This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft File: MRf9In6dzpeAXAPl8zACrqGMN90.mft (raw, json) Hash identifier: e6RcsYUxqe+Xm+C0UFfXODOllc/X2bWdVZzi6wehvTo= Subject key identifier: 36:3F:C3:EF:B9:0A:33:D8:EA:9C:76:8F:EC:41:29:CB:67:6C:E1:77 Authority key identifier: 31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD Certificate issuer: /CN=3117fd227e9dce97805c03e5f33002aea18c37dd Certificate serial: 019BF507861AFBD494440F87DA837DF6352A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft Manifest number: 177A Signing time: Sun 25 Jan 2026 12:01:09 +0000 Manifest this update: Sun 25 Jan 2026 12:01:09 +0000 Manifest next update: Mon 26 Jan 2026 12:01:09 +0000 Files and hashes: 1: GqI-mzxc1fhTm5OyOP_m5TCCnVA.roa (hash: U8EEHo9hb/0j3nnEWBKaK1c26NGcKjSMcfvdjuvCGRQ=) 2: MRf9In6dzpeAXAPl8zACrqGMN90.crl (hash: D/ZYHsO5N9dgCCPbzGMYKuKy1tJhhWTD0tgsbkvavdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:86:1a:fb:d4:94:44:0f:87:da:83:7d:f6:35:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3117fd227e9dce97805c03e5f33002aea18c37dd Validity Not Before: Jan 25 12:01:09 2026 GMT Not After : Jan 26 12:01:09 2026 GMT Subject: CN=363fc3efb90a33d8ea9c768fec4129cb676ce177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:00:55:07:d8:03:8a:e6:72:d4:aa:b2:9f:61: d5:5c:20:99:8f:3f:e5:c6:a7:21:07:05:f8:0c:51: 14:75:de:fc:be:fb:6d:81:4e:5d:13:a1:b9:17:31: 32:3c:bf:a8:56:f0:ff:7f:2c:fa:a5:ce:cf:6f:12: 10:16:7a:91:72:dd:41:05:eb:b9:d9:b0:57:ae:84: 92:e1:3a:d6:c4:67:b3:8c:16:f4:e6:31:93:de:2f: 7b:65:97:37:29:5f:1d:c8:8c:55:2d:20:c0:48:09: d8:fd:9b:23:3d:8f:7f:8f:44:c8:9f:61:57:fb:00: 02:4e:a2:07:08:40:8c:8e:92:cb:f0:f5:95:67:56: 44:04:09:93:25:5a:49:c5:76:b5:f4:51:08:6f:27: f9:24:63:e5:fc:46:b0:96:93:2a:95:68:d2:17:7c: 63:02:62:3a:d2:bf:a9:1c:d7:b4:73:8a:6f:de:ba: b9:29:77:cb:db:62:b0:6f:5d:81:e2:9c:95:f2:e5: 92:35:56:8f:92:fe:ee:51:08:a1:23:9e:0a:ea:f1: 6d:d8:e5:ae:ab:89:14:5c:69:9a:ae:c0:01:46:c8: f8:8e:85:b7:0d:c8:1d:d9:30:93:ce:9d:b1:c5:94: 73:f7:f0:35:c5:01:51:f2:c3:9d:0b:66:2c:b8:31: 8b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3F:C3:EF:B9:0A:33:D8:EA:9C:76:8F:EC:41:29:CB:67:6C:E1:77 X509v3 Authority Key Identifier: keyid:31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d4:ef:0b:e3:6a:27:cc:0b:c0:3f:48:c9:c1:72:c4:59:c4: 11:7b:aa:dc:2c:1e:96:21:98:0e:95:bf:94:5b:f4:c4:18:f3: 