This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft File: mJB4Bt2stIQwvdAlSJgBnkE6K94.mft (raw, json) Hash identifier: eONKzHQ+OPLmkR5YaVqxZkUqPqyCrQpkbNwmkljALkc= Subject key identifier: B8:46:B4:7E:2C:A2:FB:24:EE:DE:E7:28:CB:9C:4F:54:A4:F2:9A:35 Authority key identifier: 98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE Certificate issuer: /CN=98907806ddacb48430bdd0254898019e413a2bde Certificate serial: 019BF5750EAC6996096BADF312A2B20782CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft Manifest number: 0ECE Signing time: Sun 25 Jan 2026 14:00:47 +0000 Manifest this update: Sun 25 Jan 2026 14:00:47 +0000 Manifest next update: Mon 26 Jan 2026 14:00:47 +0000 Files and hashes: 1: mJB4Bt2stIQwvdAlSJgBnkE6K94.crl (hash: sIVGCKE3uSgk2vtUpDxaV/YPRB954sIS58WoEe3buBQ=) 2: xspnOhir25ohaDEON_nokDMNa54.roa (hash: K76YUwImg7wnbqKcDgw/UjFp86GQnCK+RGi0ceH55xE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:0e:ac:69:96:09:6b:ad:f3:12:a2:b2:07:82:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98907806ddacb48430bdd0254898019e413a2bde Validity Not Before: Jan 25 14:00:47 2026 GMT Not After : Jan 26 14:00:47 2026 GMT Subject: CN=b846b47e2ca2fb24eedee728cb9c4f54a4f29a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:54:31:ac:35:49:4c:a4:21:a3:ba:50:97:07: 1e:be:32:a4:00:e6:5a:49:89:ca:58:79:2a:99:74: 20:d1:66:7d:e0:ea:90:29:7f:d4:43:e3:64:4e:8c: e7:0b:5e:51:49:1a:b6:1c:d0:52:5c:ae:b5:f4:c3: a1:76:54:a4:df:0d:92:6a:88:5e:3a:cf:b5:11:d5: 68:3f:2c:04:77:23:01:ef:0b:ad:5d:bf:06:d9:28: 1a:71:e9:ef:aa:db:0b:f2:10:1e:84:f5:bb:f3:80: cb:1d:b9:4f:87:30:88:f8:70:6c:b9:ea:4b:5a:53: 4e:76:b8:01:3c:f1:b4:c5:e2:38:5f:4c:93:f8:03: dd:4c:ae:16:84:a6:8a:a6:b2:08:5d:31:5c:17:59: 69:5c:35:bf:dc:32:b0:ad:d8:0d:5f:2c:77:00:38: f2:37:b3:44:64:58:d7:d4:51:37:40:fd:7c:66:cd: 03:0f:9a:42:9e:48:f3:5f:73:33:50:9d:33:12:52: 68:26:3c:ff:ec:52:c7:ad:8f:03:ef:96:f3:fe:31: 03:de:e9:1d:d3:14:06:f6:88:b9:1e:85:cd:9d:8e: f6:e8:53:f3:c5:00:b7:f7:ca:0e:97:bd:fc:08:ea: af:f6:21:91:1a:ff:d8:4e:4b:ee:84:45:3c:a3:c4: a3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:46:B4:7E:2C:A2:FB:24:EE:DE:E7:28:CB:9C:4F:54:A4:F2:9A:35 X509v3 Authority Key Identifier: keyid:98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:37:37:ff:3b:04:b5:f4:66:a9:4b:7f:8e:31:b7:fa:36:aa: dc:39:e9:6e:72:98:0f:8c:c1:81:34:08:2c:d0:da:48:b3:39: 