This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft File: m-du9KpJjCFSTdftrRbeHT2wAuM.mft (raw, json) Hash identifier: GgDIrwBYY3uMnASiU+R2cJ1bVmUrA6WAlGLF50vRMCY= Subject key identifier: 16:C0:5D:E7:57:EE:74:78:ED:6D:23:8D:50:4A:72:AC:EA:35:F4:CE Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3 Certificate issuer: /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3 Certificate serial: 019BFB09A5007E5E6E7C61EA6F506553EBAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 16:01:11 +0000 Manifest this update: Mon 26 Jan 2026 16:01:11 +0000 Manifest next update: Tue 27 Jan 2026 16:01:11 +0000 Files and hashes: 1: m-du9KpJjCFSTdftrRbeHT2wAuM.crl (hash: OBBSRDWi5cCnJ/3P1A1dOmGxzDhwELZXXdHlFMNsDs8=) 2: uqRQxH9qEjG0hA9B3Ap6knKry0I.roa (hash: aVZsCZDmcN6Rpr0mzKedChfzxWEnLoXai4QxhXhqgNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 16:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:a5:00:7e:5e:6e:7c:61:ea:6f:50:65:53:eb:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3 Validity Not Before: Jan 26 16:01:11 2026 GMT Not After : Jan 27 16:01:11 2026 GMT Subject: CN=16c05de757ee7478ed6d238d504a72acea35f4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:3e:8b:5b:f3:01:d0:f9:77:87:75:89:c2: 87:06:27:38:22:89:e2:1d:90:3a:8c:d8:05:d3:ea: 7a:30:9b:d4:85:52:0c:7f:09:52:44:7a:84:12:5e: 48:a2:6d:bf:19:3a:0a:9d:ba:85:ac:3d:d9:22:11: ff:ec:5d:fd:01:47:21:97:07:9c:00:94:49:68:14: af:7a:f9:d3:a1:ea:45:59:dd:63:82:8c:e0:3e:68: 54:60:89:c6:dd:e2:96:1e:19:42:45:56:b7:9f:20: d8:00:a5:5d:c8:1c:5f:64:06:56:3b:48:b1:ea:a9: 27:4d:bc:03:a6:92:e0:56:ea:af:51:a1:ad:4d:c0: f1:88:b3:f3:08:77:a4:59:53:15:ee:41:7c:68:6a: ae:9a:65:6e:12:d4:1e:81:8a:f8:05:1f:92:d5:10: 00:fc:eb:7f:1b:53:e7:5d:d2:cc:bd:64:87:98:25: b3:63:7e:57:b7:0d:7e:a2:d2:a5:61:ab:8d:44:e3: ef:40:7f:cb:d4:be:89:b7:07:bf:3f:b0:24:11:6c: ed:4e:69:6c:a8:16:f3:c5:a2:c0:da:e7:b0:6f:ae: 78:a7:d6:dc:e1:c0:45:27:a8:7d:9d:00:d0:7e:8c: 89:4b:9d:e3:70:40:e9:8e:8a:61:af:d3:68:69:7e: f0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C0:5D:E7:57:EE:74:78:ED:6D:23:8D:50:4A:72:AC:EA:35:F4:CE X509v3 Authority Key Identifier: keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:e7:60:71:c7:4d:7c:46:21:75:82:34:6d:1b:5c:17:92:e2: 3b:58:fd:92:a4:d4:6d:07:c0:8b:14:55:41:42:56:bf:5f:2b: 