This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft File: MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft (raw, json) Hash identifier: 1hXaTFaODYLJ6Zlcv/21WQMGZgwoPEJR/tq0pzDpLvA= Subject key identifier: D9:31:47:CD:6E:51:65:F9:AB:25:EB:96:B1:C5:CD:4E:B4:77:84:AF Authority key identifier: 32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7 Certificate issuer: /CN=3298056b806a7b7cc1633345dc55836a45a244c7 Certificate serial: 019BF7D1E7D1FA3C450E18260061454F709F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft Manifest number: 177D Signing time: Mon 26 Jan 2026 01:01:27 +0000 Manifest this update: Mon 26 Jan 2026 01:01:27 +0000 Manifest next update: Tue 27 Jan 2026 01:01:27 +0000 Files and hashes: 1: MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl (hash: T/1We+iidXY9FngRf+Gr6Fjuzo7N3DJevAF7hTQ8P2A=) 2: dDj4-eFRfq_UroSu2HQ22smKlA8.roa (hash: ahRStajN/bb570o/RBHvcfEKEL2KTD1bW5s9wAnONq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:e7:d1:fa:3c:45:0e:18:26:00:61:45:4f:70:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3298056b806a7b7cc1633345dc55836a45a244c7 Validity Not Before: Jan 26 01:01:27 2026 GMT Not After : Jan 27 01:01:27 2026 GMT Subject: CN=d93147cd6e5165f9ab25eb96b1c5cd4eb47784af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3c:52:51:1f:87:ed:d6:94:61:8c:1d:77:72: f5:73:8c:2e:c3:65:ff:95:ab:9d:06:8d:c5:b1:f7: 12:57:0c:8c:7f:01:af:50:19:37:fc:68:06:c5:a6: 0b:8e:64:7e:9d:fa:0e:e8:f6:64:f8:a6:0c:45:59: fd:c7:fd:34:26:b7:42:ab:9a:e5:34:fe:f8:ff:2a: 04:01:11:2b:95:76:ca:7a:fb:5d:51:ca:96:08:67: 62:73:14:db:64:48:f9:2d:86:e5:00:23:a5:f9:0b: 66:d5:39:d2:df:d9:00:6b:d4:bd:ed:6e:74:6e:27: d3:43:0c:26:27:db:16:fd:b6:22:81:e8:62:54:05: 13:54:e3:00:7a:7d:cf:6f:a0:8c:4f:f5:2a:d5:e6: e4:32:34:8c:3d:ad:52:89:d6:a9:03:4d:b9:d2:a2: 1d:b6:39:4d:b3:a6:88:5f:a5:54:54:c1:d2:1e:90: e5:d1:47:84:95:ed:e6:c1:b0:90:49:9e:f0:60:20: ee:73:ef:6d:48:e5:e7:f9:2d:8c:21:2c:b0:57:47: f6:ba:bc:13:d8:f6:8d:6f:14:87:a8:dd:b1:e3:6c: 65:d5:59:c8:1a:a9:35:cd:b0:4e:f1:63:2d:49:13: 8d:fc:f5:f1:2d:84:f6:1d:be:7d:c9:3d:2a:af:6a: f0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:31:47:CD:6E:51:65:F9:AB:25:EB:96:B1:C5:CD:4E:B4:77:84:AF X509v3 Authority Key Identifier: keyid:32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:79:13:be:ef:50:93:38:f5:16:94:19:51:81:7b:e4:a9:9a: