This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft File: F9LMnguBhrYLJwMTzZaCECLQS5U.mft (raw, json) Hash identifier: xR2Kvi8pAWosVBjg/wz2ykIh5GSXeU0qq+J3CAqwxJc= Subject key identifier: A7:ED:30:55:91:4F:1C:09:54:8E:54:4D:12:C0:3B:DA:6D:75:B9:2E Authority key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95 Certificate issuer: /CN=17d2cc9e0b8186b60b270313cd96821022d04b95 Certificate serial: 019BF8ACC3D12020B11ADFA45B9E4FA3F189 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft Manifest number: 0700 Signing time: Mon 26 Jan 2026 05:00:30 +0000 Manifest this update: Mon 26 Jan 2026 05:00:30 +0000 Manifest next update: Tue 27 Jan 2026 05:00:30 +0000 Files and hashes: 1: F9LMnguBhrYLJwMTzZaCECLQS5U.crl (hash: jqycDYGCJ0HjKMUMtOUDkXsnCUT1M8SLsi5bgkJ14Ac=) 2: eCUldEuVJ_0jxDI76Og1yPBef88.roa (hash: O2xOPoQw7tP8dZhDbm7zmCq1owEVKxiXzBZzEk+JuX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ac:c3:d1:20:20:b1:1a:df:a4:5b:9e:4f:a3:f1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d2cc9e0b8186b60b270313cd96821022d04b95 Validity Not Before: Jan 26 05:00:30 2026 GMT Not After : Jan 27 05:00:30 2026 GMT Subject: CN=a7ed3055914f1c09548e544d12c03bda6d75b92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:42:40:d6:6f:7d:3f:2b:5a:9b:60:e0:76:14: d1:cb:e9:04:90:c5:49:f0:93:37:3b:76:fa:8c:31: a5:39:a0:62:24:a1:ed:ad:45:39:4c:29:27:2a:82: 3d:e0:3d:4b:31:61:1d:5c:20:42:c8:9d:11:4a:ec: 00:1f:3b:7a:3e:97:de:e7:29:e2:2e:e2:af:01:58: 88:35:ae:34:01:71:99:a1:ba:5a:67:bf:ce:be:9d: 66:21:8c:45:95:71:78:21:4e:a8:1e:b8:f8:94:2d: 00:11:ae:6f:7e:e1:ce:47:62:d2:ac:18:0c:7f:1d: 41:b1:55:73:c8:a5:c1:b9:08:34:4d:35:19:32:8a: 6a:aa:69:73:84:ec:9d:7a:1a:68:b0:8f:3f:f7:14: 72:4f:29:57:f2:eb:97:ac:fd:a2:8e:3f:57:8b:96: fa:84:c1:25:63:2d:77:bf:4e:fa:6a:09:a4:f6:97: f5:1d:73:ed:50:cc:23:98:0c:89:fd:f2:b9:07:74: d6:2d:27:7f:7c:d3:d4:6b:66:49:3f:ab:0d:a2:53: 97:6a:99:cf:18:fd:e2:02:3a:e4:8f:6f:3f:48:f3: 5b:e7:1a:b6:b2:ba:7c:1f:3d:7b:f0:05:ba:30:39: 72:a3:cd:38:fb:32:2c:86:92:a8:fe:45:0a:7e:df: 44:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:ED:30:55:91:4F:1C:09:54:8E:54:4D:12:C0:3B:DA:6D:75:B9:2E X509v3 Authority Key Identifier: keyid:17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:dd:18:b9:86:3e:0d:0c:72:0b:74:74:f3:58:14:42:2a:a7: 