This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft File: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json) Hash identifier: J5dfIJ0ViDFuXcBOeVxhcNXb2sUUNAk+K61NlfSLLpU= Subject key identifier: FA:22:46:B5:00:CE:94:BB:6F:2D:E6:FF:36:3D:09:92:38:6A:AD:0E Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43 Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443 Certificate serial: 019BF53DEFB8665837BE4C87EF4A2FEFDEE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft Manifest number: 1359 Signing time: Sun 25 Jan 2026 13:00:35 +0000 Manifest this update: Sun 25 Jan 2026 13:00:35 +0000 Manifest next update: Mon 26 Jan 2026 13:00:35 +0000 Files and hashes: 1: A50jm4RKuLhFP5pmOh8yo-bEAx4.roa (hash: uMoMI/3gHlBNr9Dclj/R38BqLAJ7Q+D5bCBwp5a+gbI=) 2: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: hQ8wJEVwYSWiI1sppVCwDDXr2bCaR9tufJLjz5yYwgY=) 3: tdrrEw2QhUroasWZGcJ2TASPuNk.roa (hash: 5qK59vOHIiTj9OvpFdOa8R0zqMTVoz3YO9USMYAJNt4=) 4: vZCS-cDmopO-qNxnU9jSVeCrpJg.roa (hash: ojMpU7jstaT9u+/Jymeixtegt7Gz6xXftszxg6yH2ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3d:ef:b8:66:58:37:be:4c:87:ef:4a:2f:ef:de:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443 Validity Not Before: Jan 25 13:00:35 2026 GMT Not After : Jan 26 13:00:35 2026 GMT Subject: CN=fa2246b500ce94bb6f2de6ff363d0992386aad0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:67:cd:cb:88:bc:07:c2:e5:16:30:a3:26:b3: 49:ff:8b:49:17:86:7d:b9:d0:d5:e2:0b:42:db:ee: c1:3e:17:9d:10:b2:cc:1b:ff:22:03:68:b4:30:d4: c6:d7:36:b5:ce:50:bc:15:b9:5d:96:18:8e:78:d8: 32:f7:29:85:1a:ce:41:40:54:cb:af:7d:a6:d3:ba: 0d:41:23:0c:b0:eb:7a:96:d2:bb:e2:61:2a:9e:c1: 09:d9:e7:ac:c9:8f:de:29:5c:68:33:38:53:ac:ab: e3:18:80:26:bb:62:c1:44:31:60:8c:fe:66:7f:38: 5b:32:4b:93:cd:28:15:f3:dc:c7:22:dc:f9:14:ba: 50:0d:94:45:20:8b:01:e3:26:96:b5:aa:5e:0e:33: 7a:b8:16:84:67:dc:fc:de:90:2e:15:0d:02:93:4a: 28:12:23:54:20:78:d2:91:e8:60:6e:ba:55:0c:74: 0a:55:4d:66:8b:09:64:00:75:d7:f8:a6:ba:e6:7a: e0:af:45:14:cd:38:d3:02:ee:b1:40:3f:65:65:0d: 42:a0:cd:c9:5c:0c:70:bc:94:57:37:9b:bc:e3:47: 74:32:22:e6:50:ab:82:74:06:5d:fd:62:3c:1e:c5: 90:6d:ec:1e:2e:c9:39:ec:f8:15:14:aa:50:61:8c: 0f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:22:46:B5:00:CE:94:BB:6F:2D:E6:FF:36:3D:09:92:38:6A:AD:0E X509v3 Authority Key Identifier: keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f4:61:71:2b:e7:96:cf:6c:6a:11:4e:e8:cc:6d:9d:4b:09: a7:17:cc:8f:a6:d1:75:4f:3a:79:18:ab:57:bd:ee:cd:b6:f7: 74:2c:aa:64:b8:cc:19:7f:25:ea:44:41:ca:4c:d0:64:84:63: 55:b3:1f:ea:19:3e:f0:9d:5a:ed:9d:b2:9c:4c:3c:ba:87:0a: 95:c0:21:f1:53:d1:80:91:fe:fb:f9:6d:5a:2e:f3:c1:d6:cf: 44:40:7a:24:ad:f0:25:66:46:53:cc:58:0b:e1:1f:93:58:d3: 76:3c:19:9a:33:0b:f8:d4:f7:59:84:e6:90:ef:6b:d3:cd:dc: 78:4d:fd:01:7a:8e:b3:ae:ea:14:2e:b7:a2:46:57:91:5d:92: 2c:03:e1:dc:09:1e:48:28:bb:18:2e:b5:b3:b1:01:a3:87:1f: 44:6b:14:1e:fb:f3:78:c1:2d:9c:db:e1:14:f6:95:6a:01:7b: 59:56:9e:4d:4b:6d:38:5b:21:2f:c7:4b:c3:2f:a0:f6:49:64: 6d:eb:4e:75:ce:03:ee:9c:a2:bc:06:1b:02:3a:1e:4d:10:43: 93:12:0e:c6:09:9d:db:97:b9:66:08:f6:ba:65:3f:c5:c8:ae: 88:09:f4:b5:94:d5:49:46:9c:58:ab:17:ab:7f:cb:cb:78:a1: 89:08:0c:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pe+4Zlg3vkyH70ov797nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNDhjMWQ4MDA4Y2RjMDU5ZGIwYjI3YWE5NTE0Nzk5YzA2 ZDU0NDMwHhcNMjYwMTI1MTMwMDM1WhcNMjYwMTI2MTMwMDM1WjAzMTEwLwYDVQQD EyhmYTIyNDZiNTAwY2U5NGJiNmYyZGU2ZmYzNjNkMDk5MjM4NmFhZDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGfNy4i8B8LlFjCjJrNJ/4tJF4Z9 udDV4gtC2+7BPhedELLMG/8iA2i0MNTG1za1zlC8FbldlhiOeNgy9ymFGs5BQFTL r32m07oNQSMMsOt6ltK74mEqnsEJ2eesyY/eKVxoMzhTrKvjGIAmu2LBRDFgjP5m fzhbMkuTzSgV89zHItz5FLpQDZRFIIsB4yaWtapeDjN6uBaEZ9z83pAuFQ0Ck0oo EiNUIHjSkehgbrpVDHQKVU1miwlkAHXX+Ka65nrgr0UUzTjTAu6xQD9lZQ1CoM3J XAxwvJRXN5u840d0MiLmUKuCdAZd/WI8HsWQbeweLsk57PgVFKpQYYwPlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPoiRrUAzpS7by3m/zY9CZI4aq0OMB8GA1UdIwQY MBaAFJpIwdgAjNwFnbCyeqlRR5nAbVRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jYjYxNGMtNDk1ZS00MTBlLTg3MzAt NWEzNjYzMTVjMTY2LzEvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9jYjYxNGMtNDk1ZS00MTBlLTg3MzAtNWEzNjYzMTVjMTY2 LzEvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfRhcSvn ls9sahFO6MxtnUsJpxfMj6bRdU86eRirV73uzbb3dCyqZLjMGX8l6kRBykzQZIRj VbMf6hk+8J1a7Z2ynEw8uocKlcAh8VPRgJH++/ltWi7zwdbPREB6JK3wJWZGU8xY C+Efk1jTdjwZmjML+NT3WYTmkO9r083ceE39AXqOs67qFC63okZXkV2SLAPh3Ake SCi7GC61s7EBo4cfRGsUHvvzeMEtnNvhFPaVagF7WVaeTUttOFshL8dLwy+g9klk betOdc4D7pyivAYbAjoeTRBDkxIOxgmd25e5Zgj2umU/xciuiAn0tZTVSUacWKsX q3/Ly3ihiQgMzA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:22 2026 by rpki-client