This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft File: MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft (raw, json) Hash identifier: cKieEKnMxes8IRDLKkDLqi3Exb/SjttLTCU5xTHMHKc= Subject key identifier: D2:B5:8A:1E:C6:88:56:F7:A1:CD:78:02:4F:B4:C4:94:B0:1B:6A:74 Authority key identifier: 33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05 Certificate issuer: /CN=330bc8fd949e651d93285ccbc1da13393b783305 Certificate serial: 019BAD93602097531C7BBBA68FCBD7C80CA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft Manifest number: 11BA Signing time: Sun 11 Jan 2026 15:01:15 +0000 Manifest this update: Sun 11 Jan 2026 15:01:15 +0000 Manifest next update: Mon 12 Jan 2026 15:01:15 +0000 Files and hashes: 1: MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl (hash: UPBioN4fRSbqxPLGLeITeqn6YAyGfypWrqhjVho3gkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 15:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:93:60:20:97:53:1c:7b:bb:a6:8f:cb:d7:c8:0c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=330bc8fd949e651d93285ccbc1da13393b783305 Validity Not Before: Jan 11 15:01:15 2026 GMT Not After : Jan 12 15:01:15 2026 GMT Subject: CN=d2b58a1ec68856f7a1cd78024fb4c494b01b6a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a7:a9:86:33:cd:a9:87:5e:d7:f9:e6:f1:9b: c0:97:ae:cb:a6:85:9a:bc:74:f4:7c:8c:01:9d:e4: 6c:07:03:a9:f0:0c:dd:bf:1d:9d:d7:b5:64:72:d7: b3:6e:98:52:bd:72:f2:d3:91:63:4a:e4:c0:4e:2b: 48:37:2c:a4:4d:60:9f:14:19:9c:d4:d4:93:e4:d8: a1:da:cb:45:5a:d6:87:6a:0b:ef:52:b0:d8:a8:31: 26:5b:23:a7:d1:c6:06:b5:6a:9a:fb:ac:44:e6:96: 90:9f:9c:6a:a1:c0:b8:21:d2:68:3f:f7:73:9b:44: f2:b1:84:a1:31:79:e6:f6:b4:8b:ce:26:a9:f6:45: b0:c1:70:d5:ce:68:b6:59:4f:03:cb:8e:f2:2d:89: ca:81:72:43:46:58:a5:e4:5b:33:65:f0:50:2d:c5: 68:78:2c:4c:9f:d1:ee:54:00:7a:77:72:5f:78:8c: 5b:8d:b0:08:a7:43:24:30:5d:6e:df:61:4f:4d:e0: 21:d7:45:51:9b:e5:06:df:ca:47:86:13:ab:0a:bb: f3:4f:99:1d:8f:a1:79:1c:a9:92:50:80:8c:f8:21: 83:6b:7e:09:43:68:e7:35:f8:66:f8:c9:48:00:b5: 97:be:91:2e:c3:4d:88:13:b2:d0:f6:29:59:88:73: 45:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B5:8A:1E:C6:88:56:F7:A1:CD:78:02:4F:B4:C4:94:B0:1B:6A:74 X509v3 Authority Key Identifier: keyid:33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:5b:e2:29:ea:fb:ab:7b:76:d4:05:4e:98:20:8e:ce:c5:ce: 11:34:cd:c4:ee:1a:b1:56:9c:71:47:aa:26:54:fd:b0:d6:53: 0e:9b:38:ae:d7:61:f2:6c:da:b0:90:6e:37:6a:33:65:49:cb: 9d:a3:94:9f:ae:09:08:10:44:5e:8c:4f:32:1a:c1:07:6e:83: 4e:39:66:aa:e3:a1:4f:38:11:68:ca:8b:44:3a:55:a6:76:66: 91:91:03:71:20:68:61:cd:92:b7:a8:e3:33:28:41:98:0b:ec: ff:4b:af:e7:ec:d4:8e:d4:41:00:12:bf:99:9a:2f:94:2e:ee: 2f:9e:e3:88:03:41:e4:2d:db:b7:b4:cf:d6:50:1f:9f:54:26: ee:9d:2b:a7:75:5a:27:ef:89:e2:a3:4a:72:e7:b0:29:26:f8: 0e:3f:c6:55:17:33:0d:37:41:2e:57:ae:73:c7:b1:58:a9:85: 85:ae:b7:27:85:b4:2c:7c:1f:a7:e8:3c:f4:7f:9e:78:7d:28: 47:e8:2b:cb:59:85:48:75:a8:4c:e4:7f:04:4d:3b:18:b0:d7: 8c:50:78:bb:1b:b1:37:6e:29:72:b9:c2:1b:19:0f:75:db:cd: a8:af:2d:5d:c5:0e:ca:c7:b6:d5:a3:fc:09:f5:05:db:f9:86: 57:03:08:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutk2Agl1Mce7umj8vXyAyjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMGJjOGZkOTQ5ZTY1MWQ5MzI4NWNjYmMxZGExMzM5M2I3 ODMzMDUwHhcNMjYwMTExMTUwMTE1WhcNMjYwMTEyMTUwMTE1WjAzMTEwLwYDVQQD EyhkMmI1OGExZWM2ODg1NmY3YTFjZDc4MDI0ZmI0YzQ5NGIwMWI2YTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqephjPNqYde1/nm8ZvAl67LpoWa vHT0fIwBneRsBwOp8Azdvx2d17VkctezbphSvXLy05FjSuTATitINyykTWCfFBmc 1NST5Nih2stFWtaHagvvUrDYqDEmWyOn0cYGtWqa+6xE5paQn5xqocC4IdJoP/dz m0TysYShMXnm9rSLziap9kWwwXDVzmi2WU8Dy47yLYnKgXJDRlil5FszZfBQLcVo eCxMn9HuVAB6d3JfeIxbjbAIp0MkMF1u32FPTeAh10VRm+UG38pHhhOrCrvzT5kd j6F5HKmSUICM+CGDa34JQ2jnNfhm+MlIALWXvpEuw02IE7LQ9ilZiHNFYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNK1ih7GiFb3oc14Ak+0xJSwG2p0MB8GA1UdIwQY MBaAFDMLyP2UnmUdkyhcy8HaEzk7eDMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXd2SV9aU2VaUjJUS0Z6THdkb1RPVHQ0TXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80NjYxNWMtYTdkZi00MjViLTk1OTAt ZDIxZTE0M2Y3NWIyLzEvTXd2SV9aU2VaUjJUS0Z6THdkb1RPVHQ0TXdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi80NjYxNWMtYTdkZi00MjViLTk1OTAtZDIxZTE0M2Y3NWIy LzEvTXd2SV9aU2VaUjJUS0Z6THdkb1RPVHQ0TXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVviKer7 q3t21AVOmCCOzsXOETTNxO4asVaccUeqJlT9sNZTDps4rtdh8mzasJBuN2ozZUnL naOUn64JCBBEXoxPMhrBB26DTjlmquOhTzgRaMqLRDpVpnZmkZEDcSBoYc2St6jj MyhBmAvs/0uv5+zUjtRBABK/mZovlC7uL57jiANB5C3bt7TP1lAfn1Qm7p0rp3Va J++J4qNKcuewKSb4Dj/GVRczDTdBLleuc8exWKmFha63J4W0LHwfp+g89H+eeH0o R+gry1mFSHWoTOR/BE07GLDXjFB4uxuxN24pcrnCGxkPddvNqK8tXcUOyse21aP8 CfUF2/mGVwMI9g== -----END CERTIFICATE-----Generated at Mon Jan 12 01:31:58 2026 by rpki-client