This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft File: mgheBvLiouMEJW-IE1_xPectBzY.mft (raw, json) Hash identifier: 5akkHniileNJhQdmamIWsIQlN/90wl71+DsQvbF+W5I= Subject key identifier: 85:4D:32:62:96:F1:E5:1F:94:D8:46:11:9D:BB:33:AF:F2:6D:60:07 Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36 Certificate issuer: /CN=9a085e06f2e2a2e304256f88135ff13de72d0736 Certificate serial: 019BF72D5A9F07C177DEBBD590273ABCDC04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft Manifest number: 0EC7 Signing time: Sun 25 Jan 2026 22:01:43 +0000 Manifest this update: Sun 25 Jan 2026 22:01:43 +0000 Manifest next update: Mon 26 Jan 2026 22:01:43 +0000 Files and hashes: 1: mgheBvLiouMEJW-IE1_xPectBzY.crl (hash: 0p/ujMUGkw7hWqOmzF11FETZTh80yn49Bkwc9cg259s=) 2: pgk6nsI3cK4BMyAq4yo3QkbL4pU.roa (hash: FD9gDw7QMQ6LHr1l8voFmg+wOG9WJ0q/3TSPnokXHZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:5a:9f:07:c1:77:de:bb:d5:90:27:3a:bc:dc:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736 Validity Not Before: Jan 25 22:01:43 2026 GMT Not After : Jan 26 22:01:43 2026 GMT Subject: CN=854d326296f1e51f94d846119dbb33aff26d6007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:6e:05:90:1b:a5:64:cd:e8:2c:26:8e:d3:41: 6e:2a:b9:d7:29:9f:0d:16:06:73:c4:9b:8b:94:7d: a0:b4:46:79:a5:c7:c0:1e:76:b9:6f:97:72:41:a5: 87:a4:a9:8b:a2:69:c9:cc:db:bd:db:fe:14:04:2f: 03:72:9e:bc:ac:5d:bc:c9:22:39:ac:ef:84:5e:89: cb:4f:e9:40:cc:27:67:25:51:ce:49:42:72:a2:02: a0:12:b7:f6:93:59:8b:c0:1e:65:5c:38:3d:8b:87: db:4b:1b:24:98:a7:2f:db:3c:7c:f7:ef:09:2a:fe: 4a:65:38:5c:54:57:5b:c7:e0:b6:b4:03:bc:6e:08: 3a:4a:1b:31:c1:af:26:24:e9:a9:30:61:8c:5a:b4: 55:2b:d4:46:ca:ff:ec:10:3c:24:be:91:6c:0f:6f: 6d:68:a5:93:57:d2:51:53:28:e8:22:57:17:8b:2b: 44:76:0a:0d:6f:4b:42:92:ca:90:3c:43:98:6a:f2: ac:e5:c1:1f:ed:03:0b:ff:fa:27:05:76:3c:74:b8: c8:dc:57:25:7a:ea:54:a8:9b:f5:b3:c9:76:90:77: bf:39:41:ba:44:4e:7d:9d:1b:67:f3:75:b9:c1:0e: 7f:7d:7c:ec:b2:80:4b:c7:96:84:22:1b:03:0d:e2: df:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4D:32:62:96:F1:E5:1F:94:D8:46:11:9D:BB:33:AF:F2:6D:60:07 X509v3 Authority Key Identifier: keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:43:23:fe:99:98:d3:b8:90:d6:77:3d:67:ea:0d:ac:7d:ad: b7:7f:09:52:20:6f:11:bb:f9:19:ef:0d:ba:78:86:09:16:7d: 