This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft File: u4MGMPI7Bwore99Sn3OUjJfqzUA.mft (raw, json) Hash identifier: GDKdlKMjUQ2GnT8st4okfcD1p7/EUvqB+4aPh9MYIIg= Subject key identifier: 3A:11:05:4A:E8:41:67:4A:F3:42:86:26:34:72:C6:50:40:66:27:F9 Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Certificate serial: 019BF5070738989635259C0CCC8B3498F445 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft Manifest number: 189D Signing time: Sun 25 Jan 2026 12:00:36 +0000 Manifest this update: Sun 25 Jan 2026 12:00:36 +0000 Manifest next update: Mon 26 Jan 2026 12:00:36 +0000 Files and hashes: 1: 096oU7e0E8HrowP4gJPAu4Yvq7w.roa (hash: h6GJyY7se9YHyBgaTMbTYiFCIPloa8qIM1tvJFasblQ=) 2: 7urEzTsKBLxb5onYBj-aFpyop_U.roa (hash: gb459gbapFxHlbK0J2K7Bvt5uguuHwVrigvvlQxP67E=) 3: K3pCW6DMfWmwUICoCVoBJ7U1TrA.roa (hash: 9icPTFBD+khM3APqP2SnFv1jcCFEm/tBXkJdWSzswVg=) 4: MKYrJvGzvZyRvU-YTMKw33sMjbA.roa (hash: zitB1QIdSvuwxE4jXL1s8PUZB8yK6i+xpiMCf2djBrI=) 5: PF5StOvcjBtJpPkWMQC42y_-7lw.roa (hash: +5ZUq1SbcccJBEuKBRND5IHUBd0bwJSPmUEVlNBAa5I=) 6: Pk0nYBXMibYGfeTa8KuAnDZqEJA.roa (hash: hjjTFQRkGi+Q5QO7W0JHJgrLPllKcASVVsrIkHritU0=) 7: nAG5lZSxj6V-wheZnmYE_Q6WWfU.roa (hash: tMCGq6CAVBv6m8gzjuzDgfNy/wvlZB8HIzsnhiNlqsg=) 8: u4MGMPI7Bwore99Sn3OUjJfqzUA.crl (hash: DwcVfAqiu8AXx/9iPLkjw3MAXyS7f7ajYmTzwiLuvzU=) 9: y4_D6Qio_R6p7o2KXWCnWybEys0.roa (hash: mUX1ZbSigKnFsHWLnR+/SQCMcTKlzqfR36hp2kv3WSg=) 10: zoz2o6V8v-pZ3rm_TVWUy2Mtt38.roa (hash: /e9GDLeuGl688HzU36fMz9iRnDyyAkt0kfM3UnT5a8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:07:38:98:96:35:25:9c:0c:cc:8b:34:98:f4:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Validity Not Before: Jan 25 12:00:36 2026 GMT Not After : Jan 26 12:00:36 2026 GMT Subject: CN=3a11054ae841674af34286263472c650406627f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:67:32:46:cf:b2:67:09:af:af:f9:5b:11:a2: 8c:cc:21:84:12:c0:b6:ac:78:03:95:20:aa:57:c3: c0:7b:4c:eb:5e:5c:18:fb:d6:a3:fe:ab:99:99:af: 3f:60:03:ff:f8:4a:28:3e:a0:cb:7d:04:eb:43:5a: 8c:21:75:73:f4:9e:f6:25:7a:bb:18:2e:74:f5:0e: 98:25:80:46:40:93:f5:bf:d2:76:e4:d2:7b:e0:d1: 3a:01:82:a4:12:3d:8e:84:64:3c:31:06:90:6a:5f: 79:92:85:59:00:56:dd:96:ac:0f:1b:95:a3:5e:0a: 42:ad:04:b5:66:49:6b:5e:98:ce:c5:76:f1:35:46: d0:90:6f:5d:b3:cd:16:e8:fa:ad:12:d7:d8:d6:06: ef:86:0c:42:b7:83:68:df:2e:57:df:11:76:b3:13: f0:4c:0d:bf:fc:1f:88:01:f9:19:ad:76:4a:6b:bf: cb:e6:2a:ec:5c:06:e1:0a:45:84:4e:a5:e7:0b:85: 