0e:22:d2:a5:69:10:06:fa:0a:40:d7:a8:ae:23:2e:cc:d9:9c: 2c:9e:b3:e0:6d:22:8c:9b:f6:d8:49:e7:69:76:c0:fc:d9:53: 57:ea:87:4d:8c:68:ae:b1:74:a4:6f:16:b8:af:87:5a:4b:9d: 18:7d:29:d9:4e:8d:2a:4e:a5:30:95:a2:07:92:9b:09:75:5f: 01:76:5e:f1:22:55:de:ec:dc:74:14:56:43:d0:c0:e7:27:b4: 3a:fd:16:38:d0:be:4d:1e:14:36:32:22:f2:4d:ff:c4:30:c4: c3:42:3b:dc:9b:43:58:89:3b:64:a3:e5:74:aa:f6:26:73:98: 0b:b8:8e:f5:69:1b:a5:45:a1:05:cc:42:0a:f7:91:8a:4e:35: 2c:19:9d:2c:0f:a3:6d:d7:e5:0a:09:c1:06:f1:50:83:da:f9: 7b:db:c4:d6:e7:4d:8f:24:9e:fd:02:49:0b:74:f1:5f:61:e7: e7:f7:38:0f:55:3e:e8:6f:07:de:45:5d:26:9b:55:41:4c:86: 0a:bb:ec:8d:e1:ec:44:8a:e3:30:95:8f:fa:6a:73:8f:a5:ea: 19:a7:ff:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dQ6saZYJa63zEqKyB4LPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4OTA3ODA2ZGRhY2I0ODQzMGJkZDAyNTQ4OTgwMTllNDEz YTJiZGUwHhcNMjYwMTI1MTQwMDQ3WhcNMjYwMTI2MTQwMDQ3WjAzMTEwLwYDVQQD EyhiODQ2YjQ3ZTJjYTJmYjI0ZWVkZWU3MjhjYjljNGY1NGE0ZjI5YTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVQxrDVJTKQho7pQlwcevjKkAOZa SYnKWHkqmXQg0WZ94OqQKX/UQ+NkToznC15RSRq2HNBSXK619MOhdlSk3w2Saohe Os+1EdVoPywEdyMB7wutXb8G2SgacenvqtsL8hAehPW784DLHblPhzCI+HBsuepL WlNOdrgBPPG0xeI4X0yT+APdTK4WhKaKprIIXTFcF1lpXDW/3DKwrdgNXyx3ADjy N7NEZFjX1FE3QP18Zs0DD5pCnkjzX3MzUJ0zElJoJjz/7FLHrY8D75bz/jED3ukd 0xQG9oi5HoXNnY726FPzxQC398oOl738COqv9iGRGv/YTkvuhEU8o8SjrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhGtH4sovsk7t7nKMucT1Sk8po1MB8GA1UdIwQY MBaAFJiQeAbdrLSEML3QJUiYAZ5BOiveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUpCNEJ0MnN0SVF3dmRBbFNKZ0Jua0U2Szk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zZTNiMTctODRjOS00NDcyLWJkMzMt MTI2NzRlNjYxZTEzLzEvbUpCNEJ0MnN0SVF3dmRBbFNKZ0Jua0U2Szk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zZTNiMTctODRjOS00NDcyLWJkMzMtMTI2NzRlNjYxZTEz LzEvbUpCNEJ0MnN0SVF3dmRBbFNKZ0Jua0U2Szk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjc3/zsE tfRmqUt/jjG3+jaq3DnpbnKYD4zBgTQILNDaSLM5DiLSpWkQBvoKQNeoriMuzNmc LJ6z4G0ijJv22EnnaXbA/NlTV+qHTYxorrF0pG8WuK+HWkudGH0p2U6NKk6lMJWi B5KbCXVfAXZe8SJV3uzcdBRWQ9DA5ye0Ov0WONC+TR4UNjIi8k3/xDDEw0I73JtD WIk7ZKPldKr2JnOYC7iO9WkbpUWhBcxCCveRik41LBmdLA+jbdflCgnBBvFQg9r5 e9vE1udNjySe/QJJC3TxX2Hn5/c4D1U+6G8H3kVdJptVQUyGCrvsjeHsRIrjMJWP +mpzj6XqGaf/jg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:58:40 2026 by rpki-client