This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft File: MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json) Hash identifier: /Klozm43+JgPTn0Z9IQdsnANRylx18wGyR92mp9nJgg= Subject key identifier: ED:51:72:9D:D1:18:2A:52:24:BF:D0:D1:D8:12:06:42:3B:5A:E9:8E Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A Certificate issuer: /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a Certificate serial: 019BF53EE4E192CB5799BEA59F2A9E95A2B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft Manifest number: 0A24 Signing time: Sun 25 Jan 2026 13:01:38 +0000 Manifest this update: Sun 25 Jan 2026 13:01:38 +0000 Manifest next update: Mon 26 Jan 2026 13:01:38 +0000 Files and hashes: 1: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: qDum2+G/xVoAumOPGM6gFOFo2J1aQSloTRtoZ1vewzY=) 2: b6AmtjEEmlVAVDEZuYD5VDgpfMQ.roa (hash: HS/ySeNB+y1+0+U3UPGT7SxmsyJMK83qGbLhBP5SbrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:e4:e1:92:cb:57:99:be:a5:9f:2a:9e:95:a2:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a Validity Not Before: Jan 25 13:01:38 2026 GMT Not After : Jan 26 13:01:38 2026 GMT Subject: CN=ed51729dd1182a5224bfd0d1d81206423b5ae98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:60:c4:b0:d1:f7:fb:62:1a:4c:54:d7:b1:f6: 87:91:d0:66:66:a9:35:dd:23:0a:71:16:4a:fd:81: d3:b8:42:7e:23:88:0e:df:6b:a4:a8:c4:48:be:38: b0:ae:45:70:73:03:cf:1a:88:06:e5:74:a2:b3:b4: 9b:37:fb:52:df:97:1f:a4:3e:7e:3f:1f:f2:23:cc: 25:3e:ff:48:41:9d:60:b2:c8:6c:6a:91:eb:5f:67: 75:0f:3e:36:2e:50:a3:79:01:2c:66:8c:b3:24:be: c0:27:b4:76:6b:80:a9:3e:5e:97:42:ba:5d:00:a7: be:ed:a2:0e:38:6c:f9:32:e5:b9:44:e7:87:6c:1e: bc:6c:8d:ca:04:50:f2:c9:cb:f9:09:34:a8:55:b5: e5:b0:21:48:6f:25:08:a1:39:d1:c2:f9:c1:b8:2b: 2a:2c:55:27:f3:f4:09:e3:c3:47:ce:c6:95:f5:88: 39:8c:d0:f4:6e:49:bc:b1:08:f9:26:bf:46:53:39: e1:65:9c:e9:a7:c3:fc:e0:ac:7f:f5:17:03:fc:ac: 02:b4:e9:f5:e6:49:e2:4f:cc:7d:37:55:22:da:e2: da:2f:74:b1:1f:fc:d3:26:14:47:5f:95:49:d4:b3: 87:2c:74:69:e6:5c:a0:9e:9a:de:0d:3e:81:71:b6: fa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:51:72:9D:D1:18:2A:52:24:BF:D0:D1:D8:12:06:42:3B:5A:E9:8E X509v3 Authority Key Identifier: keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:60:02:c8:a2:0c:cc:03:ff:2b:de:9e:3f:c6:bc:1a:d8:87: 48:d1:c4:bb:a1:0f:5c:4c:6a:55:59:4f:e0:d1:89:f4:6f:38: 49:c6:ff:21:32:f3:7a:56:27:d3:a1:56:86:a0:66:ea:26:38: eb:1a:63:d7:2a:17:d0:5a:55:7a:cc:ef:7a:50:d3:c1:42:db: ff:31:21:03:ed:af:a2:2a:9a:30:d0:2c:04:8a:38:73:ca:30: 49:22:fb:9f:05:ab:ed:44:e7:e8:bf:a8:6e:f2:c1:92:28:0b: e0:3c:e5:52:c5:9d:23:96:a4:75:1c:9a:4c:13:f0:e9:ce:61: b6:61:df:18:34:69:80:cf:75:12:68:60:99:32:f7:c6:7c:00: b8:c6:08:be:eb:89:c0:9a:35:c4:62:90:e5:7a:ba:1b:38:c0: 6f:52:d4:57:20:be:51:b6:75:57:97:06:60:76:23:0a:23:cc: 5e:08:5f:50:aa:42:21:32:7a:34:6c:43:09:4f:a6:b8:09:65: ef:cc:88:8e:16:3f:64:70:2e:f0:e5:47:8b:53:b7:f0:02:4c: 84:d5:10:c5:5e:07:5c:64:85:8b:a0:3e:c9:2b:19:13:65:fe: fa:5e:0e:e4:ab:39:2f:6a:be:f9:32:09:e0:a4:ad:4c:86:5c: c4:1a:23:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PuThkstXmb6lnyqelaKxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZDVjOWM4NWZmYjc0NjM5NDVlODEyNjU3MGI3ZTI4NTFi M2ZiN2EwHhcNMjYwMTI1MTMwMTM4WhcNMjYwMTI2MTMwMTM4WjAzMTEwLwYDVQQD EyhlZDUxNzI5ZGQxMTgyYTUyMjRiZmQwZDFkODEyMDY0MjNiNWFlOThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32DEsNH3+2IaTFTXsfaHkdBmZqk1 3SMKcRZK/YHTuEJ+I4gO32ukqMRIvjiwrkVwcwPPGogG5XSis7SbN/tS35cfpD5+ Px/yI8wlPv9IQZ1gsshsapHrX2d1Dz42LlCjeQEsZoyzJL7AJ7R2a4CpPl6XQrpd AKe+7aIOOGz5MuW5ROeHbB68bI3KBFDyycv5CTSoVbXlsCFIbyUIoTnRwvnBuCsq LFUn8/QJ48NHzsaV9Yg5jND0bkm8sQj5Jr9GUznhZZzpp8P84Kx/9RcD/KwCtOn1 5kniT8x9N1Ui2uLaL3SxH/zTJhRHX5VJ1LOHLHRp5lygnpreDT6Bcbb6qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1Rcp3RGCpSJL/Q0dgSBkI7WumOMB8GA1UdIwQY MBaAFDLVychf+3RjlF6BJlcLfihRs/t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZDAzNTEtMDA2Zi00N2FhLWFiMTkt MTljMDVmNGY0YTdiLzEvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9hZDAzNTEtMDA2Zi00N2FhLWFiMTktMTljMDVmNGY0YTdi LzEvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmACyKIM zAP/K96eP8a8GtiHSNHEu6EPXExqVVlP4NGJ9G84Scb/ITLzelYn06FWhqBm6iY4 6xpj1yoX0FpVeszvelDTwULb/zEhA+2voiqaMNAsBIo4c8owSSL7nwWr7UTn6L+o bvLBkigL4DzlUsWdI5akdRyaTBPw6c5htmHfGDRpgM91EmhgmTL3xnwAuMYIvuuJ wJo1xGKQ5Xq6GzjAb1LUVyC+UbZ1V5cGYHYjCiPMXghfUKpCITJ6NGxDCU+muAll 78yIjhY/ZHAu8OVHi1O38AJMhNUQxV4HXGSFi6A+ySsZE2X++l4O5Ks5L2q++TIJ 4KStTIZcxBojAQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:20:59 2026 by rpki-client