This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft File: MW2V2INsHxFqce4h3sD_Zx4eBw0.mft (raw, json) Hash identifier: 9t+pJH/DVjqt/ZyUGxy3NnBvKobhQyvS+zdIqBr/0wo= Subject key identifier: 36:FA:93:76:EF:54:8E:D1:9A:9D:06:1A:65:7E:B4:3D:06:06:DA:DA Authority key identifier: 31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D Certificate issuer: /CN=316d95d8836c1f116a71ee21dec0ff671e1e070d Certificate serial: 019BF5ABC6858B0C9498FAFA52DB4022071F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft Manifest number: 0EC9 Signing time: Sun 25 Jan 2026 15:00:33 +0000 Manifest this update: Sun 25 Jan 2026 15:00:33 +0000 Manifest next update: Mon 26 Jan 2026 15:00:33 +0000 Files and hashes: 1: MW2V2INsHxFqce4h3sD_Zx4eBw0.crl (hash: nCjEQes4S1//HM9a20eWruhOfxfovPWYJqsRHtheX94=) 2: ZbdB9v0wi7maC6iqAV3uavKZ2m8.roa (hash: kJhScEgkG+FivFHNZ07pbUBYjTIVDHzDZu8J9JFGTrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:c6:85:8b:0c:94:98:fa:fa:52:db:40:22:07:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=316d95d8836c1f116a71ee21dec0ff671e1e070d Validity Not Before: Jan 25 15:00:33 2026 GMT Not After : Jan 26 15:00:33 2026 GMT Subject: CN=36fa9376ef548ed19a9d061a657eb43d0606dada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cd:51:05:ab:db:9b:4f:c1:85:01:a3:8a:ec: 88:ff:2c:68:71:53:78:1e:39:6f:f8:2a:7d:bc:33: 9d:ea:d8:bc:14:8f:f7:df:bd:36:a1:8a:4a:5e:46: c1:8a:f2:ff:2f:10:b2:8d:4a:3f:28:10:7f:93:5f: 4b:6b:fb:7c:d5:29:48:2e:37:67:8f:85:06:b8:9b: a7:03:fe:0a:e0:c9:d5:de:08:b3:c7:90:d3:18:d2: 06:fb:02:d6:f8:d0:6a:0e:c2:a2:b2:e6:c5:2d:9c: 0b:15:ce:83:26:4d:e9:ab:53:74:d0:0e:95:69:a3: 26:17:f9:e0:2f:15:46:0d:65:d8:c3:58:5d:01:3a: c1:a6:c2:1a:c1:0d:20:ca:1a:eb:52:99:56:23:ba: 88:7c:56:c1:c8:c6:68:92:1d:36:1c:3b:db:4f:c0: 7f:3f:af:05:b3:78:b0:5a:2d:b2:9f:f2:2c:aa:23: 7c:38:40:4f:8e:ad:d2:47:10:98:fa:0e:0e:a8:f8: 6d:7c:b8:13:27:43:3d:9c:d0:57:b0:f2:d8:e7:10: 0c:83:8f:5e:d9:8e:14:0e:6a:36:64:9d:2a:7f:ca: 82:f2:9d:66:e8:a6:d4:a9:c2:5a:75:ef:3c:f0:4f: 86:e1:99:ec:32:35:49:61:d4:09:66:d2:d1:47:d0: b0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FA:93:76:EF:54:8E:D1:9A:9D:06:1A:65:7E:B4:3D:06:06:DA:DA X509v3 Authority Key Identifier: keyid:31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:a0:45:c0:85:22:d5:8c:53:25:fc:95:a6:58:74:7a:c7:b8: 54:f4:cd:de:6a:e7:fe:09:2f:82:d3:93:de:bc:65:87:18:d3: