This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft File: MXuBR1A-oZ9YHKANKNvuXljLj0g.mft (raw, json) Hash identifier: JwetIQe0qRciTPISZ86wzLktfk36FGU8p9ZoD/BACvc= Subject key identifier: 5C:DD:F4:2A:BB:C0:09:B9:8E:D3:6C:A0:C3:72:FB:E1:3E:45:C3:C9 Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48 Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48 Certificate serial: 019BF763A1DAA3A838C2D7F58FA7272F1B2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 23:01:00 +0000 Manifest this update: Sun 25 Jan 2026 23:01:00 +0000 Manifest next update: Mon 26 Jan 2026 23:01:00 +0000 Files and hashes: 1: MXuBR1A-oZ9YHKANKNvuXljLj0g.crl (hash: lG9t/DrfckC/l4kkyalXz1HqVmIHAwqtbSf9jbudlKM=) 2: f3tAelSfrjtbwXNkrU-p9qfZWxU.roa (hash: OShTtHN/eSOshwx4hclkGBY5i0hC3YPjort+nwJu9SM=) 3: kDiYDHMztIHYvDXXzL3WVBFRgRQ.roa (hash: 4/nnDK2ikVBeX90b+2r+JvM3VbUxHJhqZEDdUrk+hj8=) 4: lgASEf8e2wSRk9xbv_20wIJbXDM.roa (hash: OBNbGNbD7TSZJPMMT4UYmjERp8O1mPv9E5azwcAja4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:a1:da:a3:a8:38:c2:d7:f5:8f:a7:27:2f:1b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48 Validity Not Before: Jan 25 23:01:00 2026 GMT Not After : Jan 26 23:01:00 2026 GMT Subject: CN=5cddf42abbc009b98ed36ca0c372fbe13e45c3c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:4e:be:6c:11:d0:da:e9:ac:a9:ff:28:aa: 42:35:12:58:c9:6b:a9:7b:49:2c:4b:8d:cf:ae:84: ae:a9:e4:4c:34:a0:ac:81:6f:1e:d7:55:75:35:f2: fd:e4:4d:d5:23:e4:e6:2b:75:f4:16:88:94:e9:d8: 48:e6:d9:4c:1f:e8:aa:3a:c5:47:ba:0a:24:25:52: 97:7a:69:ad:2b:a4:41:1a:21:94:af:5e:6b:c5:8c: 66:a0:db:12:74:67:fb:1f:d0:b8:84:ab:7a:1f:d3: dc:e5:e6:55:93:02:2f:5c:95:03:df:a4:03:1f:2e: db:ec:92:3c:76:df:2e:7f:72:bf:b5:88:1c:98:79: d4:5e:19:ef:fb:91:d2:b6:c5:10:4e:57:88:7d:12: 10:75:8c:07:fe:38:a8:47:da:27:c7:08:d7:cc:09: ce:d9:8e:ab:21:79:8a:c3:e1:da:69:a5:7e:0a:de: 06:8d:25:d0:4a:7f:98:ef:cb:cc:bd:a3:b4:c9:99: 4c:c4:8c:86:89:ef:30:2e:92:d2:90:dd:b4:13:52: a7:aa:e4:46:f7:46:34:d2:89:e5:a5:ac:bb:62:a5: 59:5f:4c:a8:6d:ba:68:3e:3e:45:dd:be:08:2c:26: 6f:e0:52:8f:18:8f:9d:c4:7c:f6:5d:e9:ac:2f:a3: 80:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DD:F4:2A:BB:C0:09:B9:8E:D3:6C:A0:C3:72:FB:E1:3E:45:C3:C9 X509v3 Authority Key Identifier: keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:a2:15:48:1d:e3:a1:35:f9:b0:85:87:ea:aa:15:69:ce:ae: fd:34:ac:86:99:d7:76:0b:58:f2:9a:aa:9b:73:d6:c9:5d:77: 99:e7:14:6e:40:58:6d:af:d2:5e:60:8d:3d:41:2e:4c:bb:fd: 28:12:98:15:31:01:36:40:cb:0c:ae:8c:7f:bc:76:ec:c7:f6: af:7e:be:30:0f:f6:2d:86:1b:a8:e8:a3:be:7e:9e:8b:79:9f: ba:25:82:91:1b:f6:21:15:7a:ec:1d:00:23:d2:3e:1c:b7:3c: 1f:97:18:c0:8f:1a:c6:ca:ae:bb:2d:bf:1e:98:2c:2e:1e:ce: 1b:86:32:8a:df:a3:48:97:30:6e:02:5b:cb:c5:76:49:f5:7c: 90:7d:3e:4e:32:bb:38:3f:fa:f3:67:35:91:ee:b9:28:13:9d: 1c:30:fc:82:73:18:d5:c1:b3:a8:7c:db:b1:ba:4b:de:99:b3: 71:e2:82:5a:0c:6f:6d:35:22:fa:87:f9:cf:28:65:91:2b:b6: 77:53:db:29:65:0c:b5:5e:3c:53:3f:99:27:65:70:16:d2:2c: c0:ba:32:64:51:94:9b:f1:c3:98:e4:36:49:ad:2c:96:b8:21: 01:41:d6:20:1b:53:32:f0:76:49:e9:06:10:78:da:f6:60:ac: 11:00:a6:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y6Hao6g4wtf1j6cnLxstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxN2I4MTQ3NTAzZWExOWY1ODFjYTAwZDI4ZGJlZTVlNThj YjhmNDgwHhcNMjYwMTI1MjMwMTAwWhcNMjYwMTI2MjMwMTAwWjAzMTEwLwYDVQQD Eyg1Y2RkZjQyYWJiYzAwOWI5OGVkMzZjYTBjMzcyZmJlMTNlNDVjM2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB9OvmwR0NrprKn/KKpCNRJYyWup e0ksS43ProSuqeRMNKCsgW8e11V1NfL95E3VI+TmK3X0FoiU6dhI5tlMH+iqOsVH ugokJVKXemmtK6RBGiGUr15rxYxmoNsSdGf7H9C4hKt6H9Pc5eZVkwIvXJUD36QD Hy7b7JI8dt8uf3K/tYgcmHnUXhnv+5HStsUQTleIfRIQdYwH/jioR9onxwjXzAnO 2Y6rIXmKw+HaaaV+Ct4GjSXQSn+Y78vMvaO0yZlMxIyGie8wLpLSkN20E1KnquRG 90Y00onlpay7YqVZX0yobbpoPj5F3b4ILCZv4FKPGI+dxHz2XemsL6OAdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzd9Cq7wAm5jtNsoMNy++E+RcPJMB8GA1UdIwQY MBaAFDF7gUdQPqGfWBygDSjb7l5Yy49IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEt NzU0NjFhYmJiNWE0LzEvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEtNzU0NjFhYmJiNWE0 LzEvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuqIVSB3j oTX5sIWH6qoVac6u/TSshpnXdgtY8pqqm3PWyV13mecUbkBYba/SXmCNPUEuTLv9 KBKYFTEBNkDLDK6Mf7x27Mf2r36+MA/2LYYbqOijvn6ei3mfuiWCkRv2IRV67B0A I9I+HLc8H5cYwI8axsquuy2/HpgsLh7OG4Yyit+jSJcwbgJby8V2SfV8kH0+TjK7 OD/682c1ke65KBOdHDD8gnMY1cGzqHzbsbpL3pmzceKCWgxvbTUi+of5zyhlkSu2 d1PbKWUMtV48Uz+ZJ2VwFtIswLoyZFGUm/HDmOQ2Sa0slrghAUHWIBtTMvB2SekG EHja9mCsEQCmYw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:42 2026 by rpki-client