This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft File: m3pi514OySux3vHhlV90n_1FUHI.mft (raw, json) Hash identifier: BlDByGw13GlaV4r4Lxr2UZ364r5tJr0DhGPqBzYv//o= Subject key identifier: 5B:85:B3:80:79:99:2B:D3:A0:1C:60:DA:00:BF:F8:77:60:39:61:AD Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72 Certificate issuer: /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072 Certificate serial: 019BF6F5A20D5FB6FFB1E84C37D66DD6CD6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft Manifest number: 0DEA Signing time: Sun 25 Jan 2026 21:00:51 +0000 Manifest this update: Sun 25 Jan 2026 21:00:51 +0000 Manifest next update: Mon 26 Jan 2026 21:00:51 +0000 Files and hashes: 1: D4KKAq0ahmeZ20BwgX9kW7RnziE.roa (hash: ZoGSRKDSzROcjYhMYpND74w5OQoC/iSALsUjVAn5Y+U=) 2: m3pi514OySux3vHhlV90n_1FUHI.crl (hash: KFGAEshLzzf5hAtwNzPOIJ3hl4bbZPQDK7qy9GLJNR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:a2:0d:5f:b6:ff:b1:e8:4c:37:d6:6d:d6:cd:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072 Validity Not Before: Jan 25 21:00:51 2026 GMT Not After : Jan 26 21:00:51 2026 GMT Subject: CN=5b85b38079992bd3a01c60da00bff877603961ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bb:e1:20:bf:9a:d4:83:03:20:bb:85:1c:6e: 1d:9b:52:ca:56:c1:f8:20:eb:9d:a1:3c:7a:fa:e8: bb:ac:d0:f9:33:cf:72:38:87:5b:9a:71:fa:7c:a5: 96:3f:6a:19:35:8d:cc:2b:91:0a:36:8e:70:23:4a: fc:b9:fb:4a:bd:7c:e1:4f:8b:b1:68:db:01:b5:f0: d9:b3:26:23:58:e3:f0:94:3a:4d:fb:61:f2:20:30: 32:d0:3f:0d:36:d1:64:d4:4f:58:ef:2d:38:59:56: fa:5a:1b:fd:cd:a1:88:e9:d2:63:94:f4:e6:4a:df: 36:75:38:e0:a9:0b:9f:57:0b:a4:b0:a2:7e:d7:e7: 92:81:ab:b3:c3:c2:c1:e8:23:e1:3d:8d:69:92:63: aa:57:fc:b8:87:2b:f0:af:48:a4:4f:ee:61:34:83: 65:b8:78:bf:55:b3:d9:49:fd:8a:8a:b5:fe:50:9b: 63:76:52:42:03:30:54:34:52:7f:fa:28:ac:ee:10: cd:9a:7e:23:cc:0d:1e:81:f2:5a:90:bd:ca:de:7a: 2e:e2:b9:d9:36:1e:fd:90:10:48:1e:ba:15:46:81: 68:8d:50:0b:11:ce:67:3a:45:2f:17:57:c5:6d:b9: b6:b7:de:af:52:75:64:29:8d:76:73:03:ad:3b:d4: a5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:85:B3:80:79:99:2B:D3:A0:1C:60:DA:00:BF:F8:77:60:39:61:AD X509v3 Authority Key Identifier: keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:00:da:ea:02:bf:72:79:d1:17:5c:ed:c9:bc:b6:a4:bd:44: aa:b1:66:4e:d8:26:82:cf:a5:04:c3:81:e5:69:6c:8e:99:5a: 41:97:54:a0:d7:6d:df:62:0d:09:b5:b9:0a:16:ac:99:25:be: 3e:09:da:2c:18:5a:ab:be:43:22:00:32:3d:51:b2:95:cf:0c: 98:be:72:c1:ad:36:fc:c1:61:27:94:ab:96:18:78:30:aa:1e: 88:e8:c7:e3:9c:b4:36:21:6c:d1:8e:06:99:7c:7b:bf:34:ee: e4:4d:ed:7c:30:24:21:cf:46:03:a6:f8:34:d4:9a:c4:b5:69: 4c:2b:c9:4b:69:39:63:aa:7f:d7:c4:34:19:1f:39:55:47:21: 77:78:c0:dc:e7:db:20:0c:3d:21:58:b6:27:e8:33:a5:6d:12: 70:56:0a:fa:63:d2:a7:1c:d7:2a:43:1f:e4:aa:7f:1b:14:23: 50:c9:8b:1e:07:4a:98:c1:f7:9a:fc:64:03:a4:74:ad:9b:4b: 0a:41:b5:1b:8d:3f:c9:e3:6f:d5:a3:01:b5:52:51:56:fb:ac: 0f:b4:3b:fa:cc:22:1f:2f:59:13:32:6b:ae:65:f6:a5:e1:e9: eb:96:3b:c9:d2:bc:39:d7:97:e0:e5:79:0f:cc:4c:b6:fe:6d: 36:4f:ad:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29aINX7b/sehMN9Zt1s1uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliN2E2MmU3NWUwZWM5MmJiMWRlZjFlMTk1NWY3NDlmZmQ0 NTUwNzIwHhcNMjYwMTI1MjEwMDUxWhcNMjYwMTI2MjEwMDUxWjAzMTEwLwYDVQQD Eyg1Yjg1YjM4MDc5OTkyYmQzYTAxYzYwZGEwMGJmZjg3NzYwMzk2MWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrvhIL+a1IMDILuFHG4dm1LKVsH4 IOudoTx6+ui7rND5M89yOIdbmnH6fKWWP2oZNY3MK5EKNo5wI0r8uftKvXzhT4ux aNsBtfDZsyYjWOPwlDpN+2HyIDAy0D8NNtFk1E9Y7y04WVb6Whv9zaGI6dJjlPTm St82dTjgqQufVwuksKJ+1+eSgauzw8LB6CPhPY1pkmOqV/y4hyvwr0ikT+5hNINl uHi/VbPZSf2KirX+UJtjdlJCAzBUNFJ/+iis7hDNmn4jzA0egfJakL3K3nou4rnZ Nh79kBBIHroVRoFojVALEc5nOkUvF1fFbbm2t96vUnVkKY12cwOtO9SluwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuFs4B5mSvToBxg2gC/+HdgOWGtMB8GA1UdIwQY MBaAFJt6YudeDskrsd7x4ZVfdJ/9RVByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iZTFjYzEtODI4Ni00NGY3LTk4YTIt MDIwZmM2ODEzMTIxLzEvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iZTFjYzEtODI4Ni00NGY3LTk4YTItMDIwZmM2ODEzMTIx LzEvbTNwaTUxNE95U3V4M3ZIaGxWOTBuXzFGVUhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgDa6gK/ cnnRF1ztyby2pL1EqrFmTtgmgs+lBMOB5WlsjplaQZdUoNdt32INCbW5ChasmSW+ PgnaLBhaq75DIgAyPVGylc8MmL5ywa02/MFhJ5Srlhh4MKoeiOjH45y0NiFs0Y4G mXx7vzTu5E3tfDAkIc9GA6b4NNSaxLVpTCvJS2k5Y6p/18Q0GR85VUchd3jA3Ofb IAw9IVi2J+gzpW0ScFYK+mPSpxzXKkMf5Kp/GxQjUMmLHgdKmMH3mvxkA6R0rZtL CkG1G40/yeNv1aMBtVJRVvusD7Q7+swiHy9ZEzJrrmX2peHp65Y7ydK8OdeX4OV5 D8xMtv5tNk+thw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:57 2026 by rpki-client