This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft File: mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft (raw, json) Hash identifier: 4zA5bYLWqOnsFXAEcNeAkGiwY14tkwDsitNj7GMH5h8= Subject key identifier: B9:54:4E:65:AC:D1:83:9C:AD:3D:3C:E2:AD:B5:1F:C3:0D:01:B6:B3 Authority key identifier: 99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27 Certificate issuer: /CN=996f903f91a85a60c546ee1141348cc3c8036927 Certificate serial: 019BF7D1F23DF0A8E2A60DEAD6DDDF5E673D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft Manifest number: 147C Signing time: Mon 26 Jan 2026 01:01:29 +0000 Manifest this update: Mon 26 Jan 2026 01:01:29 +0000 Manifest next update: Tue 27 Jan 2026 01:01:29 +0000 Files and hashes: 1: 1-WzZMCEyc2Rm8WtzI4guv1wbjQc.roa (hash: Zwy/WM9bxRjQKO19XmxHw+6wiCVAQYUUXkLnAumwRps=) 2: mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl (hash: b5It0sFzvIWGM6l4F/T/WjSzNIWHR1KVSOzW4hkv2ZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:f2:3d:f0:a8:e2:a6:0d:ea:d6:dd:df:5e:67:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=996f903f91a85a60c546ee1141348cc3c8036927 Validity Not Before: Jan 26 01:01:29 2026 GMT Not After : Jan 27 01:01:29 2026 GMT Subject: CN=b9544e65acd1839cad3d3ce2adb51fc30d01b6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a0:3a:f2:96:b6:4d:d5:f6:5f:ce:6a:74:c1: cf:49:23:84:80:4c:36:99:4a:c8:05:1f:f3:cf:73: 35:2c:46:d4:c9:c2:89:a4:c6:5b:e0:3f:15:c0:5e: 7d:90:16:ee:f3:3e:78:ae:9b:8e:7a:f1:e1:4b:3f: 63:b6:ad:e8:87:2b:68:66:94:ab:fe:00:ad:9a:72: cd:35:a8:f3:e9:d2:7a:e8:1a:d2:0d:4d:85:0e:a0: fd:e6:f2:38:63:80:62:9a:34:02:e6:b0:fb:39:4e: 02:36:f5:2b:6a:53:5e:47:c5:61:ae:e0:0e:f6:e8: f5:f2:3c:93:3d:35:b9:de:d6:3e:9e:a6:2b:bb:9f: 26:d0:89:fb:27:2c:fc:a2:ab:33:84:b6:4f:5a:98: e5:7c:16:23:3a:4f:5d:70:cd:40:92:08:ae:d2:e1: 78:47:a8:42:3e:00:b2:84:cf:6e:0a:7e:6c:0b:72: 3c:5a:3e:09:a5:37:b2:30:7e:5c:c0:4a:f8:73:d8: 9d:60:7d:4c:2b:5f:0e:6b:ae:db:84:0b:ea:75:98: c6:1e:f4:18:29:c2:f6:ad:ca:5f:33:50:38:d5:43: 3e:30:30:c9:1b:ae:f8:20:cb:5b:63:7b:99:fb:df: d2:00:fe:c8:b7:a8:6e:b5:38:81:64:1b:40:46:b7: ba:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:54:4E:65:AC:D1:83:9C:AD:3D:3C:E2:AD:B5:1F:C3:0D:01:B6:B3 X509v3 Authority Key Identifier: keyid:99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:57:15:c8:14:59:ad:b6:18:9c:70:c1:b3:8b:8f:c3:a3:40: 