOrUczNd9UXSPPscRQ6I/hDnuIiyr28=) 4: Ta8RJhTfDtDSrvIZ66hfAVxkrV4.roa (hash: C76g0etT/OIC0z2fgzI8IUCLQgWuRLferJwyCXf5SIw=) 5: XTxevz1p55E6MXkUWpAA6leZNbw.roa (hash: 9+ZeJEHHm5NRQbkIiB7hcaKwfupyZc9wFisuoKdir6c=) 6: YaZXtt4CBX_dPogFy216OZ32jZ8.roa (hash: MMlcUYaXZ5PcPwOs7IfmUuTH4RAjSxkjD0El5fES9Mc=) 7: hj9uyuHnnlFd0x9G2TnG2XeZVwU.roa (hash: omuDv6cvkQ1Vxo4qn67eCuvFXOzSVc9gpTeiRSMZI1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:31:69:1e:cc:84:79:37:a1:34:27:4e:36:8c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Validity Not Before: Jan 25 04:01:17 2026 GMT Not After : Jan 26 04:01:17 2026 GMT Subject: CN=5caad870a44a40e6a8821143a713371f216bcb47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:22:73:3e:0e:f8:fd:9f:2e:01:e0:ea:43:84: 1e:b6:45:cc:b3:1b:1e:7c:a4:0d:1f:90:c6:0c:bb: 5d:02:f0:8b:c1:cb:2d:a9:ca:35:df:1e:1b:13:72: 16:72:83:2f:53:82:d2:9c:9e:c2:4c:d3:87:72:81: 81:07:1d:b0:ab:4d:56:cc:ed:35:06:66:2b:82:68: 80:21:71:44:b8:65:32:50:3a:13:03:a7:20:39:15: c9:6b:2d:55:ec:b4:da:62:a4:2b:7b:b7:86:fd:08: 4c:ae:4a:34:ec:0c:c8:cd:0f:6a:dd:91:df:69:ed: e6:57:f8:b4:66:e2:30:8d:00:a3:94:a6:b9:df:81: a7:28:94:10:77:bb:49:81:ec:f8:c1:af:d2:68:60: 6e:eb:e7:8f:71:8a:2f:93:26:37:15:66:61:b7:35: 4e:bd:ba:8c:f9:a4:19:41:47:9b:f7:d4:bc:65:33: df:4a:42:1c:93:3c:cf:96:2b:bc:4e:f0:0f:a9:fe: fe:cb:56:cf:9b:36:a5:dd:ba:06:b6:a2:10:97:0f: ea:ee:36:e5:19:85:62:f3:f4:ad:8f:41:ef:93:7c: cf:15:e0:9f:3b:2a:40:97:1a:2b:b0:32:fe:54:8d: 74:50:16:3b:b1:86:52:d8:e6:58:c5:f9:04:a4:34: 52:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AA:D8:70:A4:4A:40:E6:A8:82:11:43:A7:13:37:1F:21:6B:CB:47 X509v3 Authority Key Identifier: keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:87:6c:ad:fb:8a:fb:59:ad:54:00:c2:57:89:b9:fb:86:55: 29:d2:d8:38:03:2f:7f:71:97:5f:03:99:a7:06:16:6d:51:a4: fa:58:c6:b3:23:b2:eb:3e:b4:20:9d:09:95:ad:7e:f7:95:58: 3f:40:a9:df:57:18:cb:ad:ba:9a:39:71:ed:c4:00:32:6b:d9: 07:b3:97:29:b0:27:98:2d:b4:4a:a7:19:d2:27:96:04:18:7b: 4d:80:06:c2:88:d6:90:cf:14:06:e8:7e:b0:ae:0c:18:a8:a3: 4e:1f:80:ae:5a:67:14:9a:9c:60:45:0f:f3:94:d7:21:66:46: e9:63:7f:6c:d1:36:66:53:95:c0:40:04:4e:e9:f4:90:8e:a8: 7a:d9:94:5a:b2:1f:36:d9:71:b8:57:6c:3c:f9:03:d4:aa:54: 73:a1:87:15:5e:18:34:bb:dd:65:5f:9a:a1:4a:f7:73:89:ac: 1e:00:ed:38:e6:1b:bc:c7:5d:7f:89:1d:1b:a6:e7:5c:59:e6: 79:2b:f3:ff:71:8f:b6:b7:5e:c0:f2:54:95:75:ad:2b:5d:cb: 1b:fc:97:49:8a:fb:e7:cb:0f:db:3c:07:fe:0b:00:e4:d8:49: 60:39:79:ff:5a:36:6c:3d:f0:98:ad:07:0a:f4:2c:70:40:0e: 1f:43:7a:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUDFpHsyEeTehNCdONozjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMjdhNjMxYmI2NzM4ZWI2OGJiNmVhNmM0MjRlZjRhN2Qx NGMzY2IwHhcNMjYwMTI1MDQwMTE3WhcNMjYwMTI2MDQwMTE3WjAzMTEwLwYDVQQD Eyg1Y2FhZDg3MGE0NGE0MGU2YTg4MjExNDNhNzEzMzcxZjIxNmJjYjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCJzPg74/Z8uAeDqQ4QetkXMsxse fKQNH5DGDLtdAvCLwcstqco13x4bE3IWcoMvU4LSnJ7CTNOHcoGBBx2wq01WzO01 BmYrgmiAIXFEuGUyUDoTA6cgORXJay1V7LTaYqQre7eG/QhMrko07AzIzQ9q3ZHf ae3mV/i0ZuIwjQCjlKa534GnKJQQd7tJgez4wa/SaGBu6+ePcYovkyY3FWZhtzVO vbqM+aQZQUeb99S8ZTPfSkIckzzPliu8TvAPqf7+y1bPmzal3boGtqIQlw/q7jbl GYVi8/Stj0Hvk3zPFeCfOypAlxorsDL+VI10UBY7sYZS2OZYxfkEpDRSnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyq2HCkSkDmqIIRQ6cTNx8ha8tHMB8GA1UdIwQY MBaAFDAnpjG7ZzjraLtupsQk70p9FMPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYt MWRkNmQyODFjODhhLzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYtMWRkNmQyODFjODhh LzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4dsrfuK +1mtVADCV4m5+4ZVKdLYOAMvf3GXXwOZpwYWbVGk+ljGsyOy6z60IJ0Jla1+95VY P0Cp31cYy626mjlx7cQAMmvZB7OXKbAnmC20SqcZ0ieWBBh7TYAGwojWkM8UBuh+ sK4MGKijTh+ArlpnFJqcYEUP85TXIWZG6WN/bNE2ZlOVwEAETun0kI6oetmUWrIf NtlxuFdsPPkD1KpUc6GHFV4YNLvdZV+aoUr3c4msHgDtOOYbvMddf4kdG6bnXFnm eSvz/3GPtrdewPJUlXWtK13LG/yXSYr758sP2zwH/gsA5NhJYDl5/1o2bD3wmK0H CvQscEAOH0N6qQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:04 2026 by rpki-client