This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft File: mu2VdsknICkWjE0aQXXRp8ocUe4.mft (raw, json) Hash identifier: qGb1E2CLLRyH8WL7uErvkx5zSQk+NZEnY5pE1RzObAk= Subject key identifier: 7E:3E:D4:1A:B0:FC:F9:D5:1C:5D:73:90:F0:94:1B:B7:87:68:B8:CF Authority key identifier: 9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE Certificate issuer: /CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee Certificate serial: 019BF4625D7EB04EF66902C00AB817CFC22A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft Manifest number: 1109 Signing time: Sun 25 Jan 2026 09:00:45 +0000 Manifest this update: Sun 25 Jan 2026 09:00:45 +0000 Manifest next update: Mon 26 Jan 2026 09:00:45 +0000 Files and hashes: 1: mu2VdsknICkWjE0aQXXRp8ocUe4.crl (hash: dLBJlIhUa87rYhKRWV7bGzK/PFRNT5nGszgCi0+pFsQ=) 2: oGhU7IJoDElhSJr9URGhXOwAaLk.roa (hash: RlkIPIJZ2vJYpwqoiUxVktYoRH+UnOVJBwSR2Sn3Qb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:5d:7e:b0:4e:f6:69:02:c0:0a:b8:17:cf:c2:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee Validity Not Before: Jan 25 09:00:45 2026 GMT Not After : Jan 26 09:00:45 2026 GMT Subject: CN=7e3ed41ab0fcf9d51c5d7390f0941bb78768b8cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e8:bc:4c:86:49:f6:e6:9d:e6:0b:b4:cd:fc: 1c:6d:d9:c6:e1:7a:59:cb:54:78:7f:7e:dd:28:12: 5d:58:fe:2b:55:c3:9c:2b:df:ef:c1:7e:bb:8e:62: 0f:e1:fe:d5:34:b6:12:fa:26:94:95:6c:8c:34:59: fa:49:09:eb:c9:0d:80:d3:d2:8f:95:1d:48:0e:c0: 44:76:02:3f:5f:92:d7:76:2b:69:f6:43:65:d4:c0: 4a:b0:82:80:f9:da:b1:bf:cd:9b:5a:88:8e:f3:b4: a6:c6:78:a6:44:53:5d:80:bc:85:ec:66:e2:68:1e: 16:95:4a:ef:cd:4c:23:76:46:db:af:dc:33:ad:91: cf:e9:ac:68:04:38:c9:d9:49:31:b5:73:fd:cf:35: e1:bb:96:93:b4:06:a9:6a:6f:10:d1:a7:cf:27:25: 4f:45:b5:91:68:a4:38:8e:04:9a:3d:cd:2e:4d:ff: 5b:04:46:2b:59:a6:b9:3c:bf:09:c7:eb:80:8b:53: 6a:43:7c:13:3d:db:18:f7:26:a8:09:af:3b:22:a6: ee:f7:f8:5b:fc:25:92:0e:f4:98:77:f0:3b:d6:9d: ba:76:23:8c:8f:01:8e:c2:21:f3:f7:9b:92:74:71: b1:a9:ad:f6:b0:6b:4b:3e:9a:6f:ef:e3:4c:47:c5: 34:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3E:D4:1A:B0:FC:F9:D5:1C:5D:73:90:F0:94:1B:B7:87:68:B8:CF X509v3 Authority Key Identifier: keyid:9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:9a:78:a0:96:b1:c9:5e:8f:07:c8:05:85:40:7c:57:5e:fd: 58:59:5d:73:9c:9a:9c:96:20:46:35:b8:76:88:df:52:80:63: 