12:ee:62:88:68:29:f3:34:3f:b7:e8:40:26:3b:1c:f0:be:a1: 00:1b:79:f3:21:27:e2:50:96:a4:d3:03:1e:e9:60:8d:ea:af: 05:fe:07:c7:94:71:b8:ca:37:39:ee:55:04:ef:22:e3:b4:9a: e1:38:d4:5b:3c:31:82:84:6f:82:65:59:2a:91:67:fa:1f:af: 11:be:87:c3:1f:98:45:80:ed:3a:a1:8c:36:64:ae:85:d4:3a: d3:02:2f:f9:c3:5c:bc:30:f2:86:85:d1:fa:30:fc:a7:6f:c5: d4:bb:c3:7f:b8:46:93:30:73:8c:de:e3:f7:f3:9f:58:c8:d2: 46:c5:b1:14:a6:cd:71:a8:ac:48:f2:4b:24:a6:fd:b7:0e:4e: 25:d3:d2:a0:44:a2:51:03:cc:3f:8e:1f:98:91:50:c4:d9:89: 0f:42:c2:a7:4f:d8:0d:9f:9b:33:de:c2:d2:5b:0a:61:10:ba: b4:24:5e:a7:5e:78:41:92:86:ab:18:a6:cb:a9:39:43:f9:77: 7c:4e:72:50:94:74:e9:54:8d:6b:f4:ce:1c:48:59:1c:19:9f: ef:b3:39:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B4Ya+9SURA+H2oN99jUqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMTdmZDIyN2U5ZGNlOTc4MDVjMDNlNWYzMzAwMmFlYTE4 YzM3ZGQwHhcNMjYwMTI1MTIwMTA5WhcNMjYwMTI2MTIwMTA5WjAzMTEwLwYDVQQD EygzNjNmYzNlZmI5MGEzM2Q4ZWE5Yzc2OGZlYzQxMjljYjY3NmNlMTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxABVB9gDiuZy1Kqyn2HVXCCZjz/l xqchBwX4DFEUdd78vvttgU5dE6G5FzEyPL+oVvD/fyz6pc7PbxIQFnqRct1BBeu5 2bBXroSS4TrWxGezjBb05jGT3i97ZZc3KV8dyIxVLSDASAnY/ZsjPY9/j0TIn2FX +wACTqIHCECMjpLL8PWVZ1ZEBAmTJVpJxXa19FEIbyf5JGPl/EawlpMqlWjSF3xj AmI60r+pHNe0c4pv3rq5KXfL22Kwb12B4pyV8uWSNVaPkv7uUQihI54K6vFt2OWu q4kUXGmarsABRsj4joW3Dcgd2TCTzp2xxZRz9/A1xQFR8sOdC2YsuDGLlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDY/w++5CjPY6px2j+xBKctnbOF3MB8GA1UdIwQY MBaAFDEX/SJ+nc6XgFwD5fMwAq6hjDfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVJmOUluNmR6cGVBWEFQbDh6QUNycUdNTjkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85ZjYyMzMtNzgyYS00MTQwLWI1MDAt OTk3MTkwN2E5NWE3LzEvTVJmOUluNmR6cGVBWEFQbDh6QUNycUdNTjkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS85ZjYyMzMtNzgyYS00MTQwLWI1MDAtOTk3MTkwN2E5NWE3 LzEvTVJmOUluNmR6cGVBWEFQbDh6QUNycUdNTjkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdTvC+Nq J8wLwD9IycFyxFnEEXuq3CweliGYDpW/lFv0xBjzEu5iiGgp8zQ/t+hAJjsc8L6h ABt58yEn4lCWpNMDHulgjeqvBf4Hx5RxuMo3Oe5VBO8i47Sa4TjUWzwxgoRvgmVZ KpFn+h+vEb6Hwx+YRYDtOqGMNmSuhdQ60wIv+cNcvDDyhoXR+jD8p2/F1LvDf7hG kzBzjN7j9/OfWMjSRsWxFKbNcaisSPJLJKb9tw5OJdPSoESiUQPMP44fmJFQxNmJ D0LCp0/YDZ+bM97C0lsKYRC6tCRep154QZKGqximy6k5Q/l3fE5yUJR06VSNa/TO HEhZHBmf77M5/w== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:07 2026 by rpki-client