This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.mft File: MUY2acKBF1OVOAySpRzx_f_ukF8.mft (raw, json) Hash identifier: 4wrgCgxcZM1wfVsimcZdXi9Q4cWHpznHGYUTHcwizAM= Subject key identifier: E6:1F:C8:B9:90:A2:65:8C:07:4A:E3:00:81:AB:53:74:87:21:C8:22 Authority key identifier: 31:46:36:69:C2:81:17:53:95:38:0C:92:A5:1C:F1:FD:FF:EE:90:5F Certificate issuer: /CN=31463669c281175395380c92a51cf1fdffee905f Certificate serial: 019BF72CC46445490A1920007F770E43F66E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MUY2acKBF1OVOAySpRzx_f_ukF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.mft Manifest number: 18 Signing time: Sun 25 Jan 2026 22:01:04 +0000 Manifest this update: Sun 25 Jan 2026 22:01:04 +0000 Manifest next update: Mon 26 Jan 2026 22:01:04 +0000 Files and hashes: 1: IQtWki5ELUTgi2gsS7IO7ixd2mA.roa (hash: APtYFNUlkTrTGFr0t02Zs6yCyIMFrfeQaS9bMm7zHBU=) 2: MUY2acKBF1OVOAySpRzx_f_ukF8.crl (hash: u7QAG2LUdE9v6QB5qYvUnsXY1udJbtQY7R/4msSgVZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.mft rsync://rpki.ripe.net/repository/DEFAULT/MUY2acKBF1OVOAySpRzx_f_ukF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:c4:64:45:49:0a:19:20:00:7f:77:0e:43:f6:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31463669c281175395380c92a51cf1fdffee905f Validity Not Before: Jan 25 22:01:04 2026 GMT Not After : Jan 26 22:01:04 2026 GMT Subject: CN=e61fc8b990a2658c074ae30081ab53748721c822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7e:35:62:01:d8:2c:01:ee:e5:07:98:14:d0: 3d:82:1c:bf:e6:b6:7d:7a:f2:bf:38:e9:68:bd:cd: 44:09:97:a6:06:57:61:f3:24:39:88:8f:63:c2:81: 75:86:9a:02:ea:4c:28:b2:e3:82:71:21:8a:e1:22: 6f:a6:90:07:72:0f:d2:df:98:09:50:cc:fa:4b:49: 19:ec:e1:9d:da:5d:d4:85:a4:e9:92:c6:c9:4b:df: 4c:06:38:ce:ae:51:71:86:43:84:5b:b3:93:3a:e8: 8d:df:2b:a6:32:1d:5f:ea:44:3d:43:a8:f6:b1:c5: f4:af:98:9d:65:c7:bb:10:79:35:64:75:5c:29:4e: f4:7d:1f:44:75:a7:82:eb:af:f4:fb:35:1e:fa:99: ae:f7:72:04:52:12:81:f2:c6:57:a0:9a:bd:58:4d: fd:5f:f8:2b:67:9e:61:a2:0f:64:5c:f7:10:d0:cd: 68:32:6b:00:b0:e1:58:a3:55:2d:1e:e8:ab:28:f1: f3:59:08:6d:6c:0f:d6:28:82:cb:f6:4d:ec:48:28: 81:ac:2c:f4:83:fe:6d:0b:c7:0d:23:84:d6:11:3a: d6:b4:59:91:97:cd:ff:2c:17:5c:4e:33:b9:81:77: f5:19:c6:4c:21:91:6d:ea:51:6b:5c:12:05:8a:4c: d3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1F:C8:B9:90:A2:65:8C:07:4A:E3:00:81:AB:53:74:87:21:C8:22 X509v3 Authority Key Identifier: keyid:31:46:36:69:C2:81:17:53:95:38:0C:92:A5:1C:F1:FD:FF:EE:90:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUY2acKBF1OVOAySpRzx_f_ukF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:2c:6e:15:86:85:d5:d5:69:76:9d:9e:60:ea:4b:77:37:7e: 06:a8:7b:ea:30:cc:45:48:4d:ea:71:bd:a7:6a:00:e6:69:b6: 88:62:84:4b:e1:83:13:73:2f:61:31:b5:8a:3e:e1:60:f8:36: f4:25:2f:b0:68:96:55:e7:90:fe:c7:24:a6:37:fe:5e:09:88: ce:9c:c9:18:f3:58:1b:b5:aa:50:19:20:19:c6:40:84:67:cc: f2:e3:3c:3d:6d:5d:b9:5a:74:d7:b5:36:91:55:6a:43:4a:d7: 3b:d6:77:8f:bb:57:91:c7:3f:b0:12:b4:4d:1b:53:b6:c2:b5: 90:fa:08:d6:4c:c4:a8:ec:78:0e:0f:14:50:7a:b6:a3:c8:eb: 06:ce:2a:ca:53:99:7b:60:81:f2:2a:cc:ea:c0:b1:22:b6:97: 42:22:b8:ea:cd:62:ce:fc:a2:f2:f9:50:55:8c:68:02:fd:99: 70:c5:28:5d:71:fa:91:bc:d0:5f:29:4c:24:b4:ba:72:ef:58: 00:00:3d:1f:61:7f:d4:e0:8c:58:36:64:7f:9c:1c:f5:c7:4e: d5:d5:25:21:68:22:0d:b4:50:8d:28:c9:4d:37:96:df:5d:fa: 3c:d5:53:bb:90:f9:f8:49:8c:b3:ad:33:fc:66:06:c4:5e:3e: 19:ca:e8:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LMRkRUkKGSAAf3cOQ/ZuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNDYzNjY5YzI4MTE3NTM5NTM4MGM5MmE1MWNmMWZkZmZl ZTkwNWYwHhcNMjYwMTI1MjIwMTA0WhcNMjYwMTI2MjIwMTA0WjAzMTEwLwYDVQQD EyhlNjFmYzhiOTkwYTI2NThjMDc0YWUzMDA4MWFiNTM3NDg3MjFjODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H41YgHYLAHu5QeYFNA9ghy/5rZ9 evK/OOlovc1ECZemBldh8yQ5iI9jwoF1hpoC6kwosuOCcSGK4SJvppAHcg/S35gJ UMz6S0kZ7OGd2l3UhaTpksbJS99MBjjOrlFxhkOEW7OTOuiN3yumMh1f6kQ9Q6j2 scX0r5idZce7EHk1ZHVcKU70fR9EdaeC66/0+zUe+pmu93IEUhKB8sZXoJq9WE39 X/grZ55hog9kXPcQ0M1oMmsAsOFYo1UtHuirKPHzWQhtbA/WKILL9k3sSCiBrCz0 g/5tC8cNI4TWETrWtFmRl83/LBdcTjO5gXf1GcZMIZFt6lFrXBIFikzTDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYfyLmQomWMB0rjAIGrU3SHIcgiMB8GA1UdIwQY MBaAFDFGNmnCgRdTlTgMkqUc8f3/7pBfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVVZMmFjS0JGMU9WT0F5U3BSenhfZl91a0Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xY2JkZTgtMDQyNi00OGQ5LWJhZDYt NDYyMGEwYTE2MWU4LzEvTVVZMmFjS0JGMU9WT0F5U3BSenhfZl91a0Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xY2JkZTgtMDQyNi00OGQ5LWJhZDYtNDYyMGEwYTE2MWU4 LzEvTVVZMmFjS0JGMU9WT0F5U3BSenhfZl91a0Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICxuFYaF 1dVpdp2eYOpLdzd+Bqh76jDMRUhN6nG9p2oA5mm2iGKES+GDE3MvYTG1ij7hYPg2 9CUvsGiWVeeQ/sckpjf+XgmIzpzJGPNYG7WqUBkgGcZAhGfM8uM8PW1duVp017U2 kVVqQ0rXO9Z3j7tXkcc/sBK0TRtTtsK1kPoI1kzEqOx4Dg8UUHq2o8jrBs4qylOZ e2CB8irM6sCxIraXQiK46s1izvyi8vlQVYxoAv2ZcMUoXXH6kbzQXylMJLS6cu9Y AAA9H2F/1OCMWDZkf5wc9cdO1dUlIWgiDbRQjSjJTTeW3136PNVTu5D5+EmMs60z /GYGxF4+GcroEA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:05:52 2026 by rpki-client