This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft File: Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft (raw, json) Hash identifier: WH5a2VruW+YFOdEv8Ydi1R3Vph53Sw0mBy9mwsUSmqQ= Subject key identifier: E0:6B:BA:96:0F:10:72:75:CB:D2:DC:E5:25:05:CA:F1:E6:29:CA:B4 Authority key identifier: 33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07 Certificate issuer: /CN=330e3fdb11d826bc01663290bd7ca406b8d76507 Certificate serial: 019BAF13E157347833E812F4721B81113ADA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft Manifest number: 0EA8 Signing time: Sun 11 Jan 2026 22:01:14 +0000 Manifest this update: Sun 11 Jan 2026 22:01:14 +0000 Manifest next update: Mon 12 Jan 2026 22:01:14 +0000 Files and hashes: 1: 62TElGWuqEvmUBYUDm2rqBVV3SI.roa (hash: ++jh63cRE49FQOgqKwdj8ZqTaSpiNnUmGEZfxLXUxs8=) 2: Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl (hash: VhUh2hHAQuzVvqWf3aypGpsc2J8cWHXx2JM0EgKNcx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 22:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:13:e1:57:34:78:33:e8:12:f4:72:1b:81:11:3a:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=330e3fdb11d826bc01663290bd7ca406b8d76507 Validity Not Before: Jan 11 22:01:14 2026 GMT Not After : Jan 12 22:01:14 2026 GMT Subject: CN=e06bba960f107275cbd2dce52505caf1e629cab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a3:d2:bb:05:69:47:d4:cd:bb:1e:31:c1:cc: 45:b5:93:07:85:ed:8b:d4:9f:6c:ad:57:e1:62:76: 88:69:76:cc:9b:ef:50:1a:91:53:7f:ee:64:8e:3c: 5b:ea:fb:ca:8b:88:80:ce:ce:df:f2:c7:91:4f:6d: c1:a0:8e:8a:c5:96:74:ba:82:0d:7a:ab:46:10:b4: 68:41:94:3f:ad:35:1e:d0:9a:05:a0:b4:bc:4a:58: e8:64:15:ef:8f:6a:ea:58:eb:d5:42:11:4b:48:e0: b2:dc:da:3d:87:39:66:cc:3a:57:2c:16:18:0b:9f: 01:bd:e0:fa:d3:5e:ae:35:27:e8:a8:70:2c:24:51: 3f:b7:6d:ee:a1:d1:22:e4:bb:f4:5f:75:ce:a3:85: ed:04:18:43:07:9b:38:16:7d:fb:0c:e8:b0:d4:f9: 5e:e5:99:9f:28:a4:2c:3c:68:58:25:61:d0:6d:22: 77:54:0c:6a:a6:ec:ac:e7:ce:67:9b:5d:21:00:bd: 5e:5d:7c:d6:49:2a:b4:83:b0:fa:32:45:60:2c:82: a1:e6:e2:3a:ee:b3:53:7e:46:70:34:8c:55:92:8a: aa:1a:48:56:75:43:3b:15:24:c9:d5:3a:ba:62:08: 71:de:96:33:94:33:9b:95:8b:c8:17:83:c6:a8:d3: 31:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6B:BA:96:0F:10:72:75:CB:D2:DC:E5:25:05:CA:F1:E6:29:CA:B4 X509v3 Authority Key Identifier: keyid:33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:30:e8:67:6b:7e:20:01:9e:d1:21:7f:79:d8:95:65:55:e4: 