This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft File: 2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft (raw, json) Hash identifier: JM0SM/Jykx+/9Q346gFjgcnKDl9LQ33W1YxXoRz8Xgg= Subject key identifier: 99:73:D1:CB:26:AB:9A:6B:BA:5B:A5:F2:F4:70:50:FC:2E:37:46:E9 Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED Certificate issuer: /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed Certificate serial: 019BF72CCD249A24F8FA4B9965D28795A03D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft Manifest number: 17EF Signing time: Sun 25 Jan 2026 22:01:07 +0000 Manifest this update: Sun 25 Jan 2026 22:01:07 +0000 Manifest next update: Mon 26 Jan 2026 22:01:07 +0000 Files and hashes: 1: 2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl (hash: rl8QAbtAZyYh3JBOVQ3fEUz+EEXJCCaldR8gulih41Q=) 2: I945miDFpQYT7r3liramnIH9Rls.roa (hash: e2W1mAyx8RsZ5wQIGm7sXapbFW0BtqtspvuqaFqFnSU=) 3: RyTAXO0kucVJKzc8XJ__L9yOiUA.roa (hash: XRsDlSNxnX2HTPHcD0o1CksNeN89d3dz50kkMUn9wcQ=) 4: e0dgq9Xhgse0R4bj80TVupAtpHw.roa (hash: UhSpFrBBiQsPvJGPY2abaeBtDnP7c1J1dWqODlHmS/A=) 5: eVmQ8FSe8lNxuKwOn_nW2JR2yyA.roa (hash: FpdqbdBj0pjjZR67UoCvnKhEhOtiPNxEJV1VXUIHPLk=) 6: oOhDRpFOR5JraODgtWxrIqn03So.roa (hash: eigDmTWjWV0xucfp3vjonLKwok/Ysn+jhYRmXORf2+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:cd:24:9a:24:f8:fa:4b:99:65:d2:87:95:a0:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed Validity Not Before: Jan 25 22:01:07 2026 GMT Not After : Jan 26 22:01:07 2026 GMT Subject: CN=9973d1cb26ab9a6bba5ba5f2f47050fc2e3746e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ca:cb:04:d1:97:ba:5e:b7:15:6f:4a:2b:02: 01:12:2a:bf:1c:29:23:b4:62:93:ac:8d:cf:a1:1b: a1:c8:02:8f:7a:39:de:eb:38:c6:db:24:bd:9a:7c: 9c:78:31:61:ff:5f:03:37:2a:f5:99:29:7c:80:77: b4:be:11:55:ef:51:e8:cb:04:0d:63:e2:06:69:07: fe:10:2b:fc:9a:d2:1a:4f:7f:e3:b5:86:42:86:2d: 83:7d:a7:64:4c:67:59:c4:d2:5c:67:35:fe:37:de: 9a:ac:50:49:67:38:24:a2:f7:b3:2d:0b:c3:60:20: 5e:82:b7:07:d4:ae:0a:af:62:fc:ab:4a:4b:99:71: 67:22:b5:c1:75:d4:36:2c:8c:1d:5c:e7:34:05:e3: 9c:3d:bb:19:5e:1e:c3:c2:3b:af:81:5a:60:48:43: 7f:74:0d:12:f0:2e:48:fc:d2:90:55:9a:8d:a1:8f: 2f:3a:22:4a:fd:70:eb:ba:92:ec:c8:b7:b5:e7:cd: 2f:7b:c3:d2:d6:70:80:c6:0e:c6:5a:37:19:d9:1b: db:45:3d:35:79:3f:fa:ed:8a:84:42:d4:49:ea:d7: 6c:e8:2a:62:18:20:cc:7d:f2:d7:df:5c:3d:55:8f: 83:88:9b:d5:5a:5c:94:64:1c:53:7e:09:ac:2f:6b: 