This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft File: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json) Hash identifier: HHCCmCxdCybwdoZk8UUnfWglflpoqaOpyCzxXu05+Mc= Subject key identifier: 13:43:8B:78:78:EB:C6:BD:06:A5:C2:58:C8:90:55:10:82:08:82:93 Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24 Certificate issuer: /CN=f57331288d908dd762e4b56f003b448f01881d24 Certificate serial: 019BF7D2723C71958208325986803251EE8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft Manifest number: 0C22 Signing time: Mon 26 Jan 2026 01:02:02 +0000 Manifest this update: Mon 26 Jan 2026 01:02:02 +0000 Manifest next update: Tue 27 Jan 2026 01:02:02 +0000 Files and hashes: 1: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: jasEGXuIwjsPcYhHsqW1biUeOS8AlKSGvXQ7mAIOdds=) 2: d5odnptrjJaW4wbv5e-w-InznHA.roa (hash: HdS9hjcjd6FA7NCMLYoBnDJO3cACO6YPZ4nZtli4PVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:72:3c:71:95:82:08:32:59:86:80:32:51:ee:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24 Validity Not Before: Jan 26 01:02:02 2026 GMT Not After : Jan 27 01:02:02 2026 GMT Subject: CN=13438b7878ebc6bd06a5c258c890551082088293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:02:e1:63:26:e0:4c:24:df:70:d3:a3:aa:2c: 69:75:28:1a:5a:82:45:60:3c:19:08:ff:c7:93:ba: 3b:d9:a7:df:7d:67:6d:63:67:c8:08:7d:18:3e:e8: 41:ee:62:af:85:c9:6f:bb:26:be:c0:4a:0f:53:a6: 56:61:9e:24:98:e5:9e:89:1f:f7:94:7c:de:40:9a: 54:77:da:08:2e:e0:e7:5c:8e:bf:03:99:02:8b:f7: 6a:94:98:74:43:9f:48:89:d6:45:2b:9f:98:3e:92: d1:18:5e:47:b1:fc:d3:45:f1:9a:6e:e1:84:d5:cd: 27:75:f5:a9:c1:86:93:b8:aa:1a:6b:3a:18:81:2a: 79:5a:a8:f3:16:aa:8f:11:9a:37:ab:82:a0:c9:15: 61:bd:3f:38:76:07:d2:32:ee:74:6c:00:03:3d:20: 58:38:37:22:14:22:76:df:48:27:7a:93:0c:7d:0b: 20:63:0a:3c:86:ed:de:75:f9:cd:11:e1:3d:9a:76: 05:39:af:63:4f:2d:ec:f6:a3:c5:b0:b0:4f:fe:5c: 12:da:1c:7a:3b:70:c5:88:6b:ab:4d:a4:c6:50:7f: d7:fb:42:3d:07:22:b2:5e:dc:9d:94:dc:14:04:9b: ef:75:38:cf:bc:35:64:5d:b7:6b:b5:e5:46:07:49: 47:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:43:8B:78:78:EB:C6:BD:06:A5:C2:58:C8:90:55:10:82:08:82:93 X509v3 Authority Key Identifier: keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:4f:cf:85:cc:87:e1:6b:35:15:d4:b4:db:9e:25:20:33:35: 3e:f5:91:ca:f6:18:6b:7c:2c:1d:15:50:80:92:87:02:2a:69: 5e:c3:eb:af:43:da:cc:e5:94:c2:09:08:cd:ff:c8:3f:08:d0: 27:b1:fe:5d:da:97:b5:10:28:72:60:68:47:e5:4d:3e:e5:1e: 04:fb:08:6d:e1:27:da:73:63:41:63:32:3d:47:b9:62:02:d0: 6a:5b:72:84:e1:7a:a6:14:8e:3c:1b:24:0c:ce:8c:12:c7:fd: 0f:e3:42:f9:66:99:6c:f1:c0:c4:ad:d2:c2:9d:c0:2a:f4:b8: 20:2e:5f:4d:aa:84:de:32:7f:f5:a8:89:75:97:a3:67:d2:81: 18:a5:e7:95:fc:1e:59:28:7e:3d:0a:5a:c8:22:5a:86:23:84: 4c:bc:54:24:8c:70:5e:e1:03:d5:d8:26:00:9d:e7:8a:25:68: 02:81:55:e1:96:64:e1:bf:ee:4f:d3:36:29:75:a7:69:11:c1: 9b:51:52:41:1c:79:9e:91:11:64:02:7f:fc:48:ae:be:c1:24: ce:d2:47:57:b9:9b:39:cf:3d:69:4f:ba:88:28:79:0a:c0:35: 92:5b:11:4a:c3:46:50:06:6a:c0:49:ff:39:59:e4:39:78:80: 61:88:6d:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30nI8cZWCCDJZhoAyUe6KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NzMzMTI4OGQ5MDhkZDc2MmU0YjU2ZjAwM2I0NDhmMDE4 ODFkMjQwHhcNMjYwMTI2MDEwMjAyWhcNMjYwMTI3MDEwMjAyWjAzMTEwLwYDVQQD EygxMzQzOGI3ODc4ZWJjNmJkMDZhNWMyNThjODkwNTUxMDgyMDg4MjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgLhYybgTCTfcNOjqixpdSgaWoJF YDwZCP/Hk7o72afffWdtY2fICH0YPuhB7mKvhclvuya+wEoPU6ZWYZ4kmOWeiR/3 lHzeQJpUd9oILuDnXI6/A5kCi/dqlJh0Q59IidZFK5+YPpLRGF5HsfzTRfGabuGE 1c0ndfWpwYaTuKoaazoYgSp5WqjzFqqPEZo3q4KgyRVhvT84dgfSMu50bAADPSBY ODciFCJ230gnepMMfQsgYwo8hu3edfnNEeE9mnYFOa9jTy3s9qPFsLBP/lwS2hx6 O3DFiGurTaTGUH/X+0I9ByKyXtydlNwUBJvvdTjPvDVkXbdrteVGB0lHbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNDi3h468a9BqXCWMiQVRCCCIKTMB8GA1UdIwQY MBaAFPVzMSiNkI3XYuS1bwA7RI8BiB0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgt OGFlYTFmNjhiNzliLzEvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgtOGFlYTFmNjhiNzli LzEvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzE/PhcyH 4Ws1FdS0254lIDM1PvWRyvYYa3wsHRVQgJKHAippXsPrr0PazOWUwgkIzf/IPwjQ J7H+XdqXtRAocmBoR+VNPuUeBPsIbeEn2nNjQWMyPUe5YgLQaltyhOF6phSOPBsk DM6MEsf9D+NC+WaZbPHAxK3Swp3AKvS4IC5fTaqE3jJ/9aiJdZejZ9KBGKXnlfwe WSh+PQpayCJahiOETLxUJIxwXuED1dgmAJ3niiVoAoFV4ZZk4b/uT9M2KXWnaRHB m1FSQRx5npERZAJ//EiuvsEkztJHV7mbOc89aU+6iCh5CsA1klsRSsNGUAZqwEn/ OVnkOXiAYYhthw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:07 2026 by rpki-client