This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft File: MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json) Hash identifier: 743J4XWjX3K6WEgIvLBcSsDeNlhGYMYrlwYwVgMC9ZQ= Subject key identifier: 6B:12:C2:7A:1B:D6:BA:FC:AD:EE:DE:46:E7:18:66:7D:0D:2D:C7:1C Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66 Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466 Certificate serial: 019BF875F9F42453298260C80DDE49BF2C10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft Manifest number: 1514 Signing time: Mon 26 Jan 2026 04:00:39 +0000 Manifest this update: Mon 26 Jan 2026 04:00:39 +0000 Manifest next update: Tue 27 Jan 2026 04:00:39 +0000 Files and hashes: 1: AAeB0P11BLo-0wFOSgELqWi6J00.roa (hash: ne5zZYzC8PT1Zd7TFJmCajzK/4fC4/JAvjpEfVor37I=) 2: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: BrBHOS3o0sctMwkfdkcvypvhMcvhA+zGoVFJ1alGQ8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:75:f9:f4:24:53:29:82:60:c8:0d:de:49:bf:2c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466 Validity Not Before: Jan 26 04:00:39 2026 GMT Not After : Jan 27 04:00:39 2026 GMT Subject: CN=6b12c27a1bd6bafcadeede46e718667d0d2dc71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:92:d2:ce:13:04:71:b0:2c:b5:88:6e:5b:38: 1b:c1:69:e7:e5:28:00:55:e0:18:de:fd:8c:d5:52: 42:48:77:ec:74:44:3a:a1:a9:85:26:5f:61:01:97: 2c:f7:73:35:c8:96:c7:2f:25:f6:39:03:6d:c7:0d: 53:13:f0:a5:7c:07:07:ae:80:f5:79:86:eb:c7:cc: fe:8e:fe:8e:bb:a9:a2:d6:e6:b0:c3:2b:80:a1:19: 83:b0:8e:25:d1:2c:a2:6f:b9:80:af:e9:48:4a:ed: 76:1b:f3:59:cf:19:82:d6:b2:9f:34:c7:d8:12:9e: f8:ee:e1:35:76:b8:f7:c5:40:af:56:c5:1c:9f:92: e5:e4:97:78:bd:16:8a:4b:e0:d2:7e:f2:db:cc:ec: 63:03:85:92:c7:b7:f0:b1:cb:24:62:77:39:a9:c9: 70:51:8b:1f:a6:dc:36:9b:41:a5:32:f9:81:7b:4e: d3:1d:7f:46:a8:e4:f5:17:4b:d1:04:ca:53:c6:74: 16:79:c1:4c:34:b6:6a:c2:56:43:53:c0:0a:b5:3e: 86:18:50:ea:0f:6e:1a:d2:2e:85:47:f4:e8:c5:3f: 19:09:c6:4a:cf:15:77:2c:af:1c:93:ef:9e:02:68: cf:75:86:d6:43:f2:a2:a2:7f:86:a9:97:50:9d:73: d5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:12:C2:7A:1B:D6:BA:FC:AD:EE:DE:46:E7:18:66:7D:0D:2D:C7:1C X509v3 Authority Key Identifier: keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:64:3f:01:4a:1f:59:b8:ab:9f:df:2d:18:7b:92:4b:9d:76: 22:6a:d3:ca:d7:d6:9a:40:25:04:dc:e1:9e:77:ef:37:34:7e: b1:33:7b:90:3f:4c:22:40:fa:b0:2e:e9:67:a3:23:24:32:fc: e6:dd:8e:b3:c8:31:83:fd:b5:d7:cc:dc:fb:0d:15:0a:11:d4: 4d:e7:a5:79:16:fe:a5:85:98:ff:22:fb:9c:76:ad:d5:be:ef: 07:b3:8e:26:8b:0a:27:4a:01:b1:02:c6:ab:3c:3d:55:43:f6: 36:0c:93:2e:07:14:e2:b4:e4:7f:e9:37:04:5e:a0:8e:41:43: 16:b4:74:5f:41:9d:de:78:70:b1:f4:63:f0:85:e6:15:a5:39: 16:6a:bf:26:3d:fe:09:af:ba:36:38:ad:e8:10:c6:93:f0:f0: b3:68:9a:73:2c:90:89:a9:51:9b:4c:ae:a5:e8:22:33:6c:e8: b8:18:08:f9:fd:bc:45:82:e8:58:a6:df:28:00:10:4f:67:c7: c7:d5:f3:c8:d1:36:34:bb:18:c1:82:85:ba:26:b5:cb:bd:7f: e7:a6:be:e8:e1:47:43:96:29:3d:e4:da:3d:86:94:04:5d:77: ef:19:ae:62:bb:e4:6f:97:c5:6d:0c:7f:4c:21:a8:6c:0a:a6: 6e:69:72:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dfn0JFMpgmDIDd5JvywQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxN2E5Mjc0MjYwODlmM2I4YzUwMDA4MzIyMWE3OThhOWQy ZTg0NjYwHhcNMjYwMTI2MDQwMDM5WhcNMjYwMTI3MDQwMDM5WjAzMTEwLwYDVQQD Eyg2YjEyYzI3YTFiZDZiYWZjYWRlZWRlNDZlNzE4NjY3ZDBkMmRjNzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZLSzhMEcbAstYhuWzgbwWnn5SgA VeAY3v2M1VJCSHfsdEQ6oamFJl9hAZcs93M1yJbHLyX2OQNtxw1TE/ClfAcHroD1 eYbrx8z+jv6Ou6mi1uawwyuAoRmDsI4l0Syib7mAr+lISu12G/NZzxmC1rKfNMfY Ep747uE1drj3xUCvVsUcn5Ll5Jd4vRaKS+DSfvLbzOxjA4WSx7fwscskYnc5qclw UYsfptw2m0GlMvmBe07THX9GqOT1F0vRBMpTxnQWecFMNLZqwlZDU8AKtT6GGFDq D24a0i6FR/ToxT8ZCcZKzxV3LK8ck++eAmjPdYbWQ/Kion+GqZdQnXPViwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsSwnob1rr8re7eRucYZn0NLcccMB8GA1UdIwQY MBaAFDF6knQmCJ87jFAAgyIaeYqdLoRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kZTQ3NDAtZDM0ZS00MmE3LTg5Njgt NDY0YjhmM2I4MzYzLzEvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kZTQ3NDAtZDM0ZS00MmE3LTg5NjgtNDY0YjhmM2I4MzYz LzEvTVhxU2RDWUluenVNVUFDRElocDVpcDB1aEdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGQ/AUof Wbirn98tGHuSS512ImrTytfWmkAlBNzhnnfvNzR+sTN7kD9MIkD6sC7pZ6MjJDL8 5t2Os8gxg/2118zc+w0VChHUTeeleRb+pYWY/yL7nHat1b7vB7OOJosKJ0oBsQLG qzw9VUP2NgyTLgcU4rTkf+k3BF6gjkFDFrR0X0Gd3nhwsfRj8IXmFaU5Fmq/Jj3+ Ca+6Njit6BDGk/Dws2iacyyQialRm0yupegiM2zouBgI+f28RYLoWKbfKAAQT2fH x9XzyNE2NLsYwYKFuia1y71/56a+6OFHQ5YpPeTaPYaUBF137xmuYrvkb5fFbQx/ TCGobAqmbmlyLg== -----END CERTIFICATE-----Generated at Mon Jan 26 14:09:41 2026 by rpki-client