This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: mGul73+2iEF2OFWajChAk6RuflSzrp1mlxFU2H/sJB4= Subject key identifier: 2F:AA:AF:C7:F7:57:B7:3C:C9:BC:1B:4C:7D:08:3B:B0:83:12:BA:68 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019BF5AC33CEAC4513CDD01F366AE67BA624 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 15:01:01 +0000 Manifest this update: Sun 25 Jan 2026 15:01:01 +0000 Manifest next update: Mon 26 Jan 2026 15:01:01 +0000 Files and hashes: 1: 0zd4nb5fhm2xTq0WOAi4Xp6bvJc.roa (hash: uMgyt3DoicP5DNjGaZ/5LrHhGzYKFxFylJxozZr11JQ=) 2: 15U-P8KVPY8JhMDqgw8L5oM6fO4.roa (hash: A8TF8Z+NTCSo1JvC6AkpIA17zqlpHZI++mBawEefOjM=) 3: DN1S1WAl_2K3M6Ai-2AoagxMibw.roa (hash: CSPU47hBScO03u7drTuu7JPSF8DLvvXRvBS1TUE4BwI=) 4: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: +9TbbkY1nBLRrp2YzWFAYFYaFgNXm+tXRRw4mtZN6E4=) 5: NA8tG2G3hFFALFYl7Venv99NrVc.roa (hash: bJB0cpk0QWUKw0RjswA5Ubr/IfiAoQmBJm3f3NwKfgQ=) 6: NC0UAgfuyICWUK07pGjses6Gmp4.roa (hash: srG5DwbOiKT6ED23Q54cQarx7hW7qMuLeBg5bvdOCes=) 7: OAN3WdNCBOx9GAH-afVSq5R89fo.roa (hash: /EI4b5flaVJsTGBAEIzkodT4ndbdEXX0V5sGa/1LzJE=) 8: OQ88iyxgykv-UuMoZwpp0BBgiSI.roa (hash: 8tW2X/On0vJs7AepnWjVBDXaTpJx0zYz1Hi+i0/YSxY=) 9: abnIXAgJEhW9VldO5YpGFgSVzcA.roa (hash: XCRB0tR9DLtvsf6qW2UBqKQDVi6//m3IqU34W2mRyLA=) 10: kyDGRd8zbEMUETtukg77Ui7V8qY.roa (hash: devk2rJm/x4h0LaLa8i6gGbkJIFyEo6sNK4CrBpAYrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:33:ce:ac:45:13:cd:d0:1f:36:6a:e6:7b:a6:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Jan 25 15:01:01 2026 GMT Not After : Jan 26 15:01:01 2026 GMT Subject: CN=2faaafc7f757b73cc9bc1b4c7d083bb08312ba68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a8:d7:17:ad:bd:66:ad:55:0e:a9:34:fb:03: 09:0c:bd:f9:2d:97:17:d4:16:23:e4:56:63:66:b5: 3e:bc:01:e8:b9:9e:07:6a:54:06:0c:50:e0:26:fa: 50:96:69:f6:32:5f:fd:21:0c:c1:96:99:ff:74:92: aa:c8:97:6d:eb:54:00:80:13:48:fd:97:6d:7e:ba: 1f:1e:19:a7:f6:19:4c:1d:5b:7d:a9:bc:40:ff:63: dc:cb:fd:84:a6:7e:5d:4d:e3:ce:65:71:6b:30:c8: c9:86:cd:1e:e0:f8:85:d3:04:be:62:9f:47:04:66: c2:9b:57:e7:9c:ca:18:13:39:2d:45:56:d5:fb:32: ff:e6:9a:93:45:80:5e:73:2d:d0:5b:58:16:12:38: 77:97:d4:70:0c:22:f8:59:e0:38:24:89:5a:0b:78: 13:c7:ab:a5:0a:15:90:74:69:20:c9:e2:5c:19:c8: 15:ea:c1:c6:2c:82:a2:2d:41:48:2f:e0:ab:22:a4: