This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft File: M1M9nu9agSjcQ10C8iMygDSNwrY.mft (raw, json) Hash identifier: Fge76m7iqhZbsXdHGFnOJari0OtIJdunvMFYbDSRmLg= Subject key identifier: F4:4A:A2:16:DD:6D:5D:28:A3:4C:B6:20:D6:D8:48:6D:26:38:99:51 Authority key identifier: 33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6 Certificate issuer: /CN=33533d9eef5a8128dc435d02f2233280348dc2b6 Certificate serial: 019B80F12FB986CD3B8E2345FB7AC841E3C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft Manifest number: 143E Signing time: Fri 02 Jan 2026 23:00:48 +0000 Manifest this update: Fri 02 Jan 2026 23:00:48 +0000 Manifest next update: Sat 03 Jan 2026 23:00:48 +0000 Files and hashes: 1: 3JDOgau4GXIlP-8TxtcC06uAWi0.roa (hash: QjML2vUB5G/DnLmOZku9aV5tntgCQSEVJ8kdiDg/M3E=) 2: M1M9nu9agSjcQ10C8iMygDSNwrY.crl (hash: 4KNzFIlHwshFH3V5bqvWoOull2HHBOE4BFqi/mTSuU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:f1:2f:b9:86:cd:3b:8e:23:45:fb:7a:c8:41:e3:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33533d9eef5a8128dc435d02f2233280348dc2b6 Validity Not Before: Jan 2 23:00:48 2026 GMT Not After : Jan 3 23:00:48 2026 GMT Subject: CN=f44aa216dd6d5d28a34cb620d6d8486d26389951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:61:8f:f8:6b:df:20:82:b6:cb:e6:32:4e:c3: 6c:1c:59:7a:4c:73:0b:81:12:f0:f7:16:5b:39:73: f4:c0:39:8c:36:24:cb:27:6f:4c:c7:6d:fd:3e:cb: a8:8b:29:37:b8:0a:07:d3:7e:fd:54:6c:07:b0:e3: 82:4c:4c:b9:ee:9d:eb:e1:63:bb:56:2b:a0:17:02: 41:d3:8b:2b:0c:dd:60:cb:6d:11:03:ef:45:11:48: a3:f6:af:0c:79:7b:6c:8c:b1:98:5e:d9:90:37:7a: fc:73:91:88:60:b6:98:46:6c:93:06:a4:b5:fc:19: c7:17:78:96:e7:e6:ca:ed:bd:1a:af:5e:cb:f3:a4: e7:b8:24:2c:c6:1f:6d:e0:53:3f:09:a9:ba:34:b5: f9:bf:aa:81:25:fb:6a:81:18:53:af:33:b1:e5:af: 60:bf:7c:99:ba:45:23:57:6c:51:89:bc:6e:cb:9b: 42:4d:98:87:59:d0:eb:9e:b1:ec:d2:09:89:96:46: 1e:37:be:ea:b2:45:88:2d:5e:2b:f3:60:23:59:34: 00:1a:15:5e:56:20:0c:f3:64:36:e7:04:fd:77:7c: e3:f2:54:a4:d9:9b:28:9d:d1:aa:b8:18:51:19:4f: de:14:da:ae:5a:c0:5a:15:e7:b7:5c:ab:fd:10:cd: e0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4A:A2:16:DD:6D:5D:28:A3:4C:B6:20:D6:D8:48:6D:26:38:99:51 X509v3 Authority Key Identifier: keyid:33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:de:3f:c8:65:18:56:57:47:02:5a:43:3c:92:d6:59:80:7f: 5d:3e:de:94:a4:69:2d:ee:2c:07:13:02:65:7b:87:8e:0f:a4: 