This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft File: MGtGjMMe86PQgayPArJx4xR1Wb8.mft (raw, json) Hash identifier: b6PI7oLXP+4e9nOAIDaFVcSSsTIQqxzt9Irl9mIyxvI= Subject key identifier: 94:8C:EA:2C:08:0B:DB:D6:27:D7:52:73:0E:DE:26:D1:6D:08:E9:38 Authority key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF Certificate issuer: /CN=306b468cc31ef3a3d081ac8f02b271e3147559bf Certificate serial: 019BF72CB2E20FE5B4F2632E1CE4CFBA7CD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft Manifest number: 0CA5 Signing time: Sun 25 Jan 2026 22:01:00 +0000 Manifest this update: Sun 25 Jan 2026 22:01:00 +0000 Manifest next update: Mon 26 Jan 2026 22:01:00 +0000 Files and hashes: 1: MGtGjMMe86PQgayPArJx4xR1Wb8.crl (hash: apG7ujmNExPPh3grfkXDK9I9Tm6S9RalDkN5lLht9yM=) 2: S0jCwF-2vE4If7aoddZBBXxgCa4.roa (hash: sC7YQJ9Sv4ok1eZ8e1VpmYub7DnojsItviVQVfJV7k8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:b2:e2:0f:e5:b4:f2:63:2e:1c:e4:cf:ba:7c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf Validity Not Before: Jan 25 22:01:00 2026 GMT Not After : Jan 26 22:01:00 2026 GMT Subject: CN=948cea2c080bdbd627d752730ede26d16d08e938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:ea:59:0b:3f:7d:31:c2:76:4a:87:03:2f: 57:6a:d4:64:2c:84:76:4b:dc:1c:b8:0d:53:b9:83: d2:fa:d3:14:59:28:13:b9:6e:27:6e:4b:44:43:03: e7:f3:a7:f9:da:5d:17:bb:f0:06:94:16:bb:be:bf: f9:fd:9d:fa:41:22:86:b6:74:7e:bf:34:04:e4:f5: 53:e6:f7:46:63:a7:13:38:4c:31:6f:e5:11:79:01: ce:13:6c:50:d0:a0:b1:4e:59:90:78:3c:31:8a:8c: f8:77:e8:a8:75:7c:8c:61:00:48:41:b2:48:b0:75: b4:cc:52:fb:cc:e1:1b:62:90:89:61:cd:1d:04:f3: 6f:9c:fc:15:96:9a:5c:84:0e:4a:f6:1d:ec:36:17: 4b:42:40:75:e0:39:7c:15:d7:03:20:35:55:3b:2a: 2d:03:2c:d8:04:7b:39:76:1f:54:e8:4c:ac:a1:90: 04:3a:af:19:fc:50:56:7b:04:20:ce:3d:8e:81:cb: e3:f1:98:36:0a:4b:0d:99:98:80:1f:7a:6a:6c:b7: 60:78:67:05:bc:d6:45:38:12:3d:8d:db:86:f3:17: cc:bb:5b:0c:16:26:73:87:a9:e9:a8:51:80:64:53: 21:48:e3:68:73:af:60:e5:cc:2b:97:03:58:f0:29: 8e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8C:EA:2C:08:0B:DB:D6:27:D7:52:73:0E:DE:26:D1:6D:08:E9:38 X509v3 Authority Key Identifier: keyid:30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:7c:b2:21:55:ac:95:fa:bc:bd:65:34:8f:f8:14:7f:6f:39: af:07:34:28:56:75:84:ca:05:39:96:66:a5:59:21:78:45:0a: ba:7e:df:7a:89:de:49:d5:9a:77:04:02:a1:c6:9e:83:76:76: 1f:ba:68:f4:57:01:c7:97:d8:e2:97:23:4a:78:93:8b:8c:44: 06:ad:b8:19:e2:a9:d0:34:7f:e9:2f:c5:d3:7b:34:9c:6d:d3: 33:a5:a8:fd:de:02:7c:ec:27:7b:21:f2:a3:0e:1b:7f:77:b4: 2e:b7:fa:9a:0e:90:c7:dd:91:b2:00:e2:f0:fb:04:dc:5e:19: 30:d2:3c:f8:b1:f7:2b:a8:9e:e2:fe:54:f5:a6:41:f1:9c:82: 01:f8:98:40:7e:1c:8a:9b:32:87:48:7a:41:f5:48:29:bc:e2: 68:58:c9:9a:67:f4:3d:db:0b:9d:5e:b3:31:92:25:a0:19:eb: 44:51:ab:54:71:89:fe:83:ff:c8:76:cc:d8:50:c2:87:e4:9d: 29:9a:b7:36:4b:7d:1c:64:84:8b:8e:f6:a1:48:d6:fc:7c:3b: ac:ea:c7:04:d0:96:c8:ba:0b:a5:17:8e:4b:cd:af:61:2c:6d: 96:8b:6c:6c:92:3d:aa:16:aa:b4:f1:c2:4b:da:18:65:24:27: 81:92:fd:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LLLiD+W08mMuHOTPunzWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNmI0NjhjYzMxZWYzYTNkMDgxYWM4ZjAyYjI3MWUzMTQ3 NTU5YmYwHhcNMjYwMTI1MjIwMTAwWhcNMjYwMTI2MjIwMTAwWjAzMTEwLwYDVQQD Eyg5NDhjZWEyYzA4MGJkYmQ2MjdkNzUyNzMwZWRlMjZkMTZkMDhlOTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy/qWQs/fTHCdkqHAy9XatRkLIR2 S9wcuA1TuYPS+tMUWSgTuW4nbktEQwPn86f52l0Xu/AGlBa7vr/5/Z36QSKGtnR+ vzQE5PVT5vdGY6cTOEwxb+UReQHOE2xQ0KCxTlmQeDwxioz4d+iodXyMYQBIQbJI sHW0zFL7zOEbYpCJYc0dBPNvnPwVlppchA5K9h3sNhdLQkB14Dl8FdcDIDVVOyot AyzYBHs5dh9U6EysoZAEOq8Z/FBWewQgzj2Ogcvj8Zg2CksNmZiAH3pqbLdgeGcF vNZFOBI9jduG8xfMu1sMFiZzh6npqFGAZFMhSONoc69g5cwrlwNY8CmOgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSM6iwIC9vWJ9dScw7eJtFtCOk4MB8GA1UdIwQY MBaAFDBrRozDHvOj0IGsjwKyceMUdVm/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83ZTRlYTgtODk1MC00MTgzLWFiYzAt MzM4Mjc5NDA0OWMyLzEvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC83ZTRlYTgtODk1MC00MTgzLWFiYzAtMzM4Mjc5NDA0OWMy LzEvTUd0R2pNTWU4NlBRZ2F5UEFySng0eFIxV2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3yyIVWs lfq8vWU0j/gUf285rwc0KFZ1hMoFOZZmpVkheEUKun7feoneSdWadwQCocaeg3Z2 H7po9FcBx5fY4pcjSniTi4xEBq24GeKp0DR/6S/F03s0nG3TM6Wo/d4CfOwneyHy ow4bf3e0Lrf6mg6Qx92RsgDi8PsE3F4ZMNI8+LH3K6ie4v5U9aZB8ZyCAfiYQH4c ipsyh0h6QfVIKbziaFjJmmf0PdsLnV6zMZIloBnrRFGrVHGJ/oP/yHbM2FDCh+Sd KZq3Nkt9HGSEi472oUjW/Hw7rOrHBNCWyLoLpReOS82vYSxtlotsbJI9qhaqtPHC S9oYZSQngZL9Lw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:58 2026 by rpki-client