This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft File: MVipNBic8FiR-MTlmdC5iVfplyk.mft (raw, json) Hash identifier: HAJOmC7Emh4iReHU9ynWsAn/IH1fhZCoArGLOdSqfkU= Subject key identifier: 67:7E:52:BE:62:F6:18:B7:54:AD:8A:7A:02:23:5B:4C:69:B3:E2:56 Authority key identifier: 31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29 Certificate issuer: /CN=3158a934189cf05891f8c4e599d0b98957e99729 Certificate serial: 019BF50771A90CC8EAF08A63CB3C73FCD664 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft Manifest number: 06A2 Signing time: Sun 25 Jan 2026 12:01:04 +0000 Manifest this update: Sun 25 Jan 2026 12:01:04 +0000 Manifest next update: Mon 26 Jan 2026 12:01:04 +0000 Files and hashes: 1: MVipNBic8FiR-MTlmdC5iVfplyk.crl (hash: mMhAhfU7al2rBjWGv4SXiqTVU+PlH0xGzFNAulMD5tQ=) 2: SoUQ5tjPimIs5vL0jQz1k3-Y_k4.roa (hash: rxeG5Q9fjMcRXTA3/mQpeB3InL8UbHM8sXy68JYVcRc=) 3: WN6nm9P1utuZWbfPP4NpFvTEUfc.roa (hash: vxFDJKyu6Fl9t1C3JXTJl+d0N1fXG6sGHHUW42DW59s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:71:a9:0c:c8:ea:f0:8a:63:cb:3c:73:fc:d6:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3158a934189cf05891f8c4e599d0b98957e99729 Validity Not Before: Jan 25 12:01:04 2026 GMT Not After : Jan 26 12:01:04 2026 GMT Subject: CN=677e52be62f618b754ad8a7a02235b4c69b3e256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9a:66:b0:ae:65:ae:8a:7a:0a:94:45:33:84: 35:96:88:05:eb:43:62:eb:ac:3d:51:d3:a1:25:dc: 6f:e1:7e:83:cb:95:06:fa:35:ed:66:cb:d0:0d:c1: 69:f6:10:98:5c:f8:3c:6d:e7:e9:66:17:23:6a:1a: 70:d5:01:52:85:9f:9a:2f:9a:1d:1f:35:a6:2a:47: 5b:cc:e6:e9:27:54:6c:e2:27:19:87:64:d2:b9:5e: b4:60:a6:6e:de:0d:6b:32:b3:76:45:e7:04:f5:72: e1:fb:f9:17:97:85:69:75:13:35:e8:30:b1:e7:ef: b1:bc:f6:76:ce:f2:74:7a:f4:b1:32:aa:0d:e8:ff: e0:86:60:85:0b:96:e3:4f:bc:70:c1:b2:d1:3f:71: d3:bc:c3:b9:83:38:10:c5:46:7c:4c:35:b9:61:e5: a3:43:b1:1c:c0:7a:92:28:f5:84:c1:c8:32:37:7e: fb:f6:57:64:39:62:7e:11:05:ad:18:ce:3d:52:14: 00:e0:8f:b8:72:51:37:20:78:12:80:e6:39:ea:b5: ac:b3:6f:72:78:24:9f:1e:ce:cb:00:eb:69:24:d3: 63:03:a6:ef:4a:35:ee:83:4c:7a:81:c7:05:1d:ed: 96:28:d1:63:d6:6b:d2:ac:30:5e:95:94:9a:90:ba: e8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7E:52:BE:62:F6:18:B7:54:AD:8A:7A:02:23:5B:4C:69:B3:E2:56 X509v3 Authority Key Identifier: keyid:31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:51:22:b6:50:81:6c:30:f3:60:d1:ca:e5:1d:7c:01:80:13: 