This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft File: MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft (raw, json) Hash identifier: r+tBA/1HuOWJ1tdUHF6C9ToOPqaA1XwG/nW9OJ1nIDw= Subject key identifier: 03:CD:83:77:3A:15:F5:8D:91:7F:10:E3:AA:FB:6A:44:0B:BE:8A:C1 Authority key identifier: 30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F Certificate issuer: /CN=304a791dc74f2377232fbb07b6ae71240ab9555f Certificate serial: 019BF91AF5E4F0DEF41EF2C704F332C50017 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft Manifest number: 17E7 Signing time: Mon 26 Jan 2026 07:00:52 +0000 Manifest this update: Mon 26 Jan 2026 07:00:52 +0000 Manifest next update: Tue 27 Jan 2026 07:00:52 +0000 Files and hashes: 1: MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl (hash: alre4Yqiwh6vhhKoZxlaOPHRXTes/6I1APuyTYCBguo=) 2: xJH_hObu47NQAEZXy5oLh9VkIAc.roa (hash: 4Dk7/rqnOwM68MYpX2SX9kUT9VCrAuSm9jEE6Z2mvJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1a:f5:e4:f0:de:f4:1e:f2:c7:04:f3:32:c5:00:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=304a791dc74f2377232fbb07b6ae71240ab9555f Validity Not Before: Jan 26 07:00:52 2026 GMT Not After : Jan 27 07:00:52 2026 GMT Subject: CN=03cd83773a15f58d917f10e3aafb6a440bbe8ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8f:ad:0f:5c:fd:c0:80:80:dd:1c:e0:50:3b: 39:3f:f3:ea:bc:76:7a:2b:0d:70:c0:85:49:54:e2: cc:85:4d:d6:c5:25:7e:00:87:1c:b6:2c:71:15:0e: 32:a8:e2:22:c7:b2:f5:a0:31:cf:20:80:5c:0a:27: 85:fe:3a:d0:d0:a6:52:b7:ba:6d:60:84:85:2f:7b: a9:c7:d7:dd:9e:c2:79:e4:ee:d7:a5:f1:9e:65:c4: ef:08:89:ab:d0:a7:e6:51:c7:d6:9e:1c:36:c8:d9: 66:05:37:09:99:23:1f:da:07:ba:8e:27:ce:a3:e7: 08:b5:69:c3:bd:0d:f1:38:72:c6:9d:29:36:d5:f1: 43:b8:21:46:ba:57:c6:4b:71:76:49:4b:8a:cd:0d: 14:39:8c:0f:85:8f:46:24:59:ed:1c:48:19:fe:71: 6f:bf:24:8d:29:db:e4:e2:cf:84:ad:8b:68:80:fb: f7:fd:12:38:37:99:f1:a3:25:4e:b8:41:da:6f:36: c1:94:c5:96:3b:cd:5f:78:b6:29:e2:fc:a2:34:5e: 6e:30:0a:24:7a:8c:16:7c:cf:b4:28:d6:cd:13:cd: 46:e4:e8:c6:41:3e:81:4f:67:fb:f2:c9:5c:39:e6: c5:80:24:87:a1:2a:d9:80:4c:c5:82:3c:e6:c8:fe: a9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CD:83:77:3A:15:F5:8D:91:7F:10:E3:AA:FB:6A:44:0B:BE:8A:C1 X509v3 Authority Key Identifier: keyid:30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:06:8b:f3:4b:cd:3d:68:52:df:6c:7d:bf:9c:c7:b8:99:11: b6:a9:8d:49:cb:31:b6:66:71:c3:21:b6:95:44:7a:1a:35:63: de:48:c3:6d:7d:4c:4d:3f:d5:e0:21:84:0a:5d:dd:f0:48:c2: 1e:af:49:cc:88:69:40:b3:09:ef:07:1a:8c:6f:a9:fd:a9:36: 4f:e5:34:b7:76:c1:3f:71:66:7b:dc:01:19:4a:69:f5:7d:aa: ef:0a:01:b9:19:c1:37:ae:d8:d8:3e:fc:48:e0:82:d4:c5:17: 87:b8:48:db:8c:81:29:2f:25:40:00:35:d1:29:c4:aa:cf:ea: 8f:83:8d:a5:f2:be:32:49:cf:28:e0:93:21:90:16:aa:1d:f1: 11:17:64:9a:41:4d:de:71:db:68:51:2d:fa:ea:7d:dc:24:69: 50:ff:1b:45:2c:21:15:1e:2f:b3:79:50:20:29:66:62:fb:ee: 6d:ee:f9:f4:99:6c:33:d8:7c:e6:d5:62:bd:41:e2:49:8f:93: 69:dd:f3:d7:db:f8:31:ed:38:55:b3:5e:3d:f1:0b:b4:b5:83: 23:52:20:d7:d6:a9:7b:ac:c2:8b:f0:43:eb:eb:2d:d4:0c:b9: 76:cc:b5:d5:fb:31:d0:2e:43:3e:aa:b1:9a:59:52:45:59:b3: 59:6a:61:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5GvXk8N70HvLHBPMyxQAXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNGE3OTFkYzc0ZjIzNzcyMzJmYmIwN2I2YWU3MTI0MGFi OTU1NWYwHhcNMjYwMTI2MDcwMDUyWhcNMjYwMTI3MDcwMDUyWjAzMTEwLwYDVQQD EygwM2NkODM3NzNhMTVmNThkOTE3ZjEwZTNhYWZiNmE0NDBiYmU4YWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI+tD1z9wICA3RzgUDs5P/PqvHZ6 Kw1wwIVJVOLMhU3WxSV+AIcctixxFQ4yqOIix7L1oDHPIIBcCieF/jrQ0KZSt7pt YISFL3upx9fdnsJ55O7XpfGeZcTvCImr0KfmUcfWnhw2yNlmBTcJmSMf2ge6jifO o+cItWnDvQ3xOHLGnSk21fFDuCFGulfGS3F2SUuKzQ0UOYwPhY9GJFntHEgZ/nFv vySNKdvk4s+ErYtogPv3/RI4N5nxoyVOuEHabzbBlMWWO81feLYp4vyiNF5uMAok eowWfM+0KNbNE81G5OjGQT6BT2f78slcOebFgCSHoSrZgEzFgjzmyP6ppwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPNg3c6FfWNkX8Q46r7akQLvorBMB8GA1UdIwQY MBaAFDBKeR3HTyN3Iy+7B7aucSQKuVVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUVwNUhjZFBJM2NqTDdzSHRxNXhKQXE1VlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xOTRjOGUtZTFiNi00YWFlLWI1YjIt Nzk4MWZkZTZiZjM5LzEvTUVwNUhjZFBJM2NqTDdzSHRxNXhKQXE1VlY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8xOTRjOGUtZTFiNi00YWFlLWI1YjItNzk4MWZkZTZiZjM5 LzEvTUVwNUhjZFBJM2NqTDdzSHRxNXhKQXE1VlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQaL80vN PWhS32x9v5zHuJkRtqmNScsxtmZxwyG2lUR6GjVj3kjDbX1MTT/V4CGECl3d8EjC Hq9JzIhpQLMJ7wcajG+p/ak2T+U0t3bBP3Fme9wBGUpp9X2q7woBuRnBN67Y2D78 SOCC1MUXh7hI24yBKS8lQAA10SnEqs/qj4ONpfK+MknPKOCTIZAWqh3xERdkmkFN 3nHbaFEt+up93CRpUP8bRSwhFR4vs3lQIClmYvvube759JlsM9h85tVivUHiSY+T ad3z19v4Me04VbNePfELtLWDI1Ig19ape6zCi/BD6+st1Ay5dsy11fsx0C5DPqqx mllSRVmzWWphLg== -----END CERTIFICATE-----Generated at Mon Jan 26 14:03:32 2026 by rpki-client