This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft File: 9JdnPHjvrl9r2AolrOPTw3GT54k.mft (raw, json) Hash identifier: r9OPfpA20Mxk9vmJTCj/UKtcZb6vXYjsA3uVIjzG37U= Subject key identifier: 65:DF:AC:F6:C7:D6:FF:3C:62:77:A1:6A:A6:4C:99:7D:3F:4D:BA:C1 Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89 Certificate issuer: /CN=f497673c78efae5f6bd80a25ace3d3c37193e789 Certificate serial: 019BF4D04161D52ADE191BA367599777A5C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 11:00:47 +0000 Manifest this update: Sun 25 Jan 2026 11:00:47 +0000 Manifest next update: Mon 26 Jan 2026 11:00:47 +0000 Files and hashes: 1: 9JdnPHjvrl9r2AolrOPTw3GT54k.crl (hash: noERQomulnNxub4o4jk/lDAogjB+s/cbvMh17iH5o3A=) 2: Gf4Y2IXrfbYCUuna8-5oBQzErx8.roa (hash: CBRZQkgyapVEnN+KlGzYptdXDl00PSWBvuMGdvm4uCg=) 3: Lnic-b8RKeW1rpPqbvXKHlom-ys.roa (hash: 2KTr1u+98H46S2uNewgTQPp+snCfpr8r+A46P3ahmR4=) 4: QgOgFw4UH1rEK_nYcUfssK2TyQQ.roa (hash: K9uUssgaA9Cw/QN8kWZlExQkvdqZ4stsO6RuK8HpBDo=) 5: TyGVkDRU5VuGCHmgtXtvADqB47k.roa (hash: zZ1WNsnAjF4PPiuPy/odw3fOv3vMdCoVvaWlx1hFRXc=) 6: qm1N6afKIHDIeVkklPLOLKGaS4s.roa (hash: ewBUJyCJZqBY4ReNaWU+ZIFZCEk2IZ7kEhQ4Bd+n260=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:41:61:d5:2a:de:19:1b:a3:67:59:97:77:a5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789 Validity Not Before: Jan 25 11:00:47 2026 GMT Not After : Jan 26 11:00:47 2026 GMT Subject: CN=65dfacf6c7d6ff3c6277a16aa64c997d3f4dbac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ae:1e:95:4a:61:90:11:2d:c8:9d:55:8b:60: 23:3c:e5:e2:b0:33:3e:0d:f4:4d:ff:85:80:aa:c9: 8d:aa:88:fc:08:4f:61:ee:8a:2d:67:7f:47:e6:57: 43:9e:4c:d9:e6:1a:72:7c:fb:be:22:e8:4b:dd:28: ef:6a:90:2d:58:dd:70:3f:b7:f3:17:21:68:87:ef: 28:38:08:9a:1f:17:e6:66:97:62:4a:73:63:86:01: f9:96:01:53:94:45:f3:a7:24:bc:06:40:44:09:7f: 60:ef:22:36:83:ae:3c:94:82:14:9e:ce:0a:0f:1e: 05:a9:bf:0d:85:64:a2:f1:20:46:92:39:45:58:f0: 87:9c:a3:ab:ba:74:4d:1c:46:69:fc:12:8d:bb:54: e4:a4:09:4b:82:dc:c5:24:b4:50:91:29:09:00:eb: 88:57:87:18:b3:66:92:97:d0:a6:25:00:d5:e9:67: 8c:d1:e5:47:e6:44:83:2b:06:f0:55:19:07:2d:34: 72:92:1b:32:67:16:a7:9e:06:7a:64:56:6f:96:da: 1a:d3:18:ea:dc:2e:65:db:a7:68:b6:f3:72:b7:c2: eb:ce:0b:4f:e3:a5:af:c1:2a:32:53:76:dd:ea:6c: 5d:8f:99:0e:21:06:13:03:b5:57:46:0c:5e:56:90: f3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DF:AC:F6:C7:D6:FF:3C:62:77:A1:6A:A6:4C:99:7D:3F:4D:BA:C1 