This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft File: Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft (raw, json) Hash identifier: SaJOqdTAuIOYaR1E41cZaTRY367pDINBlydhqqiDVFE= Subject key identifier: E9:42:BB:D7:06:C7:4B:81:EA:32:4C:D1:22:D9:1F:21:A4:3B:54:08 Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4 Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4 Certificate serial: 019BF318BCE34342483B94909BC75B061404 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 03:00:42 +0000 Manifest this update: Sun 25 Jan 2026 03:00:42 +0000 Manifest next update: Mon 26 Jan 2026 03:00:42 +0000 Files and hashes: 1: 82kGAC9wtvGZ6gS4bLlhDSZ1ekc.roa (hash: vPPab/KGHpKzLrTGlISXYHb0sr+wSckNgKD9qG+MfNw=) 2: 8KwJ-R4Fe_7j5Oz3vGnqE6iEHnA.roa (hash: 6IT2bitXdYXnzdvwuMwMeIP3FhOJLz+jccpQmwAQHas=) 3: 91Petc5RKlCy-MU2C9Yy6lq65ZE.roa (hash: 7hccwNO3UaWQ0JhtP5+TQ+OksNzm3EM6wDMxIQgrpWs=) 4: HBQXe_ETYd72t1BF1lo-kpTks4g.roa (hash: ty/h9QM8gXepF/5QGH2G4nh3fXbO4USGLA+C6Nw1mOw=) 5: Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl (hash: ln/B1LOIuMaOjwX2odtfiYfvWHRQq+D5Xcq2VarjPrc=) 6: eMnVSFyA0FcmLp27QsfFm-htCa8.roa (hash: ahn930ULQdRk7bLieW7xo5TzMTWeAfDz6m9yfZyj0gU=) 7: qLbWT3bB3iBT0TukjMBJAvhaDQM.roa (hash: 8q/NtwWEs+6Q/29xk+gdVzq969Ht7BEuC13rSHEA0yU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:bc:e3:43:42:48:3b:94:90:9b:c7:5b:06:14:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=321ec194107843848cd36330232b5f6a43791db4 Validity Not Before: Jan 25 03:00:42 2026 GMT Not After : Jan 26 03:00:42 2026 GMT Subject: CN=e942bbd706c74b81ea324cd122d91f21a43b5408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a3:90:39:b1:1b:e3:5e:1d:1a:09:c4:86:2f: 44:4d:a3:72:64:eb:75:fe:6f:d5:fd:62:1c:38:b9: 3d:95:d3:5c:a0:24:f8:ad:0a:f5:46:c5:f2:be:a2: 41:9c:86:b0:f7:9c:17:b4:3b:e4:9f:6d:78:19:ac: 2e:c6:ec:63:c8:f7:d0:36:82:07:d0:59:c9:e6:00: 18:2a:58:d5:f2:95:72:50:16:8b:86:b5:7a:15:a7: c1:d0:c6:50:11:c2:a6:36:95:42:a5:b2:1b:57:d7: 18:40:9f:59:de:93:72:5c:84:bd:6f:5b:7d:c3:c7: cd:7d:d4:66:8a:c0:0d:33:fd:48:08:d2:e7:bc:71: 24:92:8e:13:f9:24:c2:c4:89:8f:39:3c:be:85:fe: 96:7c:52:1d:4e:60:59:b6:11:2c:08:23:45:75:be: ff:dc:92:69:24:cf:b2:94:c2:7a:75:93:57:36:b3: 3b:d2:c7:83:77:3b:ff:c3:a2:c7:c0:86:8a:06:51: 42:d5:7a:ca:eb:78:54:60:d3:87:26:32:e8:d8:78: b7:24:5c:c7:5d:c5:2c:e6:83:6a:e1:d6:b0:d0:6a: d8:59:32:a0:04:48:01:98:45:ff:72:45:c8:60:9d: c3:da:20:bc:38:96:b8:99:05:fc:f8:b1:2a:c3:41: 15:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:42:BB:D7:06:C7:4B:81:EA:32:4C:D1:22:D9:1F:21:A4:3B:54:08 X509v3 Authority Key Identifier: keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:74:36:0b:10:23:c1:ab:f8:60:4b:83:bf:6f:2b:a6:75:39: b7:fd:fa:b7:cf:06:f1:72:15:63:41:43:49:49:cd:f6:c1:4d: d9:64:8b:87:8b:67:01:f3:7b:27:e2:3d:09:15:72:e8:e2:45: b3:fc:cc:d7:3e:58:f4:ac:b4:e5:26:8b:96:20:4a:1c:d7:fc: c3:dc:c6:f3:98:23:75:2c:13:ee:44:7a:aa:f8:28:30:e3:8c: 63:b2:70:5c:9b:42:a4:19:17:0e:91:02:35:5e:93:2d:8f:f5: f4:ef:ba:78:bc:5e:43:0c:d7:41:cd:6e:d9:af:a3:56:ac:78: 42:02:df:f9:33:2d:dd:9d:7f:65:e8:93:5b:df:21:57:56:19: 76:aa:e4:5d:52:d2:fc:77:1d:37:f7:56:a1:31:26:26:7c:d9: da:9d:82:9a:c1:68:87:65:c1:05:c0:c1:40:d9:da:68:9c:e1: bc:c0:2f:a8:9f:c6:3f:ce:91:c3:fa:56:38:86:75:f0:6c:8d: e0:83:3a:26:9b:79:1a:2a:31:71:47:51:3a:3e:9f:07:4f:34: 51:14:0f:f3:e1:dd:f1:3b:44:ed:b6:3a:ab:a4:54:7a:76:55: 63:e9:30:37:03:47:79:8e:41:cc:0b:51:f5:c3:5b:82:d1:22: 41:6b:10:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGLzjQ0JIO5SQm8dbBhQEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMWVjMTk0MTA3ODQzODQ4Y2QzNjMzMDIzMmI1ZjZhNDM3 OTFkYjQwHhcNMjYwMTI1MDMwMDQyWhcNMjYwMTI2MDMwMDQyWjAzMTEwLwYDVQQD EyhlOTQyYmJkNzA2Yzc0YjgxZWEzMjRjZDEyMmQ5MWYyMWE0M2I1NDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKOQObEb414dGgnEhi9ETaNyZOt1 /m/V/WIcOLk9ldNcoCT4rQr1RsXyvqJBnIaw95wXtDvkn214GawuxuxjyPfQNoIH 0FnJ5gAYKljV8pVyUBaLhrV6FafB0MZQEcKmNpVCpbIbV9cYQJ9Z3pNyXIS9b1t9 w8fNfdRmisANM/1ICNLnvHEkko4T+STCxImPOTy+hf6WfFIdTmBZthEsCCNFdb7/ 3JJpJM+ylMJ6dZNXNrM70seDdzv/w6LHwIaKBlFC1XrK63hUYNOHJjLo2Hi3JFzH XcUs5oNq4daw0GrYWTKgBEgBmEX/ckXIYJ3D2iC8OJa4mQX8+LEqw0EVzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlCu9cGx0uB6jJM0SLZHyGkO1QIMB8GA1UdIwQY MBaAFDIewZQQeEOEjNNjMCMrX2pDeR20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgt M2E2MTFjMDkzYTJjLzEvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgtM2E2MTFjMDkzYTJj LzEvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjXQ2CxAj wav4YEuDv28rpnU5t/36t88G8XIVY0FDSUnN9sFN2WSLh4tnAfN7J+I9CRVy6OJF s/zM1z5Y9Ky05SaLliBKHNf8w9zG85gjdSwT7kR6qvgoMOOMY7JwXJtCpBkXDpEC NV6TLY/19O+6eLxeQwzXQc1u2a+jVqx4QgLf+TMt3Z1/ZeiTW98hV1YZdqrkXVLS /HcdN/dWoTEmJnzZ2p2CmsFoh2XBBcDBQNnaaJzhvMAvqJ/GP86Rw/pWOIZ18GyN 4IM6Jpt5GioxcUdROj6fB080URQP8+Hd8TtE7bY6q6RUenZVY+kwNwNHeY5BzAtR 9cNbgtEiQWsQbQ== -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:43 2026 by rpki-client