23:2e:5a:a4:6e:28:86:78:c5:27:2b:8d:5a:2d:2b:7f:1b:43: 86:f2:49:1f:2f:dd:02:97:2f:e5:39:07:04:b4:93:fa:dd:c1: 57:e6:c3:51:d9:66:17:3a:ed:4a:34:56:9f:4e:d6:cd:39:00: 88:3f:29:47:22:1c:fe:50:8d:da:ba:ab:19:ac:ad:ab:0a:2a: 6f:a4:b7:c4:ea:19:c5:77:b5:49:65:92:86:52:76:d4:27:96: 5b:ac:78:ea:80:91:b5:bc:31:cb:dc:6f:bc:d0:25:ab:b7:ba: 96:0c:39:d3:67:de:43:d0:47:be:76:6c:4c:78:38:3a:e1:88: 4e:3a:51:ef:4a:ff:26:65:53:75:49:7e:73:2a:78:07:14:7a: 0e:a1:ff:47:27:89:23:6f:19:6a:b5:5f:38:34:38:ce:dd:e5: d4:fe:73:ee:b2:57:14:a9:81:63:f2:03:7e:34:c7:98:c6:52: 68:b0:54:af:11:21:2f:71:3a:f3:46:12:b2:0d:d6:dd:95:28: 3a:69:fe:bf:86:0a:93:97:58:91:45:ff:3f:54:8c:5d:85:aa: 32:aa:80:da:ae:21:07:11:85:27:7f:2c:2c:35:20:f0:30:10: 5c:77:cc:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30fI98Kjipg3q1t3fXmc9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NmY5MDNmOTFhODVhNjBjNTQ2ZWUxMTQxMzQ4Y2MzYzgw MzY5MjcwHhcNMjYwMTI2MDEwMTI5WhcNMjYwMTI3MDEwMTI5WjAzMTEwLwYDVQQD EyhiOTU0NGU2NWFjZDE4MzljYWQzZDNjZTJhZGI1MWZjMzBkMDFiNmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KA68pa2TdX2X85qdMHPSSOEgEw2 mUrIBR/zz3M1LEbUycKJpMZb4D8VwF59kBbu8z54rpuOevHhSz9jtq3ohytoZpSr /gCtmnLNNajz6dJ66BrSDU2FDqD95vI4Y4BimjQC5rD7OU4CNvUralNeR8VhruAO 9uj18jyTPTW53tY+nqYru58m0In7Jyz8oqszhLZPWpjlfBYjOk9dcM1Akgiu0uF4 R6hCPgCyhM9uCn5sC3I8Wj4JpTeyMH5cwEr4c9idYH1MK18Oa67bhAvqdZjGHvQY KcL2rcpfM1A41UM+MDDJG674IMtbY3uZ+9/SAP7It6hutTiBZBtARre6EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlUTmWs0YOcrT084q21H8MNAbazMB8GA1UdIwQY MBaAFJlvkD+RqFpgxUbuEUE0jMPIA2knMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVctUVA1R29XbURGUnU0UlFUU013OGdEYVNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMjAxMDEtMWM5Zi00NGM1LTgwNzct NTE5MGY3ODY5YTdmLzEvbVctUVA1R29XbURGUnU0UlFUU013OGdEYVNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9hMjAxMDEtMWM5Zi00NGM1LTgwNzctNTE5MGY3ODY5YTdm LzEvbVctUVA1R29XbURGUnU0UlFUU013OGdEYVNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFcVyBRZ rbYYnHDBs4uPw6NAIy5apG4ohnjFJyuNWi0rfxtDhvJJHy/dApcv5TkHBLST+t3B V+bDUdlmFzrtSjRWn07WzTkAiD8pRyIc/lCN2rqrGaytqwoqb6S3xOoZxXe1SWWS hlJ21CeWW6x46oCRtbwxy9xvvNAlq7e6lgw502feQ9BHvnZsTHg4OuGITjpR70r/ JmVTdUl+cyp4BxR6DqH/RyeJI28ZarVfODQ4zt3l1P5z7rJXFKmBY/IDfjTHmMZS aLBUrxEhL3E680YSsg3W3ZUoOmn+v4YKk5dYkUX/P1SMXYWqMqqA2q4hBxGFJ38s LDUg8DAQXHfMew== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:45 2026 by rpki-client