This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft File: MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft (raw, json) Hash identifier: +3btAw3/ZjVBsfb/qPbNlM4WEoR4JOD2xFoCNyANEGE= Subject key identifier: CA:C1:7F:A9:1E:A0:D9:21:CE:4A:32:76:8C:34:AD:CB:D2:86:23:D1 Authority key identifier: 30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75 Certificate issuer: /CN=30d5e2022ea82ec77f92dddb776618cd6c057575 Certificate serial: 019BF8766B838C6276EAD9021FAC5220B5DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft Manifest number: 0515 Signing time: Mon 26 Jan 2026 04:01:08 +0000 Manifest this update: Mon 26 Jan 2026 04:01:08 +0000 Manifest next update: Tue 27 Jan 2026 04:01:08 +0000 Files and hashes: 1: MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl (hash: 2pX5/LFgfE0+L+UZwIrN/Hgadbb8wwTlz+QRDqMe5D8=) 2: kiYvW45_WESo09z9DDPWp3aMKvk.roa (hash: o2aI0HzhoCPi6LjvBwdhvtbnQjp7uz8yNBS4PhNW0AE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:6b:83:8c:62:76:ea:d9:02:1f:ac:52:20:b5:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d5e2022ea82ec77f92dddb776618cd6c057575 Validity Not Before: Jan 26 04:01:08 2026 GMT Not After : Jan 27 04:01:08 2026 GMT Subject: CN=cac17fa91ea0d921ce4a32768c34adcbd28623d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:06:ba:b9:e8:0f:08:3b:fc:8f:81:44:e6: 11:c6:22:4e:3c:2f:49:fa:c1:95:55:50:5c:ae:42: 86:7f:08:0c:0a:c8:b1:0b:23:1f:07:24:04:79:27: e6:a7:1d:46:8f:ab:85:27:cd:86:79:18:f7:1f:b7: 04:ff:5d:4c:62:5e:c6:c4:cb:cb:6f:a6:33:4f:67: 14:74:9f:70:e9:a1:25:fc:7e:25:c3:88:37:96:21: 79:28:dc:5d:75:94:cb:48:b4:89:f9:55:01:06:5b: 50:95:c2:07:02:c7:6c:74:10:d9:88:13:60:46:cd: db:de:b9:16:cb:67:6f:6a:6c:64:1e:18:a5:7a:41: 94:d5:9a:7b:0e:57:6c:1a:7a:83:41:42:15:81:db: 60:f5:ac:8b:70:33:dc:a1:65:3c:04:9e:54:15:d8: 32:c2:a9:d4:12:3e:64:78:7b:47:e1:aa:a4:00:0a: 35:60:6f:42:0c:d1:49:1d:a6:12:8c:3d:cb:ec:e0: a4:97:30:35:6d:a0:bc:eb:f3:3d:40:8b:95:67:29: f2:a3:70:1a:5c:b9:1f:a0:60:75:2d:af:1c:a0:40: e8:68:bd:64:b9:a5:15:c8:35:32:ea:2f:fe:ec:af: d7:53:14:67:dc:1e:b6:c7:c6:3f:cc:eb:d2:ed:d1: cb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C1:7F:A9:1E:A0:D9:21:CE:4A:32:76:8C:34:AD:CB:D2:86:23:D1 X509v3 Authority Key Identifier: keyid:30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:89:65:b0:f0:20:18:3f:9e:a1:6c:5d:4b:8f:0d:35:6f:e2: 