This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft File: Mwe9udWFUeFJKsQ6I7m2KWac624.mft (raw, json) Hash identifier: 1ZYfGJVlTBTO2d4l24nc1/tlA8YeOS9i9P/YWInHrAg= Subject key identifier: 60:EC:B4:A0:87:3F:48:4F:43:61:05:6E:40:06:BD:C4:27:A1:39:5D Authority key identifier: 33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E Certificate issuer: /CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e Certificate serial: 019BF6F58142911B055E0E903562DD5FD29A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft Manifest number: 02C7 Signing time: Sun 25 Jan 2026 21:00:43 +0000 Manifest this update: Sun 25 Jan 2026 21:00:43 +0000 Manifest next update: Mon 26 Jan 2026 21:00:43 +0000 Files and hashes: 1: 5CsJQbk37xiXoy3hwH8D-YG-5Ks.roa (hash: gMzNQr0CHei7E1lRV/ytteIthIW9m0i5qgAObYiInOc=) 2: Mwe9udWFUeFJKsQ6I7m2KWac624.crl (hash: ybatGjHjz9Gcvz0kXXXAYtmg6sXb0BXWmerDSJxmdGE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:81:42:91:1b:05:5e:0e:90:35:62:dd:5f:d2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e Validity Not Before: Jan 25 21:00:43 2026 GMT Not After : Jan 26 21:00:43 2026 GMT Subject: CN=60ecb4a0873f484f4361056e4006bdc427a1395d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:40:12:40:8e:89:67:ea:44:2f:ba:bd:df:19: 84:6f:16:9b:97:80:19:e2:88:2e:71:e2:8f:2d:06: 5e:3b:28:f8:ba:ea:b8:8a:dd:d2:4c:2f:be:3a:7d: 9f:31:c9:f4:04:84:5f:24:a5:87:9f:95:3d:4c:b1: 28:3e:af:38:fe:f1:cf:25:cd:ae:b8:e6:9d:16:00: 1a:68:ae:47:6c:50:11:cb:77:f3:88:61:03:45:7d: ab:cc:f9:5e:4d:31:88:ec:21:07:79:12:a5:3f:8c: 38:b4:d1:09:df:13:2e:1c:7c:af:45:29:03:64:be: f0:6d:b5:a8:1c:b3:6a:c5:9a:32:29:5b:1d:cb:fa: 4e:32:ad:f7:58:17:5f:b1:f1:a7:16:4b:5b:bf:83: 58:01:fa:49:75:50:ee:7c:d6:2d:a5:ce:5f:ce:72: 41:d9:1e:79:2f:74:0c:24:42:28:47:a7:42:a3:ff: 47:c5:4a:e1:b4:19:0d:14:6f:04:af:e9:05:c6:d5: 29:d8:63:0f:9d:34:06:9f:8c:bf:18:d1:8f:5c:bd: d5:2e:89:6c:e9:71:e4:40:84:6a:0e:03:9f:47:46: 96:f7:51:d0:c8:b2:f9:a6:d3:91:33:1e:8d:59:69: 7d:77:8b:29:c9:96:43:4d:13:72:f4:eb:dc:cb:ab: a0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EC:B4:A0:87:3F:48:4F:43:61:05:6E:40:06:BD:C4:27:A1:39:5D X509v3 Authority Key Identifier: keyid:33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:9b:22:49:00:c0:35:b1:23:3f:9f:b6:2d:32:bc:de:aa:75: c3:67:b9:7a:e6:ee:fd:b7:de:76:d5:c6:c6:37:63:71:33:71: 64:6e:45:0d:31:1a:83:6a:fa:b8:22:24:24:99:a3:61:e2:b8: a6:0a:a0:3b:8c:06:22:69:de:52:6b:e9:67:2a:26:2c:ef:56: ae:73:a0:42:41:fb:16:a3:6f:b4:83:0e:22:e9:32:4e:4a:79: 51:42:a9:dd:d4:5d:00:d1:d2:8b:fa:25:6a:c1:1e:65:ca:36: c2:9b:fb:01:58:e5:47:ab:03:b5:66:8d:74:6f:5a:40:66:73: bc:ce:9a:a5:6a:f2:12:59:40:37:ff:bc:1e:d1:09:a3:70:47: e0:50:3d:2b:45:f5:38:38:e3:fa:90:b4:03:63:60:4d:bb:e8: 0f:af:e6:63:50:4c:40:d2:2d:c0:e5:96:64:cc:85:0d:7f:8c: f8:81:7a:2d:3d:fd:7f:2c:ae:78:f3:ca:d6:6f:3c:78:b7:f7: 8f:a4:73:1e:13:a5:8a:e9:d8:2d:42:a7:7f:cc:c5:90:33:48: 66:8c:05:56:4f:ae:6e:67:23:7c:f6:a7:b1:35:d3:fe:86:40: e5:94:f0:84:f0:ce:1b:62:ce:79:ba:3b:5e:d1:bc:8a:15:98: 3c:44:52:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29YFCkRsFXg6QNWLdX9KaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMDdiZGI5ZDU4NTUxZTE0OTJhYzQzYTIzYjliNjI5NjY5 Y2ViNmUwHhcNMjYwMTI1MjEwMDQzWhcNMjYwMTI2MjEwMDQzWjAzMTEwLwYDVQQD Eyg2MGVjYjRhMDg3M2Y0ODRmNDM2MTA1NmU0MDA2YmRjNDI3YTEzOTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEASQI6JZ+pEL7q93xmEbxabl4AZ 4oguceKPLQZeOyj4uuq4it3STC++On2fMcn0BIRfJKWHn5U9TLEoPq84/vHPJc2u uOadFgAaaK5HbFARy3fziGEDRX2rzPleTTGI7CEHeRKlP4w4tNEJ3xMuHHyvRSkD ZL7wbbWoHLNqxZoyKVsdy/pOMq33WBdfsfGnFktbv4NYAfpJdVDufNYtpc5fznJB 2R55L3QMJEIoR6dCo/9HxUrhtBkNFG8Er+kFxtUp2GMPnTQGn4y/GNGPXL3VLols 6XHkQIRqDgOfR0aW91HQyLL5ptORMx6NWWl9d4spyZZDTRNy9Ovcy6ugJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDstKCHP0hPQ2EFbkAGvcQnoTldMB8GA1UdIwQY MBaAFDMHvbnVhVHhSSrEOiO5tilmnOtuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zODA4NjQtMjE1NC00N2Q5LWE4YjAt MWIxYzgyNmU3YjhlLzEvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8zODA4NjQtMjE1NC00N2Q5LWE4YjAtMWIxYzgyNmU3Yjhl LzEvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5siSQDA NbEjP5+2LTK83qp1w2e5eubu/bfedtXGxjdjcTNxZG5FDTEag2r6uCIkJJmjYeK4 pgqgO4wGImneUmvpZyomLO9WrnOgQkH7FqNvtIMOIukyTkp5UUKp3dRdANHSi/ol asEeZco2wpv7AVjlR6sDtWaNdG9aQGZzvM6apWryEllAN/+8HtEJo3BH4FA9K0X1 ODjj+pC0A2NgTbvoD6/mY1BMQNItwOWWZMyFDX+M+IF6LT39fyyuePPK1m88eLf3 j6RzHhOliunYLUKnf8zFkDNIZowFVk+ubmcjfPansTXT/oZA5ZTwhPDOG2LOebo7 XtG8ihWYPERSsA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:24 2026 by rpki-client