62:04:9f:55:71:2a:f8:f3:02:6a:f0:e6:0a:7a:be:e3:e6:3f: 06:f5:c5:ec:3c:77:ce:b3:61:ee:aa:6f:9a:35:2b:52:36:60: a3:22:c7:19:ac:66:72:3e:34:00:74:c3:52:fe:62:1a:7c:f1: bd:46:44:8a:a6:a1:54:8c:91:a3:7f:a8:18:56:17:81:b5:38: c2:21:22:37:55:79:86:21:5d:fb:63:0f:19:d7:8a:2e:35:d4: e4:04:d4:64:42:e3:89:b1:d7:0b:c0:4c:f5:25:2c:5e:60:4a: cb:60:cb:b9:c8:6b:f5:cc:4f:80:6f:0f:7a:57:0f:a6:49:82: 57:c9:6f:11:e6:97:ff:ec:b6:66:60:36:c0:d2:6c:ea:fd:51: 9e:a6:35:77:99:2c:0e:35:57:83:dd:68:6d:10:b5:d0:da:24: c7:74:09:8e:fe:ff:46:ad:ce:67:0a:de:4d:75:4a:30:c8:4d: b7:f9:58:1b:d9:0c:e7:a6:48:ff:d2:70:53:18:36:15:cc:34: f3:e7:9f:da:a4:b6:92:7f:39:93:ae:28:6f:2e:43:8e:5f:dc: 66:2d:a9:a5:65:48:e8:b5:b0:00:21:65:67:b8:78:31:70:25: 9b:c0:d8:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvE+FXNHgz6BL0chuBETraMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMGUzZmRiMTFkODI2YmMwMTY2MzI5MGJkN2NhNDA2Yjhk NzY1MDcwHhcNMjYwMTExMjIwMTE0WhcNMjYwMTEyMjIwMTE0WjAzMTEwLwYDVQQD EyhlMDZiYmE5NjBmMTA3Mjc1Y2JkMmRjZTUyNTA1Y2FmMWU2MjljYWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36PSuwVpR9TNux4xwcxFtZMHhe2L 1J9srVfhYnaIaXbMm+9QGpFTf+5kjjxb6vvKi4iAzs7f8seRT23BoI6KxZZ0uoIN eqtGELRoQZQ/rTUe0JoFoLS8SljoZBXvj2rqWOvVQhFLSOCy3No9hzlmzDpXLBYY C58BveD6016uNSfoqHAsJFE/t23uodEi5Lv0X3XOo4XtBBhDB5s4Fn37DOiw1Ple 5ZmfKKQsPGhYJWHQbSJ3VAxqpuys585nm10hAL1eXXzWSSq0g7D6MkVgLIKh5uI6 7rNTfkZwNIxVkoqqGkhWdUM7FSTJ1Tq6Yghx3pYzlDOblYvIF4PGqNMxnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBrupYPEHJ1y9Lc5SUFyvHmKcq0MB8GA1UdIwQY MBaAFDMOP9sR2Ca8AWYykL18pAa412UHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXc0XzJ4SFlKcndCWmpLUXZYeWtCcmpYWlFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zNGM2MTgtNGQ0My00NzM2LTg1OWYt OWQyYTQyYWZmYjFiLzEvTXc0XzJ4SFlKcndCWmpLUXZYeWtCcmpYWlFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zNGM2MTgtNGQ0My00NzM2LTg1OWYtOWQyYTQyYWZmYjFi LzEvTXc0XzJ4SFlKcndCWmpLUXZYeWtCcmpYWlFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzDoZ2t+ IAGe0SF/ediVZVXkYgSfVXEq+PMCavDmCnq+4+Y/BvXF7Dx3zrNh7qpvmjUrUjZg oyLHGaxmcj40AHTDUv5iGnzxvUZEiqahVIyRo3+oGFYXgbU4wiEiN1V5hiFd+2MP GdeKLjXU5ATUZELjibHXC8BM9SUsXmBKy2DLuchr9cxPgG8PelcPpkmCV8lvEeaX /+y2ZmA2wNJs6v1RnqY1d5ksDjVXg91obRC10Nokx3QJjv7/Rq3OZwreTXVKMMhN t/lYG9kM56ZI/9JwUxg2Fcw08+ef2qS2kn85k64oby5Djl/cZi2ppWVI6LWwACFl Z7h4MXAlm8DYsQ== -----END CERTIFICATE-----Generated at Mon Jan 12 07:36:14 2026 by rpki-client