This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft File: mlCFOiSox2IjTokTpKWymFwzHa0.mft (raw, json) Hash identifier: 2jWse9D3DYIVU3Z+kLmjg8YVR9AnU39v8tBYplGW02g= Subject key identifier: 93:A5:90:A6:7C:84:3D:DE:88:2C:1B:DA:99:9A:54:C2:6A:98:E0:C4 Authority key identifier: 9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD Certificate issuer: /CN=9a50853a24a8c762234e8913a4a5b2985c331dad Certificate serial: 019BFA9BAA229EEB49D52864BFE8FD85C227 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft Manifest number: 15AB Signing time: Mon 26 Jan 2026 14:01:04 +0000 Manifest this update: Mon 26 Jan 2026 14:01:04 +0000 Manifest next update: Tue 27 Jan 2026 14:01:04 +0000 Files and hashes: 1: 8fdsNHAoxPgGvUJ1-IIbNzs4kR8.roa (hash: oToJ7/CBn32SApKsPhftng2rCZIvh8kkblOHjghDJj8=) 2: mlCFOiSox2IjTokTpKWymFwzHa0.crl (hash: X7IybYoMOcNKEvl0EuBjlK+XgxUs9IZYnS46V57Zeog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:aa:22:9e:eb:49:d5:28:64:bf:e8:fd:85:c2:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a50853a24a8c762234e8913a4a5b2985c331dad Validity Not Before: Jan 26 14:01:04 2026 GMT Not After : Jan 27 14:01:04 2026 GMT Subject: CN=93a590a67c843dde882c1bda999a54c26a98e0c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:74:fe:32:3c:c5:b5:11:8b:be:61:b9:da:02: 42:eb:2c:3a:15:d1:88:26:e0:1d:ce:13:bf:de:34: c0:9b:29:d3:cc:1f:44:e0:a7:54:c6:cf:c4:4c:95: 7d:78:5a:73:89:2d:7e:28:d9:f5:b9:3f:f9:91:4a: c0:30:e4:86:ae:bb:4d:94:71:e3:00:49:e6:37:af: 96:14:2f:f2:de:94:8d:5b:4b:85:6b:bd:ba:8b:7e: 4e:fb:ab:de:af:4e:2a:aa:0c:e3:84:55:15:82:ca: 43:7b:d3:26:62:6b:8e:14:0d:64:46:55:47:3d:fb: 59:24:b8:71:7a:9a:c5:85:f5:06:1a:33:c1:4d:08: 18:2a:3c:0f:4e:bf:72:b9:7e:5c:24:89:21:0d:4a: c7:85:82:80:36:b5:1c:a0:ee:e1:90:f3:56:ce:e2: 90:f2:c0:2f:2f:3d:9d:85:84:aa:66:a9:d1:f5:81: a1:22:11:97:31:73:00:5f:be:0f:c3:b8:30:84:77: 99:d7:96:26:19:28:66:50:1a:b9:b3:de:04:91:a9: d1:f6:67:44:cc:54:db:ce:e4:fb:24:18:34:71:7e: cb:b0:81:11:17:28:1d:dc:f7:b7:58:37:c7:5d:63: 69:b6:c6:bb:c5:ed:4b:ec:28:fe:08:35:93:75:eb: 59:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A5:90:A6:7C:84:3D:DE:88:2C:1B:DA:99:9A:54:C2:6A:98:E0:C4 X509v3 Authority Key Identifier: keyid:9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d2:e4:15:6c:50:2a:53:fc:80:94:8e:bd:9e:4f:d8:96:c6: a2:a6:86:c2:49:2e:68:4e:2d:51:24:1a:78:8a:1d:c8:36:59: