This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft File: mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json) Hash identifier: NTQmn8N0soPirp5zIysMUn2xRGB40y499oC3nnnfW60= Subject key identifier: A4:A3:24:46:F4:43:94:5C:58:0C:EA:3F:DD:17:2C:49:5A:E7:3C:DE Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc Certificate serial: 019BF687B9009C26A66C841E81F144D4A6DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft Manifest number: 1717 Signing time: Sun 25 Jan 2026 19:00:48 +0000 Manifest this update: Sun 25 Jan 2026 19:00:48 +0000 Manifest next update: Mon 26 Jan 2026 19:00:48 +0000 Files and hashes: 1: 1-1b9kIdAlblnsi3fi8wMUDdRXmQ.roa (hash: EHBhiVunuwqspkFW8sGSqvBOxHJnouc2J5HPWr1aeGw=) 2: 9aFjflm38MN581vnLtWpsCX-q7Y.roa (hash: yLjtSs5KlibIMz+VoXmAGRKRF617RWal83eBR+rXqCQ=) 3: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: ygxlJPR+Of0ZfGNgbtu+K1o+TPlxQx4wx4VBAaQR4zo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:b9:00:9c:26:a6:6c:84:1e:81:f1:44:d4:a6:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc Validity Not Before: Jan 25 19:00:48 2026 GMT Not After : Jan 26 19:00:48 2026 GMT Subject: CN=a4a32446f443945c580cea3fdd172c495ae73cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:10:6e:31:70:d6:3c:34:c9:e3:b1:47:8d:30: a6:45:64:f9:47:4d:85:70:d2:d2:03:34:dd:d7:4b: b9:de:5c:91:fc:0a:3f:e6:bf:26:02:83:9b:40:1c: 4b:2d:75:37:e4:7b:bb:c8:2f:80:e3:c3:a9:0b:d6: ab:19:e6:37:91:2d:d8:ac:97:ac:dd:5b:48:87:4d: 73:f7:ee:47:4d:5f:ed:55:df:c2:57:26:2d:a6:13: 15:59:7c:7e:66:e2:f3:e5:73:a4:d4:af:af:ca:34: 23:ca:6c:cd:b5:3f:c9:80:70:83:3d:fc:c3:ee:69: e5:81:30:e3:c8:59:c6:df:4f:a7:5d:a6:b8:4d:7c: 4b:17:4b:a9:96:56:c6:f6:33:a0:42:13:58:6c:b0: ab:2b:03:40:47:05:dc:9a:4d:d0:de:ed:8d:e8:41: 94:84:61:57:4f:0f:ae:1c:d8:98:9d:1c:da:e6:60: c6:c3:a2:34:bb:d6:26:4d:cf:f5:94:b7:d4:46:6c: f0:f3:50:ba:9c:8b:dd:0f:98:39:a7:59:1d:10:9d: b7:08:b0:c8:95:e3:2c:f7:43:87:cb:f8:d5:98:04: 52:52:78:89:24:51:16:34:80:84:ed:25:0a:2a:a2: b6:fc:ec:40:46:e5:ac:38:41:3d:5b:9f:3a:0d:00: 7f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A3:24:46:F4:43:94:5C:58:0C:EA:3F:DD:17:2C:49:5A:E7:3C:DE X509v3 Authority Key Identifier: keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f8:07:e5:b0:54:2c:48:b3:31:a3:43:25:64:68:b8:7f:14: 1b:ab:2a:25:2c:df:3f:52:ab:1b:4d:9c:6e:7e:76:1b:06:eb: 