c7:f2:a7:83:2e:99:5e:27:fc:f8:56:8d:29:ec:69:61:0b:b3: b9:c6:64:a0:52:dc:61:ec:fd:3c:7f:f8:7f:39:26:6f:ba:29: 52:46:3b:dc:db:ef:46:59:e7:1a:4d:2b:f4:9d:1b:16:0f:5a: 6b:8b:cf:cc:1c:06:be:02:8f:96:7a:73:2b:27:aa:03:38:32: 6d:0d:6d:16:29:b3:de:f8:66:78:4d:13:30:65:c0:80:f4:f6: f6:f5:de:54:cf:f6:86:20:26:1f:d0:ee:e8:24:77:3d:0a:39: 94:12:51:89:9f:b8:51:f3:01:df:9a:ab:a3:a4:3b:38:ec:aa: e2:a3:e8:74:b2:ef:ec:99:c2:2c:fc:a8:2b:cd:c0:3a:b0:cc: 9c:5e:70:11:cc:b1:44:11:ac:72:6b:37:de:2f:04:a0:97:9e: 37:82:5f:57:c3:06:d7:91:89:d2:1d:1e:94:94:c1:90:f5:81: 32:a9:ad:2f:5b:52:fc:ed:9e:e9:4f:ba:2a:f2:dd:64:73:b8: d9:9f:57:1b:68:59:b0:81:04:ee:00:07:ea:da:f3:c4:59:4a: 82:5a:01:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q8aFiwyUmPr6UttAIgcfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNmQ5NWQ4ODM2YzFmMTE2YTcxZWUyMWRlYzBmZjY3MWUx ZTA3MGQwHhcNMjYwMTI1MTUwMDMzWhcNMjYwMTI2MTUwMDMzWjAzMTEwLwYDVQQD EygzNmZhOTM3NmVmNTQ4ZWQxOWE5ZDA2MWE2NTdlYjQzZDA2MDZkYWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM1RBavbm0/BhQGjiuyI/yxocVN4 Hjlv+Cp9vDOd6ti8FI/33702oYpKXkbBivL/LxCyjUo/KBB/k19La/t81SlILjdn j4UGuJunA/4K4MnV3gizx5DTGNIG+wLW+NBqDsKisubFLZwLFc6DJk3pq1N00A6V aaMmF/ngLxVGDWXYw1hdATrBpsIawQ0gyhrrUplWI7qIfFbByMZokh02HDvbT8B/ P68Fs3iwWi2yn/IsqiN8OEBPjq3SRxCY+g4OqPhtfLgTJ0M9nNBXsPLY5xAMg49e 2Y4UDmo2ZJ0qf8qC8p1m6KbUqcJade888E+G4ZnsMjVJYdQJZtLRR9CwRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDb6k3bvVI7Rmp0GGmV+tD0GBtraMB8GA1UdIwQY MBaAFDFtldiDbB8RanHuId7A/2ceHgcNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVcyVjJJTnNIeEZxY2U0aDNzRF9aeDRlQncwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82ZDdkNjUtZjIxNS00MmY4LTlhNWEt MTIzNzIwYmZlNzQ2LzEvTVcyVjJJTnNIeEZxY2U0aDNzRF9aeDRlQncwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82ZDdkNjUtZjIxNS00MmY4LTlhNWEtMTIzNzIwYmZlNzQ2 LzEvTVcyVjJJTnNIeEZxY2U0aDNzRF9aeDRlQncwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvKBFwIUi 1YxTJfyVplh0ese4VPTN3mrn/gkvgtOT3rxlhxjTx/Kngy6ZXif8+FaNKexpYQuz ucZkoFLcYez9PH/4fzkmb7opUkY73NvvRlnnGk0r9J0bFg9aa4vPzBwGvgKPlnpz KyeqAzgybQ1tFimz3vhmeE0TMGXAgPT29vXeVM/2hiAmH9Du6CR3PQo5lBJRiZ+4 UfMB35qro6Q7OOyq4qPodLLv7JnCLPyoK83AOrDMnF5wEcyxRBGscms33i8EoJee N4JfV8MG15GJ0h0elJTBkPWBMqmtL1tS/O2e6U+6KvLdZHO42Z9XG2hZsIEE7gAH 6trzxFlKgloBCQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:43:49 2026 by rpki-client