17:2e:63:21:72:81:ef:f1:d9:ff:79:82:5a:4c:08:4a:3a:14: ac:27:03:d2:5a:2b:0a:6d:8e:4d:aa:06:33:83:01:4c:4c:f8: b5:2f:bb:be:93:54:86:ff:df:82:14:3e:02:79:61:f2:d3:c9: 48:5a:54:61:e8:1a:b0:7b:f4:d7:45:dc:94:c3:eb:1f:2b:ad: ab:c0:64:a4:0b:6e:4f:f8:67:8e:af:f2:a4:22:3c:e6:07:48: d2:56:8b:e8:ce:ca:0e:31:54:02:60:77:75:8f:1c:8d:6f:dd: 3a:a7:f6:75:70:53:9c:3b:2a:aa:42:d4:b4:5e:51:d2:38:d5: 7e:40:76:51:fc:ed:b2:de:7b:eb:ef:0b:a4:85:ac:5e:47:6f: de:be:21:69:6b:9f:f4:ae:0a:e8:a8:54:dc:b7:a4:e6:0f:31: 4d:5a:a6:2f:cc:bd:f1:9b:20:4b:cf:35:11:22:d2:f3:01:9b: bd:67:03:0b:61:36:77:8b:02:c9:f8:61:37:20:b1:dd:37:4c: e8:75:27:0a:25:47:77:58:cf:4e:77:4c:ac:2a:b0:73:e9:a1: 51:c4:23:93:85:03:d1:ad:3a:72:50:51:09:9e:ea:25:93:98: 3c:60:4b:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rMPRICCxGt+kW55Po/GJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDJjYzllMGI4MTg2YjYwYjI3MDMxM2NkOTY4MjEwMjJk MDRiOTUwHhcNMjYwMTI2MDUwMDMwWhcNMjYwMTI3MDUwMDMwWjAzMTEwLwYDVQQD EyhhN2VkMzA1NTkxNGYxYzA5NTQ4ZTU0NGQxMmMwM2JkYTZkNzViOTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0JA1m99Pytam2DgdhTRy+kEkMVJ 8JM3O3b6jDGlOaBiJKHtrUU5TCknKoI94D1LMWEdXCBCyJ0RSuwAHzt6Ppfe5yni LuKvAViINa40AXGZobpaZ7/Ovp1mIYxFlXF4IU6oHrj4lC0AEa5vfuHOR2LSrBgM fx1BsVVzyKXBuQg0TTUZMopqqmlzhOydehposI8/9xRyTylX8uuXrP2ijj9Xi5b6 hMElYy13v076agmk9pf1HXPtUMwjmAyJ/fK5B3TWLSd/fNPUa2ZJP6sNolOXapnP GP3iAjrkj28/SPNb5xq2srp8Hz178AW6MDlyo804+zIshpKo/kUKft9EFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKftMFWRTxwJVI5UTRLAO9ptdbkuMB8GA1UdIwQY MBaAFBfSzJ4LgYa2CycDE82WghAi0EuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wZDM4ZjktZTBjMS00NmNjLTlhMjIt ZGZiYjZlYzM0MzBlLzEvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wZDM4ZjktZTBjMS00NmNjLTlhMjItZGZiYjZlYzM0MzBl LzEvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlt0YuYY+ DQxyC3R081gUQiqnFy5jIXKB7/HZ/3mCWkwISjoUrCcD0lorCm2OTaoGM4MBTEz4 tS+7vpNUhv/fghQ+Anlh8tPJSFpUYegasHv010XclMPrHyutq8BkpAtuT/hnjq/y pCI85gdI0laL6M7KDjFUAmB3dY8cjW/dOqf2dXBTnDsqqkLUtF5R0jjVfkB2Ufzt st576+8LpIWsXkdv3r4haWuf9K4K6KhU3Lek5g8xTVqmL8y98ZsgS881ESLS8wGb vWcDC2E2d4sCyfhhNyCx3TdM6HUnCiVHd1jPTndMrCqwc+mhUcQjk4UD0a06clBR CZ7qJZOYPGBLXw== -----END CERTIFICATE-----Generated at Mon Jan 26 12:35:31 2026 by rpki-client