This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json) Hash identifier: vjJGNffWD02lwLGzXawqQx/5Qcey2SdmB2M6Tl5QuxE= Subject key identifier: 4D:09:21:33:1E:16:97:B0:9F:B1:A1:65:E5:08:10:CA:34:7A:DD:34 Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0 Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0 Certificate serial: 019BFA9BFEF25A913697C0C7FC9F20A1D2D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft Manifest number: 1592 Signing time: Mon 26 Jan 2026 14:01:25 +0000 Manifest this update: Mon 26 Jan 2026 14:01:25 +0000 Manifest next update: Tue 27 Jan 2026 14:01:25 +0000 Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: vvVEpDaBuX7ccm0+6DG2YdSjEH9xnWS7gXrtWbIzsBU=) 2: OzmaqdbQnEvHxy-Ju3BWJk8RR4A.roa (hash: yuFXsdpmAkFe7AvZipGRLoE1oL8vDwU9WfUvdebaJCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:fe:f2:5a:91:36:97:c0:c7:fc:9f:20:a1:d2:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0 Validity Not Before: Jan 26 14:01:25 2026 GMT Not After : Jan 27 14:01:25 2026 GMT Subject: CN=4d0921331e1697b09fb1a165e50810ca347add34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:e0:b8:ce:7b:26:9d:c5:d4:6d:e6:9d:5e: 72:2b:c0:c5:19:ff:d3:ac:17:f9:47:f9:b1:49:3f: 07:04:cb:59:b9:68:90:50:2f:d9:21:fd:0d:a3:cd: f4:52:ad:48:80:aa:8d:15:b9:55:5e:05:6e:c0:38: 9f:41:1c:2f:77:77:39:a4:99:d9:16:62:44:f9:c7: 05:0b:65:53:b3:87:da:76:60:12:3e:aa:0c:ee:83: 3d:5c:98:db:a4:a3:40:ae:ec:4d:2d:2a:e2:ec:47: 32:c4:d2:58:28:3f:43:8b:06:cc:86:69:87:58:46: f3:f0:76:9f:62:f8:8e:00:ce:3e:e9:ed:76:a6:ed: 39:c0:21:ce:06:a4:41:2e:7e:6e:c5:fd:bd:ad:9f: 4d:40:fe:25:e5:14:53:ff:d4:07:b1:1c:33:f8:a5: 07:25:87:6c:e3:4b:f3:1d:e6:2f:07:4c:8c:b6:b1: f7:01:c2:d7:3e:8e:c3:11:e1:db:cc:6f:c3:70:b9: 15:7c:b1:d5:c6:bb:f9:bc:2f:f8:89:c9:91:2c:55: b2:9f:17:a4:d9:9b:4f:54:4a:61:b1:69:bb:54:f2: ed:ac:93:5d:d2:82:3c:66:a4:f6:3c:a2:7e:b6:a7: 91:1f:b5:db:66:18:b1:d1:3e:47:1a:70:6b:16:d7: 5b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:09:21:33:1E:16:97:B0:9F:B1:A1:65:E5:08:10:CA:34:7A:DD:34 X509v3 Authority Key Identifier: keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:48:24:89:4c:6f:38:04:3c:80:58:9e:ef:bc:d0:37:40:45: b7:e9:5d:63:40:ec:09:84:1a:1a:c8:1c:fb:b4:2e:c8:ea:0c: 05:65:c3:cc:27:b9:d3:aa:98:8f:45:b9:a4:0f:e6:4d:3f:61: cb:2b:b4:b4:73:eb:b7:48:30:c3:ba:ce:49:87:99:e1:1e:c9: b7:5f:fb:92:af:01:cc:0a:bd:1f:ad:62:be:57:1b:5c:5a:88: b6:42:d4:b4:6a:95:c4:04:bf:b4:18:ba:c1:27:5a:77:fe:1d: b5:8b:aa:e2:b5:36:b6:7e:35:9e:df:34:54:7f:2d:fc:ec:e9: ba:26:29:53:39:83:79:e2:34:4e:1a:08:14:37:62:ee:ac:a0: d7:07:ed:87:06:37:ec:ef:12:95:64:f7:ac:68:b6:81:24:12: 39:5c:46:e8:44:58:36:ea:a2:84:aa:96:ba:ef:b5:9a:e7:af: ac:23:92:38:bb:ea:81:87:49:0a:ea:76:f3:7d:9a:64:6e:76: 55:4a:89:58:b0:2b:3e:ce:a1:40:bb:38:83:4b:84:3e:8c:43: 69:4a:db:8a:ae:33:4d:61:8f:07:b0:a7:b8:07:da:91:09:10: b4:c2:55:e3:c3:58:f0:a0:a0:37:68:1b:4e:f4:1b:61:40:af: a4:0f:a7:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m/7yWpE2l8DH/J8godLZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NDFkNDY4OTNhYWExNjRmZTI2NzM5OTBkMDdhYTZjMDcx MDAzYzAwHhcNMjYwMTI2MTQwMTI1WhcNMjYwMTI3MTQwMTI1WjAzMTEwLwYDVQQD Eyg0ZDA5MjEzMzFlMTY5N2IwOWZiMWExNjVlNTA4MTBjYTM0N2FkZDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgLguM57Jp3F1G3mnV5yK8DFGf/T rBf5R/mxST8HBMtZuWiQUC/ZIf0No830Uq1IgKqNFblVXgVuwDifQRwvd3c5pJnZ FmJE+ccFC2VTs4fadmASPqoM7oM9XJjbpKNAruxNLSri7EcyxNJYKD9DiwbMhmmH WEbz8HafYviOAM4+6e12pu05wCHOBqRBLn5uxf29rZ9NQP4l5RRT/9QHsRwz+KUH JYds40vzHeYvB0yMtrH3AcLXPo7DEeHbzG/DcLkVfLHVxrv5vC/4icmRLFWynxek 2ZtPVEphsWm7VPLtrJNd0oI8ZqT2PKJ+tqeRH7XbZhix0T5HGnBrFtdbJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0JITMeFpewn7GhZeUIEMo0et00MB8GA1UdIwQY MBaAFPVB1GiTqqFk/iZzmQ0HqmwHEAPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yZTk1ZTctNTY0NC00NmYyLThmYTMt Mzk4YzA0NTE4OWViLzEvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8yZTk1ZTctNTY0NC00NmYyLThmYTMtMzk4YzA0NTE4OWVi LzEvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWkgkiUxv OAQ8gFie77zQN0BFt+ldY0DsCYQaGsgc+7QuyOoMBWXDzCe506qYj0W5pA/mTT9h yyu0tHPrt0gww7rOSYeZ4R7Jt1/7kq8BzAq9H61ivlcbXFqItkLUtGqVxAS/tBi6 wSdad/4dtYuq4rU2tn41nt80VH8t/OzpuiYpUzmDeeI0ThoIFDdi7qyg1wfthwY3 7O8SlWT3rGi2gSQSOVxG6ERYNuqihKqWuu+1muevrCOSOLvqgYdJCup2832aZG52 VUqJWLArPs6hQLs4g0uEPoxDaUrbiq4zTWGPB7CnuAfakQkQtMJV48NY8KCgN2gb TvQbYUCvpA+n/w== -----END CERTIFICATE-----Generated at Mon Jan 26 21:08:53 2026 by rpki-client