This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft File: MDeJJY5gnz5VjXezv9CKzzUV-pI.mft (raw, json) Hash identifier: 6CRWvHUwzo/s03LXmqgpAwvEX6DyFOlGapgVUQvUm7g= Subject key identifier: D8:F1:A8:44:CA:68:57:25:33:6D:17:59:92:19:59:D2:57:DE:7B:97 Authority key identifier: 30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92 Certificate issuer: /CN=303789258e609f3e558d77b3bfd08acf3515fa92 Certificate serial: 019BAE0160E8B5E9E1D121E7276A5D38DC2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft Manifest number: 119D Signing time: Sun 11 Jan 2026 17:01:24 +0000 Manifest this update: Sun 11 Jan 2026 17:01:24 +0000 Manifest next update: Mon 12 Jan 2026 17:01:24 +0000 Files and hashes: 1: MDeJJY5gnz5VjXezv9CKzzUV-pI.crl (hash: g77dIzIgo8nN4+NkGjn8uTTD+F7bO6Awyo4wtvK+QCI=) 2: xKyGUowZMpxmP8SFriJZEYa04g8.roa (hash: Ogi3KmYI+AEeVKeJkZ4F8oVDdYgo/oQccgvjBxzVA8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:01:60:e8:b5:e9:e1:d1:21:e7:27:6a:5d:38:dc:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=303789258e609f3e558d77b3bfd08acf3515fa92 Validity Not Before: Jan 11 17:01:24 2026 GMT Not After : Jan 12 17:01:24 2026 GMT Subject: CN=d8f1a844ca685725336d1759921959d257de7b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:90:f7:3e:2b:ee:dd:b9:c3:1f:d6:44:50: 68:e4:7b:76:32:54:b4:f4:85:1b:e5:ad:36:b9:f4: 11:f3:cd:f9:64:e4:35:64:51:c2:75:41:bb:9d:3c: 4a:e5:c3:b4:5f:1a:69:f5:33:b0:d7:c0:8c:40:b7: d3:60:4d:63:36:53:58:06:ba:83:02:26:ea:6d:71: 72:fb:e6:bc:64:40:31:de:35:59:68:b8:c9:ac:b6: df:9c:b2:c0:51:90:22:b8:27:96:06:f1:57:e3:9b: 20:c0:a1:7e:75:47:1c:a5:67:39:3c:52:d6:d3:cc: 11:bb:f0:96:45:8c:f4:92:d2:88:d2:2e:1f:6a:49: 32:09:80:7d:8c:0d:e4:33:5d:3e:fc:cf:76:4f:65: b4:bb:c7:8c:ae:89:db:3e:45:cc:04:c7:90:8d:be: c8:66:69:17:b1:7c:21:a5:d2:1a:60:cb:22:d6:d2: b2:37:63:99:1b:ab:be:cb:9e:2e:3f:93:d4:b1:14: a1:ce:c1:76:77:64:f8:f7:5e:48:4e:e9:31:72:17: 47:fd:f5:80:6c:2b:36:ca:2a:26:10:c9:50:a4:2c: 5c:3f:e6:15:64:b2:f1:95:41:b0:7a:64:a6:e7:4e: 70:e7:be:49:4e:40:41:e0:df:97:2f:ab:ed:3e:e2: 89:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F1:A8:44:CA:68:57:25:33:6D:17:59:92:19:59:D2:57:DE:7B:97 X509v3 Authority Key Identifier: keyid:30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:7d:db:4c:30:0c:59:30:66:a5:e4:33:3b:2f:5c:f0:99:35: 69:6f:ed:0a:80:31:3a:b6:06:45:fe:a7:68:05:cf:03:30:c8: ac:fb:5e:62:88:f3:c8:16:69:0a:25:ee:36:c1:28:24:6d:c8: 40:8e:e2:f9:fd:91:f8:6c:8e:2b:07:ef:31:4d:eb:72:b8:42: b8:3d:37:84:8c:29:42:17:ea:af:08:05:9d:f5:b4:f7:34:f2: 0b:b7:94:e5:37:ea:32:3b:ad:32:73:84:45:0d:a2:ff:a8:b4: 60:98:27:62:a4:7e:c1:f2:17:a3:c9:9d:13:c1:29:0b:a0:01: 42:23:92:01:18:c8:22:56:d6:cd:6e:0a:a1:a9:50:ab:ea:61: 1c:83:5d:7c:6b:57:38:a4:0b:fc:71:5b:dd:49:be:3f:e5:68: ca:3f:bb:20:46:4e:db:0a:04:62:e1:64:a2:d9:0f:1d:1a:4f: 6a:2c:fc:18:bf:09:25:2a:2d:05:12:35:6f:bc:49:c7:c3:e3: 34:8d:c8:67:9b:df:c0:81:cb:2c:12:8d:dd:ba:b3:41:6e:7e: ca:8c:d2:8f:a5:2d:e6:93:4d:87:b1:d9:5c:9b:f1:23:d7:9c: 6f:c0:cc:a3:7e:bb:08:a6:2d:ba:81:53:fd:48:67:ed:2a:06: d6:81:28:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuuAWDotenh0SHnJ2pdONwvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMzc4OTI1OGU2MDlmM2U1NThkNzdiM2JmZDA4YWNmMzUx NWZhOTIwHhcNMjYwMTExMTcwMTI0WhcNMjYwMTEyMTcwMTI0WjAzMTEwLwYDVQQD EyhkOGYxYTg0NGNhNjg1NzI1MzM2ZDE3NTk5MjE5NTlkMjU3ZGU3Yjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdeQ9z4r7t25wx/WRFBo5Ht2MlS0 9IUb5a02ufQR8835ZOQ1ZFHCdUG7nTxK5cO0Xxpp9TOw18CMQLfTYE1jNlNYBrqD AibqbXFy++a8ZEAx3jVZaLjJrLbfnLLAUZAiuCeWBvFX45sgwKF+dUccpWc5PFLW 08wRu/CWRYz0ktKI0i4fakkyCYB9jA3kM10+/M92T2W0u8eMronbPkXMBMeQjb7I ZmkXsXwhpdIaYMsi1tKyN2OZG6u+y54uP5PUsRShzsF2d2T4915ITukxchdH/fWA bCs2yiomEMlQpCxcP+YVZLLxlUGwemSm505w575JTkBB4N+XL6vtPuKJ4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjxqETKaFclM20XWZIZWdJX3nuXMB8GA1UdIwQY MBaAFDA3iSWOYJ8+VY13s7/Qis81FfqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTURlSkpZNWduejVWalhlenY5Q0t6elVWLXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jOTM0ZGEtOTc4YS00NmY5LTg3YTct NGYyMTlkYjc4NTA4LzEvTURlSkpZNWduejVWalhlenY5Q0t6elVWLXBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jOTM0ZGEtOTc4YS00NmY5LTg3YTctNGYyMTlkYjc4NTA4 LzEvTURlSkpZNWduejVWalhlenY5Q0t6elVWLXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhn3bTDAM WTBmpeQzOy9c8Jk1aW/tCoAxOrYGRf6naAXPAzDIrPteYojzyBZpCiXuNsEoJG3I QI7i+f2R+GyOKwfvMU3rcrhCuD03hIwpQhfqrwgFnfW09zTyC7eU5TfqMjutMnOE RQ2i/6i0YJgnYqR+wfIXo8mdE8EpC6ABQiOSARjIIlbWzW4KoalQq+phHINdfGtX OKQL/HFb3Um+P+Voyj+7IEZO2woEYuFkotkPHRpPaiz8GL8JJSotBRI1b7xJx8Pj NI3IZ5vfwIHLLBKN3bqzQW5+yozSj6Ut5pNNh7HZXJvxI9ecb8DMo367CKYtuoFT /Uhn7SoG1oEo3Q== -----END CERTIFICATE-----Generated at Sun Jan 11 23:57:18 2026 by rpki-client