3b:20:9d:58:b6:c4:e7:68:37:ff:bb:ef:01:59:9c: 0b:8c:12:76:89:93:15:dc:70:48:12:69:d3:29:6c: a8:9e:a3:27:03:ef:f0:fb:0b:9e:b4:49:49:a2:9c: 0e:ac:8c:1f:e3:5b:f1:ec:c5:5a:e5:74:8f:33:67: 49:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:11:05:4A:E8:41:67:4A:F3:42:86:26:34:72:C6:50:40:66:27:F9 X509v3 Authority Key Identifier: keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2a:3d:08:73:5e:88:e3:84:ed:f4:45:c7:50:95:ba:4b:18: 4a:a2:ec:1c:30:76:fb:92:8e:25:58:45:32:cf:7c:6e:69:56: d5:0c:07:7f:d5:61:43:23:db:e8:60:46:5c:32:86:bb:34:6c: e9:ed:99:05:b3:bf:21:57:d7:15:72:dd:91:f0:cf:23:d4:ba: 85:b3:32:a9:7f:25:48:c9:db:37:a3:2e:bd:f4:2e:a9:10:ca: 42:06:26:e1:d9:a3:09:d6:b9:c8:c5:4d:2e:a5:20:3a:ef:b2: b1:73:30:f7:2d:90:7e:27:fd:28:89:7b:ef:d5:a8:fa:90:ce: f7:0b:26:86:5c:87:bb:06:e3:f5:9e:47:c1:10:e1:3f:bf:f5: 8d:d2:ee:c3:41:75:38:a3:3a:28:08:3d:fa:82:d7:9d:85:79: 61:41:22:d8:17:f5:f7:6f:1c:20:34:d9:e6:bc:28:cf:f7:32: 2e:ab:5e:8b:fa:ef:25:9c:e3:5a:30:b8:24:6e:1d:18:bc:a8: fd:42:e6:03:55:e8:17:b0:c0:d6:18:33:b9:30:01:b5:05:2c: e6:be:b6:33:17:95:96:d3:6c:d8:e9:8a:dd:17:1c:4a:24:d6: 53:be:ad:46:ee:3e:c4:da:aa:cb:bd:f1:d2:13:c8:6f:44:1b: b5:22:b9:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Bwc4mJY1JZwMzIs0mPRFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl YWNkNDAwHhcNMjYwMTI1MTIwMDM2WhcNMjYwMTI2MTIwMDM2WjAzMTEwLwYDVQQD EygzYTExMDU0YWU4NDE2NzRhZjM0Mjg2MjYzNDcyYzY1MDQwNjYyN2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWcyRs+yZwmvr/lbEaKMzCGEEsC2 rHgDlSCqV8PAe0zrXlwY+9aj/quZma8/YAP/+EooPqDLfQTrQ1qMIXVz9J72JXq7 GC509Q6YJYBGQJP1v9J25NJ74NE6AYKkEj2OhGQ8MQaQal95koVZAFbdlqwPG5Wj XgpCrQS1ZklrXpjOxXbxNUbQkG9ds80W6PqtEtfY1gbvhgxCt4No3y5X3xF2sxPw TA2//B+IAfkZrXZKa7/L5irsXAbhCkWETqXnC4U7IJ1YtsTnaDf/u+8BWZwLjBJ2 iZMV3HBIEmnTKWyonqMnA+/w+wuetElJopwOrIwf41vx7MVa5XSPM2dJ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoRBUroQWdK80KGJjRyxlBAZif5MB8GA1UdIwQY MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt MTE5ZWZjYmIyMDIzLzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATio9CHNe iOOE7fRFx1CVuksYSqLsHDB2+5KOJVhFMs98bmlW1QwHf9VhQyPb6GBGXDKGuzRs 6e2ZBbO/IVfXFXLdkfDPI9S6hbMyqX8lSMnbN6MuvfQuqRDKQgYm4dmjCda5yMVN LqUgOu+ysXMw9y2Qfif9KIl779Wo+pDO9wsmhlyHuwbj9Z5HwRDhP7/1jdLuw0F1 OKM6KAg9+oLXnYV5YUEi2Bf1928cIDTZ5rwoz/cyLqtei/rvJZzjWjC4JG4dGLyo /ULmA1XoF7DA1hgzuTABtQUs5r62MxeVltNs2OmK3RccSiTWU76tRu4+xNqqy73x 0hPIb0QbtSK5oA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:54:55 2026 by rpki-client