83:f4:b0:62:16:33:5f:92:3e:c5:ed:6d:a9:41:b0:c5:ba:0d: 84:9e:e4:b3:e3:86:c6:60:4b:02:48:c2:90:8a:67:c8:83:78: 3b:f1:cc:8e:12:a5:21:33:e2:3b:ca:f7:c8:d2:9e:28:0e:d4: 5e:30:27:13:69:e0:2c:ea:29:77:a5:35:56:a1:64:b6:59:1b: 8a:91:8b:f6:10:f3:70:2d:f2:00:b0:d0:bc:b1:f5:73:eb:16: 63:86:b3:f0:4a:91:bd:65:df:e1:50:bf:54:fe:40:ca:15:ef: 03:f1:f3:c9:ca:51:b4:6f:27:89:b0:1a:27:96:ac:9a:07:cc: be:e5:d0:f3:d6:ae:e1:78:4e:4a:e7:38:ca:6f:42:7d:83:73: 9c:e5:5e:a6:0b:9c:e2:e4:60:84:5d:27:51:e1:d4:dc:12:0d: 96:10:0f:43:87:e1:03:2d:53:d5:cb:a4:90:3d:07:f7:32:6d: 4a:b4:fe:ef:33:82:5f:54:6c:1c:ae:73:24:ff:23:3a:c2:f2: e7:43:e1:ac:b6:c1:af:7b:24:83:8d:84:ef:98:38:06:ce:72: b2:f3:fd:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yl1+sE72aQLACrgXz8IqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWQ5NTc2YzkyNzIwMjkxNjhjNGQxYTQxNzVkMWE3Y2Ex YzUxZWUwHhcNMjYwMTI1MDkwMDQ1WhcNMjYwMTI2MDkwMDQ1WjAzMTEwLwYDVQQD Eyg3ZTNlZDQxYWIwZmNmOWQ1MWM1ZDczOTBmMDk0MWJiNzg3NjhiOGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOi8TIZJ9uad5gu0zfwcbdnG4XpZ y1R4f37dKBJdWP4rVcOcK9/vwX67jmIP4f7VNLYS+iaUlWyMNFn6SQnryQ2A09KP lR1IDsBEdgI/X5LXditp9kNl1MBKsIKA+dqxv82bWoiO87SmxnimRFNdgLyF7Gbi aB4WlUrvzUwjdkbbr9wzrZHP6axoBDjJ2UkxtXP9zzXhu5aTtAapam8Q0afPJyVP RbWRaKQ4jgSaPc0uTf9bBEYrWaa5PL8Jx+uAi1NqQ3wTPdsY9yaoCa87Iqbu9/hb /CWSDvSYd/A71p26diOMjwGOwiHz95uSdHGxqa32sGtLPppv7+NMR8U0PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4+1Bqw/PnVHF1zkPCUG7eHaLjPMB8GA1UdIwQY MBaAFJrtlXbJJyApFoxNGkF10afKHFHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXUyVmRza25JQ2tXakUwYVFYWFJwOG9jVWU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lNTI1ZGYtNGM2ZS00MDk5LTgxNGQt ZjE0OGY0YzlkMzlhLzEvbXUyVmRza25JQ2tXakUwYVFYWFJwOG9jVWU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lNTI1ZGYtNGM2ZS00MDk5LTgxNGQtZjE0OGY0YzlkMzlh LzEvbXUyVmRza25JQ2tXakUwYVFYWFJwOG9jVWU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5p4oJax yV6PB8gFhUB8V179WFldc5yanJYgRjW4dojfUoBjg/SwYhYzX5I+xe1tqUGwxboN hJ7ks+OGxmBLAkjCkIpnyIN4O/HMjhKlITPiO8r3yNKeKA7UXjAnE2ngLOopd6U1 VqFktlkbipGL9hDzcC3yALDQvLH1c+sWY4az8EqRvWXf4VC/VP5AyhXvA/HzycpR tG8nibAaJ5asmgfMvuXQ89au4XhOSuc4ym9CfYNznOVepguc4uRghF0nUeHU3BIN lhAPQ4fhAy1T1cukkD0H9zJtSrT+7zOCX1RsHK5zJP8jOsLy50PhrLbBr3skg42E 75g4Bs5ysvP9sw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:26:21 2026 by rpki-client