This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft File: MGY7W3BEIyuYmBjRLMkEkCElJN8.mft (raw, json) Hash identifier: sOgpD5qSz4k/4WEuEDKH7raECtaNabqJqJKTLOMyRpI= Subject key identifier: 76:B1:45:00:98:26:7A:3B:D8:5B:30:25:AF:58:B6:D4:AC:B9:CD:5F Authority key identifier: 30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF Certificate issuer: /CN=30663b5b7044232b989818d12cc90490212524df Certificate serial: 019BF763AD5040F8AEDCBD0073988D497424 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft Manifest number: 02FE Signing time: Sun 25 Jan 2026 23:01:03 +0000 Manifest this update: Sun 25 Jan 2026 23:01:03 +0000 Manifest next update: Mon 26 Jan 2026 23:01:03 +0000 Files and hashes: 1: MGY7W3BEIyuYmBjRLMkEkCElJN8.crl (hash: MYJ/0i9wZXUVocwprRLyI0rRjQKxyL3NwmyoJYWHVO0=) 2: gyvu9cFnJO4MAwvAgHj8LvBNP7s.roa (hash: eMyRVFCyce/Miwfnx+0dN7toaAvORgqRwSdJr9xSmK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:ad:50:40:f8:ae:dc:bd:00:73:98:8d:49:74:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30663b5b7044232b989818d12cc90490212524df Validity Not Before: Jan 25 23:01:03 2026 GMT Not After : Jan 26 23:01:03 2026 GMT Subject: CN=76b1450098267a3bd85b3025af58b6d4acb9cd5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:79:6f:f0:12:92:f8:55:49:7a:2d:b3:2f:aa: 7e:7a:a6:18:fe:64:d9:3d:32:c5:4b:a0:bc:32:00: 93:b8:df:63:3b:df:60:ab:81:af:43:70:7d:4e:59: 2f:be:2d:2a:d7:16:b2:89:14:87:1b:c6:b3:05:ce: 70:3d:5f:e2:e5:7c:a4:a0:4d:4a:25:5e:5f:9a:1c: e0:3b:60:a1:a6:51:fd:4a:14:57:78:35:a8:6c:b0: 67:ac:a7:16:db:76:96:cd:a1:88:ae:61:8e:3a:e3: 71:8c:84:ed:65:0f:d6:f3:e4:4a:e5:06:84:8a:14: 80:90:20:60:a0:3b:87:86:57:be:71:ff:25:53:aa: fb:61:7e:33:82:f0:cf:ef:43:86:cb:7c:80:4e:a8: 7c:47:32:2a:aa:fb:e1:8b:0c:6b:86:39:2e:06:0a: 03:ff:25:34:d2:61:6b:87:11:78:4c:ac:5c:95:bc: a3:66:48:95:ae:1c:63:5e:ff:93:9a:b0:a8:3f:a2: 82:bb:ee:5c:a5:bd:44:e5:69:bb:8a:d3:98:55:26: e6:7d:d9:c4:4e:3c:1d:5c:fd:71:fb:ec:b7:95:b4: 7a:b5:1f:1e:a8:63:df:da:7c:80:1a:f9:d1:a2:44: 79:1f:02:00:48:2c:35:5d:fa:8a:40:26:6b:ea:75: 1c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B1:45:00:98:26:7A:3B:D8:5B:30:25:AF:58:B6:D4:AC:B9:CD:5F X509v3 Authority Key Identifier: keyid:30:66:3B:5B:70:44:23:2B:98:98:18:D1:2C:C9:04:90:21:25:24:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGY7W3BEIyuYmBjRLMkEkCElJN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/30f34e-e2ad-4b8d-8ce0-011878255ba7/1/MGY7W3BEIyuYmBjRLMkEkCElJN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:15:04:0a:5b:22:d6:0a:f9:d2:f8:07:30:7b:72:2b:d1:c0: