This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft File: Mns0IMJQE3legioq5Q043B04J5M.mft (raw, json) Hash identifier: lqpfMdWPTgUN8gGH7CkDzSvs5Vvs47Ft8FMr/s5Rx9E= Subject key identifier: 01:E8:81:71:57:38:B8:D9:94:F1:98:CB:2F:40:87:96:51:7D:05:7C Authority key identifier: 32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93 Certificate issuer: /CN=327b3420c25013795e822a2ae50d38dc1d382793 Certificate serial: 019BFA645275792E6454C911A0AB91DD1FDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 13:00:37 +0000 Manifest this update: Mon 26 Jan 2026 13:00:37 +0000 Manifest next update: Tue 27 Jan 2026 13:00:37 +0000 Files and hashes: 1: Mns0IMJQE3legioq5Q043B04J5M.crl (hash: cL2Z+RRUiSgWprzZkyWFQIxL+Ke2BkVWHyGtLVso5XM=) 2: kYVHDkjWpBomTAXvZtm-ybsEw4g.roa (hash: 6LPY5S+V1vJP40u2fVqFKReWSp6f+FzxIr8cYQv0/dw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:52:75:79:2e:64:54:c9:11:a0:ab:91:dd:1f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=327b3420c25013795e822a2ae50d38dc1d382793 Validity Not Before: Jan 26 13:00:37 2026 GMT Not After : Jan 27 13:00:37 2026 GMT Subject: CN=01e881715738b8d994f198cb2f408796517d057c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e7:95:53:99:76:a0:93:e2:3d:ea:58:e5:8b: df:75:fa:33:c4:af:2b:ca:f0:8a:56:2c:16:35:d4: 02:85:3d:bf:12:19:19:8f:7e:fb:f4:30:40:1b:e4: b5:da:99:57:4e:86:5a:dc:bd:ee:7b:81:b5:5d:7f: 7f:3a:4f:97:0c:89:32:36:39:0e:99:6d:ee:90:bf: e9:26:5e:ff:49:a9:4d:41:25:3a:0a:4b:37:4b:c6: 4c:32:e7:de:5e:b9:eb:f0:5e:31:3a:79:7b:fc:3f: 83:a4:04:d7:e0:0d:02:c9:fa:20:1e:ad:5c:c9:1f: d3:3a:62:20:e2:24:33:69:8c:45:98:5f:e2:68:8b: ca:fe:f8:51:a8:aa:31:8d:35:63:3a:c2:0b:2b:5e: 1d:b3:41:01:56:00:3c:72:85:5a:a2:fa:b1:64:35: b5:3a:02:51:5a:ad:db:70:4c:44:8c:08:12:08:9a: 82:da:17:b8:1a:d7:3e:ba:f0:db:95:77:26:de:59: 8b:4a:63:72:32:df:78:5a:e9:33:1e:18:5d:d3:ea: 2a:1f:bb:1d:19:fc:32:e4:b0:ed:04:00:5f:14:8c: 52:8a:e8:3e:00:a0:d6:30:3d:b1:63:de:49:ce:d2: 1a:ad:c5:97:6f:44:cb:5e:73:83:fd:0c:96:fc:e5: 10:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E8:81:71:57:38:B8:D9:94:F1:98:CB:2F:40:87:96:51:7D:05:7C X509v3 Authority Key Identifier: keyid:32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a9:fa:86:a6:46:58:bd:46:7c:76:48:26:87:43:0a:88:a6: 8e:1f:06:06:4f:7a:ff:d6:2e:cc:18:e6:3e:e2:aa:67:4f:07: f4:59:9b:8e:8a:b9:31:0d:94:2b:6e:2f:05:c8:fe:31:52:86: d1:5e:03:3b:5c:bb:68:6d:81:36:c5:ef:0f:0b:fd:5a:61:37: 78:24:28:dd:f8:a6:a9:f9:27:74:cd:ae:92:16:12:9c:08:cd: 48:65:ec:94:0d:7f:8a:c2:27:63:a5:09:f4:e4:1a:81:42:8c: 37:84:8e:9a:40:ea:b8:e6:d1:2a:d7:72:d3:d4:4f:f9:2c:23: 4f:3a:6b:84:b4:ab:fb:f6:6f:0d:8c:bf:50:55:33:60:d1:d5: fd:97:02:7a:cc:8e:21:0d:50:d2:54:bb:78:f1:27:32:47:10: 70:92:36:65:06:9b:04:29:7a:b3:fb:37:9c:72:7b:ef:41:2f: 3a:b7:16:7a:c6:8c:83:49:2d:a8:6e:5b:fe:86:70:13:7d:1f: 50:a7:46:e8:78:fa:be:2e:cb:44:1e:65:3f:8c:7a:79:b4:b9: 5a:d9:ec:fd:ba:41:c8:e3:8f:f7:d1:ba:fc:69:b0:48:5d:d4: bd:d4:da:00:a1:82:2c:fa:a1:04:43:11:19:da:dd:5a:c7:a7: 7c:cc:27:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZFJ1eS5kVMkRoKuR3R/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyN2IzNDIwYzI1MDEzNzk1ZTgyMmEyYWU1MGQzOGRjMWQz ODI3OTMwHhcNMjYwMTI2MTMwMDM3WhcNMjYwMTI3MTMwMDM3WjAzMTEwLwYDVQQD EygwMWU4ODE3MTU3MzhiOGQ5OTRmMTk4Y2IyZjQwODc5NjUxN2QwNTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeeVU5l2oJPiPepY5YvfdfozxK8r yvCKViwWNdQChT2/EhkZj3779DBAG+S12plXToZa3L3ue4G1XX9/Ok+XDIkyNjkO mW3ukL/pJl7/SalNQSU6Cks3S8ZMMufeXrnr8F4xOnl7/D+DpATX4A0CyfogHq1c yR/TOmIg4iQzaYxFmF/iaIvK/vhRqKoxjTVjOsILK14ds0EBVgA8coVaovqxZDW1 OgJRWq3bcExEjAgSCJqC2he4Gtc+uvDblXcm3lmLSmNyMt94WukzHhhd0+oqH7sd Gfwy5LDtBABfFIxSiug+AKDWMD2xY95JztIarcWXb0TLXnOD/QyW/OUQbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHogXFXOLjZlPGYyy9Ah5ZRfQV8MB8GA1UdIwQY MBaAFDJ7NCDCUBN5XoIqKuUNONwdOCeTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zNjMxZTAtNTZkNy00YzI5LTk1YzQt NjY4MmIwN2ZhOTQ3LzEvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zNjMxZTAtNTZkNy00YzI5LTk1YzQtNjY4MmIwN2ZhOTQ3 LzEvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqn6hqZG WL1GfHZIJodDCoimjh8GBk96/9YuzBjmPuKqZ08H9Fmbjoq5MQ2UK24vBcj+MVKG 0V4DO1y7aG2BNsXvDwv9WmE3eCQo3fimqfkndM2ukhYSnAjNSGXslA1/isInY6UJ 9OQagUKMN4SOmkDquObRKtdy09RP+SwjTzprhLSr+/ZvDYy/UFUzYNHV/ZcCesyO IQ1Q0lS7ePEnMkcQcJI2ZQabBCl6s/s3nHJ770EvOrcWesaMg0ktqG5b/oZwE30f UKdG6Hj6vi7LRB5lP4x6ebS5Wtns/bpByOOP99G6/GmwSF3UvdTaAKGCLPqhBEMR GdrdWsenfMwnyA== -----END CERTIFICATE-----Generated at Mon Jan 26 18:58:24 2026 by rpki-client