e4:5d:73:c5:97:f1:ef:29:cf:09:a2:19:17:41:e7: f3:c6:94:72:d4:36:2d:e8:1e:1c:5d:fe:e3:6d:22: 26:1e:a3:02:33:f1:17:67:97:a8:c5:ee:16:7d:cc: 07:7f:a9:24:3c:2e:5b:14:49:e0:7a:7e:6a:5a:be: 1f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AA:AF:C7:F7:57:B7:3C:C9:BC:1B:4C:7D:08:3B:B0:83:12:BA:68 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:08:21:77:2a:e8:d6:a6:c1:07:53:6c:87:3d:eb:e2:ef:cb: dc:b0:bc:4e:93:c1:75:54:06:55:60:83:df:bb:09:19:3f:36: 4f:2d:86:57:92:b8:dd:50:e7:1e:bc:91:4d:fc:79:58:b0:66: b9:1a:5c:8d:21:83:bb:45:ca:86:7d:80:72:7e:20:c0:24:d3: 35:1d:e4:03:2d:c1:2b:84:2d:67:7b:23:17:0e:4c:3d:7f:f6: 28:c5:6b:9a:70:db:a9:68:7e:f3:63:b4:22:98:90:bd:3d:b2: cd:f2:52:0a:16:47:ba:2a:b9:0b:ab:b8:5c:5a:fe:6f:fa:32: e0:fa:cb:72:93:a6:79:4e:45:a4:d7:3f:ae:8f:5a:f3:4e:3a: 26:96:67:79:d0:65:06:34:8e:a8:6e:a9:67:9e:17:9f:99:90: a3:ef:ab:06:6a:95:0f:76:80:85:dd:02:5e:d9:c6:0c:93:21: 00:47:c7:a9:0a:9c:55:40:d4:b5:76:f3:b7:82:37:d5:93:67: ed:34:c8:5e:89:4b:28:33:f7:3f:f3:72:82:73:4b:99:8d:6f: 80:5c:d7:14:27:62:e7:e6:23:1b:9e:b9:78:ca:f6:8a:44:fe: bd:71:3b:ac:05:5b:a7:09:66:da:20:0d:4b:37:62:03:50:7f: 7f:3b:7a:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rDPOrEUTzdAfNmrme6YkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjYwMTI1MTUwMTAxWhcNMjYwMTI2MTUwMTAxWjAzMTEwLwYDVQQD EygyZmFhYWZjN2Y3NTdiNzNjYzliYzFiNGM3ZDA4M2JiMDgzMTJiYTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKjXF629Zq1VDqk0+wMJDL35LZcX 1BYj5FZjZrU+vAHouZ4HalQGDFDgJvpQlmn2Ml/9IQzBlpn/dJKqyJdt61QAgBNI /ZdtfrofHhmn9hlMHVt9qbxA/2Pcy/2Epn5dTePOZXFrMMjJhs0e4PiF0wS+Yp9H BGbCm1fnnMoYEzktRVbV+zL/5pqTRYBecy3QW1gWEjh3l9RwDCL4WeA4JIlaC3gT x6ulChWQdGkgyeJcGcgV6sHGLIKiLUFIL+CrIqTkXXPFl/HvKc8JohkXQefzxpRy 1DYt6B4cXf7jbSImHqMCM/EXZ5eoxe4WfcwHf6kkPC5bFEngen5qWr4f1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+qr8f3V7c8ybwbTH0IO7CDErpoMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAghdyro 1qbBB1Nshz3r4u/L3LC8TpPBdVQGVWCD37sJGT82Ty2GV5K43VDnHryRTfx5WLBm uRpcjSGDu0XKhn2Acn4gwCTTNR3kAy3BK4QtZ3sjFw5MPX/2KMVrmnDbqWh+82O0 IpiQvT2yzfJSChZHuiq5C6u4XFr+b/oy4PrLcpOmeU5FpNc/ro9a8046JpZnedBl BjSOqG6pZ54Xn5mQo++rBmqVD3aAhd0CXtnGDJMhAEfHqQqcVUDUtXbzt4I31ZNn 7TTIXolLKDP3P/NygnNLmY1vgFzXFCdi5+YjG565eMr2ikT+vXE7rAVbpwlm2iAN SzdiA1B/fzt6dA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:11 2026 by rpki-client