X509v3 Authority Key Identifier: keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:69:ef:27:c4:f9:b1:0e:d5:99:a5:6d:5b:76:3d:ff:27:ce: 56:90:23:f7:87:09:06:f0:5a:e1:14:1b:16:2e:35:5d:5e:00: b0:bb:7a:c8:cd:7f:c7:58:bf:4f:6d:41:b2:fe:0f:e2:9f:1a: a4:83:c9:27:2d:1f:0c:ea:47:e2:87:be:f2:a8:2a:f6:26:82: 6d:dd:e4:ce:1f:cf:8a:9b:f9:f3:ba:5f:c2:3c:38:41:a6:b1: bf:ba:b3:18:39:86:22:ae:2e:6e:5c:fc:70:2a:93:24:d7:77: b7:16:a6:7d:96:10:c4:ba:90:74:d0:b2:7b:b1:f4:fe:5e:07: 2d:07:1a:9b:bd:b4:5e:01:3b:18:49:81:65:4f:55:51:69:02: c9:fb:af:e7:16:80:ad:6a:b1:10:05:d6:0b:9c:7b:44:a0:e9: d1:97:33:e8:8b:5d:61:c7:56:93:f6:13:7b:f3:01:fb:bd:b4: 84:c5:54:14:50:2b:c4:d3:4e:73:87:ff:60:3e:95:b7:f1:62: d0:82:e3:dc:2b:b9:de:47:22:78:b9:88:a2:ef:3f:75:a4:cc: 9b:28:20:12:5b:16:69:20:06:3f:e0:a8:67:53:72:db:8d:94: 4a:d5:9a:62:5e:2b:e2:dc:a6:ac:51:70:df:70:ee:04:f7:b4: 63:42:c5:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00EFh1SreGRujZ1mXd6XFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0OTc2NzNjNzhlZmFlNWY2YmQ4MGEyNWFjZTNkM2MzNzE5 M2U3ODkwHhcNMjYwMTI1MTEwMDQ3WhcNMjYwMTI2MTEwMDQ3WjAzMTEwLwYDVQQD Eyg2NWRmYWNmNmM3ZDZmZjNjNjI3N2ExNmFhNjRjOTk3ZDNmNGRiYWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq4elUphkBEtyJ1Vi2AjPOXisDM+ DfRN/4WAqsmNqoj8CE9h7ootZ39H5ldDnkzZ5hpyfPu+IuhL3SjvapAtWN1wP7fz FyFoh+8oOAiaHxfmZpdiSnNjhgH5lgFTlEXzpyS8BkBECX9g7yI2g648lIIUns4K Dx4Fqb8NhWSi8SBGkjlFWPCHnKOrunRNHEZp/BKNu1TkpAlLgtzFJLRQkSkJAOuI V4cYs2aSl9CmJQDV6WeM0eVH5kSDKwbwVRkHLTRykhsyZxanngZ6ZFZvltoa0xjq 3C5l26dotvNyt8LrzgtP46WvwSoyU3bd6mxdj5kOIQYTA7VXRgxeVpDzaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXfrPbH1v88YnehaqZMmX0/TbrBMB8GA1UdIwQY MBaAFPSXZzx4765fa9gKJazj08Nxk+eJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYt NmUwNjk2ZmVlOGU2LzEvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYtNmUwNjk2ZmVlOGU2 LzEvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmnvJ8T5 sQ7VmaVtW3Y9/yfOVpAj94cJBvBa4RQbFi41XV4AsLt6yM1/x1i/T21Bsv4P4p8a pIPJJy0fDOpH4oe+8qgq9iaCbd3kzh/Pipv587pfwjw4Qaaxv7qzGDmGIq4ublz8 cCqTJNd3txamfZYQxLqQdNCye7H0/l4HLQcam720XgE7GEmBZU9VUWkCyfuv5xaA rWqxEAXWC5x7RKDp0Zcz6ItdYcdWk/YTe/MB+720hMVUFFArxNNOc4f/YD6Vt/Fi 0ILj3Cu53kcieLmIou8/daTMmyggElsWaSAGP+CoZ1Ny242UStWaYl4r4tymrFFw 33DuBPe0Y0LFIg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:13 2026 by rpki-client