This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft File: rMMoWMzalYbG2WceMQ1RwoJoxFk.mft (raw, json) Hash identifier: 9umcjsEV66j1MPFFCQj8cDK1QRRW3ZMEp7OX2BMmw2Q= Subject key identifier: DB:A1:ED:27:AA:A0:A0:77:B3:7C:E0:59:00:95:92:F6:31:76:23:B4 Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59 Certificate issuer: /CN=acc32858ccda9586c6d9671e310d51c28268c459 Certificate serial: 019BF619F4CF293B9CB50FDDE9A3728A77E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft Manifest number: 1785 Signing time: Sun 25 Jan 2026 17:00:54 +0000 Manifest this update: Sun 25 Jan 2026 17:00:54 +0000 Manifest next update: Mon 26 Jan 2026 17:00:54 +0000 Files and hashes: 1: NZ4KU7XjOTlJfpxZEeYBOqiocLc.roa (hash: 1hvoqCoD4N6W+G9hGoZfjVl3mm68AnZJdnlCiI2tn30=) 2: rMMoWMzalYbG2WceMQ1RwoJoxFk.crl (hash: CfYxYG3AGEG9S+lFlRNVRtKRu7tVp99J/1ZH8R2+EGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:f4:cf:29:3b:9c:b5:0f:dd:e9:a3:72:8a:77:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459 Validity Not Before: Jan 25 17:00:54 2026 GMT Not After : Jan 26 17:00:54 2026 GMT Subject: CN=dba1ed27aaa0a077b37ce059009592f6317623b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:05:2b:99:06:cb:cc:91:95:3e:7c:e5:51:6c: cf:63:5c:a4:76:c6:67:90:e9:7d:64:2c:70:00:72: e5:f0:63:69:af:30:30:8c:4b:50:90:a8:ed:fb:9d: ae:ac:3e:89:22:04:4c:07:32:18:cc:54:c3:cf:f0: 9c:a3:bc:7c:bd:b9:69:b7:2f:05:50:31:89:65:2d: d6:23:a7:4d:a1:d5:51:33:b4:38:99:37:19:c9:99: 1a:34:3a:02:83:45:f7:61:bf:72:c6:1d:90:53:25: d3:46:cd:57:7b:f2:74:e9:1d:84:fb:76:b0:81:60: 86:b1:38:1a:a5:e8:9a:56:4e:f2:b4:39:92:49:0c: e5:41:ad:d2:5e:86:fe:9e:a7:2b:75:d4:34:b9:45: be:c4:fa:70:39:aa:ee:e3:cc:9f:48:ed:0f:27:75: 73:2e:3d:86:aa:66:24:fa:93:4e:d7:79:09:9e:97: e8:30:a4:54:00:31:f5:f5:4a:f8:fc:dc:3c:8b:84: bf:a9:4d:15:f9:62:4e:09:54:12:36:45:ed:ce:5a: a4:5a:a2:c9:98:26:ef:7e:fe:01:e0:c2:48:fb:8b: 25:ed:46:39:17:e4:c9:ec:1f:8d:1a:50:1c:31:18: e5:75:b4:68:ad:69:f6:cf:c6:6a:1f:5c:e3:6a:da: 55:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A1:ED:27:AA:A0:A0:77:B3:7C:E0:59:00:95:92:F6:31:76:23:B4 X509v3 Authority Key Identifier: keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e9:f8:c1:e8:d4:9c:a5:9b:69:17:88:da:2d:9b:b9:1f:d4: 5a:75:44:01:d5:3a:72:58:4b:0e:46:d1:0a:b2:5c:f7:a0:b3: 