This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json) Hash identifier: Qong5wVg7759wQZKHJ5o4w41X7JNR4bFIXwi6qb9E4E= Subject key identifier: 54:A0:31:06:ED:43:A1:FF:35:86:51:FD:2D:3F:EA:31:46:8C:17:C1 Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd Certificate serial: 019BF6881AA3760E7AB014428C1EE5AFE7ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft Manifest number: 033D Signing time: Sun 25 Jan 2026 19:01:13 +0000 Manifest this update: Sun 25 Jan 2026 19:01:13 +0000 Manifest next update: Mon 26 Jan 2026 19:01:13 +0000 Files and hashes: 1: 2FWfjreR50s05nG8c3Epkp-QpOk.roa (hash: QKVrsfHtk1frMC5gbyYQSs+jJV5TW9T1z5wCTl60joI=) 2: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: REqZX4TkCPF1Xt0XtZk0bndEJoMAWBHr5AW5sqsilJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:1a:a3:76:0e:7a:b0:14:42:8c:1e:e5:af:e7:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd Validity Not Before: Jan 25 19:01:13 2026 GMT Not After : Jan 26 19:01:13 2026 GMT Subject: CN=54a03106ed43a1ff358651fd2d3fea31468c17c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:67:fa:16:e0:f4:b4:e4:02:d7:db:b2:59:de: 3b:15:e7:67:fa:a3:66:fd:9f:37:6a:dd:af:4c:70: c1:48:84:45:8c:03:af:2e:9d:3d:03:00:0b:15:6e: 3d:81:11:f0:76:32:ca:91:a5:be:82:50:cb:8c:56: d4:f8:e2:b4:97:00:68:57:e4:5d:17:1f:a9:27:9f: 21:ae:cf:c1:cd:2b:d3:0a:fb:02:99:a1:06:93:5f: 8f:f2:dc:fd:fa:c6:2a:fc:5a:28:42:0f:fe:0d:f8: 64:0f:b6:f7:ed:9f:80:52:31:7e:c6:f5:2b:ee:6c: 87:29:8c:c0:a6:29:92:43:dd:fd:f6:41:50:20:e4: c4:83:22:7b:49:86:2a:57:fd:df:3f:05:4c:0b:2c: b0:e6:81:b8:d3:6e:4e:7d:73:b4:2e:05:e8:7b:9e: b3:54:8d:06:25:92:33:fc:1e:2d:be:e2:cd:2b:79: f2:b4:6a:fa:4a:d2:8e:c9:8f:8e:e4:c1:e0:4b:67: 81:a4:86:9d:13:06:5e:4f:74:13:76:7b:74:9d:35: f9:44:f3:88:4e:90:34:97:76:09:19:24:c1:1b:37: 46:8e:a9:a0:75:e4:45:25:a5:38:43:61:05:2c:70: 6f:8c:27:86:1a:2a:35:01:1f:cc:64:76:af:87:0c: 0e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A0:31:06:ED:43:A1:FF:35:86:51:FD:2D:3F:EA:31:46:8C:17:C1 X509v3 Authority Key Identifier: keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:3b:30:73:65:9b:8d:41:00:5e:69:86:18:85:8c:89:c3:a6: 12:93:3d:36:58:27:74:b0:e6:27:89:1e:76:59:20:ae:2f:be: 86:8b:c9:65:7b:ec:a9:cf:26:d3:f4:35:2d:05:33:2b:0a:63: 2a:5e:55:05:06:68:9e:88:b4:8c:77:31:ba:4e:e6:dd:2a:f2: b0:4e:d3:12:d2:26:7d:6b:89:91:9e:c6:ce:c3:a7:6f:82:b3: 07:86:15:d1:c4:b8:4f:5b:cc:62:cf:25:f5:b9:15:4f:8f:ee: c1:0e:5f:5a:f7:b5:ab:fd:f8:80:59:1e:24:c7:97:01:75:61: 78:8c:33:68:ad:a8:fa:51:56:da:d7:02:54:a2:ee:da:25:2a: b6:99:b3:9f:48:8d:98:da:c5:a7:81:68:bf:eb:a8:bf:7f:bb: ea:e5:cb:3c:3c:a8:a1:84:3d:cc:52:34:9b:af:46:d2:d9:08: 8a:31:d7:e6:d1:a2:c8:aa:03:19:d8:ea:95:b2:43:e9:19:53: 23:10:8f:c6:f4:33:4d:9a:01:af:ac:4f:cb:30:43:97:79:48: 72:e1:a2:69:43:04:2f:9f:ef:c3:d4:0e:21:9f:54:55:6a:ee: 4d:3f:cc:84:94:50:57:06:c1:2b:72:77:db:57:a0:71:8d:84: 93:0a:3e:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iBqjdg56sBRCjB7lr+ftMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMzA2ZjgzZGQ5YzY4ZDFiYjVhZTkxYjUwYzI2ZTkyOWM4 MWQyZmQwHhcNMjYwMTI1MTkwMTEzWhcNMjYwMTI2MTkwMTEzWjAzMTEwLwYDVQQD Eyg1NGEwMzEwNmVkNDNhMWZmMzU4NjUxZmQyZDNmZWEzMTQ2OGMxN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9mf6FuD0tOQC19uyWd47Fedn+qNm /Z83at2vTHDBSIRFjAOvLp09AwALFW49gRHwdjLKkaW+glDLjFbU+OK0lwBoV+Rd Fx+pJ58hrs/BzSvTCvsCmaEGk1+P8tz9+sYq/FooQg/+DfhkD7b37Z+AUjF+xvUr 7myHKYzApimSQ9399kFQIOTEgyJ7SYYqV/3fPwVMCyyw5oG4025OfXO0LgXoe56z VI0GJZIz/B4tvuLNK3nytGr6StKOyY+O5MHgS2eBpIadEwZeT3QTdnt0nTX5RPOI TpA0l3YJGSTBGzdGjqmgdeRFJaU4Q2EFLHBvjCeGGio1AR/MZHavhwwOOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSgMQbtQ6H/NYZR/S0/6jFGjBfBMB8GA1UdIwQY MBaAFDMwb4PdnGjRu1rpG1DCbpKcgdL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXpCdmc5MmNhTkc3V3VrYlVNSnVrcHlCMHYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80MDhlMzctZmFlMi00OGI1LWJkMTUt NzNkOTRjYjU0NTI2LzEvTXpCdmc5MmNhTkc3V3VrYlVNSnVrcHlCMHYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80MDhlMzctZmFlMi00OGI1LWJkMTUtNzNkOTRjYjU0NTI2 LzEvTXpCdmc5MmNhTkc3V3VrYlVNSnVrcHlCMHYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTswc2Wb jUEAXmmGGIWMicOmEpM9NlgndLDmJ4kedlkgri++hovJZXvsqc8m0/Q1LQUzKwpj Kl5VBQZonoi0jHcxuk7m3SrysE7TEtImfWuJkZ7GzsOnb4KzB4YV0cS4T1vMYs8l 9bkVT4/uwQ5fWve1q/34gFkeJMeXAXVheIwzaK2o+lFW2tcCVKLu2iUqtpmzn0iN mNrFp4Fov+uov3+76uXLPDyooYQ9zFI0m69G0tkIijHX5tGiyKoDGdjqlbJD6RlT IxCPxvQzTZoBr6xPyzBDl3lIcuGiaUMEL5/vw9QOIZ9UVWruTT/MhJRQVwbBK3J3 21egcY2Ekwo+UQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:48 2026 by rpki-client