This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft File: Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft (raw, json) Hash identifier: vOV7ctKgVuyr6K1ffZSu/7RWCZkEZfh8nbNFPwihH6w= Subject key identifier: 29:A1:CD:90:24:C5:61:A7:30:FE:B7:46:72:E7:21:15:01:16:97:A6 Authority key identifier: 33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07 Certificate issuer: /CN=330e3fdb11d826bc01663290bd7ca406b8d76507 Certificate serial: 019BF6881E714378591ECE5889F7BC478088 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft Manifest number: 0ECD Signing time: Sun 25 Jan 2026 19:01:14 +0000 Manifest this update: Sun 25 Jan 2026 19:01:14 +0000 Manifest next update: Mon 26 Jan 2026 19:01:14 +0000 Files and hashes: 1: 62TElGWuqEvmUBYUDm2rqBVV3SI.roa (hash: ++jh63cRE49FQOgqKwdj8ZqTaSpiNnUmGEZfxLXUxs8=) 2: Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl (hash: zVDLVkUvn8A7BOby7ADA/BslCNk8aIxANkNWk1bbPdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:1e:71:43:78:59:1e:ce:58:89:f7:bc:47:80:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=330e3fdb11d826bc01663290bd7ca406b8d76507 Validity Not Before: Jan 25 19:01:14 2026 GMT Not After : Jan 26 19:01:14 2026 GMT Subject: CN=29a1cd9024c561a730feb74672e72115011697a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6f:d0:f3:e3:a3:c9:6d:d2:cc:07:ed:dc:f8: b9:c8:f1:7f:a2:7a:da:43:fa:f8:70:bc:a2:df:6c: 17:60:cd:97:af:68:6d:30:68:96:88:e1:7a:da:82: 31:fc:d3:52:98:49:fd:df:69:13:8d:00:61:0c:7b: 82:86:26:3a:16:aa:c0:58:20:5b:3a:28:14:6d:55: 57:23:00:3f:9f:bc:a9:a5:a4:f4:d2:12:84:31:20: ec:7d:0f:8f:00:76:89:5e:f4:e8:25:ca:00:b5:63: 55:9c:06:2d:40:18:9b:2d:8b:cf:f5:06:e8:81:02: ee:06:a3:75:3c:6c:f0:42:7b:aa:71:b5:b4:51:c5: 7f:d5:7a:02:f9:42:1f:43:8a:54:7c:65:8e:bc:6e: 45:31:71:3e:95:51:c0:1e:ba:6b:77:b0:c2:54:4d: ae:81:b0:8a:95:16:66:a3:f5:c6:56:53:2e:cd:e5: b6:86:a6:5f:e4:61:6a:84:6a:87:87:88:cf:1c:49: 18:50:9c:1d:8d:26:e7:1b:95:ba:d8:e6:91:60:12: ba:37:76:cd:20:13:a9:34:af:3c:0f:5c:a0:6f:d6: 60:a8:08:47:96:0a:57:fa:3a:74:64:ab:2e:09:b1: 92:09:de:a4:d2:a6:d4:b2:19:ac:b6:be:86:1c:57: 9f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A1:CD:90:24:C5:61:A7:30:FE:B7:46:72:E7:21:15:01:16:97:A6 X509v3 Authority Key Identifier: keyid:33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0b:9b:29:90:d3:5a:0e:82:11:7d:16:5e:98:cc:02:69:a2: 