This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft File: MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft (raw, json) Hash identifier: 301OcdqTP/spB1+2ABpR/I54E5pxc3bMGEy0Is8WFtw= Subject key identifier: A9:18:B1:CB:53:99:E1:A4:81:CF:3E:25:98:07:A2:99:73:01:EA:3D Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5 Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5 Certificate serial: 019BF5AC463DFB64C2C4FC311D07DFD8A84C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft Manifest number: 0ECE Signing time: Sun 25 Jan 2026 15:01:06 +0000 Manifest this update: Sun 25 Jan 2026 15:01:06 +0000 Manifest next update: Mon 26 Jan 2026 15:01:06 +0000 Files and hashes: 1: MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl (hash: 6s3SBRdTEq1EcSKkUwRuEpF4DNRVvpwuoqyOA85VyvY=) 2: W-thWstLj_54HzMDe1CPmkWaZZY.roa (hash: LM0Lib5MmpvXnboN7sbqoV81b7z7jQPCb/hPX5AYcvM=) 3: _a4udz3Wowgk3kz0TQHNdav2CGQ.roa (hash: hiqTVe26hrw7pmofqQ2A/tv62bg85cwYZkNLdMZlYYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:46:3d:fb:64:c2:c4:fc:31:1d:07:df:d8:a8:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5 Validity Not Before: Jan 25 15:01:06 2026 GMT Not After : Jan 26 15:01:06 2026 GMT Subject: CN=a918b1cb5399e1a481cf3e259807a2997301ea3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:af:02:c4:2f:dd:13:00:56:3c:8a:ab:68:14: 12:2d:58:ff:8e:a6:c3:b4:52:d5:67:ae:00:17:31: 0b:61:5d:2f:e7:b7:e7:e6:6c:96:a5:fe:c0:a0:28: fe:16:cd:7f:cc:b9:8f:05:fd:39:28:02:f3:90:7c: a5:50:c9:5a:73:05:48:9a:6b:b6:1a:4a:96:de:43: e6:37:1d:b9:20:99:0f:d4:14:47:43:7d:35:1e:55: 41:d6:fe:a0:83:1e:23:27:0f:79:3e:e8:cd:37:46: 85:30:31:0f:e4:b2:9f:98:55:8a:a1:b2:5b:97:95: f4:ed:63:6e:22:83:26:dd:16:23:2f:25:d2:6d:40: ff:35:4a:54:90:f1:48:86:ca:90:99:91:52:dd:e8: ea:1a:96:fe:f6:2f:f9:97:7a:0a:0f:aa:bd:ca:06: 52:2e:bd:09:99:75:02:5e:15:d7:4a:01:ca:0b:03: 00:28:57:a0:c8:c8:a1:50:7b:76:1f:5f:0c:c2:4e: b2:25:6f:8b:a0:63:d8:72:5f:07:e3:72:40:a3:d2: 89:35:7b:ee:46:21:71:a2:79:3c:5c:75:33:08:3e: bf:84:90:de:c5:d1:d3:f1:01:67:b9:3b:ee:42:bb: eb:5c:2a:e1:8b:af:05:75:89:85:9e:f1:2d:1f:0e: 75:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:18:B1:CB:53:99:E1:A4:81:CF:3E:25:98:07:A2:99:73:01:EA:3D X509v3 Authority Key Identifier: keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f2:b4:47:75:0a:61:d8:77:d0:f7:3c:79:e7:1d:09:23:0d: 70:f6:08:db:09:c7:a8:8c:ae:c0:43:ab:7f:be:31:a8:85:b0: de:52:03:cd:8c:19:28:9b:dc:02:7c:23:1f:1b:06:17:cd:ff: 74:30:ab:b0:bd:93:b5:4d:77:65:ec:58:65:b2:c4:05:78:21: 0f:8e:17:47:d2:cc:b0:f3:d1:5d:b5:78:1d:86:a1:ea:ba:fa: 80:7d:fc:73:77:62:11:97:32:11:7b:7d:d0:64:b0:b6:7d:12: fb:33:cc:ec:67:5c:7a:b0:fa:05:1d:2c:04:db:4a:8b:ce:1c: 4e:5c:66:39:a2:6a:78:42:ff:99:78:5e:47:fb:0f:45:da:97: ab:0c:34:b9:79:01:1c:da:59:87:16:c3:82:2a:d4:43:36:7a: ac:7d:8f:34:d7:92:d8:53:6b:12:8e:80:04:da:dc:35:fb:07: 2b:fa:ca:30:f1:3f:75:e7:ff:5f:7f:dd:21:af:3e:53:98:77: ff:e6:d9:e2:b2:12:59:e2:d1:1d:b9:e0:9f:e4:b2:2f:30:e4: 2b:e7:6e:f9:9a:0c:0f:7d:57:a2:29:a0:ed:2c:75:da:96:23: cc:fa:59:e5:4a:71:fc:cc:b1:37:8c:dc:e2:08:0f:19:c6:8b: 2e:51:31:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rEY9+2TCxPwxHQff2KhMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYTI3NTgwNjQ5YTk5MmU0MWUzMmNmOGMxMjI0NWUwN2Zm OWY5YzUwHhcNMjYwMTI1MTUwMTA2WhcNMjYwMTI2MTUwMTA2WjAzMTEwLwYDVQQD EyhhOTE4YjFjYjUzOTllMWE0ODFjZjNlMjU5ODA3YTI5OTczMDFlYTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq8CxC/dEwBWPIqraBQSLVj/jqbD tFLVZ64AFzELYV0v57fn5myWpf7AoCj+Fs1/zLmPBf05KALzkHylUMlacwVImmu2 GkqW3kPmNx25IJkP1BRHQ301HlVB1v6ggx4jJw95PujNN0aFMDEP5LKfmFWKobJb l5X07WNuIoMm3RYjLyXSbUD/NUpUkPFIhsqQmZFS3ejqGpb+9i/5l3oKD6q9ygZS Lr0JmXUCXhXXSgHKCwMAKFegyMihUHt2H18Mwk6yJW+LoGPYcl8H43JAo9KJNXvu RiFxonk8XHUzCD6/hJDexdHT8QFnuTvuQrvrXCrhi68FdYmFnvEtHw51AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkYsctTmeGkgc8+JZgHoplzAeo9MB8GA1UdIwQY MBaAFDCidYBkmpkuQeMs+MEiReB/+fnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMt ZjU0ODY5OWY5NDdhLzEvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMtZjU0ODY5OWY5NDdh LzEvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/K0R3UK Ydh30Pc8eecdCSMNcPYI2wnHqIyuwEOrf74xqIWw3lIDzYwZKJvcAnwjHxsGF83/ dDCrsL2TtU13ZexYZbLEBXghD44XR9LMsPPRXbV4HYah6rr6gH38c3diEZcyEXt9 0GSwtn0S+zPM7GdcerD6BR0sBNtKi84cTlxmOaJqeEL/mXheR/sPRdqXqww0uXkB HNpZhxbDgirUQzZ6rH2PNNeS2FNrEo6ABNrcNfsHK/rKMPE/def/X3/dIa8+U5h3 /+bZ4rISWeLRHbngn+SyLzDkK+du+ZoMD31Xoimg7Sx12pYjzPpZ5Upx/MyxN4zc 4ggPGcaLLlExOQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:20:59 2026 by rpki-client