This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft File: A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json) Hash identifier: UtJ2mrT6TQxg8kqjDwnddKFFz8BgxcrVXtIt7WHl4nI= Subject key identifier: 9B:76:10:10:94:C8:70:F0:2E:AE:9C:8C:2A:E6:4F:09:25:04:98:1F Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC Certificate issuer: /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc Certificate serial: 019BF808A7F47E2FD7C33D6D7FFC6CF0BB52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft Manifest number: 04CD Signing time: Mon 26 Jan 2026 02:01:15 +0000 Manifest this update: Mon 26 Jan 2026 02:01:15 +0000 Manifest next update: Tue 27 Jan 2026 02:01:15 +0000 Files and hashes: 1: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: ZGIucj0xZHrPcr39H3Bxnb9ySnNWFza/wrna4EZMeys=) 2: R_tuRGNyH8maQImtyJX8ka61Rts.roa (hash: CI3pZc4MmuEvMGaaRVV9hzb41var6bWscwqeDxkewRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:a7:f4:7e:2f:d7:c3:3d:6d:7f:fc:6c:f0:bb:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc Validity Not Before: Jan 26 02:01:15 2026 GMT Not After : Jan 27 02:01:15 2026 GMT Subject: CN=9b76101094c870f02eae9c8c2ae64f092504981f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:42:41:21:de:db:62:dd:50:21:04:8b:fe:95: f2:08:e6:45:30:ea:64:a7:6a:44:c3:c5:cd:e6:b5: bc:d1:52:7d:36:cb:d2:e0:12:8e:1b:ac:eb:ee:a1: 81:01:26:7e:ec:2c:6f:d0:05:4a:44:37:43:eb:c2: 19:d5:a2:21:97:ab:49:96:1a:22:48:f3:79:9b:5a: 04:f6:e0:e2:24:4c:b8:49:02:06:01:b9:ad:b9:8c: 2e:ed:c5:f3:e3:71:73:3a:ff:2b:3d:46:ac:77:7c: b3:13:67:bb:aa:1f:3d:1f:7d:b4:c4:e8:bf:97:ca: c3:04:04:ca:6d:4a:50:ca:4d:b2:f8:62:57:6d:fe: 10:27:8e:4e:47:76:8f:b9:b9:ae:12:e0:35:c1:dd: b4:60:ec:44:5d:25:5c:a9:96:ed:26:58:c8:fe:24: 33:71:0a:82:25:bf:3a:22:5e:04:cf:74:f8:f1:44: f7:43:2f:ff:8d:0a:46:06:30:6e:82:3f:e1:ae:75: b3:1b:37:9a:05:9b:e8:f5:64:54:ba:ba:64:60:61: 5f:f8:6c:1b:06:85:f9:b8:11:ca:3c:be:52:f8:9a: 0c:d6:2f:10:20:74:b6:4f:6d:78:02:e5:c7:b9:fb: 9a:32:c4:5a:59:46:91:a5:70:c4:e2:04:bb:63:b4: 1c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:76:10:10:94:C8:70:F0:2E:AE:9C:8C:2A:E6:4F:09:25:04:98:1F X509v3 Authority Key Identifier: keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:f6:ef:d3:ef:eb:cf:7a:cb:0d:b5:a9:7b:b6:f8:2e:ad:f9: fc:62:9b:78:55:c6:d2:ca:38:cf:cc:a5:ef:21:5e:a1:ea:17: c9:8e:8a:ad:88:2d:02:f5:10:3e:8a:48:3c:a5:05:35:94:70: cd:41:a5:19:1e:de:e0:82:02:ad:5d:01:a5:ec:5b:b5:2c:21: 0f:e1:dc:84:f1:58:77:98:36:8a:d0:b1:0b:60:85:c1:d3:61: 7d:b8:78:9b:59:b5:a1:19:96:04:b4:96:d4:7f:5c:a1:8b:32: 49:f0:66:25:c4:3e:bb:7c:9d:71:26:89:d8:82:f3:ed:2e:6e: 2a:17:89:99:f0:da:23:31:f7:48:23:9c:14:72:92:63:c3:18: 49:ef:9a:82:86:59:66:f9:cf:4f:85:29:85:ee:7f:99:94:de: c9:ec:9a:d5:f4:a9:eb:06:4d:5e:31:93:d4:f8:79:39:5c:87: e9:67:e3:5c:38:7c:91:4b:85:33:15:ab:3e:87:03:bb:5e:a5: 71:73:e0:8b:d4:29:4c:e5:cb:a4:fa:f4:c2:e2:0a:d1:9c:9c: 9e:ec:08:80:69:1e:b9:1b:84:d5:a5:c7:23:60:76:4b:27:b3: 32:75:a1:7c:95:35:0b:d7:e5:79:26:4c:87:e3:82:44:df:07: 77:cd:07:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CKf0fi/Xwz1tf/xs8LtSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZDZhOGE2MzlmODhhYWYxZjQzNmQ2YTIwYjQxNzdiMzhk MzkwZmMwHhcNMjYwMTI2MDIwMTE1WhcNMjYwMTI3MDIwMTE1WjAzMTEwLwYDVQQD Eyg5Yjc2MTAxMDk0Yzg3MGYwMmVhZTljOGMyYWU2NGYwOTI1MDQ5ODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUJBId7bYt1QIQSL/pXyCOZFMOpk p2pEw8XN5rW80VJ9NsvS4BKOG6zr7qGBASZ+7Cxv0AVKRDdD68IZ1aIhl6tJlhoi SPN5m1oE9uDiJEy4SQIGAbmtuYwu7cXz43FzOv8rPUasd3yzE2e7qh89H320xOi/ l8rDBATKbUpQyk2y+GJXbf4QJ45OR3aPubmuEuA1wd20YOxEXSVcqZbtJljI/iQz cQqCJb86Il4Ez3T48UT3Qy//jQpGBjBugj/hrnWzGzeaBZvo9WRUurpkYGFf+Gwb BoX5uBHKPL5S+JoM1i8QIHS2T214AuXHufuaMsRaWUaRpXDE4gS7Y7QcLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJt2EBCUyHDwLq6cjCrmTwklBJgfMB8GA1UdIwQY MBaAFAPWqKY5+IqvH0NtaiC0F3s405D8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQt YzIwZGU1NDNjMGRmLzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQtYzIwZGU1NDNjMGRm LzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovbv0+/r z3rLDbWpe7b4Lq35/GKbeFXG0so4z8yl7yFeoeoXyY6KrYgtAvUQPopIPKUFNZRw zUGlGR7e4IICrV0BpexbtSwhD+HchPFYd5g2itCxC2CFwdNhfbh4m1m1oRmWBLSW 1H9coYsySfBmJcQ+u3ydcSaJ2ILz7S5uKheJmfDaIzH3SCOcFHKSY8MYSe+agoZZ ZvnPT4Uphe5/mZTeyeya1fSp6wZNXjGT1Ph5OVyH6WfjXDh8kUuFMxWrPocDu16l cXPgi9QpTOXLpPr0wuIK0ZycnuwIgGkeuRuE1aXHI2B2SyezMnWhfJU1C9fleSZM h+OCRN8Hd80HUQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:06:50 2026 by rpki-client