a6:ed:ac:41:93:e5:ad:5b:5e:3a:44:74:6b:00:dc:19:87:26: bc:6c:d6:5b:1c:69:15:d1:fd:2b:0a:f9:32:ea:41:4f:65:db: e6:49:2f:c4:0a:3f:60:e0:48:1c:b3:49:d9:7c:d9:48:27:2b: 0d:67:36:4c:fd:ab:80:57:cf:2d:ae:ec:b1:48:15:6c:98:ba: 9c:d1:fd:03:84:fe:11:fa:68:85:29:2d:84:4d:9d:83:3d:c3: 13:64:69:a4:fc:26:70:63:22:c0:6e:d0:5d:85:e8:3c:f8:05: 8b:46:c6:48:e1:6f:d9:e6:5d:27:55:ba:ea:47:0f:d5:f4:9e: 2a:d2:53:4e:59:86:fb:ad:34:71:bb:0e:8d:c6:1b:c6:33:d5: 35:4b:50:0e:46:be:f4:d2:bb:09:42:2f:ca:03:25:c6:d2:db: 17:85:61:b1:1c:1f:cc:2a:2a:5e:e5:6c:4a:93:dd:5e:97:db: f0:ee:16:3b:34:bb:1a:b6:7e:ca:df:f6:2c:24:ce:ea:24:ac: 24:06:66:b2:b5:8d:55:77:d7:67:20:05:93:a2:55:1a:bb:d3: 11:c8:89:92:48:82:13:0c:42:dc:6a:4e:9b:75:c0:ea:94:f4: f6:b5:d7:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30efR+jxFDhgmAGFFT3CfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyOTgwNTZiODA2YTdiN2NjMTYzMzM0NWRjNTU4MzZhNDVh MjQ0YzcwHhcNMjYwMTI2MDEwMTI3WhcNMjYwMTI3MDEwMTI3WjAzMTEwLwYDVQQD EyhkOTMxNDdjZDZlNTE2NWY5YWIyNWViOTZiMWM1Y2Q0ZWI0Nzc4NGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjxSUR+H7daUYYwdd3L1c4wuw2X/ laudBo3FsfcSVwyMfwGvUBk3/GgGxaYLjmR+nfoO6PZk+KYMRVn9x/00JrdCq5rl NP74/yoEARErlXbKevtdUcqWCGdicxTbZEj5LYblACOl+Qtm1TnS39kAa9S97W50 bifTQwwmJ9sW/bYigehiVAUTVOMAen3Pb6CMT/Uq1ebkMjSMPa1SidapA0250qId tjlNs6aIX6VUVMHSHpDl0UeEle3mwbCQSZ7wYCDuc+9tSOXn+S2MISywV0f2urwT 2PaNbxSHqN2x42xl1VnIGqk1zbBO8WMtSRON/PXxLYT2Hb59yT0qr2rwHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkxR81uUWX5qyXrlrHFzU60d4SvMB8GA1UdIwQY MBaAFDKYBWuAant8wWMzRdxVg2pFokTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXBnRmE0QnFlM3pCWXpORjNGV0Rha1dpUk1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iZjJiYjQtMzZkMy00YjE3LThiY2Yt NDRhOTU3MTMyNjM5LzEvTXBnRmE0QnFlM3pCWXpORjNGV0Rha1dpUk1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iZjJiYjQtMzZkMy00YjE3LThiY2YtNDRhOTU3MTMyNjM5 LzEvTXBnRmE0QnFlM3pCWXpORjNGV0Rha1dpUk1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3kTvu9Q kzj1FpQZUYF75Kmapu2sQZPlrVteOkR0awDcGYcmvGzWWxxpFdH9Kwr5MupBT2Xb 5kkvxAo/YOBIHLNJ2XzZSCcrDWc2TP2rgFfPLa7ssUgVbJi6nNH9A4T+EfpohSkt hE2dgz3DE2RppPwmcGMiwG7QXYXoPPgFi0bGSOFv2eZdJ1W66kcP1fSeKtJTTlmG +600cbsOjcYbxjPVNUtQDka+9NK7CUIvygMlxtLbF4VhsRwfzCoqXuVsSpPdXpfb 8O4WOzS7GrZ+yt/2LCTO6iSsJAZmsrWNVXfXZyAFk6JVGrvTEciJkkiCEwxC3GpO m3XA6pT09rXXCg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:07 2026 by rpki-client