This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft File: 00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json) Hash identifier: aGKD28eDNB3hWDtL/e60XbV0MC5GK4cdpRQ2PtFiTTE= Subject key identifier: A9:B9:3E:81:CD:72:84:54:7A:C1:29:CE:EA:50:B8:AC:29:A8:54:5D Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48 Certificate issuer: /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048 Certificate serial: 019BF499ADC3C9D449A57173A3890F3BCCB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft Manifest number: 116D Signing time: Sun 25 Jan 2026 10:01:10 +0000 Manifest this update: Sun 25 Jan 2026 10:01:10 +0000 Manifest next update: Mon 26 Jan 2026 10:01:10 +0000 Files and hashes: 1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: 9TgTjTnYYpwk1fbYw+qIDAYgNNhqLSkOl4OefSL6uyU=) 2: 9cUez0lt6Mmw_B9XzRcaxVFdcD4.roa (hash: nOpET7s1tBcctYg3BftSbHVRYi4Bukh6zTqeOERZX48=) 3: KiGqqB6_C_ieZKJBT6I3N4MMdDE.roa (hash: rhV7ftUdpJwNEXvedltkn1lDN8x7VUAPfzQjlu6gj8U=) 4: Km329xYl0mWvscl4C7smwLfJLZM.roa (hash: y92Zjmkk3O0mYFiCM2kvamv5Zo1ZKqAX4wwIWsbkyjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:ad:c3:c9:d4:49:a5:71:73:a3:89:0f:3b:cc:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048 Validity Not Before: Jan 25 10:01:10 2026 GMT Not After : Jan 26 10:01:10 2026 GMT Subject: CN=a9b93e81cd7284547ac129ceea50b8ac29a8545d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:58:db:fd:3e:d0:2d:6f:98:56:d6:72:55:1b: c8:8b:4d:45:57:e3:c8:a9:3a:a6:f4:42:4b:05:0c: 03:b2:f9:0d:ef:72:48:e8:e3:17:ee:26:6f:85:cd: 0c:74:86:e4:63:ba:a8:cb:ef:ac:c1:e1:ad:00:f1: 63:a2:74:67:26:b9:dd:a5:3e:34:98:88:d6:71:bd: 04:3c:dd:eb:16:df:69:50:f1:4d:ac:12:55:3e:ec: 01:61:48:11:ac:07:a8:dc:d1:54:09:b4:fc:6b:5c: 95:03:f2:9d:ca:3e:76:05:8c:61:45:bb:8c:5f:b3: 21:f0:54:bb:39:ce:2b:af:5e:2e:bd:c0:a2:16:c0: 1c:33:56:a2:f9:79:f6:c0:ce:d0:a9:7a:5b:66:c1: 36:2e:34:79:bd:9d:a8:a4:f0:89:bd:b1:5f:b5:49: 8b:a9:92:1f:74:9b:81:11:5a:b5:86:82:91:4d:e5: a9:1d:f1:de:f9:85:9f:c6:96:44:b5:11:38:1b:36: 5f:d2:48:82:5c:8c:14:5d:24:e5:bd:9f:af:fb:2a: 33:e4:e3:43:5b:5a:6e:6f:15:38:0f:6e:2c:55:c5: 5b:d6:ee:80:1d:4b:fe:8d:44:0c:d0:6f:43:c5:16: c3:49:c5:d0:bd:f5:b6:0a:50:2e:ac:ed:f4:dd:2d: 3d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B9:3E:81:CD:72:84:54:7A:C1:29:CE:EA:50:B8:AC:29:A8:54:5D X509v3 Authority Key Identifier: keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4f:c3:91:ba:7d:32:5d:ba:f1:12:57:9e:07:a2:f9:fd:d1: 45:fd:3e:96:5e:0e:c4:23:e8:e5:bb:97:6b:e0:cb:7b:8a:55: 1f:84:42:42:e3:c9:28:5a:79:12:db:d0:71:6a:73:43:65:dd: aa:e9:57:6d:5d:46:4b:15:00:db:9d:ee:32:95:de:69:de:6c: 39:b9:8d:e9:90:92:1d:ed:95:92:6e:0e:cf:15:de:a6:19:83: 23:7c:00:8f:bd:46:03:26:8c:1b:12:50:c4:1f:03:99:8f:63: bd:58:8d:4e:ee:09:0d:a9:37:f2:9e:4a:0a:d5:f2:f5:22:d4: e0:61:54:31:c5:8f:e4:02:8e:c2:ba:45:6e:a2:29:aa:95:49: 7c:ad:fd:86:fb:24:76:4c:a0:8a:73:7d:79:65:cf:65:6a:40: 6e:23:13:ed:e0:9b:f6:84:99:19:6a:d3:a7:fc:1f:69:8d:9c: 82:40:1a:84:18:e1:82:8f:f0:99:ee:c1:ae:c7:bf:6a:2c:54: 59:a7:91:08:a0:a2:82:d9:56:53:64:66:3b:81:70:73:d9:00: 03:84:58:49:bb:c5:9c:75:48:73:53:f7:d5:83:cd:17:64:87: 70:d3:ac:5d:43:58:17:7d:17:3f:b4:a3:93:d0:f6:40:50:ad: bb:4a:2e:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0ma3DydRJpXFzo4kPO8yzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNGZhNmJlM2Y1YzM4ZjRiYjdlMDYyYjY3MDc3NDdmNDk2 MWEwNDgwHhcNMjYwMTI1MTAwMTEwWhcNMjYwMTI2MTAwMTEwWjAzMTEwLwYDVQQD EyhhOWI5M2U4MWNkNzI4NDU0N2FjMTI5Y2VlYTUwYjhhYzI5YTg1NDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFjb/T7QLW+YVtZyVRvIi01FV+PI qTqm9EJLBQwDsvkN73JI6OMX7iZvhc0MdIbkY7qoy++sweGtAPFjonRnJrndpT40 mIjWcb0EPN3rFt9pUPFNrBJVPuwBYUgRrAeo3NFUCbT8a1yVA/Kdyj52BYxhRbuM X7Mh8FS7Oc4rr14uvcCiFsAcM1ai+Xn2wM7QqXpbZsE2LjR5vZ2opPCJvbFftUmL qZIfdJuBEVq1hoKRTeWpHfHe+YWfxpZEtRE4GzZf0kiCXIwUXSTlvZ+v+yoz5OND W1pubxU4D24sVcVb1u6AHUv+jUQM0G9DxRbDScXQvfW2ClAurO303S09pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKm5PoHNcoRUesEpzupQuKwpqFRdMB8GA1UdIwQY MBaAFNNPpr4/XDj0u34GK2cHdH9JYaBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEt OTgxMTg0ZGVlMTMxLzEvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEtOTgxMTg0ZGVlMTMx LzEvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHk/Dkbp9 Ml268RJXngei+f3RRf0+ll4OxCPo5buXa+DLe4pVH4RCQuPJKFp5EtvQcWpzQ2Xd qulXbV1GSxUA253uMpXead5sObmN6ZCSHe2Vkm4OzxXephmDI3wAj71GAyaMGxJQ xB8DmY9jvViNTu4JDak38p5KCtXy9SLU4GFUMcWP5AKOwrpFbqIpqpVJfK39hvsk dkyginN9eWXPZWpAbiMT7eCb9oSZGWrTp/wfaY2cgkAahBjhgo/wme7Brse/aixU WaeRCKCigtlWU2RmO4Fwc9kAA4RYSbvFnHVIc1P31YPNF2SHcNOsXUNYF30XP7Sj k9D2QFCtu0ouTg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:34:05 2026 by rpki-client