This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft File: mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json) Hash identifier: +nsJcELXPM1HNq/L/pxAPZFDkSxRHtxLgTvuJjUf6Vg= Subject key identifier: 68:AA:1C:C0:6B:B6:B6:1D:69:91:3A:65:25:C8:96:82:80:1D:CF:08 Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff Certificate serial: 019BF8083D5CFC2FA46A7E1F2301167BC480 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft Manifest number: 0252 Signing time: Mon 26 Jan 2026 02:00:48 +0000 Manifest this update: Mon 26 Jan 2026 02:00:48 +0000 Manifest next update: Tue 27 Jan 2026 02:00:48 +0000 Files and hashes: 1: 7iabnlFmeCBBjsLFJN99I8--_-4.roa (hash: XEo4P0carZV4gE6HMO4BcJUELgS7un1lJ1bRLna274A=) 2: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: adq1asKbZciIWW/glSWJWSloEnqcTxKtAfJz74n2WSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:3d:5c:fc:2f:a4:6a:7e:1f:23:01:16:7b:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff Validity Not Before: Jan 26 02:00:48 2026 GMT Not After : Jan 27 02:00:48 2026 GMT Subject: CN=68aa1cc06bb6b61d69913a6525c89682801dcf08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ff:b4:48:8c:ed:06:6c:b9:16:5e:b2:46:52: 09:a0:5e:68:6e:3b:cb:ab:21:02:3c:21:24:ee:41: 02:a2:5b:7d:df:33:17:10:9e:86:38:1c:03:c7:92: 6e:cb:43:a6:6c:8f:a0:53:56:b9:64:65:cb:9e:b4: c5:3d:f0:80:8b:a9:9c:18:76:56:f1:81:e6:23:30: 94:24:18:e6:85:5b:9f:6b:f6:c3:ba:9b:cd:fe:95: 37:4b:2c:d7:66:a0:9a:7f:35:2d:ea:ab:61:ca:b3: 64:78:f8:8a:ab:87:de:b5:d1:50:5a:d9:b1:fe:50: 83:4e:d6:ee:e3:be:65:e6:df:1b:bb:77:5b:a2:49: 27:fe:85:c3:65:33:0a:19:f2:a6:0c:09:f3:4c:a1: ac:04:58:0f:c5:55:37:09:b5:45:15:c7:86:7d:e6: 07:a9:91:52:89:67:7c:d7:e2:24:12:09:18:d9:02: fe:d8:6e:7e:c7:68:d5:80:b6:75:10:0b:fe:85:71: de:6a:0a:68:1c:74:79:46:cf:f7:d0:80:2f:48:97: 3b:7d:72:de:85:f3:b4:45:2a:91:59:41:f8:ce:1e: 68:35:d8:e2:f3:11:7b:8b:d5:3d:8c:43:b5:c7:92: 71:c9:ab:11:ec:84:58:a9:94:c7:d5:da:dd:88:fc: 49:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AA:1C:C0:6B:B6:B6:1D:69:91:3A:65:25:C8:96:82:80:1D:CF:08 X509v3 Authority Key Identifier: keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:64:ee:65:9f:39:df:f5:f2:95:e6:e8:87:d1:bd:ad:3d:68: 2a:07:86:4d:af:84:b3:4c:18:23:89:ba:96:33:a9:70:75:23: 81:da:7f:45:c7:ad:1d:11:85:41:64:64:8e:50:68:af:d6:37: 7a:fb:e5:a5:ec:4a:6a:0e:1c:66:56:92:4f:7d:60:6a:f5:c9: e6:a0:85:e7:c4:4e:7e:51:96:bd:11:5b:2a:51:b3:57:35:5f: 19:5c:5f:61:58:93:f2:5f:4e:ad:51:50:be:65:61:2f:1e:32: eb:50:a5:6f:e7:90:74:d3:b9:40:13:be:65:bd:2f:ef:32:19: 76:fb:d0:f7:3f:1f:03:c8:5f:d9:ff:04:c0:3e:94:5c:7f:e4: 25:d9:a8:c3:38:1f:65:59:e6:37:50:c1:59:92:75:cd:c5:81: f6:35:50:90:42:5a:00:6b:2c:38:ea:40:55:85:ea:71:41:40: 0c:e3:d0:a9:b1:1f:bb:7d:75:36:26:b3:7a:e3:3d:d0:b6:02: 1a:a7:50:d2:2a:c8:6e:d4:66:6c:d1:57:d1:9f:9f:e7:a5:e2: 8d:23:90:21:8a:b0:ce:a5:04:5b:21:0d:c6:37:49:ac:d8:cc: cc:8e:83:e5:a5:2b:a2:38:a1:c3:a8:93:b4:37:9d:3a:21:1f: 1b:e7:64:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CD1c/C+kan4fIwEWe8SAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmM4ZGMyYTdjMWI5ZjMyYmExOTU3ZmY0OTJkYzBiYTRm MjYwZmYwHhcNMjYwMTI2MDIwMDQ4WhcNMjYwMTI3MDIwMDQ4WjAzMTEwLwYDVQQD Eyg2OGFhMWNjMDZiYjZiNjFkNjk5MTNhNjUyNWM4OTY4MjgwMWRjZjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/+0SIztBmy5Fl6yRlIJoF5objvL qyECPCEk7kEColt93zMXEJ6GOBwDx5Juy0OmbI+gU1a5ZGXLnrTFPfCAi6mcGHZW 8YHmIzCUJBjmhVufa/bDupvN/pU3SyzXZqCafzUt6qthyrNkePiKq4fetdFQWtmx /lCDTtbu475l5t8bu3dbokkn/oXDZTMKGfKmDAnzTKGsBFgPxVU3CbVFFceGfeYH qZFSiWd81+IkEgkY2QL+2G5+x2jVgLZ1EAv+hXHeagpoHHR5Rs/30IAvSJc7fXLe hfO0RSqRWUH4zh5oNdji8xF7i9U9jEO1x5JxyasR7IRYqZTH1drdiPxJMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiqHMBrtrYdaZE6ZSXIloKAHc8IMB8GA1UdIwQY MBaAFJn8jcKnwbnzK6GVf/SS3Auk8mD/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MjA1YjgtOThjZi00MDQyLWEwY2Ut ZTRjNjc0MWM4MDJjLzEvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS81MjA1YjgtOThjZi00MDQyLWEwY2UtZTRjNjc0MWM4MDJj LzEvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGTuZZ85 3/Xyleboh9G9rT1oKgeGTa+Es0wYI4m6ljOpcHUjgdp/RcetHRGFQWRkjlBor9Y3 evvlpexKag4cZlaST31gavXJ5qCF58ROflGWvRFbKlGzVzVfGVxfYViT8l9OrVFQ vmVhLx4y61Clb+eQdNO5QBO+Zb0v7zIZdvvQ9z8fA8hf2f8EwD6UXH/kJdmowzgf ZVnmN1DBWZJ1zcWB9jVQkEJaAGssOOpAVYXqcUFADOPQqbEfu311NiazeuM90LYC GqdQ0irIbtRmbNFX0Z+f56XijSOQIYqwzqUEWyENxjdJrNjMzI6D5aUrojihw6iT tDedOiEfG+dkIg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:34 2026 by rpki-client