This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft File: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft (raw, json) Hash identifier: KwA4YH17OG3JeZLfXGLDQ4CYkzTl48buY+AspsYXqTo= Subject key identifier: 78:B1:2C:F8:68:8B:D5:02:12:D0:A5:A5:2C:15:3C:86:4E:66:CB:2B Authority key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78 Certificate issuer: /CN=31d7d9d29cecf8e59122233d716e6b050e718478 Certificate serial: 019BF6518E6048F3513135084B032D8A8456 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft Manifest number: 03C5 Signing time: Sun 25 Jan 2026 18:01:38 +0000 Manifest this update: Sun 25 Jan 2026 18:01:38 +0000 Manifest next update: Mon 26 Jan 2026 18:01:38 +0000 Files and hashes: 1: 9jfmZ8bQaVGPFDWRFHvQHmnS8fo.roa (hash: /DXZZnlzFxIqpfLKa2jzn4JOmraJhYpvlatvoWLWvdY=) 2: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl (hash: nFF8ncw19mBqnJ+fczpes5RHbuW/knQJQ3RE91KhW1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:8e:60:48:f3:51:31:35:08:4b:03:2d:8a:84:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d7d9d29cecf8e59122233d716e6b050e718478 Validity Not Before: Jan 25 18:01:38 2026 GMT Not After : Jan 26 18:01:38 2026 GMT Subject: CN=78b12cf8688bd50212d0a5a52c153c864e66cb2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:75:2e:31:2f:a1:f7:54:a0:d2:af:23:78:50: 1a:f1:ac:ae:9c:b0:11:ca:b4:e3:82:4b:ab:02:b7: 49:0d:d7:fe:e4:3d:3a:41:ca:7e:10:0d:0f:23:ab: d3:d6:f1:70:5b:ca:61:ec:a5:f7:88:5b:af:a7:21: e0:95:e8:7c:34:2d:51:bc:0d:49:54:39:7e:60:56: a0:ae:02:6b:06:c2:ee:12:5c:ce:d8:6c:7d:89:0c: 4b:86:0e:b9:e6:22:3d:06:38:13:3c:4b:7a:99:70: a1:3c:50:d8:32:d7:d5:14:f2:31:95:95:e5:b6:7f: 38:f5:3a:e0:e6:fa:a9:c9:de:11:6f:fe:fd:cf:9a: 61:a9:f1:72:6f:15:13:3d:a1:17:74:cf:4b:f8:5b: 26:b2:6c:16:85:1f:e7:82:27:56:75:9a:3e:24:be: d1:95:b5:7f:39:2a:3f:4d:e2:86:b5:cb:8d:24:49: b6:23:cc:3e:0a:5c:ed:df:7f:aa:fa:82:b4:5f:55: 7b:85:f2:94:ab:b2:4d:b4:f5:62:cf:fb:b6:11:c9: 5d:fc:c3:e8:b9:39:b2:fe:b0:91:af:75:81:1a:a7: 28:e7:e7:d2:45:56:00:d1:40:78:19:a1:ca:2b:70: 57:3a:f6:7e:d9:79:4f:d7:a4:c2:1f:9b:64:f7:2a: 13:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B1:2C:F8:68:8B:D5:02:12:D0:A5:A5:2C:15:3C:86:4E:66:CB:2B X509v3 Authority Key Identifier: keyid:31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:64:3d:a1:4e:44:54:6d:ff:44:a0:4f:74:3c:fd:15:bf:d8: 0c:a7:7f:88:16:0d:e1:fc:d1:37:f9:8f:d9:a0:a8:46:dc:20: e8:fc:72:d0:c3:70:82:c1:ec:14:e3:79:43:70:32:83:b0:02: 73:ff:6a:dc:79:e6:e4:99:f0:be:72:1d:50:4b:7e:e4:93:a4: f9:1e:6f:bf:c9:99:e9:b5:15:9c:61:c4:4d:ac:06:45:e4:f4: 6d:f6:32:fb:c0:fb:70:2e:76:75:b9:6e:99:df:ac:cb:d2:4c: 4d:b7:75:42:e4:ae:52:2e:8f:a1:9b:b5:7f:46:7c:31:ef:05: 8d:0e:86:59:0b:fa:13:03:8d:9b:28:f9:37:10:ab:f9:0a:8e: 18:8e:82:c5:a9:4b:36:b0:3f:f3:3f:67:3d:50:4a:56:a2:fc: 20:70:0c:92:c2:d3:8e:c7:d0:94:95:55:ce:1a:74:63:fe:32: a5:06:5f:26:44:0f:be:d6:1c:9f:54:dc:fa:94:f2:ef:de:cc: b4:d4:fb:33:ea:2c:43:6f:be:0d:21:e1:34:7f:7a:61:b3:c2: 7d:a9:b2:6d:74:85:d7:e8:a7:03:78:94:b3:69:71:30:40:ba: e1:5f:ee:68:30:fd:bf:95:d9:ef:8d:95:f5:b5:08:89:8b:21: ed:d4:c2:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UY5gSPNRMTUISwMtioRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZDdkOWQyOWNlY2Y4ZTU5MTIyMjMzZDcxNmU2YjA1MGU3 MTg0NzgwHhcNMjYwMTI1MTgwMTM4WhcNMjYwMTI2MTgwMTM4WjAzMTEwLwYDVQQD Eyg3OGIxMmNmODY4OGJkNTAyMTJkMGE1YTUyYzE1M2M4NjRlNjZjYjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3UuMS+h91Sg0q8jeFAa8ayunLAR yrTjgkurArdJDdf+5D06Qcp+EA0PI6vT1vFwW8ph7KX3iFuvpyHgleh8NC1RvA1J VDl+YFagrgJrBsLuElzO2Gx9iQxLhg655iI9BjgTPEt6mXChPFDYMtfVFPIxlZXl tn849Trg5vqpyd4Rb/79z5phqfFybxUTPaEXdM9L+FsmsmwWhR/ngidWdZo+JL7R lbV/OSo/TeKGtcuNJEm2I8w+Clzt33+q+oK0X1V7hfKUq7JNtPViz/u2Ecld/MPo uTmy/rCRr3WBGqco5+fSRVYA0UB4GaHKK3BXOvZ+2XlP16TCH5tk9yoTQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHixLPhoi9UCEtClpSwVPIZOZssrMB8GA1UdIwQY MBaAFDHX2dKc7PjlkSIjPXFuawUOcYR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hZjgzMmItYTY0MS00ZTQ2LWE4MzYt NDBmNGM2OGU5YTMxLzEvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hZjgzMmItYTY0MS00ZTQ2LWE4MzYtNDBmNGM2OGU5YTMx LzEvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGQ9oU5E VG3/RKBPdDz9Fb/YDKd/iBYN4fzRN/mP2aCoRtwg6Pxy0MNwgsHsFON5Q3Ayg7AC c/9q3Hnm5JnwvnIdUEt+5JOk+R5vv8mZ6bUVnGHETawGReT0bfYy+8D7cC52dblu md+sy9JMTbd1QuSuUi6PoZu1f0Z8Me8FjQ6GWQv6EwONmyj5NxCr+QqOGI6CxalL NrA/8z9nPVBKVqL8IHAMksLTjsfQlJVVzhp0Y/4ypQZfJkQPvtYcn1Tc+pTy797M tNT7M+osQ2++DSHhNH96YbPCfamybXSF1+inA3iUs2lxMEC64V/uaDD9v5XZ742V 9bUIiYsh7dTCtQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:50 2026 by rpki-client