This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json) Hash identifier: Cgm3SsEyjZgyufmWJV8laRGCDacR0WwUcvfKv3JALCw= Subject key identifier: FF:DC:D7:83:79:E4:02:6C:1B:DC:46:7A:28:71:18:1E:4A:EC:69:E0 Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e Certificate serial: 019BF23DD1C91745756961D344DDD049255E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft Manifest number: 0D70 Signing time: Sat 24 Jan 2026 23:01:36 +0000 Manifest this update: Sat 24 Jan 2026 23:01:36 +0000 Manifest next update: Sun 25 Jan 2026 23:01:36 +0000 Files and hashes: 1: GBkpxMzxrmyVPOC0jew5XJ8aWhY.roa (hash: 0vABW6RkwXsVeCWaOEjF8mfFrqV+hg0CI9slDlZi5Hs=) 2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: qew7Zt9Boa09wS5U8/XG50hPAdQVcwuBHb6VoKAQhvM=) 3: xKJGESGTjFwwHaYD9v272aHamsA.roa (hash: fgbTfswP5/p+4NfMt/CDHRQt2/uUSdoKPJJSPF2ke2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:3d:d1:c9:17:45:75:69:61:d3:44:dd:d0:49:25:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e Validity Not Before: Jan 24 23:01:36 2026 GMT Not After : Jan 25 23:01:36 2026 GMT Subject: CN=ffdcd78379e4026c1bdc467a2871181e4aec69e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b2:03:56:f7:c8:69:6f:61:6c:98:6f:12:e8: 23:64:5c:de:c2:45:19:be:23:e2:2f:15:5a:3b:d0: 6d:d1:af:f9:0b:16:8c:cb:ff:5e:7a:c1:81:47:b3: 16:aa:84:2c:19:c6:ea:a7:5f:28:d0:10:4d:a7:85: e3:a1:9a:25:9f:03:6e:38:84:3a:b6:18:73:29:5f: d6:52:d0:f8:64:08:97:5b:12:6d:99:79:da:84:20: 57:79:12:ff:b2:32:34:29:f4:26:40:f9:00:43:8a: 54:14:2f:2e:a7:08:32:b2:59:cd:b6:48:02:9c:b0: b3:d3:3f:70:b0:49:f4:f2:e5:81:09:c2:3d:30:c6: 86:92:c6:a6:0c:38:7e:64:42:f4:41:bb:20:d6:bc: 84:2a:9d:5b:4d:04:b5:57:e4:37:81:65:17:c7:3b: fb:4d:eb:d2:ec:71:1b:f1:54:15:5c:d2:9d:79:d1: 43:43:1f:bb:99:88:cf:32:50:50:dd:5d:1d:44:d3: 43:04:63:6e:32:ed:2e:58:f6:95:30:8c:c2:82:74: 59:db:9c:eb:66:ed:11:c0:57:7b:e2:66:51:3f:1d: 8f:25:17:fd:f0:8c:e0:5d:27:fe:03:42:b8:c6:03: 55:64:cd:72:92:e6:87:5d:c6:60:4c:bd:c9:83:06: 85:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DC:D7:83:79:E4:02:6C:1B:DC:46:7A:28:71:18:1E:4A:EC:69:E0 X509v3 Authority Key Identifier: keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:de:28:36:5b:e7:08:9c:67:7f:c5:13:ec:21:63:2c:b5:53: 99:d1:0e:c9:73:51:04:05:f8:ef:5a:06:ff:46:bc:c2:a2:4c: 67:e9:8f:cb:74:61:16:9d:f4:64:d7:a2:3c:29:0c:77:c2:fd: 44:c6:70:0b:08:f4:a0:5a:1f:58:c2:3c:7b:2d:a1:1b:14:98: 48:ed:3e:b2:51:06:6f:65:88:1d:9f:26:09:a7:c9:b7:dd:a8: 0d:88:f3:7b:f2:9a:90:14:71:f0:7b:5a:da:68:25:f4:bc:8a: 1b:e8:d0:69:4e:a6:3a:17:37:36:bb:45:46:c0:37:c6:ea:83: 77:d3:fd:2b:8c:90:d3:b4:32:4a:51:5e:10:92:b0:c1:8d:f7: f3:3c:dc:f7:b0:4b:8a:33:4b:69:d4:f0:b1:90:43:e2:ab:04: 30:19:6a:a6:23:a5:3b:15:e3:4c:eb:85:44:26:06:f3:30:11: 01:52:05:ef:94:4a:d2:28:58:6e:45:55:95:86:11:f5:20:27: b1:45:d2:5d:29:f6:05:38:89:eb:4f:a8:3c:a5:63:a3:a2:dc: e0:5c:4e:48:86:80:99:0c:e7:02:40:e0:f6:61:82:51:5b:a0: 80:e6:27:b9:da:c0:be:cb:1c:0d:d9:10:9c:b6:53:82:23:9a: 2d:67:8a:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyPdHJF0V1aWHTRN3QSSVeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMDU2YjAzNzVkODk0YjkzY2IwZTI2ZDliNGQ2NGEwOGM1 ODM3MWUwHhcNMjYwMTI0MjMwMTM2WhcNMjYwMTI1MjMwMTM2WjAzMTEwLwYDVQQD EyhmZmRjZDc4Mzc5ZTQwMjZjMWJkYzQ2N2EyODcxMTgxZTRhZWM2OWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7IDVvfIaW9hbJhvEugjZFzewkUZ viPiLxVaO9Bt0a/5CxaMy/9eesGBR7MWqoQsGcbqp18o0BBNp4XjoZolnwNuOIQ6 thhzKV/WUtD4ZAiXWxJtmXnahCBXeRL/sjI0KfQmQPkAQ4pUFC8upwgyslnNtkgC nLCz0z9wsEn08uWBCcI9MMaGksamDDh+ZEL0Qbsg1ryEKp1bTQS1V+Q3gWUXxzv7 TevS7HEb8VQVXNKdedFDQx+7mYjPMlBQ3V0dRNNDBGNuMu0uWPaVMIzCgnRZ25zr Zu0RwFd74mZRPx2PJRf98IzgXSf+A0K4xgNVZM1ykuaHXcZgTL3JgwaFYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/c14N55AJsG9xGeihxGB5K7GngMB8GA1UdIwQY MBaAFDAFawN12JS5PLDibZtNZKCMWDceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yYTc0NzItY2JiOC00Yzk5LWJlMjEt MTFiNGFmYmVkZTE5LzEvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yYTc0NzItY2JiOC00Yzk5LWJlMjEtMTFiNGFmYmVkZTE5 LzEvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZd4oNlvn CJxnf8UT7CFjLLVTmdEOyXNRBAX471oG/0a8wqJMZ+mPy3RhFp30ZNeiPCkMd8L9 RMZwCwj0oFofWMI8ey2hGxSYSO0+slEGb2WIHZ8mCafJt92oDYjze/KakBRx8Hta 2mgl9LyKG+jQaU6mOhc3NrtFRsA3xuqDd9P9K4yQ07QySlFeEJKwwY338zzc97BL ijNLadTwsZBD4qsEMBlqpiOlOxXjTOuFRCYG8zARAVIF75RK0ihYbkVVlYYR9SAn sUXSXSn2BTiJ60+oPKVjo6Lc4FxOSIaAmQznAkDg9mGCUVuggOYnudrAvsscDdkQ nLZTgiOaLWeKsQ== -----END CERTIFICATE-----Generated at Sun Jan 25 07:37:58 2026 by rpki-client