This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft File: mryiPS4rrR-1eI3bX1pvx6tiyiA.mft (raw, json) Hash identifier: nUp5F0kYPGQZfM7rjuthL5Dpn3+TF8fDSDdd3a5B/CI= Subject key identifier: D5:D9:1C:AF:74:63:54:82:6A:BB:03:06:A5:68:97:BA:79:A2:3E:25 Authority key identifier: 9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20 Certificate issuer: /CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20 Certificate serial: 019BF8ADBE27142765C393077001D7F51E89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft Manifest number: 01BA Signing time: Mon 26 Jan 2026 05:01:34 +0000 Manifest this update: Mon 26 Jan 2026 05:01:34 +0000 Manifest next update: Tue 27 Jan 2026 05:01:34 +0000 Files and hashes: 1: cAKVqYBd9IcAL6r2ZvxM_Qj1ndI.roa (hash: XqFaKsdiSRNsnwScS0QPlL53huZcp/xfhEBOIjWXbkk=) 2: mryiPS4rrR-1eI3bX1pvx6tiyiA.crl (hash: GFAOdd3/YuSYj2vfQdCuM9qBXSsYlPVMrgCr1UO/3gk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:be:27:14:27:65:c3:93:07:70:01:d7:f5:1e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20 Validity Not Before: Jan 26 05:01:34 2026 GMT Not After : Jan 27 05:01:34 2026 GMT Subject: CN=d5d91caf746354826abb0306a56897ba79a23e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:5a:54:8e:98:ba:2d:51:b2:c7:e6:17:dd: 27:28:42:79:e6:9c:78:68:2a:11:43:ff:6e:3e:61: 7b:96:9f:0c:af:9a:fd:0c:e0:ce:7a:f3:5d:b4:b8: b0:74:6a:6b:f5:e5:66:13:9b:6c:fe:f8:e1:40:b8: 35:a5:b4:7a:03:33:f5:32:e1:ca:31:4f:68:a7:4e: c2:e5:ad:d2:73:59:e2:5c:9b:a3:11:c4:23:54:55: e8:e3:67:98:5c:5b:cb:37:ea:31:06:33:d6:19:c9: 18:84:d1:3a:89:9c:6d:7a:e8:5d:14:67:37:6b:32: 0b:1b:59:cb:2b:27:41:1b:c5:07:fe:2c:8e:d0:84: 61:89:77:18:f6:73:80:c4:e2:64:e4:74:65:10:a9: cd:ba:32:62:3b:90:d9:30:88:f0:a2:1c:64:e9:b5: c2:06:be:dc:8d:f7:d7:0b:7d:90:30:cf:a6:b7:dd: 9c:03:5e:37:59:0e:29:2d:9f:31:ef:90:48:a3:e7: ef:61:d5:53:09:3e:7d:77:f8:33:2c:44:7c:90:9f: 08:c8:4b:e0:88:76:28:d9:4e:40:59:d4:7a:5e:92: f2:75:6d:4a:3f:51:fe:8d:50:95:87:83:d9:d4:9d: 2c:01:86:4b:f8:e4:3b:77:0e:6b:f3:98:39:45:5c: 50:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D9:1C:AF:74:63:54:82:6A:BB:03:06:A5:68:97:BA:79:A2:3E:25 X509v3 Authority Key Identifier: keyid:9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:1d:a0:ee:bf:f9:fd:75:62:87:67:7e:db:95:a5:39:8e:26: 2c:29:64:a1:92:4d:9d:4f:37:d8:d4:d1:e3:f3:8f:76:3b:00: b5:68:c6:fb:ab:68:fc:90:17:95:96:95:d0:7c:98:ae:69:ab: 83:9f:bd:12:47:1f:0f:13:2c:74:2d:e1:8e:a9:91:76:56:65: 4c:48:5d:35:44:48:5c:55:6e:b5:76:b6:f5:e0:d4:e3:3c:6e: ae:a2:62:7a:44:80:76:80:52:b9:9b:07:a2:a1:48:05:41:63: 0c:68:11:38:23:73:eb:db:b3:68:2a:68:1f:dc:26:e6:eb:42: d8:81:08:4b:74:df:01:28:42:a3:69:43:36:a1:2a:08:a1:34: 95:dd:a2:d6:b7:88:cf:25:dd:2c:4d:e5:6f:75:4d:1d:ce:1c: 2a:d3:aa:b3:6d:17:aa:ff:1e:f5:d2:06:20:8d:3f:e4:03:aa: 2f:7e:92:66:eb:bf:f4:8e:72:13:0a:a6:44:2b:ca:04:d6:df: 54:a4:c2:1f:af:ee:d2:eb:74:a9:c1:1a:f9:67:cc:e8:a0:4a: 60:9c:5a:c6:5f:38:c6:e4:34:57:00:11:f7:11:ba:0a:63:a8: 4b:4b:1f:c5:23:ed:77:29:c9:e2:03:0f:c8:34:22:69:39:3b: e5:42:db:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rb4nFCdlw5MHcAHX9R6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYmNhMjNkMmUyYmFkMWZiNTc4OGRkYjVmNWE2ZmM3YWI2 MmNhMjAwHhcNMjYwMTI2MDUwMTM0WhcNMjYwMTI3MDUwMTM0WjAzMTEwLwYDVQQD EyhkNWQ5MWNhZjc0NjM1NDgyNmFiYjAzMDZhNTY4OTdiYTc5YTIzZTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6paVI6Yui1RssfmF90nKEJ55px4 aCoRQ/9uPmF7lp8Mr5r9DODOevNdtLiwdGpr9eVmE5ts/vjhQLg1pbR6AzP1MuHK MU9op07C5a3Sc1niXJujEcQjVFXo42eYXFvLN+oxBjPWGckYhNE6iZxteuhdFGc3 azILG1nLKydBG8UH/iyO0IRhiXcY9nOAxOJk5HRlEKnNujJiO5DZMIjwohxk6bXC Br7cjffXC32QMM+mt92cA143WQ4pLZ8x75BIo+fvYdVTCT59d/gzLER8kJ8IyEvg iHYo2U5AWdR6XpLydW1KP1H+jVCVh4PZ1J0sAYZL+OQ7dw5r85g5RVxQcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXZHK90Y1SCarsDBqVol7p5oj4lMB8GA1UdIwQY MBaAFJq8oj0uK60ftXiN219ab8erYsogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXJ5aVBTNHJyUi0xZUkzYlgxcHZ4NnRpeWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9mNDAwOWYtODI3NS00NzE2LTk5NzEt YmEzOWU3YzJmNmExLzEvbXJ5aVBTNHJyUi0xZUkzYlgxcHZ4NnRpeWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9mNDAwOWYtODI3NS00NzE2LTk5NzEtYmEzOWU3YzJmNmEx LzEvbXJ5aVBTNHJyUi0xZUkzYlgxcHZ4NnRpeWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgR2g7r/5 /XVih2d+25WlOY4mLClkoZJNnU832NTR4/OPdjsAtWjG+6to/JAXlZaV0HyYrmmr g5+9EkcfDxMsdC3hjqmRdlZlTEhdNURIXFVutXa29eDU4zxurqJiekSAdoBSuZsH oqFIBUFjDGgROCNz69uzaCpoH9wm5utC2IEIS3TfAShCo2lDNqEqCKE0ld2i1reI zyXdLE3lb3VNHc4cKtOqs20Xqv8e9dIGII0/5AOqL36SZuu/9I5yEwqmRCvKBNbf VKTCH6/u0ut0qcEa+WfM6KBKYJxaxl84xuQ0VwAR9xG6CmOoS0sfxSPtdynJ4gMP yDQiaTk75ULb6g== -----END CERTIFICATE-----Generated at Mon Jan 26 10:18:43 2026 by rpki-client