60:54:c9:78:ca:fa:f0:a4:b8:8d:7f:c6:ba:08:3e:c9:18:ba: b8:cf:42:e8:34:86:ff:bd:dd:56:ed:f5:54:36:91:5c:f9:04: e8:a5:1f:5b:2f:e0:c5:64:cb:84:5a:b2:09:b3:aa:9b:a0:a4: 62:77:3a:e1:77:04:0c:41:62:37:9c:2e:d3:95:ee:bd:ec:37: c8:78:a2:d1:33:2f:19:ce:53:43:d1:45:4d:ba:43:dd:49:ff: 91:01:02:64:0b:2a:a1:a2:e9:48:ae:f1:03:87:ca:7a:46:3b: fb:b0:20:29:2c:32:29:94:f4:f3:34:02:8a:99:a3:36:3e:1b: 2e:7c:de:5e:14:00:6a:9e:b8:28:16:06:5f:9c:2f:0d:50:d0: d8:ae:b9:dc:3e:fc:ff:19:88:df:b4:45:fe:76:63:a0:97:4c: ab:8b:31:04:8c:49:de:8d:f3:4b:32:b8:96:5b:e2:a3:47:a1: 1e:46:8e:42:b9:98:7e:82:bd:2e:39:6f:e0:bd:35:b5:d4:3d: 7a:c1:0f:09:27:57:c3:38:cc:3f:92:11:c2:6c:f9:23:00:41: 3d:84:d8:fc:a8:4b:89:62:d2:ee:d9:6b:2b:eb:a1:da:cf:29: 02:51:bc:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iB5xQ3hZHs5Yife8R4CIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMGUzZmRiMTFkODI2YmMwMTY2MzI5MGJkN2NhNDA2Yjhk NzY1MDcwHhcNMjYwMTI1MTkwMTE0WhcNMjYwMTI2MTkwMTE0WjAzMTEwLwYDVQQD EygyOWExY2Q5MDI0YzU2MWE3MzBmZWI3NDY3MmU3MjExNTAxMTY5N2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW/Q8+OjyW3SzAft3Pi5yPF/onra Q/r4cLyi32wXYM2Xr2htMGiWiOF62oIx/NNSmEn932kTjQBhDHuChiY6FqrAWCBb OigUbVVXIwA/n7yppaT00hKEMSDsfQ+PAHaJXvToJcoAtWNVnAYtQBibLYvP9Qbo gQLuBqN1PGzwQnuqcbW0UcV/1XoC+UIfQ4pUfGWOvG5FMXE+lVHAHrprd7DCVE2u gbCKlRZmo/XGVlMuzeW2hqZf5GFqhGqHh4jPHEkYUJwdjSbnG5W62OaRYBK6N3bN IBOpNK88D1ygb9ZgqAhHlgpX+jp0ZKsuCbGSCd6k0qbUshmstr6GHFefqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmhzZAkxWGnMP63RnLnIRUBFpemMB8GA1UdIwQY MBaAFDMOP9sR2Ca8AWYykL18pAa412UHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXc0XzJ4SFlKcndCWmpLUXZYeWtCcmpYWlFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zNGM2MTgtNGQ0My00NzM2LTg1OWYt OWQyYTQyYWZmYjFiLzEvTXc0XzJ4SFlKcndCWmpLUXZYeWtCcmpYWlFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zNGM2MTgtNGQ0My00NzM2LTg1OWYtOWQyYTQyYWZmYjFi LzEvTXc0XzJ4SFlKcndCWmpLUXZYeWtCcmpYWlFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgubKZDT Wg6CEX0WXpjMAmmiYFTJeMr68KS4jX/Gugg+yRi6uM9C6DSG/73dVu31VDaRXPkE 6KUfWy/gxWTLhFqyCbOqm6CkYnc64XcEDEFiN5wu05Xuvew3yHii0TMvGc5TQ9FF TbpD3Un/kQECZAsqoaLpSK7xA4fKekY7+7AgKSwyKZT08zQCipmjNj4bLnzeXhQA ap64KBYGX5wvDVDQ2K653D78/xmI37RF/nZjoJdMq4sxBIxJ3o3zSzK4llvio0eh HkaOQrmYfoK9Ljlv4L01tdQ9esEPCSdXwzjMP5IRwmz5IwBBPYTY/KhLiWLS7tlr K+uh2s8pAlG8bQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:54:10 2026 by rpki-client