2a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:73:D1:CB:26:AB:9A:6B:BA:5B:A5:F2:F4:70:50:FC:2E:37:46:E9 X509v3 Authority Key Identifier: keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:56:96:64:b9:ed:35:5f:d9:e0:eb:82:62:c2:aa:0e:6d:62: 22:cb:49:93:b2:db:09:32:7b:8d:70:31:c3:0a:b8:32:30:50: 81:02:90:68:d7:61:07:a5:c2:91:02:ff:15:c6:6a:04:97:3b: 00:4d:f0:cc:e0:c0:ff:ac:6c:34:63:d8:4b:5f:40:42:bc:07: fc:b7:64:0a:6e:b7:93:d3:c5:a5:af:86:fd:de:26:2a:2f:f9: f1:85:cc:96:55:07:e5:b7:d9:ee:ea:ab:09:a1:5f:64:1f:59: b6:1f:27:71:30:14:c5:a7:81:90:1c:c2:fa:07:a9:fd:fd:0c: 2a:5c:cf:03:0b:9e:12:9f:1b:a1:6e:e6:49:2a:25:9b:2f:96: d2:c4:f3:1c:14:b3:dc:8c:1e:0b:d4:77:bc:15:06:7b:0b:b3: 26:c8:53:59:20:6e:1d:10:c2:71:be:4f:db:01:a3:e5:71:e1: d4:98:96:ed:3c:dc:58:9f:6f:2e:8f:ae:c2:92:8a:9b:e2:33: 0b:9f:b8:80:c7:9e:d3:ae:8f:f5:c7:93:be:0f:05:b7:cd:f1: 77:86:03:6c:37:39:ac:a5:b9:85:61:33:31:86:d0:8b:5e:ad: ce:db:64:a2:6e:bd:26:39:be:48:2e:96:e9:2d:df:44:b5:1d: f2:b5:5e:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LM0kmiT4+kuZZdKHlaA9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZjlmYTdiOTQ0ZjdlN2M2MGQ3M2VmMTBiNzc2ZmMyNzk5 NWE0ZWQwHhcNMjYwMTI1MjIwMTA3WhcNMjYwMTI2MjIwMTA3WjAzMTEwLwYDVQQD Eyg5OTczZDFjYjI2YWI5YTZiYmE1YmE1ZjJmNDcwNTBmYzJlMzc0NmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8rLBNGXul63FW9KKwIBEiq/HCkj tGKTrI3PoRuhyAKPejne6zjG2yS9mnyceDFh/18DNyr1mSl8gHe0vhFV71HoywQN Y+IGaQf+ECv8mtIaT3/jtYZChi2DfadkTGdZxNJcZzX+N96arFBJZzgkovezLQvD YCBegrcH1K4Kr2L8q0pLmXFnIrXBddQ2LIwdXOc0BeOcPbsZXh7DwjuvgVpgSEN/ dA0S8C5I/NKQVZqNoY8vOiJK/XDrupLsyLe1580ve8PS1nCAxg7GWjcZ2RvbRT01 eT/67YqEQtRJ6tds6CpiGCDMffLX31w9VY+DiJvVWlyUZBxTfgmsL2sqXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlz0csmq5prulul8vRwUPwuN0bpMB8GA1UdIwQY MBaAFNn5+nuUT358YNc+8Qt3b8J5laTtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUt MDhiZjIyZjY0MDk3LzEvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUtMDhiZjIyZjY0MDk3 LzEvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs1aWZLnt NV/Z4OuCYsKqDm1iIstJk7LbCTJ7jXAxwwq4MjBQgQKQaNdhB6XCkQL/FcZqBJc7 AE3wzODA/6xsNGPYS19AQrwH/LdkCm63k9PFpa+G/d4mKi/58YXMllUH5bfZ7uqr CaFfZB9Zth8ncTAUxaeBkBzC+gep/f0MKlzPAwueEp8boW7mSSolmy+W0sTzHBSz 3IweC9R3vBUGewuzJshTWSBuHRDCcb5P2wGj5XHh1JiW7TzcWJ9vLo+uwpKKm+Iz C5+4gMee066P9ceTvg8Ft83xd4YDbDc5rKW5hWEzMYbQi16tzttkom69Jjm+SC6W 6S3fRLUd8rVe7A== -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:05 2026 by rpki-client