02:db:97:39:4c:e2:25:5a:06:b2:3a:99:47:af:51:42:3e:71: 4d:31:c9:4b:e9:28:43:4c:dc:ba:a0:4a:d7:8c:47:77:1e:6a: 44:c7:00:19:a4:b0:2c:53:a0:ae:64:9f:59:6d:fe:44:0d:3b: d2:f6:ab:3c:f9:f3:8d:4f:7b:ed:df:a3:8c:78:d7:0e:f5:52: 02:32:fa:76:b9:11:ff:30:77:ba:f8:af:3a:0b:1b:f4:28:8d: 7c:e9:70:2a:79:9f:a1:30:cb:c6:33:02:56:d5:9c:6f:19:75: 52:78:cb:ff:1c:49:31:fb:a0:ee:56:75:d2:9e:4f:5b:42:95: 18:a7:b0:18:e9:60:0d:71:0f:e5:28:74:b0:69:71:50:85:a0: 9f:d5:32:4b:6a:54:2f:6f:17:a9:f1:9c:e7:4d:80:1c:eb:a5: 99:d3:9f:ef:e6:52:b6:25:11:39:a9:24:c7:f7:13:74:79:02: 8c:27:99:a5:94:ae:4b:07:52:b4:ce:83:d4:bf:44:e5:c7:c7: a1:f9:d9:ea:46:89:7f:e1:6c:ce:f3:f8:bd:14:21:13:4b:ba: c2:e7:07:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuA8S+5hs07jiNF+3rIQePCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNTMzZDllZWY1YTgxMjhkYzQzNWQwMmYyMjMzMjgwMzQ4 ZGMyYjYwHhcNMjYwMTAyMjMwMDQ4WhcNMjYwMTAzMjMwMDQ4WjAzMTEwLwYDVQQD EyhmNDRhYTIxNmRkNmQ1ZDI4YTM0Y2I2MjBkNmQ4NDg2ZDI2Mzg5OTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GGP+GvfIIK2y+YyTsNsHFl6THML gRLw9xZbOXP0wDmMNiTLJ29Mx239Psuoiyk3uAoH0379VGwHsOOCTEy57p3r4WO7 ViugFwJB04srDN1gy20RA+9FEUij9q8MeXtsjLGYXtmQN3r8c5GIYLaYRmyTBqS1 /BnHF3iW5+bK7b0ar17L86TnuCQsxh9t4FM/Cam6NLX5v6qBJftqgRhTrzOx5a9g v3yZukUjV2xRibxuy5tCTZiHWdDrnrHs0gmJlkYeN77qskWILV4r82AjWTQAGhVe ViAM82Q25wT9d3zj8lSk2ZsondGquBhRGU/eFNquWsBaFee3XKv9EM3gfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRKohbdbV0oo0y2INbYSG0mOJlRMB8GA1UdIwQY MBaAFDNTPZ7vWoEo3ENdAvIjMoA0jcK2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTFNOW51OWFnU2pjUTEwQzhpTXlnRFNOd3JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hM2JjYWQtMWQ5OC00OGI0LWFmYWYt ZDJjM2I0YzA5ZWExLzEvTTFNOW51OWFnU2pjUTEwQzhpTXlnRFNOd3JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9hM2JjYWQtMWQ5OC00OGI0LWFmYWYtZDJjM2I0YzA5ZWEx LzEvTTFNOW51OWFnU2pjUTEwQzhpTXlnRFNOd3JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXd4/yGUY VldHAlpDPJLWWYB/XT7elKRpLe4sBxMCZXuHjg+kAtuXOUziJVoGsjqZR69RQj5x TTHJS+koQ0zcuqBK14xHdx5qRMcAGaSwLFOgrmSfWW3+RA070varPPnzjU977d+j jHjXDvVSAjL6drkR/zB3uvivOgsb9CiNfOlwKnmfoTDLxjMCVtWcbxl1UnjL/xxJ Mfug7lZ10p5PW0KVGKewGOlgDXEP5Sh0sGlxUIWgn9UyS2pUL28XqfGc502AHOul mdOf7+ZStiUROakkx/cTdHkCjCeZpZSuSwdStM6D1L9E5cfHofnZ6kaJf+FszvP4 vRQhE0u6wucH1g== -----END CERTIFICATE-----Generated at Sat Jan 3 03:56:01 2026 by rpki-client