25:72:6b:11:84:7a:13:f2:1e:94:88:ea:06:58:98:1e:29:77: da:66:eb:95:cd:81:91:ad:cc:45:17:50:0f:22:74:f2:aa:71: 48:28:bb:e7:d0:77:66:98:a0:8b:fd:97:1c:66:0e:c0:db:81: 41:81:37:3d:21:c7:0d:e7:ac:03:45:d4:8f:ab:c9:06:8e:32: 05:dc:51:a8:32:c6:6d:b6:ab:41:0f:85:62:5a:a0:d7:9d:de: df:2e:4f:38:ae:2d:0d:53:a0:ba:0f:41:14:02:fd:08:54:e5: 02:ab:aa:f9:66:54:73:fe:46:0a:2e:8a:23:f1:c6:39:7b:3d: 2b:99:9e:a4:94:80:99:40:e5:88:fc:38:42:b8:a8:94:3b:e0: fd:32:28:78:44:e6:5b:77:92:96:e2:8c:e4:a0:70:71:93:18: a7:32:f1:ac:56:61:6b:22:78:a7:30:66:e0:19:9e:90:9e:78: c0:d8:8c:a2:65:3e:47:28:28:d2:61:71:34:99:62:aa:95:c1: d8:20:d4:a2:ca:95:02:31:ec:37:21:70:6f:ca:c3:31:8a:83: b3:86:35:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GfTPKTuctQ/d6aNyinfoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYzMyODU4Y2NkYTk1ODZjNmQ5NjcxZTMxMGQ1MWMyODI2 OGM0NTkwHhcNMjYwMTI1MTcwMDU0WhcNMjYwMTI2MTcwMDU0WjAzMTEwLwYDVQQD EyhkYmExZWQyN2FhYTBhMDc3YjM3Y2UwNTkwMDk1OTJmNjMxNzYyM2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQUrmQbLzJGVPnzlUWzPY1ykdsZn kOl9ZCxwAHLl8GNprzAwjEtQkKjt+52urD6JIgRMBzIYzFTDz/Cco7x8vblpty8F UDGJZS3WI6dNodVRM7Q4mTcZyZkaNDoCg0X3Yb9yxh2QUyXTRs1Xe/J06R2E+3aw gWCGsTgapeiaVk7ytDmSSQzlQa3SXob+nqcrddQ0uUW+xPpwOaru48yfSO0PJ3Vz Lj2GqmYk+pNO13kJnpfoMKRUADH19Ur4/Nw8i4S/qU0V+WJOCVQSNkXtzlqkWqLJ mCbvfv4B4MJI+4sl7UY5F+TJ7B+NGlAcMRjldbRorWn2z8ZqH1zjatpVWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNuh7SeqoKB3s3zgWQCVkvYxdiO0MB8GA1UdIwQY MBaAFKzDKFjM2pWGxtlnHjENUcKCaMRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck1Nb1dNemFsWWJHMldjZU1RMVJ3b0pveEZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82Y2Y3NjktOWI1OC00ODQ3LThmMWYt ZWRjNTQwNzJhZTg5LzEvck1Nb1dNemFsWWJHMldjZU1RMVJ3b0pveEZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82Y2Y3NjktOWI1OC00ODQ3LThmMWYtZWRjNTQwNzJhZTg5 LzEvck1Nb1dNemFsWWJHMldjZU1RMVJ3b0pveEZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOn4wejU nKWbaReI2i2buR/UWnVEAdU6clhLDkbRCrJc96CzJXJrEYR6E/IelIjqBliYHil3 2mbrlc2Bka3MRRdQDyJ08qpxSCi759B3Zpigi/2XHGYOwNuBQYE3PSHHDeesA0XU j6vJBo4yBdxRqDLGbbarQQ+FYlqg153e3y5POK4tDVOgug9BFAL9CFTlAquq+WZU c/5GCi6KI/HGOXs9K5mepJSAmUDliPw4QriolDvg/TIoeETmW3eSluKM5KBwcZMY pzLxrFZhayJ4pzBm4BmekJ54wNiMomU+Rygo0mFxNJliqpXB2CDUosqVAjHsNyFw b8rDMYqDs4Y12Q== -----END CERTIFICATE-----Generated at Sun Jan 25 22:37:04 2026 by rpki-client