This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft File: Mca7r0CfX9bXCcTX0kNEopKjyqU.mft (raw, json) Hash identifier: yOcbJLSzUy9Xh4pwsJJlrYBK0yYirymUzwJoWDZed4c= Subject key identifier: 53:04:F2:54:42:75:F7:1B:26:19:20:C5:F7:B5:59:6A:20:21:08:DD Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5 Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5 Certificate serial: 019BF6880BB5515CE38B3E1899A62BA1B254 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft Manifest number: 1412 Signing time: Sun 25 Jan 2026 19:01:09 +0000 Manifest this update: Sun 25 Jan 2026 19:01:09 +0000 Manifest next update: Mon 26 Jan 2026 19:01:09 +0000 Files and hashes: 1: 49TpwXNTbP9jREpz2sa2Jtt7mT4.roa (hash: 29rndF3r0S7bzK9ai7WqeiKlzm9ig1QMwR9Nz9BHg9o=) 2: Mca7r0CfX9bXCcTX0kNEopKjyqU.crl (hash: hx/ajfVOV2lA1avff47ydFXdTbcDekl3olBWg92SGCk=) 3: dCWLRmBaBQxy6eoWVHKXPq8UnbY.roa (hash: GnpPZWGTVcUqisrQyyHLCMNBiEUZ8MM+stWTYBQynzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:0b:b5:51:5c:e3:8b:3e:18:99:a6:2b:a1:b2:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5 Validity Not Before: Jan 25 19:01:09 2026 GMT Not After : Jan 26 19:01:09 2026 GMT Subject: CN=5304f2544275f71b261920c5f7b5596a202108dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:42:31:b0:fe:1f:57:e5:97:8e:b3:6b:ac:76: e9:10:ef:e2:b0:d0:2e:39:80:50:f1:17:9a:e0:d2: 0b:54:3d:7e:53:c0:d0:e6:aa:04:66:85:fd:e9:12: 0f:dd:eb:79:d6:e5:dc:98:e3:bd:78:13:29:5a:c4: a7:8b:b1:30:00:6c:b0:6a:5d:ee:58:76:11:05:78: 8e:d6:f1:3e:84:23:12:eb:07:31:e1:a6:d5:51:9f: 2c:42:27:29:b9:95:a2:0d:e6:e6:c2:8c:1d:a4:e7: 57:cb:fc:d7:ce:bf:44:0d:5f:35:a3:17:af:75:8f: 3f:be:45:0b:19:2b:46:80:7d:52:4f:27:c6:b0:ec: eb:1d:b6:b9:b7:64:21:44:2c:f6:b7:0b:a6:21:64: a7:3d:c9:54:15:8d:08:d4:76:e6:47:40:84:56:4e: 44:63:a8:5d:58:01:c0:7d:7a:cf:b3:ef:87:f6:04: f9:3b:71:d3:b8:16:16:5a:d0:72:0f:71:0a:28:a3: 53:a6:91:fc:02:74:77:51:92:c3:f2:12:16:86:6c: e9:e0:df:c6:e5:fe:b1:76:92:29:d2:86:3c:22:8c: 25:16:22:93:2a:0d:13:1b:4c:e6:bd:1e:d4:23:bb: 77:ed:35:e6:ba:72:f2:c3:46:0a:c9:a2:42:55:19: f9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:04:F2:54:42:75:F7:1B:26:19:20:C5:F7:B5:59:6A:20:21:08:DD X509v3 Authority Key Identifier: keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:7c:61:50:cc:07:fa:e1:e1:00:d7:6b:85:7c:b3:de:bf:04: b0:67:ec:b4:0f:d0:44:69:b1:ac:38:20:95:75:2d:09:d8:2c: 25:44:c4:da:47:97:7b:75:53:b6:6a:ce:df:be:c3:48:dc:5a: 31:ba:af:4c:18:bc:d0:34:d3:4a:51:30:47:db:8c:f1:db:4b: ec:6e:a0:0b:8c:6a:a5:48:f0:43:f0:40:9b:ab:07:b4:57:42: 20:ba:05:d7:a7:58:ce:b1:b5:d5:f5:2b:8d:52:d0:21:04:a5: d8:e3:a1:a2:54:03:2e:80:89:8f:dc:b6:96:8d:0c:53:54:00: 79:5b:9b:ab:03:23:b2:ec:b7:84:8e:bd:02:c9:20:fd:5b:6b: 3e:5f:a6:b9:c6:97:11:1e:37:98:57:33:67:ed:56:59:5b:05: db:49:7a:f1:33:bd:10:50:cd:f0:b7:5d:00:d8:49:d2:d1:42: 09:f3:5b:db:32:84:1c:85:b7:a6:47:bd:41:84:38:b6:79:a1: 56:4f:64:53:d8:f7:22:9d:12:88:15:c9:b8:72:c6:01:6c:3f: fd:ed:5e:63:4b:50:07:4f:a6:bd:88:64:a6:1c:74:56:6b:61: 6d:b1:20:44:e2:38:0f:ea:80:a2:2a:08:7b:d6:8f:82:55:d5: 1d:f0:fb:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iAu1UVzjiz4YmaYrobJUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYzZiYmFmNDA5ZjVmZDZkNzA5YzRkN2QyNDM0NGEyOTJh M2NhYTUwHhcNMjYwMTI1MTkwMTA5WhcNMjYwMTI2MTkwMTA5WjAzMTEwLwYDVQQD Eyg1MzA0ZjI1NDQyNzVmNzFiMjYxOTIwYzVmN2I1NTk2YTIwMjEwOGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0IxsP4fV+WXjrNrrHbpEO/isNAu OYBQ8Rea4NILVD1+U8DQ5qoEZoX96RIP3et51uXcmOO9eBMpWsSni7EwAGywal3u WHYRBXiO1vE+hCMS6wcx4abVUZ8sQicpuZWiDebmwowdpOdXy/zXzr9EDV81oxev dY8/vkULGStGgH1STyfGsOzrHba5t2QhRCz2twumIWSnPclUFY0I1HbmR0CEVk5E Y6hdWAHAfXrPs++H9gT5O3HTuBYWWtByD3EKKKNTppH8AnR3UZLD8hIWhmzp4N/G 5f6xdpIp0oY8IowlFiKTKg0TG0zmvR7UI7t37TXmunLyw0YKyaJCVRn5IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFME8lRCdfcbJhkgxfe1WWogIQjdMB8GA1UdIwQY MBaAFDHGu69An1/W1wnE19JDRKKSo8qlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMt NDFjM2NmOTA4ZTk3LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMtNDFjM2NmOTA4ZTk3 LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHxhUMwH +uHhANdrhXyz3r8EsGfstA/QRGmxrDgglXUtCdgsJUTE2keXe3VTtmrO377DSNxa MbqvTBi80DTTSlEwR9uM8dtL7G6gC4xqpUjwQ/BAm6sHtFdCILoF16dYzrG11fUr jVLQIQSl2OOholQDLoCJj9y2lo0MU1QAeVubqwMjsuy3hI69Askg/VtrPl+mucaX ER43mFczZ+1WWVsF20l68TO9EFDN8LddANhJ0tFCCfNb2zKEHIW3pke9QYQ4tnmh Vk9kU9j3Ip0SiBXJuHLGAWw//e1eY0tQB0+mvYhkphx0VmthbbEgROI4D+qAoioI e9aPglXVHfD7mw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:13:37 2026 by rpki-client