This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft File: mPArXPtBclCOBze_Jc1dIqAdxFo.mft (raw, json) Hash identifier: UEXfbaulDPWL6vMhKTAjxIl9yxsbTyjfn/m0NgXyx9g= Subject key identifier: 46:E4:15:10:36:49:33:80:19:2C:11:2B:15:81:8D:01:92:9E:4D:03 Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A Certificate issuer: /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a Certificate serial: 019BF79A1B06BCF363EC3AA7C2F379214C41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft Manifest number: 0919 Signing time: Mon 26 Jan 2026 00:00:30 +0000 Manifest this update: Mon 26 Jan 2026 00:00:30 +0000 Manifest next update: Tue 27 Jan 2026 00:00:30 +0000 Files and hashes: 1: Kch5YnfnliI8NHiCA07xVEbQzV4.roa (hash: 6jE9VEbDYjIrbBsLXEa9CMfNyqfSxGZFUWK682Q2o9I=) 2: mPArXPtBclCOBze_Jc1dIqAdxFo.crl (hash: Ln4kiroiq0C9dyXDE7nMo+qrusLGwbMupL7dl0Si4Bw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:1b:06:bc:f3:63:ec:3a:a7:c2:f3:79:21:4c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a Validity Not Before: Jan 26 00:00:30 2026 GMT Not After : Jan 27 00:00:30 2026 GMT Subject: CN=46e4151036493380192c112b15818d01929e4d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:54:57:09:40:16:de:b7:5e:04:79:8f:eb:53: 17:c5:5d:52:5b:88:8c:8b:74:f2:6a:31:bb:09:fe: ab:f5:84:f2:e3:e0:dc:1d:8c:76:b0:59:77:25:df: 27:0d:f6:6d:e9:60:25:fc:d1:b1:37:78:2d:df:2d: d6:71:80:21:8c:22:21:93:00:d9:7b:ba:7a:a0:73: 65:6e:77:e6:0a:47:a4:24:03:4f:11:7d:ca:c8:ca: 53:73:92:ed:b5:2e:7d:f7:9c:67:cb:0e:db:f2:ac: 9b:b9:a6:5f:d8:ad:dc:19:00:38:a2:ef:20:dd:67: b2:a3:36:b3:01:6c:a4:bc:56:c6:a9:08:83:d2:0e: 7c:ec:4a:a7:26:4d:67:d3:bc:70:fb:ba:28:09:24: d1:ea:3c:46:21:90:d7:e9:2c:72:bd:73:7a:3a:7c: d3:03:f5:84:06:a2:01:92:52:24:72:f9:11:99:b8: f2:fc:0d:2b:4d:25:38:bf:9d:84:10:0b:74:e5:98: a9:27:15:34:74:5d:56:37:e3:fe:92:ea:68:2b:9b: 3f:14:a6:7e:b9:e2:e9:f7:e1:50:7f:3c:d2:8f:11: 79:16:03:2e:d8:e3:4f:03:40:00:5c:3b:93:27:42: b4:03:36:d1:6c:fb:f0:28:e4:d7:f5:a6:0a:fd:bd: 94:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E4:15:10:36:49:33:80:19:2C:11:2B:15:81:8D:01:92:9E:4D:03 X509v3 Authority Key Identifier: keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:da:e1:8c:5b:a9:b1:a7:60:d3:d5:3a:b6:54:13:67:30:68: af:3d:06:cc:2f:f5:59:73:7b:65:3d:3e:9a:d4:ce:1a:d4:cd: d4:01:1d:f4:69:45:6a:40:6d:0f:22:3f:0b:e0:1c:4d:ec:68: 7e:c5:5c:e3:79:6c:ce:dc:3d:b4:76:ec:0e:f2:fd:01:d1:66: a5:72:ff:f1:58:36:3b:a4:49:51:06:8d:2b:cb:75:ae:60:74: 33:f8:36:bf:07:b0:c0:68:c6:4a:ef:c2:c2:2b:0f:92:a4:a8: 0d:18:ba:db:26:17:7c:9e:de:29:b4:a3:d0:f7:9c:0b:c7:e3: b7:88:a7:57:09:4b:a4:50:a9:31:47:ff:bd:40:e3:8e:3a:a7: db:57:23:ae:2f:9b:9a:90:f4:18:f2:ac:c2:f6:74:34:5c:1b: 3d:92:d2:27:22:11:95:65:c6:97:1e:5a:2b:2b:d3:0b:44:d6: a4:cd:bb:b2:95:36:f6:b7:27:53:66:8c:b2:e4:5c:2b:53:6e: 79:6b:94:d9:b9:2e:86:12:b0:36:02:34:7a:df:37:1a:4a:73: bc:16:3e:70:9d:89:5c:3d:b0:00:c7:5b:c5:7a:0e:8f:1c:9a: a5:84:c0:96:6c:a6:eb:b9:5c:de:8d:da:62:13:db:c5:d4:76: bc:e0:ed:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mhsGvPNj7DqnwvN5IUxBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZjAyYjVjZmI0MTcyNTA4ZTA3MzdiZjI1Y2Q1ZDIyYTAx ZGM0NWEwHhcNMjYwMTI2MDAwMDMwWhcNMjYwMTI3MDAwMDMwWjAzMTEwLwYDVQQD Eyg0NmU0MTUxMDM2NDkzMzgwMTkyYzExMmIxNTgxOGQwMTkyOWU0ZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lRXCUAW3rdeBHmP61MXxV1SW4iM i3TyajG7Cf6r9YTy4+DcHYx2sFl3Jd8nDfZt6WAl/NGxN3gt3y3WcYAhjCIhkwDZ e7p6oHNlbnfmCkekJANPEX3KyMpTc5LttS5995xnyw7b8qybuaZf2K3cGQA4ou8g 3WeyozazAWykvFbGqQiD0g587EqnJk1n07xw+7ooCSTR6jxGIZDX6SxyvXN6OnzT A/WEBqIBklIkcvkRmbjy/A0rTSU4v52EEAt05ZipJxU0dF1WN+P+kupoK5s/FKZ+ ueLp9+FQfzzSjxF5FgMu2ONPA0AAXDuTJ0K0AzbRbPvwKOTX9aYK/b2UmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbkFRA2STOAGSwRKxWBjQGSnk0DMB8GA1UdIwQY MBaAFJjwK1z7QXJQjgc3vyXNXSKgHcRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVBBclhQdEJjbENPQnplX0pjMWRJcUFkeEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80M2QzMDEtZjgxYS00OTJlLTkyMmMt Yzk3MWRjNzEzYjFmLzEvbVBBclhQdEJjbENPQnplX0pjMWRJcUFkeEZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS80M2QzMDEtZjgxYS00OTJlLTkyMmMtYzk3MWRjNzEzYjFm LzEvbVBBclhQdEJjbENPQnplX0pjMWRJcUFkeEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNrhjFup sadg09U6tlQTZzBorz0GzC/1WXN7ZT0+mtTOGtTN1AEd9GlFakBtDyI/C+AcTexo fsVc43lsztw9tHbsDvL9AdFmpXL/8Vg2O6RJUQaNK8t1rmB0M/g2vwewwGjGSu/C wisPkqSoDRi62yYXfJ7eKbSj0PecC8fjt4inVwlLpFCpMUf/vUDjjjqn21cjri+b mpD0GPKswvZ0NFwbPZLSJyIRlWXGlx5aKyvTC0TWpM27spU29rcnU2aMsuRcK1Nu eWuU2bkuhhKwNgI0et83GkpzvBY+cJ2JXD2wAMdbxXoOjxyapYTAlmym67lc3o3a YhPbxdR2vODtCA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:58:02 2026 by rpki-client