This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft File: MgrQyxyPq9KnFycj8utT6gLoSmk.mft (raw, json) Hash identifier: A5gqeSJoo5cXNr0Ej18B+FyiNZdN67HGhIACCl81Fvc= Subject key identifier: 65:B0:C1:D5:B2:A2:35:FD:C5:E8:31:B6:BF:2E:3A:79:C7:CF:5F:47 Authority key identifier: 32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69 Certificate issuer: /CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69 Certificate serial: 019BF76342395F0450F0A9670EB060E64C3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft Manifest number: 0457 Signing time: Sun 25 Jan 2026 23:00:35 +0000 Manifest this update: Sun 25 Jan 2026 23:00:35 +0000 Manifest next update: Mon 26 Jan 2026 23:00:35 +0000 Files and hashes: 1: MgrQyxyPq9KnFycj8utT6gLoSmk.crl (hash: bmS1ZvvA6XmHJHp36jMr5D+6MqsgzID17wlRJ1gSIM0=) 2: n8zARsIOBpHO-_C7tzB3YGju7H4.roa (hash: em6ynddbBEnzvLtotX/PQZUnXz7ZD/kDDU89M7ttH+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:42:39:5f:04:50:f0:a9:67:0e:b0:60:e6:4c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=320ad0cb1c8fabd2a7172723f2eb53ea02e84a69 Validity Not Before: Jan 25 23:00:35 2026 GMT Not After : Jan 26 23:00:35 2026 GMT Subject: CN=65b0c1d5b2a235fdc5e831b6bf2e3a79c7cf5f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7d:62:31:7f:c9:f4:93:42:7e:cb:b1:00:e1: f9:4b:12:bd:be:b1:1a:c2:fd:6f:86:54:f0:47:e8: fc:4a:97:ff:c3:56:e3:d0:84:a4:d2:ad:61:57:90: f6:da:6e:0b:f7:17:a6:8f:f7:f7:22:87:a0:4c:6e: 67:5e:50:8f:52:0b:63:34:61:62:8c:41:68:21:39: f9:ba:7d:36:f7:94:da:1f:e5:74:8d:27:5c:37:c0: ac:93:6f:14:d4:ca:2e:cb:2d:ad:bd:5d:c3:c7:67: b7:20:f0:78:41:1c:05:1a:0e:c1:72:a1:49:4e:b0: c5:27:fa:24:3b:ea:88:ed:0c:1e:f6:ef:7f:71:d8: 6c:5c:2a:25:f0:81:8c:68:62:c0:5b:07:ef:5c:b5: 63:14:7d:10:8e:10:a9:80:c6:50:c4:0f:9c:5a:84: 69:ad:6b:85:d4:a5:3b:b6:f2:c1:08:88:e0:13:5f: 0c:95:e9:bc:cd:14:5f:d3:94:d2:55:51:61:88:62: ec:60:ff:71:8c:2d:0f:5e:d7:3b:c4:20:4f:3f:49: 4f:3e:a6:df:cd:47:1f:8a:ba:bc:f9:86:1f:e0:d8: 8b:71:c9:05:c7:3d:a0:db:78:f8:7c:11:95:fc:58: 48:fc:a7:1f:88:da:18:ae:4c:42:7d:18:44:a7:74: 62:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B0:C1:D5:B2:A2:35:FD:C5:E8:31:B6:BF:2E:3A:79:C7:CF:5F:47 X509v3 Authority Key Identifier: keyid:32:0A:D0:CB:1C:8F:AB:D2:A7:17:27:23:F2:EB:53:EA:02:E8:4A:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgrQyxyPq9KnFycj8utT6gLoSmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c26199-3303-4223-9f0f-5dafc634ccd6/1/MgrQyxyPq9KnFycj8utT6gLoSmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4b:ac:de:a6:49:ca:99:e5:d5:72:08:5f:24:33:75:8a:b5: 