64:f3:15:cb:b1:fb:d9:dd:a3:b1:0a:45:be:5f:4b:12:0a:41: 52:1c:fe:c4:d9:5b:94:9f:23:f5:5c:04:ae:72:ed:ff:8b:10: a5:a3:9b:07:09:80:9c:42:39:da:c2:59:3b:7b:6f:26:69:35: 7e:b3:23:b1:a8:07:f0:59:60:d7:6f:6f:7d:4f:d0:ec:92:ee: 2a:65:fc:14:94:b3:5f:a0:2a:7e:c2:d9:2f:6a:f8:ce:93:5c: 22:04:77:c6:f7:b2:0a:16:02:9c:a5:93:be:65:ed:0a:77:2a: a5:c4:55:0e:4b:be:d6:2e:5b:1b:ca:d2:e3:46:b4:70:10:91: 8f:ee:40:dc:e9:7b:e5:e7:ed:b3:e5:3a:3c:35:f6:b2:4c:ed: c1:71:9c:fb:12:9d:5e:17:a1:a2:61:2f:61:01:20:0f:31:9a: ac:6a:f6:a3:f4:52:c3:61:12:e5:45:98:ea:b3:0c:66:bd:b2: e0:a9:19:d5:1e:f0:2d:3f:54:84:7b:19:a1:af:e3:b5:94:2e: 95:5e:87:03:43:20:a8:e9:8c:0e:bd:cb:ac:06:2b:bf:8c:8a: 50:d1:19:ec:2a:76:df:a3:95:4c:67:15:cb:98:da:01:24:b6: 31:23:11:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B3GpDMjq8Ipjyzxz/NZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNThhOTM0MTg5Y2YwNTg5MWY4YzRlNTk5ZDBiOTg5NTdl OTk3MjkwHhcNMjYwMTI1MTIwMTA0WhcNMjYwMTI2MTIwMTA0WjAzMTEwLwYDVQQD Eyg2NzdlNTJiZTYyZjYxOGI3NTRhZDhhN2EwMjIzNWI0YzY5YjNlMjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5pmsK5lrop6CpRFM4Q1logF60Ni 66w9UdOhJdxv4X6Dy5UG+jXtZsvQDcFp9hCYXPg8befpZhcjahpw1QFShZ+aL5od HzWmKkdbzObpJ1Rs4icZh2TSuV60YKZu3g1rMrN2RecE9XLh+/kXl4VpdRM16DCx 5++xvPZ2zvJ0evSxMqoN6P/ghmCFC5bjT7xwwbLRP3HTvMO5gzgQxUZ8TDW5YeWj Q7EcwHqSKPWEwcgyN3779ldkOWJ+EQWtGM49UhQA4I+4clE3IHgSgOY56rWss29y eCSfHs7LAOtpJNNjA6bvSjXug0x6gccFHe2WKNFj1mvSrDBelZSakLroKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGd+Ur5i9hi3VK2KegIjW0xps+JWMB8GA1UdIwQY MBaAFDFYqTQYnPBYkfjE5ZnQuYlX6ZcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVZpcE5CaWM4RmlSLU1UbG1kQzVpVmZwbHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9jY2NmOGItMDI3NC00YmIyLThkYmIt ZDM4NmQyMDQ5MDQyLzEvTVZpcE5CaWM4RmlSLU1UbG1kQzVpVmZwbHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9jY2NmOGItMDI3NC00YmIyLThkYmItZDM4NmQyMDQ5MDQy LzEvTVZpcE5CaWM4RmlSLU1UbG1kQzVpVmZwbHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFEitlCB bDDzYNHK5R18AYATZPMVy7H72d2jsQpFvl9LEgpBUhz+xNlblJ8j9VwErnLt/4sQ paObBwmAnEI52sJZO3tvJmk1frMjsagH8Flg129vfU/Q7JLuKmX8FJSzX6AqfsLZ L2r4zpNcIgR3xveyChYCnKWTvmXtCncqpcRVDku+1i5bG8rS40a0cBCRj+5A3Ol7 5efts+U6PDX2skztwXGc+xKdXhehomEvYQEgDzGarGr2o/RSw2ES5UWY6rMMZr2y 4KkZ1R7wLT9UhHsZoa/jtZQulV6HA0MgqOmMDr3LrAYrv4yKUNEZ7Cp236OVTGcV y5jaASS2MSMRsA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:23:32 2026 by rpki-client