66:73:67:97:1d:a5:cd:6b:00:36:be:93:23:84:41:82:c0:c1: 4e:e3:9f:90:95:52:e6:f9:0b:5b:43:37:56:c8:d5:28:95:e5: 2c:a2:08:5b:a4:2c:42:b5:75:86:92:8a:8a:fd:30:9d:d8:58: b3:f2:34:45:67:52:ad:15:ef:5f:45:82:b3:4d:df:d6:a7:2d: 6f:c2:2d:57:f4:90:34:84:19:af:e4:ff:3f:f7:e1:59:1b:a1: 45:00:f7:b0:6d:d2:35:4c:5b:b3:06:9e:6a:b3:88:99:05:5b: 3c:21:4f:97:0b:20:95:53:5b:7d:1e:e7:85:33:44:f6:3e:8a: 03:2c:ab:24:dd:0b:b0:8d:98:e7:f3:6c:3e:ba:d1:80:b8:78: 64:9c:57:e9:18:f4:ea:ce:99:7e:7c:61:a6:f3:d9:7f:2a:62: 03:28:4a:e4:ed:7e:bd:35:0f:8a:b1:f5:ea:66:96:b4:48:6f: ef:a9:cd:e5:4a:56:67:35:8b:8b:01:f3:21:0d:66:a6:4b:ec: 10:ea:bd:ad:bd:69:42:92:4c:4f:35:ae:98:4b:ff:8c:04:60: ec:d7:6e:6a:0d:c3:5b:41:e1:87:54:11:50:0b:50:ea:33:f4: ca:00:4a:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dmuDjGJ26tkCH6xSILXcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZDVlMjAyMmVhODJlYzc3ZjkyZGRkYjc3NjYxOGNkNmMw NTc1NzUwHhcNMjYwMTI2MDQwMTA4WhcNMjYwMTI3MDQwMTA4WjAzMTEwLwYDVQQD EyhjYWMxN2ZhOTFlYTBkOTIxY2U0YTMyNzY4YzM0YWRjYmQyODYyM2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6QGurnoDwg7/I+BROYRxiJOPC9J +sGVVVBcrkKGfwgMCsixCyMfByQEeSfmpx1Gj6uFJ82GeRj3H7cE/11MYl7GxMvL b6YzT2cUdJ9w6aEl/H4lw4g3liF5KNxddZTLSLSJ+VUBBltQlcIHAsdsdBDZiBNg Rs3b3rkWy2dvamxkHhilekGU1Zp7DldsGnqDQUIVgdtg9ayLcDPcoWU8BJ5UFdgy wqnUEj5keHtH4aqkAAo1YG9CDNFJHaYSjD3L7OCklzA1baC86/M9QIuVZynyo3Aa XLkfoGB1La8coEDoaL1kuaUVyDUy6i/+7K/XUxRn3B62x8Y/zOvS7dHLyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrBf6keoNkhzkoydow0rcvShiPRMB8GA1UdIwQY MBaAFDDV4gIuqC7Hf5Ld23dmGM1sBXV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU5YaUFpNm9Mc2Rfa3QzYmQyWVl6V3dGZFhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mN2NhNGEtY2E3My00N2Y4LTlmZDct OWIyZjUxYjgwYTk4LzEvTU5YaUFpNm9Mc2Rfa3QzYmQyWVl6V3dGZFhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mN2NhNGEtY2E3My00N2Y4LTlmZDctOWIyZjUxYjgwYTk4 LzEvTU5YaUFpNm9Mc2Rfa3QzYmQyWVl6V3dGZFhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuIllsPAg GD+eoWxdS48NNW/iZnNnlx2lzWsANr6TI4RBgsDBTuOfkJVS5vkLW0M3VsjVKJXl LKIIW6QsQrV1hpKKiv0wndhYs/I0RWdSrRXvX0WCs03f1qctb8ItV/SQNIQZr+T/ P/fhWRuhRQD3sG3SNUxbswaearOImQVbPCFPlwsglVNbfR7nhTNE9j6KAyyrJN0L sI2Y5/NsPrrRgLh4ZJxX6Rj06s6ZfnxhpvPZfypiAyhK5O1+vTUPirH16maWtEhv 76nN5UpWZzWLiwHzIQ1mpkvsEOq9rb1pQpJMTzWumEv/jARg7Nduag3DW0Hhh1QR UAtQ6jP0ygBK1A== -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:52 2026 by rpki-client