75:a6:cf:92:50:a6:1d:3b:24:13:27:b4:72:4d:4f:13:3b:c4: 2e:41:5f:35:75:32:c1:0e:d9:b7:3a:7b:29:da:45:02:42:2f: 94:80:95:b8:9d:30:db:0c:b2:d7:62:df:9c:49:6d:db:e0:d0: 0e:21:a0:f0:84:2a:ab:23:87:f7:f1:80:e1:75:55:de:16:1b: bb:18:a1:f1:36:1e:3d:0d:54:41:97:e6:71:6b:2c:a9:c9:f6: d8:bf:0e:03:95:5a:70:7a:0c:cb:db:75:5e:37:eb:13:5d:a2: ff:e2:73:6e:3d:7f:be:e7:38:00:3a:57:d9:07:6d:75:71:7a: 53:01:8f:88:cc:2e:05:8b:f5:d4:9a:3d:07:2e:17:f1:99:8f: 6e:da:6a:fe:84:b9:37:93:52:c4:45:93:8b:fa:99:56:26:97: 71:db:3b:6d:5b:2a:5f:38:8c:7c:7d:d3:11:fe:34:0f:96:3b: 7a:4f:5d:fd:9e:aa:a3:70:d3:f4:a5:9d:4b:b2:09:aa:86:25: c4:e6:c3:4c:e0:d5:d7:8a:49:e9:96:d0:d6:5e:c5:53:f7:a9: fa:89:42:04:f0:2d:46:8e:bb:da:ae:59:9b:c3:6a:a9:7b:83: 1a:0f:41:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y0I5XwRQ8KlnDrBg5kw9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMGFkMGNiMWM4ZmFiZDJhNzE3MjcyM2YyZWI1M2VhMDJl ODRhNjkwHhcNMjYwMTI1MjMwMDM1WhcNMjYwMTI2MjMwMDM1WjAzMTEwLwYDVQQD Eyg2NWIwYzFkNWIyYTIzNWZkYzVlODMxYjZiZjJlM2E3OWM3Y2Y1ZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon1iMX/J9JNCfsuxAOH5SxK9vrEa wv1vhlTwR+j8Spf/w1bj0ISk0q1hV5D22m4L9xemj/f3IoegTG5nXlCPUgtjNGFi jEFoITn5un0295TaH+V0jSdcN8Csk28U1Mouyy2tvV3Dx2e3IPB4QRwFGg7BcqFJ TrDFJ/okO+qI7Qwe9u9/cdhsXCol8IGMaGLAWwfvXLVjFH0QjhCpgMZQxA+cWoRp rWuF1KU7tvLBCIjgE18Mlem8zRRf05TSVVFhiGLsYP9xjC0PXtc7xCBPP0lPPqbf zUcfirq8+YYf4NiLcckFxz2g23j4fBGV/FhI/KcfiNoYrkxCfRhEp3RiHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWwwdWyojX9xegxtr8uOnnHz19HMB8GA1UdIwQY MBaAFDIK0Mscj6vSpxcnI/LrU+oC6EppMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jMjYxOTktMzMwMy00MjIzLTlmMGYt NWRhZmM2MzRjY2Q2LzEvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jMjYxOTktMzMwMy00MjIzLTlmMGYtNWRhZmM2MzRjY2Q2 LzEvTWdyUXl4eVBxOUtuRnljajh1dFQ2Z0xvU21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACkus3qZJ ypnl1XIIXyQzdYq1dabPklCmHTskEye0ck1PEzvELkFfNXUywQ7Ztzp7KdpFAkIv lICVuJ0w2wyy12LfnElt2+DQDiGg8IQqqyOH9/GA4XVV3hYbuxih8TYePQ1UQZfm cWssqcn22L8OA5VacHoMy9t1XjfrE12i/+Jzbj1/vuc4ADpX2QdtdXF6UwGPiMwu BYv11Jo9By4X8ZmPbtpq/oS5N5NSxEWTi/qZViaXcds7bVsqXziMfH3TEf40D5Y7 ek9d/Z6qo3DT9KWdS7IJqoYlxObDTODV14pJ6ZbQ1l7FU/ep+olCBPAtRo672q5Z m8NqqXuDGg9B7w== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:44 2026 by rpki-client