This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft File: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft (raw, json) Hash identifier: xmuD7L1iY7PNAQ3/E9BWZFCWYtLVHfvCJpysH6L3jg4= Subject key identifier: 11:F5:0A:BE:5C:D1:91:E1:03:21:03:C8:AA:ED:DD:E2:11:A4:E7:2F Authority key identifier: F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40 Certificate issuer: /CN=f4dcb5741e29352ddd42469270178506008a4140 Certificate serial: 019BF91B48D224453340095444C70A9C7536 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft Manifest number: 0458 Signing time: Mon 26 Jan 2026 07:01:13 +0000 Manifest this update: Mon 26 Jan 2026 07:01:13 +0000 Manifest next update: Tue 27 Jan 2026 07:01:13 +0000 Files and hashes: 1: 682zs4Hcg3A9tAlB0aIHnZEDnoM.roa (hash: C08P14YIy9ohegdz9OY/EiQStApMK1bKQ9gOr6T/J5E=) 2: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl (hash: hVy8Pss+ElZksM1VELqk06TOoiSeP9wFtBAc3xfWab0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:48:d2:24:45:33:40:09:54:44:c7:0a:9c:75:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4dcb5741e29352ddd42469270178506008a4140 Validity Not Before: Jan 26 07:01:13 2026 GMT Not After : Jan 27 07:01:13 2026 GMT Subject: CN=11f50abe5cd191e1032103c8aaeddde211a4e72f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:61:d3:db:86:36:3b:24:70:f7:67:8d:a7: 00:5c:cc:dd:82:01:34:14:7e:5c:48:ed:fe:07:ab: 8a:92:69:41:2d:58:ed:e7:71:47:d5:46:a4:56:60: f5:fc:8d:9d:30:bb:89:de:2b:58:a9:75:67:0d:ab: 15:69:d5:e5:5f:67:35:cf:cb:4b:65:72:aa:ac:30: 08:05:52:d6:3f:a9:7c:de:be:8e:ee:ff:7c:ff:e7: d0:e3:b3:d3:6c:10:bb:d3:af:f1:96:58:1f:29:3d: 1a:b9:16:cc:3a:80:cb:41:89:c9:ba:7c:d8:db:8d: 19:76:c1:99:35:c7:a0:a0:57:5d:a8:ea:78:f2:b9: b2:45:bc:ef:0a:e6:0f:bf:79:26:44:8d:ce:e8:25: 7e:7e:d8:fb:7f:11:b7:3c:98:8e:12:ec:6c:11:96: f9:21:94:06:95:55:f7:16:f5:da:2f:7a:cc:ea:b5: 75:8f:7c:a8:2a:02:fe:eb:54:fa:3d:5d:bc:9c:7b: 40:4c:e3:44:24:53:cc:f1:68:af:02:d4:a2:0e:59: c0:96:8c:7a:6a:5d:44:79:71:2e:9a:e2:74:cc:50: 7e:54:f5:bd:0f:c3:af:8b:19:9d:7d:62:75:4d:b7: 7f:1f:9a:47:cb:7e:28:45:5b:fc:4e:d2:df:6b:1b: 07:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F5:0A:BE:5C:D1:91:E1:03:21:03:C8:AA:ED:DD:E2:11:A4:E7:2F X509v3 Authority Key Identifier: keyid:F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:1f:74:20:9e:d4:a8:31:14:55:6a:9a:60:fc:84:cd:23:77: ea:c5:e9:14:72:a8:80:23:10:87:e9:6f:d2:c2:3f:9e:bf:72: f2:42:89:d6:0b:f8:4e:b8:02:b7:c3:ff:95:35:0c:5c:f6:c7: cf:34:7c:4f:0d:22:da:e9:dc:5f:92:1c:8b:ae:e5:6d:5b:bf: 2d:c1:f4:a0:69:cb:48:e0:4b:2a:ae:71:9b:85:86:d9:3b:b3: 65:3a:3c:a7:f6:bb:3a:71:7c:da:62:24:58:91:43:39:40:a5: f3:9c:8a:9c:71:52:e4:1e:95:10:7a:c5:89:8d:93:c6:1c:ed: 1a:57:fc:30:09:9f:d4:32:51:b5:bf:05:e5:52:b1:41:20:8a: cd:e1:df:99:6b:14:f6:f1:d3:c4:5d:ff:bc:27:92:5e:ae:36: 15:d4:81:f0:64:0f:53:31:bb:5a:91:21:31:74:89:bb:f5:bf: 46:39:66:c1:ac:94:81:92:45:7c:92:0a:f4:00:ee:75:6f:bf: 26:c4:b9:d8:21:73:44:4c:09:58:d0:24:d2:1e:d7:eb:9d:be: 87:38:98:b6:6f:fb:7a:66:e1:c0:6e:83:af:ba:bb:18:e1:c9: b0:f6:35:39:13:04:45:dc:c0:eb:e8:c2:f9:dd:5f:0b:d4:00: d6:4a:e7:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G0jSJEUzQAlURMcKnHU2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZGNiNTc0MWUyOTM1MmRkZDQyNDY5MjcwMTc4NTA2MDA4 YTQxNDAwHhcNMjYwMTI2MDcwMTEzWhcNMjYwMTI3MDcwMTEzWjAzMTEwLwYDVQQD EygxMWY1MGFiZTVjZDE5MWUxMDMyMTAzYzhhYWVkZGRlMjExYTRlNzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7th09uGNjskcPdnjacAXMzdggE0 FH5cSO3+B6uKkmlBLVjt53FH1UakVmD1/I2dMLuJ3itYqXVnDasVadXlX2c1z8tL ZXKqrDAIBVLWP6l83r6O7v98/+fQ47PTbBC706/xllgfKT0auRbMOoDLQYnJunzY 240ZdsGZNcegoFddqOp48rmyRbzvCuYPv3kmRI3O6CV+ftj7fxG3PJiOEuxsEZb5 IZQGlVX3FvXaL3rM6rV1j3yoKgL+61T6PV28nHtATONEJFPM8WivAtSiDlnAlox6 al1EeXEumuJ0zFB+VPW9D8OvixmdfWJ1Tbd/H5pHy34oRVv8TtLfaxsHywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBH1Cr5c0ZHhAyEDyKrt3eIRpOcvMB8GA1UdIwQY MBaAFPTctXQeKTUt3UJGknAXhQYAikFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMDczZjEtOTZlZC00YjM1LWEzZjQt ZjgzMDc3Nzk5NDViLzEvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kMDczZjEtOTZlZC00YjM1LWEzZjQtZjgzMDc3Nzk5NDVi LzEvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlB90IJ7U qDEUVWqaYPyEzSN36sXpFHKogCMQh+lv0sI/nr9y8kKJ1gv4TrgCt8P/lTUMXPbH zzR8Tw0i2uncX5Ici67lbVu/LcH0oGnLSOBLKq5xm4WG2TuzZTo8p/a7OnF82mIk WJFDOUCl85yKnHFS5B6VEHrFiY2TxhztGlf8MAmf1DJRtb8F5VKxQSCKzeHfmWsU 9vHTxF3/vCeSXq42FdSB8GQPUzG7WpEhMXSJu/W/RjlmwayUgZJFfJIK9ADudW+/ JsS52CFzREwJWNAk0h7X652+hziYtm/7embhwG6Dr7q7GOHJsPY1ORMERdzA6+jC +d1fC9QA1krnuA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:11:59 2026 by rpki-client