48:4c:4e:d1:48:60:c6:18:3b:57:f3:9c:17:c2:db:6b:65:c3: dd:ef:c7:e9:e2:60:ba:42:51:33:ed:ae:0c:fa:e7:e7:37:c9: 82:8c:6d:2e:e9:45:cd:9d:29:46:b4:e8:8d:fc:f1:6e:ff:af: 23:2d:d3:18:52:92:4c:f5:6e:8f:cb:12:de:63:f8:b6:52:22: 9a:5f:bc:14:ec:a7:bd:5c:74:fd:02:b6:33:c9:55:7e:29:c8: 60:5e:74:92:c5:0d:d2:2d:22:be:fe:ac:12:dc:a7:dd:c3:0e: 43:c8:f7:eb:4a:c2:de:f1:0c:8e:7a:e8:cd:74:d3:7d:a7:2c: b4:5c:76:bb:aa:57:c8:39:ce:73:4b:10:11:2f:f6:5b:80:79: 69:82:ec:d7:54:20:8c:2c:52:b9:72:c6:4c:d0:27:ef:8e:8f: 8e:f4:70:4c:51:36:0c:0b:06:c9:c7:30:c7:5a:cb:3b:1e:d0: 3d:cf:75:e0:e3:7a:7f:82:2c:88:d0:fb:86:fc:2c:d0:67:64: c5:77:8e:60:89:8e:5f:8a:9f:4d:cc:7e:82:4b:61:9d:34:3e: 37:61:9f:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CaUAfl5ufGHqb1BlU+uvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTc2ZWY0YWE0OThjMjE1MjRkZDdlZGFkMTZkZTFkM2Ri MDAyZTMwHhcNMjYwMTI2MTYwMTExWhcNMjYwMTI3MTYwMTExWjAzMTEwLwYDVQQD EygxNmMwNWRlNzU3ZWU3NDc4ZWQ2ZDIzOGQ1MDRhNzJhY2VhMzVmNGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzs+i1vzAdD5d4d1icKHBic4Ioni HZA6jNgF0+p6MJvUhVIMfwlSRHqEEl5Iom2/GToKnbqFrD3ZIhH/7F39AUchlwec AJRJaBSvevnToepFWd1jgozgPmhUYInG3eKWHhlCRVa3nyDYAKVdyBxfZAZWO0ix 6qknTbwDppLgVuqvUaGtTcDxiLPzCHekWVMV7kF8aGqummVuEtQegYr4BR+S1RAA /Ot/G1PnXdLMvWSHmCWzY35Xtw1+otKlYauNROPvQH/L1L6Jtwe/P7AkEWztTmls qBbzxaLA2uewb654p9bc4cBFJ6h9nQDQfoyJS53jcEDpjophr9NoaX7wqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbAXedX7nR47W0jjVBKcqzqNfTOMB8GA1UdIwQY MBaAFJvnbvSqSYwhUk3X7a0W3h09sALjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1kdTlLcEpqQ0ZTVGRmdHJSYmVIVDJ3QXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lYjMwMWQtYWI1MC00YzNlLThjNzgt OWRmMzcxMDljODFkLzEvbS1kdTlLcEpqQ0ZTVGRmdHJSYmVIVDJ3QXVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lYjMwMWQtYWI1MC00YzNlLThjNzgtOWRmMzcxMDljODFk LzEvbS1kdTlLcEpqQ0ZTVGRmdHJSYmVIVDJ3QXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtOdgccdN fEYhdYI0bRtcF5LiO1j9kqTUbQfAixRVQUJWv18rSExO0Uhgxhg7V/OcF8Lba2XD 3e/H6eJgukJRM+2uDPrn5zfJgoxtLulFzZ0pRrTojfzxbv+vIy3TGFKSTPVuj8sS 3mP4tlIiml+8FOynvVx0/QK2M8lVfinIYF50ksUN0i0ivv6sEtyn3cMOQ8j360rC 3vEMjnrozXTTfacstFx2u6pXyDnOc0sQES/2W4B5aYLs11QgjCxSuXLGTNAn746P jvRwTFE2DAsGyccwx1rLOx7QPc914ON6f4IsiND7hvws0GdkxXeOYImOX4qfTcx+ gkthnTQ+N2GfMg== -----END CERTIFICATE-----Generated at Tue Jan 27 02:23:09 2026 by rpki-client