df:2a:05:ff:28:1d:38:2e:09:7c:96:08:e7:fc:b9:ab:f9:fd: eb:fd:a4:f1:71:c8:cf:bd:da:c3:0d:68:ae:81:ce:ef:48:9c: bc:c6:e8:09:71:be:68:82:73:72:8f:5c:0e:1e:08:1c:c0:cd: e3:dd:04:fa:9d:c8:15:77:ed:67:bb:ab:fa:d4:ae:fb:90:d6: 1b:31:54:cf:07:d0:0d:71:a0:4f:82:db:ac:2b:4e:84:47:d6: bb:4f:52:91:e2:d3:61:78:0a:cd:91:19:e8:bc:4e:6c:d0:c6: 52:c2:2e:44:49:f4:a5:01:25:70:d4:92:6b:1f:17:17:17:e3: 3a:5d:e1:44:e8:4a:82:54:c4:e4:9b:f1:02:fd:99:73:af:c2: 0e:33:9e:4d:16:e5:b5:2e:2c:c0:74:d3:76:3e:a8:fe:92:71: 74:be:d4:be:c9:e1:4c:91:b4:a3:c5:34:1d:03:4f:f7:b0:ef: 11:df:ac:94:30:0d:54:f0:ee:29:9b:16:57:9f:cf:0d:8e:9d: b2:6e:6e:b6:ae:c7:1b:d8:f3:96:db:6a:25:8d:c8:a4:cc:bd: 7b:b9:a9:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m6oinutJ1Shkv+j9hcInMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNTA4NTNhMjRhOGM3NjIyMzRlODkxM2E0YTViMjk4NWMz MzFkYWQwHhcNMjYwMTI2MTQwMTA0WhcNMjYwMTI3MTQwMTA0WjAzMTEwLwYDVQQD Eyg5M2E1OTBhNjdjODQzZGRlODgyYzFiZGE5OTlhNTRjMjZhOThlMGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHT+MjzFtRGLvmG52gJC6yw6FdGI JuAdzhO/3jTAmynTzB9E4KdUxs/ETJV9eFpziS1+KNn1uT/5kUrAMOSGrrtNlHHj AEnmN6+WFC/y3pSNW0uFa726i35O+6ver04qqgzjhFUVgspDe9MmYmuOFA1kRlVH PftZJLhxeprFhfUGGjPBTQgYKjwPTr9yuX5cJIkhDUrHhYKANrUcoO7hkPNWzuKQ 8sAvLz2dhYSqZqnR9YGhIhGXMXMAX74Pw7gwhHeZ15YmGShmUBq5s94EkanR9mdE zFTbzuT7JBg0cX7LsIERFygd3Pe3WDfHXWNptsa7xe1L7Cj+CDWTdetZzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOlkKZ8hD3eiCwb2pmaVMJqmODEMB8GA1UdIwQY MBaAFJpQhTokqMdiI06JE6SlsphcMx2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWxDRk9pU294MklqVG9rVHBLV3ltRnd6SGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wYTQyOWItYTQ1NC00MjhiLWJiODgt ODhiNThkMDJiMmExLzEvbWxDRk9pU294MklqVG9rVHBLV3ltRnd6SGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8wYTQyOWItYTQ1NC00MjhiLWJiODgtODhiNThkMDJiMmEx LzEvbWxDRk9pU294MklqVG9rVHBLV3ltRnd6SGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdLkFWxQ KlP8gJSOvZ5P2JbGoqaGwkkuaE4tUSQaeIodyDZZ3yoF/ygdOC4JfJYI5/y5q/n9 6/2k8XHIz73aww1oroHO70icvMboCXG+aIJzco9cDh4IHMDN490E+p3IFXftZ7ur +tSu+5DWGzFUzwfQDXGgT4LbrCtOhEfWu09SkeLTYXgKzZEZ6LxObNDGUsIuREn0 pQElcNSSax8XFxfjOl3hROhKglTE5JvxAv2Zc6/CDjOeTRbltS4swHTTdj6o/pJx dL7UvsnhTJG0o8U0HQNP97DvEd+slDANVPDuKZsWV5/PDY6dsm5utq7HG9jzlttq JY3IpMy9e7mpnQ== -----END CERTIFICATE-----Generated at Mon Jan 26 20:29:34 2026 by rpki-client