This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json) Hash identifier: AwRGfVOIu81V5pwlB0depcY7Uz1X4N1DyuZAGh4ELbg= Subject key identifier: A3:83:7A:84:96:33:40:A3:36:01:66:DC:D6:82:BF:28:3F:83:49:ED Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa Certificate serial: 019BF5ABDC865F18313F8217382B5879FBC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 15:00:39 +0000 Manifest this update: Sun 25 Jan 2026 15:00:39 +0000 Manifest next update: Mon 26 Jan 2026 15:00:39 +0000 Files and hashes: 1: 4zRdAfm8vTXKL2ilJfBKhYqn6NY.roa (hash: C2KBkGNtf0AMtr/iwr1TvmDzjxKM7CTZhxV5u4CUJx8=) 2: 7mHHilfx2fsM0_DrjsXwOF85rfw.roa (hash: LrW7R84YlvLcyIjjGUxickFKuQho8pURtHkZxcFyDaM=) 3: 8C5Qc1jGesnaDlr55Bdtrkak4Gs.roa (hash: sxxNThCm3nrgcbrGx+WnSdbs1hK8y85/anDbctnhLsk=) 4: LdfV37MlwkUrVSWNHNR8yVa3UeQ.roa (hash: KsfGJkK20VqHa4HyShHlWqRj8wawsws1Akuhtl9QLC4=) 5: hooTJbDXinwHfgf4gzWvoZ11Z4g.roa (hash: lxJLFoMdq2Ml4HAMFlO9T4URcM8YUhIGKBuS1NtcXtA=) 6: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: vVEMOI4UKpXYLcDqDi7AjpOSzj94bEhiA05KttMia/M=) 7: t5hH6HX6weITLCh8jBVMte4pKbg.roa (hash: i6KVCA8Uu9aS5c5IpxGk1hp7dcMjy2LMR5W/X6X44IY=) 8: uOX0wAHHngBgL0ZEci7ZQvhUzbI.roa (hash: L/4pSTHYLlxM7/E0WzF+gjoqb+agL4vYIcAc8+76EyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:dc:86:5f:18:31:3f:82:17:38:2b:58:79:fb:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa Validity Not Before: Jan 25 15:00:39 2026 GMT Not After : Jan 26 15:00:39 2026 GMT Subject: CN=a3837a84963340a3360166dcd682bf283f8349ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:75:dc:cc:4e:e6:9d:7e:2f:41:5e:76:04:5e: e1:3d:05:f1:ab:71:a9:ad:26:83:d0:fa:c5:ab:e5: d0:88:c3:b8:e5:02:a8:28:87:44:a7:8c:86:df:ae: dd:ee:da:5c:06:fe:cf:da:ec:51:61:48:3f:06:7d: aa:eb:6a:59:4a:7e:2e:ce:17:2b:f6:60:69:65:40: 5e:56:89:58:a1:69:e0:ec:f2:95:e0:d8:95:52:6d: 40:fe:61:09:1f:c9:76:28:82:9c:f7:1e:f0:8a:24: 7b:c0:a0:7e:df:87:79:d8:d0:a7:be:2f:8f:17:8c: e9:05:e5:2a:5c:6b:c6:65:93:8d:8b:df:ce:76:f1: ec:d4:3b:33:65:cf:6f:bc:7e:5f:78:52:d0:07:bc: bb:a8:cb:bb:c1:4b:93:2b:d2:49:b7:48:99:a4:0d: 44:de:53:4c:60:83:06:85:5c:d8:35:a6:e5:11:10: 74:a7:59:79:99:d8:49:c8:f1:c5:f7:e4:59:fe:2d: 29:77:7a:93:ce:b3:1d:48:ba:f9:fc:3c:72:3c:90: fb:99:8d:18:cf:7c:a5:c0:48:67:b8:1e:24:43:1b: ef:8d:ca:48:0f:83:f4:4f:6c:b2:56:97:df:9b:61: e5:ab:98:e4:5f:21:5f:f8:8c:48:ec:33:1d:14:30: 21:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:83:7A:84:96:33:40:A3:36:01:66:DC:D6:82:BF:28:3F:83:49:ED