33:0d:17:f0:e9:e9:a0:b3:4f:45:55:61:5b:11:a0:11:79:d8: 96:60:c6:15:0d:fe:ba:33:84:39:f9:72:c8:2c:4b:a5:05:ef: 35:cd:67:2d:3b:78:e9:01:10:01:92:fb:77:3f:69:46:3b:5d: d6:ee:4d:69:79:65:a8:30:62:df:02:c3:5d:a6:27:20:b7:a7: 12:3e:f2:33:ee:9d:0d:34:c0:eb:8b:33:fd:85:2a:2c:5a:0e: 91:87:29:27:7c:c1:43:8f:ae:ff:b3:dd:6c:81:9c:3d:04:38: 68:a5:6b:bb:45:dc:23:40:0a:68:59:61:1d:fa:b2:cd:a4:5f: d3:3b:36:58:69:78:0b:39:32:4b:45:41:65:5f:5e:99:76:cf: 03:8e:99:61:96:f7:82:70:01:27:1c:71:10:8c:b1:32:35:bf: 81:f9:b9:8c:06:d1:60:0d:81:64:cd:ab:71:4a:49:30:b0:56: a0:1c:6c:3e:d7:aa:dd:7b:f2:25:4c:10:75:2a:a5:87:9d:b6: 76:40:ec:56:bf:2a:e6:82:91:0a:7d:43:af:47:05:6c:28:95: 04:7b:23:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h7kAnCambIQegfFE1KbeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZDM1NjE5ZWQyMTBiZTBhYzI5ZDE3MGEyYmI1Y2Q3NDU1 NjkzYmMwHhcNMjYwMTI1MTkwMDQ4WhcNMjYwMTI2MTkwMDQ4WjAzMTEwLwYDVQQD EyhhNGEzMjQ0NmY0NDM5NDVjNTgwY2VhM2ZkZDE3MmM0OTVhZTczY2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhBuMXDWPDTJ47FHjTCmRWT5R02F cNLSAzTd10u53lyR/Ao/5r8mAoObQBxLLXU35Hu7yC+A48OpC9arGeY3kS3YrJes 3VtIh01z9+5HTV/tVd/CVyYtphMVWXx+ZuLz5XOk1K+vyjQjymzNtT/JgHCDPfzD 7mnlgTDjyFnG30+nXaa4TXxLF0upllbG9jOgQhNYbLCrKwNARwXcmk3Q3u2N6EGU hGFXTw+uHNiYnRza5mDGw6I0u9YmTc/1lLfURmzw81C6nIvdD5g5p1kdEJ23CLDI leMs90OHy/jVmARSUniJJFEWNICE7SUKKqK2/OxARuWsOEE9W586DQB/FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSjJEb0Q5RcWAzqP90XLEla5zzeMB8GA1UdIwQY MBaAFJnTVhntIQvgrCnRcKK7XNdFVpO8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWROV0dlMGhDLUNzS2RGd29ydGMxMFZXazd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zNGU5MWYtYThhOS00OTM3LTlmYjUt N2EwMWJkZGQ2NTYwLzEvbWROV0dlMGhDLUNzS2RGd29ydGMxMFZXazd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8zNGU5MWYtYThhOS00OTM3LTlmYjUtN2EwMWJkZGQ2NTYw LzEvbWROV0dlMGhDLUNzS2RGd29ydGMxMFZXazd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvgH5bBU LEizMaNDJWRouH8UG6sqJSzfP1KrG02cbn52GwbrMw0X8OnpoLNPRVVhWxGgEXnY lmDGFQ3+ujOEOflyyCxLpQXvNc1nLTt46QEQAZL7dz9pRjtd1u5NaXllqDBi3wLD XaYnILenEj7yM+6dDTTA64sz/YUqLFoOkYcpJ3zBQ4+u/7PdbIGcPQQ4aKVru0Xc I0AKaFlhHfqyzaRf0zs2WGl4CzkyS0VBZV9emXbPA46ZYZb3gnABJxxxEIyxMjW/ gfm5jAbRYA2BZM2rcUpJMLBWoBxsPteq3XvyJUwQdSqlh522dkDsVr8q5oKRCn1D r0cFbCiVBHsjxg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:23 2026 by rpki-client