This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json) Hash identifier: 5PP4HCVJ6UlacL/8ac1BxxCtAvIGeYdZIWiUGkEVvSM= Subject key identifier: 27:2C:70:81:C7:32:59:1C:50:3B:12:62:BB:38:D7:35:11:6A:6B:E4 Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92 Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92 Certificate serial: 019BF687C1600473ECC1AB078BB60821E5E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft Manifest number: 0C12 Signing time: Sun 25 Jan 2026 19:00:50 +0000 Manifest this update: Sun 25 Jan 2026 19:00:50 +0000 Manifest next update: Mon 26 Jan 2026 19:00:50 +0000 Files and hashes: 1: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: xsG3vn9OQgg2ciQ6xlgDoNd2N+o5OsqKyJEKoSTLknU=) 2: nt5KsVI8vqdpSeFz_087e62oU14.roa (hash: Bg0m3PuozQ6dYQ2kO4AYYeyWSaWC8O/p5Tn7+bNzG4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:c1:60:04:73:ec:c1:ab:07:8b:b6:08:21:e5:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92 Validity Not Before: Jan 25 19:00:50 2026 GMT Not After : Jan 26 19:00:50 2026 GMT Subject: CN=272c7081c732591c503b1262bb38d735116a6be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7c:00:0d:b5:d5:c0:6e:93:b5:7e:94:fa:5b: c0:9a:e3:b6:80:6e:32:29:a7:81:9a:31:70:89:a2: 6e:22:67:e1:f5:c1:05:12:98:6d:e5:d2:52:d2:20: 00:9b:cc:a6:f4:22:3e:0f:e2:49:4c:d9:4a:d6:a9: 02:63:08:ce:1b:d5:ea:f4:70:be:e0:73:8b:78:a5: 30:f6:5d:38:19:14:91:e8:cd:37:95:7d:5f:8b:f2: c8:2b:11:54:34:6a:7a:56:21:72:1d:64:f2:9a:5e: 86:2e:63:90:b1:cc:a6:08:ae:2b:7e:8b:65:46:93: 2e:f4:84:94:1e:0d:22:af:90:97:a3:4c:ff:a9:f2: 91:be:b1:4a:dd:73:ef:7a:4c:40:9f:03:49:6d:4c: d4:1c:77:49:a1:9d:ad:38:0f:8f:fd:0c:8e:d3:b1: c4:95:75:69:28:e8:1c:9f:80:2c:d8:b2:b4:e1:8f: c6:7a:8b:03:e0:ec:3c:57:c9:a8:59:ac:9e:4a:55: 73:71:b0:b5:18:df:53:c3:18:30:b5:7f:97:f7:6a: 3e:5e:e3:1e:be:87:c7:46:27:7f:f1:54:f7:6d:23: 9f:b4:56:1e:a6:10:1c:41:ed:1d:5b:89:db:01:c9: e2:3e:31:ad:a7:b8:89:49:1d:f3:c1:62:95:35:ef: 65:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2C:70:81:C7:32:59:1C:50:3B:12:62:BB:38:D7:35:11:6A:6B:E4 X509v3 Authority Key Identifier: keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:4c:12:47:30:21:94:c6:b5:44:f4:c0:13:d3:b9:1e:8d:c6: 25:f7:91:23:13:7b:3a:6e:ff:74:e8:83:cf:09:fb:5a:5d:9b: 90:1f:d8:3c:34:44:ad:3e:43:3b:22:72:3e:90:15:2f:d5:38: 09:27:4b:32:b0:4c:b4:d2:bb:fb:67:42:9c:db:7b:03:41:48: bb:e1:18:c6:8b:68:62:7e:e3:c8:ed:63:7e:2d:93:61:6a:fe: e6:1b:06:07:e0:37:15:f6:4a:b5:57:cb:81:91:f7:d7:5b:c1: cd:fd:c5:b8:2b:20:ce:3c:34:8b:bc:d0:3f:ac:94:a3:08:18: 5b:f9:ac:1a:97:21:37:b4:79:60:36:02:25:7b:ec:2d:61:90: 5c:1c:0c:6a:e5:d5:ff:c0:e7:70:41:0a:43:b8:4d:42:ff:c5: 7c:9a:8b:d9:b5:73:ff:ed:6a:43:5d:9b:b9:f8:7c:7a:aa:f8: ce:63:3c:e6:47:25:4c:dc:bd:11:de:ab:80:d4:ea:f8:25:fa: 0e:32:be:96:8e:6b:75:83:c7:9f:5a:e6:ab:3a:fc:a6:82:69: 54:72:52:0b:96:4c:83:82:17:4b:fc:3a:2c:b3:20:13:89:4e: db:65:60:57:f6:8e:11:bc:92:ff:a8:4e:09:07:d7:e8:35:9f: bc:88:d5:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h8FgBHPswasHi7YIIeXmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NDUxYWYxMTEyMGQ4ZmE4OThjYjYyMTJjZWE4Y2E2MWRj NTliOTIwHhcNMjYwMTI1MTkwMDUwWhcNMjYwMTI2MTkwMDUwWjAzMTEwLwYDVQQD EygyNzJjNzA4MWM3MzI1OTFjNTAzYjEyNjJiYjM4ZDczNTExNmE2YmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HwADbXVwG6TtX6U+lvAmuO2gG4y KaeBmjFwiaJuImfh9cEFEpht5dJS0iAAm8ym9CI+D+JJTNlK1qkCYwjOG9Xq9HC+ 4HOLeKUw9l04GRSR6M03lX1fi/LIKxFUNGp6ViFyHWTyml6GLmOQscymCK4rfotl RpMu9ISUHg0ir5CXo0z/qfKRvrFK3XPvekxAnwNJbUzUHHdJoZ2tOA+P/QyO07HE lXVpKOgcn4As2LK04Y/GeosD4Ow8V8moWayeSlVzcbC1GN9TwxgwtX+X92o+XuMe vofHRid/8VT3bSOftFYephAcQe0dW4nbAcniPjGtp7iJSR3zwWKVNe9l8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcscIHHMlkcUDsSYrs41zURamvkMB8GA1UdIwQY MBaAFPZFGvERINj6iYy2ISzqjKYdxZuSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zYjY1YWItYTBlMi00Njg0LWI5ODEt YTg2YTdhZjM2OGRhLzEvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8zYjY1YWItYTBlMi00Njg0LWI5ODEtYTg2YTdhZjM2OGRh LzEvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtkwSRzAh lMa1RPTAE9O5Ho3GJfeRIxN7Om7/dOiDzwn7Wl2bkB/YPDRErT5DOyJyPpAVL9U4 CSdLMrBMtNK7+2dCnNt7A0FIu+EYxotoYn7jyO1jfi2TYWr+5hsGB+A3FfZKtVfL gZH311vBzf3FuCsgzjw0i7zQP6yUowgYW/msGpchN7R5YDYCJXvsLWGQXBwMauXV /8DncEEKQ7hNQv/FfJqL2bVz/+1qQ12bufh8eqr4zmM85kclTNy9Ed6rgNTq+CX6 DjK+lo5rdYPHn1rmqzr8poJpVHJSC5ZMg4IXS/w6LLMgE4lO22VgV/aOEbyS/6hO CQfX6DWfvIjV3g== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:35 2026 by rpki-client