de:49:31:22:f3:71:4e:ab:32:07:7d:d5:a8:9e:02:89:56:a6: 85:22:65:e4:a6:d5:b6:a1:01:d2:c9:e4:0c:a6:27:31:18:c6: 6b:73:b5:0a:36:8d:45:ed:5d:7e:fc:06:78:c5:2a:18:38:99: e7:42:58:0f:b1:71:2f:b6:6f:d8:9d:a4:85:a2:03:f9:5d:59: 28:84:cc:f0:4a:38:c5:cf:8a:e1:72:2f:f2:ea:d0:ec:e3:88: 94:7b:3d:32:31:a3:f9:2d:de:34:4b:44:34:de:7b:5b:20:84: 52:b7:0f:18:ee:f0:11:44:d6:1f:e2:6f:24:54:af:3c:9a:ae: ec:eb:13:02:96:ce:90:07:b9:93:d3:cf:56:47:03:78:ac:5c: ca:67:a2:60:34:de:2b:6f:85:ba:e6:8b:a1:7a:eb:bb:cf:56: 2a:8e:5f:d2:5c:be:94:32:a9:6c:c6:b3:29:c1:ba:a3:06:67: b4:3c:95:db:7c:c0:89:98:99:dc:89:42:a3:46:dd:8d:8d:10: a8:56:92:68:12:0f:e3:46:01:64:d8:15:94:46:7b:f3:ac:ab: 1e:b5:3c:97:68:bc:0b:3f:32:39:00:f3:2e:46:42:88:25:fa: f2:e4:da:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y61QQPiu3L0Ac5iNSXQkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjYzYjViNzA0NDIzMmI5ODk4MThkMTJjYzkwNDkwMjEy NTI0ZGYwHhcNMjYwMTI1MjMwMTAzWhcNMjYwMTI2MjMwMTAzWjAzMTEwLwYDVQQD Eyg3NmIxNDUwMDk4MjY3YTNiZDg1YjMwMjVhZjU4YjZkNGFjYjljZDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXlv8BKS+FVJei2zL6p+eqYY/mTZ PTLFS6C8MgCTuN9jO99gq4GvQ3B9Tlkvvi0q1xayiRSHG8azBc5wPV/i5XykoE1K JV5fmhzgO2ChplH9ShRXeDWobLBnrKcW23aWzaGIrmGOOuNxjITtZQ/W8+RK5QaE ihSAkCBgoDuHhle+cf8lU6r7YX4zgvDP70OGy3yATqh8RzIqqvvhiwxrhjkuBgoD /yU00mFrhxF4TKxclbyjZkiVrhxjXv+TmrCoP6KCu+5cpb1E5Wm7itOYVSbmfdnE TjwdXP1x++y3lbR6tR8eqGPf2nyAGvnRokR5HwIASCw1XfqKQCZr6nUclwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaxRQCYJno72FswJa9YttSsuc1fMB8GA1UdIwQY MBaAFDBmO1twRCMrmJgY0SzJBJAhJSTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdZN1czQkVJeXVZbUJqUkxNa0VrQ0VsSk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMGYzNGUtZTJhZC00YjhkLThjZTAt MDExODc4MjU1YmE3LzEvTUdZN1czQkVJeXVZbUJqUkxNa0VrQ0VsSk44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8zMGYzNGUtZTJhZC00YjhkLThjZTAtMDExODc4MjU1YmE3 LzEvTUdZN1czQkVJeXVZbUJqUkxNa0VrQ0VsSk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhUEClsi 1gr50vgHMHtyK9HA3kkxIvNxTqsyB33VqJ4CiVamhSJl5KbVtqEB0snkDKYnMRjG a3O1CjaNRe1dfvwGeMUqGDiZ50JYD7FxL7Zv2J2khaID+V1ZKITM8Eo4xc+K4XIv 8urQ7OOIlHs9MjGj+S3eNEtENN57WyCEUrcPGO7wEUTWH+JvJFSvPJqu7OsTApbO kAe5k9PPVkcDeKxcymeiYDTeK2+FuuaLoXrru89WKo5f0ly+lDKpbMazKcG6owZn tDyV23zAiZiZ3IlCo0bdjY0QqFaSaBIP40YBZNgVlEZ786yrHrU8l2i8Cz8yOQDz LkZCiCX68uTafQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:17:28 2026 by rpki-client