29:3e:dc:72:45:78:bc:c6:84:7c:b7:a1:74:85:34:1a:b1:48: 02:dc:e9:52:51:d6:1b:bd:66:25:24:8b:dd:ce:55:68:4d:c0: c4:f8:8c:83:73:12:6a:2b:02:b7:eb:81:ce:64:8e:96:b7:67: 17:e3:d6:07:19:30:86:98:f1:b9:d3:f7:eb:92:d8:34:52:b9: 43:78:f2:ca:bb:69:0b:4b:e3:82:a4:75:08:cd:ad:31:8d:a9: 46:6b:de:7c:9e:3c:70:f0:9f:0c:f4:14:77:e6:bd:69:8e:fe: 3d:5a:6b:1a:99:42:22:da:d8:15:fe:b6:09:61:2a:43:2e:b0: b8:87:8e:c5:45:81:2d:f4:08:63:ea:25:cb:ac:8b:32:1c:9a: 49:9b:8f:22:d7:fb:05:e3:8c:14:77:04:07:64:a5:0c:24:c9: ca:c6:ee:ad:b0:b0:4f:81:b3:32:18:f8:01:16:92:f1:67:58: 0e:52:57:2b:5d:9e:3c:fa:2f:5d:25:e3:62:3e:d4:22:97:b3: 7b:58:c3:7e:c1:af:5b:6a:c5:3f:da:68:e9:a7:db:c4:7a:93: 15:82:97:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LVqfB8F33rvVkCc6vNwEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMDg1ZTA2ZjJlMmEyZTMwNDI1NmY4ODEzNWZmMTNkZTcy ZDA3MzYwHhcNMjYwMTI1MjIwMTQzWhcNMjYwMTI2MjIwMTQzWjAzMTEwLwYDVQQD Eyg4NTRkMzI2Mjk2ZjFlNTFmOTRkODQ2MTE5ZGJiMzNhZmYyNmQ2MDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8m4FkBulZM3oLCaO00FuKrnXKZ8N FgZzxJuLlH2gtEZ5pcfAHna5b5dyQaWHpKmLomnJzNu92/4UBC8Dcp68rF28ySI5 rO+EXonLT+lAzCdnJVHOSUJyogKgErf2k1mLwB5lXDg9i4fbSxskmKcv2zx89+8J Kv5KZThcVFdbx+C2tAO8bgg6Shsxwa8mJOmpMGGMWrRVK9RGyv/sEDwkvpFsD29t aKWTV9JRUyjoIlcXiytEdgoNb0tCksqQPEOYavKs5cEf7QML//onBXY8dLjI3Fcl eupUqJv1s8l2kHe/OUG6RE59nRtn83W5wQ5/fXzssoBLx5aEIhsDDeLfnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVNMmKW8eUflNhGEZ27M6/ybWAHMB8GA1UdIwQY MBaAFJoIXgby4qLjBCVviBNf8T3nLQc2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWdoZUJ2TGlvdU1FSlctSUUxX3hQZWN0QnpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xMGZjZTAtZWU0Ny00ZWQ0LWEwM2Qt MGQ0NTQyOTIwYmNiLzEvbWdoZUJ2TGlvdU1FSlctSUUxX3hQZWN0QnpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xMGZjZTAtZWU0Ny00ZWQ0LWEwM2QtMGQ0NTQyOTIwYmNi LzEvbWdoZUJ2TGlvdU1FSlctSUUxX3hQZWN0QnpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0Mj/pmY 07iQ1nc9Z+oNrH2tt38JUiBvEbv5Ge8NuniGCRZ9KT7cckV4vMaEfLehdIU0GrFI AtzpUlHWG71mJSSL3c5VaE3AxPiMg3MSaisCt+uBzmSOlrdnF+PWBxkwhpjxudP3 65LYNFK5Q3jyyrtpC0vjgqR1CM2tMY2pRmvefJ48cPCfDPQUd+a9aY7+PVprGplC ItrYFf62CWEqQy6wuIeOxUWBLfQIY+oly6yLMhyaSZuPItf7BeOMFHcEB2SlDCTJ ysburbCwT4GzMhj4ARaS8WdYDlJXK12ePPovXSXjYj7UIpeze1jDfsGvW2rFP9po 6afbxHqTFYKX0Q== -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:56 2026 by rpki-client