This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft File: MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json) Hash identifier: tX+mzKRXq16qoKxRurPHF+dXZWoA9YjaPsLg6VvylKU= Subject key identifier: 0D:25:D1:A6:64:92:33:65:68:35:32:B2:A8:BF:44:EB:6B:6B:D4:61 Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90 Certificate issuer: /CN=327557cf22629d058a5114965b2f9df8ef4db690 Certificate serial: 019BF6514EE7F869F86A1B59C3E96E1D2B40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft Manifest number: 0ECF Signing time: Sun 25 Jan 2026 18:01:22 +0000 Manifest this update: Sun 25 Jan 2026 18:01:22 +0000 Manifest next update: Mon 26 Jan 2026 18:01:22 +0000 Files and hashes: 1: FnV4siConvZq8mk9CbOlR5a9DjI.roa (hash: IZ5c3lykfIm9IkvU3L26cQr7DSQZqq6fwwu8m+5tYDw=) 2: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: 2dFQG1ev25paLJv7MvFF2Nk0b7HvPJJLXBCpx6DREVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:4e:e7:f8:69:f8:6a:1b:59:c3:e9:6e:1d:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690 Validity Not Before: Jan 25 18:01:22 2026 GMT Not After : Jan 26 18:01:22 2026 GMT Subject: CN=0d25d1a664923365683532b2a8bf44eb6b6bd461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9f:a9:74:f2:5d:a6:00:3a:46:7a:ac:89:9a: 70:a1:84:6c:6a:4c:17:2c:a8:57:86:3a:56:51:7d: 1d:2f:3e:c0:64:38:d7:db:62:9a:d7:19:70:8e:5b: fb:69:f3:b6:3f:c6:b6:a2:fa:e3:b7:77:c7:31:8f: 5d:bf:b4:6e:e3:e4:9c:aa:20:b6:fe:a2:0b:f7:86: 5e:df:65:e3:a8:ab:0a:0c:c6:a4:7e:ab:ec:6a:0f: a4:fc:31:75:ba:e2:a6:9b:3d:92:c3:35:ae:ce:53: a2:1a:f7:81:39:af:39:31:c3:9b:15:84:b4:1d:ac: a1:39:ad:57:77:56:4d:a7:4e:5c:05:3e:96:80:8c: c1:42:8a:b8:1d:08:18:e6:a7:9f:b0:1e:9c:ea:a7: 45:be:e1:4e:57:ca:52:c3:69:b9:fb:f3:0c:92:26: e4:0c:21:6b:9f:ed:d9:ed:ff:06:05:cb:36:a1:66: d2:33:d5:38:40:64:a9:dd:f6:1c:f4:a1:0a:39:49: 37:c4:66:48:6e:dd:41:ae:f1:74:2d:76:14:ea:d4: 64:cb:7c:26:4f:99:7d:c7:90:b6:74:19:8b:e6:63: 65:68:45:e2:36:2d:3b:3b:f4:de:78:37:92:18:f5: cf:84:81:96:63:54:03:02:d9:76:61:fb:f8:4b:a7: f6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:25:D1:A6:64:92:33:65:68:35:32:B2:A8:BF:44:EB:6B:6B:D4:61 X509v3 Authority Key Identifier: keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:44:a6:97:59:82:87:3c:c0:84:1e:16:c2:bf:98:4a:15:17: f2:87:5e:98:4c:a5:07:9e:6c:0d:6d:20:aa:4d:83:08:65:2c: ec:ba:31:33:5c:69:10:02:4a:60:51:b0:67:f3:a0:33:f6:ab: 67:b6:69:02:e2:a9:81:e8:1c:ce:1c:d2:e2:93:ff:12:69:24: 78:42:5c:96:5d:35:2f:1c:3b:a9:96:dc:ae:33:5a:f6:bb:96: 87:5a:63:9e:1f:2f:a9:6d:e9:6d:c1:bf:df:e4:45:92:96:5f: 07:30:4d:d6:7e:b6:3b:25:a0:91:1e:14:0e:e4:9e:43:85:68: 5f:1e:9d:28:ef:f4:46:24:be:57:24:19:51:4e:1c:55:dd:3e: bc:6c:77:b3:27:f4:d1:e5:56:4f:a8:b7:87:92:15:03:45:fb: 08:f9:b1:74:5d:fd:78:64:e7:3a:0b:69:df:0e:90:28:5a:4d: c8:0f:b1:b1:55:03:98:8e:47:30:46:33:36:9f:35:35:3a:35: c7:d7:f7:6c:bb:af:f8:1b:3e:fb:f3:91:1e:86:e1:1f:ca:71: c3:0a:c9:f1:05:a6:2b:62:90:dc:79:b2:e9:49:32:ab:7e:0d: 53:ab:6f:4e:ea:6a:91:ac:b3:a6:6c:f2:3d:cb:5d:dd:34:18: 1a:dd:b3:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UU7n+Gn4ahtZw+luHStAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNzU1N2NmMjI2MjlkMDU4YTUxMTQ5NjViMmY5ZGY4ZWY0 ZGI2OTAwHhcNMjYwMTI1MTgwMTIyWhcNMjYwMTI2MTgwMTIyWjAzMTEwLwYDVQQD EygwZDI1ZDFhNjY0OTIzMzY1NjgzNTMyYjJhOGJmNDRlYjZiNmJkNDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3p+pdPJdpgA6RnqsiZpwoYRsakwX LKhXhjpWUX0dLz7AZDjX22Ka1xlwjlv7afO2P8a2ovrjt3fHMY9dv7Ru4+ScqiC2 /qIL94Ze32XjqKsKDMakfqvsag+k/DF1uuKmmz2SwzWuzlOiGveBOa85McObFYS0 HayhOa1Xd1ZNp05cBT6WgIzBQoq4HQgY5qefsB6c6qdFvuFOV8pSw2m5+/MMkibk DCFrn+3Z7f8GBcs2oWbSM9U4QGSp3fYc9KEKOUk3xGZIbt1BrvF0LXYU6tRky3wm T5l9x5C2dBmL5mNlaEXiNi07O/TeeDeSGPXPhIGWY1QDAtl2Yfv4S6f2LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0l0aZkkjNlaDUysqi/ROtra9RhMB8GA1UdIwQY MBaAFDJ1V88iYp0FilEUllsvnfjvTbaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUt ZmQ3MjViODI1MjkxLzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUtZmQ3MjViODI1Mjkx LzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUSml1mC hzzAhB4Wwr+YShUX8odemEylB55sDW0gqk2DCGUs7LoxM1xpEAJKYFGwZ/OgM/ar Z7ZpAuKpgegczhzS4pP/EmkkeEJcll01Lxw7qZbcrjNa9ruWh1pjnh8vqW3pbcG/ 3+RFkpZfBzBN1n62OyWgkR4UDuSeQ4VoXx6dKO/0RiS+VyQZUU4cVd0+vGx3syf0 0eVWT6i3h5IVA0X7CPmxdF39eGTnOgtp3w6QKFpNyA+xsVUDmI5HMEYzNp81NTo1 x9f3bLuv+Bs++/ORHobhH8pxwwrJ8QWmK2KQ3Hmy6Ukyq34NU6tvTupqkayzpmzy Pctd3TQYGt2z3A== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:09 2026 by rpki-client