This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft File: MBlcO7BQWGtfTlAEEYAHxIs06uU.mft (raw, json) Hash identifier: pM5OQEiiKo0vIzbrg67xvqrDynXi9otFLKJK+WXsM6Q= Subject key identifier: 95:2E:9E:B2:BD:8E:12:EE:65:FA:9C:11:E1:7C:BF:A2:02:EB:5A:15 Authority key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5 Certificate issuer: /CN=30195c3bb050586b5f4e5004118007c48b34eae5 Certificate serial: 019BF3F5309BF8C8524A19ABC4D1FF33DF9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 07:01:30 +0000 Manifest this update: Sun 25 Jan 2026 07:01:30 +0000 Manifest next update: Mon 26 Jan 2026 07:01:30 +0000 Files and hashes: 1: MBlcO7BQWGtfTlAEEYAHxIs06uU.crl (hash: YuQO0Yw62LW8bDZ5C90iHvoKn8eLQGwRkcYzUFl4j1E=) 2: qeezGpylFYQWdw5Zzwgz6qTCezQ.roa (hash: 81jQgwS6nCCkT6pNsFrxENxQzb13LmVBgngNENTsUtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:30:9b:f8:c8:52:4a:19:ab:c4:d1:ff:33:df:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30195c3bb050586b5f4e5004118007c48b34eae5 Validity Not Before: Jan 25 07:01:30 2026 GMT Not After : Jan 26 07:01:30 2026 GMT Subject: CN=952e9eb2bd8e12ee65fa9c11e17cbfa202eb5a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9a:87:11:f1:28:2f:45:25:b1:bf:73:ee:b3: a1:cf:a5:ff:1e:1e:4a:00:57:e4:e4:3e:e7:6d:ac: da:20:8c:df:de:12:8d:4f:17:e3:df:59:90:52:26: c0:6b:e3:66:75:94:f1:23:75:63:bf:a1:4d:7f:07: fb:5f:2f:b7:61:76:81:a0:ed:84:9d:97:9f:b9:be: 35:e1:04:02:74:d4:dc:a7:78:0a:d1:f4:16:48:10: 9c:8a:79:5d:8c:00:a4:6c:e7:d0:c2:5e:77:bd:ef: 1f:db:8c:af:07:d8:2c:e6:fe:cf:36:5c:fb:8f:c1: 8a:80:5c:69:e6:55:25:f1:21:cc:0e:4e:67:5a:a8: bd:26:6f:98:56:dc:09:9b:e8:0a:7b:f8:11:4f:b9: d6:93:bf:f5:03:d8:04:93:5a:d4:aa:9f:b6:2f:be: 60:70:5c:17:53:6e:e3:fc:83:24:98:7d:75:9f:d4: 41:0c:61:5a:c9:d3:91:c8:13:6a:74:17:ec:95:b7: b3:7b:8c:10:81:d5:a1:f1:8f:22:12:0a:8e:3c:eb: c0:af:70:ee:4d:76:ae:3d:2a:68:25:d8:d7:3e:e7: 74:bc:db:3f:79:02:9c:3a:e6:bb:39:77:8f:fe:85: 45:a0:03:6e:d3:5a:97:65:67:d9:e7:f3:f5:85:68: 82:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2E:9E:B2:BD:8E:12:EE:65:FA:9C:11:E1:7C:BF:A2:02:EB:5A:15 X509v3 Authority Key Identifier: keyid:30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:41:08:8e:ad:35:ba:df:2f:bd:ce:59:e7:7d:af:18:dd:51: dd:d5:40:fc:28:36:e0:72:a6:1d:92:44:88:00:88:91:14:c2: 48:07:56:7e:c5:ef:d2:0f:5a:8d:f8:9e:b6:39:a2:a0:3d:dd: a8:7a:c0:bc:70:43:27:7c:cf:47:1e:f4:20:54:87:6c:b2:58: c0:77:09:ff:ba:32:5a:95:b2:a5:10:6b:81:29:86:5d:13:4d: fb:4d:b4:19:dc:cb:0d:64:eb:a2:5c:87:08:35:e3:83:9a:f4: cd:dc:17:c3:b5:e2:9a:aa:25:bd:9a:df:31:04:2a:ff:1d:16: a6:c4:49:a9:28:df:19:d8:42:75:10:d2:f1:02:5f:ce:ed:10: b6:aa:26:31:0c:0f:a9:25:ee:ef:36:54:55:11:68:52:ce:5d: 46:ee:14:f0:66:5c:c8:77:80:7c:87:c0:50:c5:9b:af:b1:57: 57:7f:1e:39:c3:1f:9c:82:4d:4d:ab:96:b3:84:02:e7:b0:ea: 4b:e7:2e:c3:5f:6c:5e:01:17:17:a0:8b:94:b4:be:8b:bb:3b: 3a:4d:da:d6:7d:20:a2:7b:ab:8f:9e:22:cf:57:0e:a7:a1:cb: 2c:a4:ee:81:b2:0b:0c:35:9c:16:34:82:73:d2:49:05:65:36: bc:be:41:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9TCb+MhSShmrxNH/M9+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMTk1YzNiYjA1MDU4NmI1ZjRlNTAwNDExODAwN2M0OGIz NGVhZTUwHhcNMjYwMTI1MDcwMTMwWhcNMjYwMTI2MDcwMTMwWjAzMTEwLwYDVQQD Eyg5NTJlOWViMmJkOGUxMmVlNjVmYTljMTFlMTdjYmZhMjAyZWI1YTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JqHEfEoL0Ulsb9z7rOhz6X/Hh5K AFfk5D7nbazaIIzf3hKNTxfj31mQUibAa+NmdZTxI3Vjv6FNfwf7Xy+3YXaBoO2E nZefub414QQCdNTcp3gK0fQWSBCcinldjACkbOfQwl53ve8f24yvB9gs5v7PNlz7 j8GKgFxp5lUl8SHMDk5nWqi9Jm+YVtwJm+gKe/gRT7nWk7/1A9gEk1rUqp+2L75g cFwXU27j/IMkmH11n9RBDGFaydORyBNqdBfslbeze4wQgdWh8Y8iEgqOPOvAr3Du TXauPSpoJdjXPud0vNs/eQKcOua7OXeP/oVFoANu01qXZWfZ5/P1hWiCbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUunrK9jhLuZfqcEeF8v6IC61oVMB8GA1UdIwQY MBaAFDAZXDuwUFhrX05QBBGAB8SLNOrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQt YjQyMWMzOGIyZjdmLzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQtYjQyMWMzOGIyZjdm LzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckEIjq01 ut8vvc5Z532vGN1R3dVA/Cg24HKmHZJEiACIkRTCSAdWfsXv0g9ajfietjmioD3d qHrAvHBDJ3zPRx70IFSHbLJYwHcJ/7oyWpWypRBrgSmGXRNN+020GdzLDWTrolyH CDXjg5r0zdwXw7XimqolvZrfMQQq/x0WpsRJqSjfGdhCdRDS8QJfzu0QtqomMQwP qSXu7zZUVRFoUs5dRu4U8GZcyHeAfIfAUMWbr7FXV38eOcMfnIJNTauWs4QC57Dq S+cuw19sXgEXF6CLlLS+i7s7Ok3a1n0gonurj54iz1cOp6HLLKTugbILDDWcFjSC c9JJBWU2vL5Brw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:14:52 2026 by rpki-client