This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json) Hash identifier: zfM/+GkeIgE6vLAwfNauozR7X5/aP0mriAEDDgzow00= Subject key identifier: 21:4A:5A:49:35:14:85:DD:11:3F:66:9E:35:71:EF:2B:FD:4C:3B:97 Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2 Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2 Certificate serial: 019BF5E3A4D0CB86BA4749657389232578B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 16:01:35 +0000 Manifest this update: Sun 25 Jan 2026 16:01:35 +0000 Manifest next update: Mon 26 Jan 2026 16:01:35 +0000 Files and hashes: 1: 8SPFx32KgvVe9lcWznI2Snmx0Rc.roa (hash: nh58H0C13D89s99FYORfNnZ+pFC6NWZms6nXMjb65c0=) 2: CkgoFwT2gaRyCRHQ9kf-YZ7WXx4.roa (hash: ElBC6RLnYPiPMuL0QaxoL/y5M23xIxFx5PXxpI7qDgQ=) 3: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: mgKWrFDbtW3JJN1F42Nl54lxqcIqhIt0GA9XVbjN7uE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:a4:d0:cb:86:ba:47:49:65:73:89:23:25:78:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2 Validity Not Before: Jan 25 16:01:35 2026 GMT Not After : Jan 26 16:01:35 2026 GMT Subject: CN=214a5a49351485dd113f669e3571ef2bfd4c3b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:12:8e:6d:24:6a:dc:b0:fd:87:26:94:63:6b: 35:34:2c:34:fd:47:cf:f3:b6:1d:b1:e6:ac:2a:d3: 34:a0:de:73:76:d8:e4:1d:df:60:97:26:b1:d9:5b: 3f:7e:18:39:16:3e:21:50:13:1d:35:73:15:dc:ac: da:ff:bc:7a:a4:2c:bd:b2:7c:96:dd:20:6d:14:ce: 5e:25:c5:37:e1:58:b0:fc:d7:ab:dc:0a:7e:58:b0: 33:02:83:d1:f0:f3:f2:5c:a1:bb:12:dc:63:a5:5d: 66:3d:28:b4:ce:23:b9:04:84:f4:fe:51:50:64:49: ea:91:7c:cd:eb:65:c6:0d:31:1b:0c:60:62:f4:f9: 9b:04:44:a9:ea:a6:d8:ee:dc:94:ec:87:fd:2b:f4: 9f:f3:6a:c0:72:e2:f6:4d:0f:b5:b3:cf:60:8c:a1: eb:cb:34:ff:2d:c6:19:e4:aa:6b:0e:cd:93:a3:ea: a8:ca:57:61:1b:ae:a9:a9:e3:ef:07:8e:e2:83:c6: be:b4:2f:24:48:29:59:f3:9c:ea:f0:65:84:a1:74: e7:d0:9e:e6:c1:3f:28:f5:33:89:79:ab:9b:8e:65: bf:f1:5a:96:e3:cd:c4:4c:3d:53:3f:b4:6c:4d:ac: 3f:36:79:c0:3a:9f:d3:63:00:71:dd:ca:76:95:10: 49:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4A:5A:49:35:14:85:DD:11:3F:66:9E:35:71:EF:2B:FD:4C:3B:97 X509v3 Authority Key Identifier: keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a1:7d:91:7f:3e:b8:09:1c:06:41:18:89:88:bb:8c:0c:56: c4:6d:de:71:f0:95:bb:47:68:ca:04:f1:1b:5e:8e:fd:29:a6: 1c:18:15:98:64:15:1b:d8:2b:56:e9:de:ad:72:bf:28:d2:a3: f4:ef:be:0a:a2:59:7a:a3:c2:e9:e8:6b:6d:9b:9a:21:72:b2: e2:09:d5:a7:39:b4:27:94:1b:5c:f2:d8:41:37:ab:a6:8b:61: 5b:a1:09:0c:79:e5:60:d9:e5:58:58:88:b1:04:51:52:fc:41: fc:d6:71:64:ac:82:49:4f:dd:69:69:87:27:8c:35:12:9b:45: 72:95:59:e2:66:e9:25:2f:99:a1:1b:2c:55:f7:7c:30:bb:50: 1e:41:d3:27:08:db:15:63:ae:aa:bd:79:d4:6b:c7:dc:44:18: 5f:52:33:79:e5:30:1d:b7:56:72:dd:c6:3e:d9:dc:8f:f0:05: da:c6:ef:c3:e3:4a:4f:2b:82:73:29:d6:28:88:f4:9b:67:98: aa:b8:94:79:38:96:b3:13:99:d1:6c:3e:29:64:27:3c:7a:36: 13:2d:89:5f:5f:1d:8b:05:07:ad:b7:b7:38:bc:fc:b3:cc:50: 51:80:39:bb:db:21:38:6a:d0:59:7c:35:3f:d9:2d:fa:5c:47: 45:e0:ba:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv146TQy4a6R0llc4kjJXi5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNzA2YjJiOTU1ODhkNzgwZTM2ZWY4MmE4ZjU0YTMxN2Q1 ODY5ZTIwHhcNMjYwMTI1MTYwMTM1WhcNMjYwMTI2MTYwMTM1WjAzMTEwLwYDVQQD EygyMTRhNWE0OTM1MTQ4NWRkMTEzZjY2OWUzNTcxZWYyYmZkNGMzYjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhKObSRq3LD9hyaUY2s1NCw0/UfP 87YdseasKtM0oN5zdtjkHd9glyax2Vs/fhg5Fj4hUBMdNXMV3Kza/7x6pCy9snyW 3SBtFM5eJcU34Viw/Ner3Ap+WLAzAoPR8PPyXKG7EtxjpV1mPSi0ziO5BIT0/lFQ ZEnqkXzN62XGDTEbDGBi9PmbBESp6qbY7tyU7If9K/Sf82rAcuL2TQ+1s89gjKHr yzT/LcYZ5KprDs2To+qoyldhG66pqePvB47ig8a+tC8kSClZ85zq8GWEoXTn0J7m wT8o9TOJeaubjmW/8VqW483ETD1TP7RsTaw/NnnAOp/TYwBx3cp2lRBJfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFKWkk1FIXdET9mnjVx7yv9TDuXMB8GA1UdIwQY MBaAFDBwayuVWI14Djbvgqj1SjF9WGniMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yOGRlYmItM2E1OS00ZWUxLWJkMzct ODRlZDkxZWMxYzY1LzEvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yOGRlYmItM2E1OS00ZWUxLWJkMzctODRlZDkxZWMxYzY1 LzEvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaF9kX8+ uAkcBkEYiYi7jAxWxG3ecfCVu0doygTxG16O/SmmHBgVmGQVG9grVunerXK/KNKj 9O++CqJZeqPC6ehrbZuaIXKy4gnVpzm0J5QbXPLYQTerpothW6EJDHnlYNnlWFiI sQRRUvxB/NZxZKyCSU/daWmHJ4w1EptFcpVZ4mbpJS+ZoRssVfd8MLtQHkHTJwjb FWOuqr151GvH3EQYX1IzeeUwHbdWct3GPtncj/AF2sbvw+NKTyuCcynWKIj0m2eY qriUeTiWsxOZ0Ww+KWQnPHo2Ey2JX18diwUHrbe3OLz8s8xQUYA5u9shOGrQWXw1 P9kt+lxHReC6yQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:52 2026 by rpki-client