X509v3 Authority Key Identifier: keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:a4:b6:3d:96:4d:96:14:42:2a:ea:91:b5:d4:48:13:a3:19: ca:08:1e:41:0e:e6:0f:cd:2d:ee:ce:54:29:d4:16:46:f9:cd: 81:24:4e:37:f6:23:f3:58:55:fc:c9:2f:4f:cc:d2:d6:72:a6: bb:7e:bc:65:74:51:bf:f9:ef:20:20:6a:ef:92:20:53:42:d7: 9b:36:c9:57:5e:ac:3f:1c:94:90:8d:6c:fc:4f:07:e3:f7:c1: f5:df:85:45:71:13:07:6a:9e:ba:d8:ee:85:11:bd:46:6a:84: 92:7c:5c:f7:2e:4e:f4:d4:01:3f:15:80:92:cd:0d:39:1e:dc: 34:b3:87:b6:69:a4:ce:e1:06:f0:fc:f8:42:80:c2:e0:0b:f6: cf:28:ae:bf:4f:66:60:5d:c6:d2:17:65:37:d4:a5:bf:27:93: 35:ea:57:95:2b:07:05:ce:27:02:45:71:c4:a2:61:f3:3e:f9: 67:21:7f:ed:98:16:52:ed:49:df:be:74:a6:07:07:24:e7:99: 8c:b4:db:25:99:45:34:66:30:bb:9e:84:72:42:e4:98:30:2c: 6f:d7:92:04:86:1b:cb:f6:d5:88:ee:20:05:82:46:7d:47:14: 1e:58:5d:a3:a6:ad:c2:0f:73:f4:9d:54:36:36:c2:ed:f6:f4: 6c:4e:5b:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q9yGXxgxP4IXOCtYefvHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4OTFjNDQ4ODY5OWU2ZDAyNGUzOWNjNGQ2MWVlZWFiZDM4 MDEwZmEwHhcNMjYwMTI1MTUwMDM5WhcNMjYwMTI2MTUwMDM5WjAzMTEwLwYDVQQD EyhhMzgzN2E4NDk2MzM0MGEzMzYwMTY2ZGNkNjgyYmYyODNmODM0OWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHXczE7mnX4vQV52BF7hPQXxq3Gp rSaD0PrFq+XQiMO45QKoKIdEp4yG367d7tpcBv7P2uxRYUg/Bn2q62pZSn4uzhcr 9mBpZUBeVolYoWng7PKV4NiVUm1A/mEJH8l2KIKc9x7wiiR7wKB+34d52NCnvi+P F4zpBeUqXGvGZZONi9/OdvHs1DszZc9vvH5feFLQB7y7qMu7wUuTK9JJt0iZpA1E 3lNMYIMGhVzYNablERB0p1l5mdhJyPHF9+RZ/i0pd3qTzrMdSLr5/DxyPJD7mY0Y z3ylwEhnuB4kQxvvjcpID4P0T2yyVpffm2Hlq5jkXyFf+IxI7DMdFDAh+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKODeoSWM0CjNgFm3NaCvyg/g0ntMB8GA1UdIwQY MBaAFJiRxEiGmebQJOOcxNYe7qvTgBD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80N2RmMDAtODQ2OC00YzM5LWJlOTUt ZTEwYTYwNTk2YzI2LzEvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80N2RmMDAtODQ2OC00YzM5LWJlOTUtZTEwYTYwNTk2YzI2 LzEvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqS2PZZN lhRCKuqRtdRIE6MZyggeQQ7mD80t7s5UKdQWRvnNgSRON/Yj81hV/MkvT8zS1nKm u368ZXRRv/nvICBq75IgU0LXmzbJV16sPxyUkI1s/E8H4/fB9d+FRXETB2qeutju hRG9RmqEknxc9y5O9NQBPxWAks0NOR7cNLOHtmmkzuEG8Pz4QoDC4Av2zyiuv09m YF3G0hdlN9SlvyeTNepXlSsHBc4nAkVxxKJh8z75ZyF/7ZgWUu1J3750pgcHJOeZ jLTbJZlFNGYwu56EckLkmDAsb9eSBIYby/bViO4gBYJGfUcUHlhdo6atwg9z9J1U NjbC7fb0bE5bQQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:31:58 2026 by rpki-client