This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json) Hash identifier: 4Ea127ZxGUCWyR04pZ0MaDdVzSrcPwJMld+ULlPziKE= Subject key identifier: 5C:3A:34:3D:BE:0F:95:EA:E7:C4:8B:01:F9:06:F6:25:7B:23:8C:32 Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9 Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9 Certificate serial: 019BF574E8AE60C298FD46317FF56DA660BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft Manifest number: 0B51 Signing time: Sun 25 Jan 2026 14:00:38 +0000 Manifest this update: Sun 25 Jan 2026 14:00:38 +0000 Manifest next update: Mon 26 Jan 2026 14:00:38 +0000 Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: rjLY3WsudwYf6avUdrjRDn8PjmZJWcmQqlfMmTxCy6w=) 2: GKyDs47a7BqJFaT8Ozcx1DPKrA4.roa (hash: IeQFtuvzwY+Djd9V29XWo6xDkNMsoIv44LxRAtukIHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:e8:ae:60:c2:98:fd:46:31:7f:f5:6d:a6:60:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9 Validity Not Before: Jan 25 14:00:38 2026 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=5c3a343dbe0f95eae7c48b01f906f6257b238c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:74:48:b5:1e:93:56:c9:36:17:c1:38:94: 88:0f:07:2b:cc:b9:6f:fa:04:a8:0a:00:d4:3d:69: 4d:b5:86:a4:9a:8c:c4:ee:8d:54:06:80:c4:f6:62: 92:63:43:07:0a:d5:65:1e:09:f8:06:48:17:c4:71: 35:44:a6:93:8e:d0:53:08:a2:43:3b:83:d8:7d:6c: 49:2b:a6:fa:b8:98:39:f4:b9:ba:78:54:b8:8d:17: ba:d4:27:25:91:05:1e:54:37:30:3b:1d:e1:36:ee: 5f:f3:f1:69:2e:03:f1:76:0c:7d:77:4a:f1:ab:aa: bb:08:1f:28:4a:6c:12:9c:6a:d3:ad:5c:95:e0:d4: 27:f2:a7:b2:83:58:06:7a:4b:e9:21:d8:29:7a:9a: 19:5d:ea:b5:7b:8b:e8:02:67:72:81:7f:f2:3d:1d: 1b:0e:e6:4b:f1:dc:be:20:18:39:74:dc:2f:63:fc: 28:86:04:1b:23:83:6b:66:ba:0b:8c:d8:11:fd:82: b6:bd:95:b2:fc:83:cf:34:48:d7:28:69:00:3b:51: b8:2a:8c:8e:36:43:f2:cd:e4:4e:35:74:41:0b:a9: 4c:6c:ab:da:fb:ca:10:5f:c9:dc:f5:fe:40:1d:5e: 6f:5d:dc:47:d8:6c:12:50:64:d1:56:c6:97:c3:ce: f2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3A:34:3D:BE:0F:95:EA:E7:C4:8B:01:F9:06:F6:25:7B:23:8C:32 X509v3 Authority Key Identifier: keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d7:a5:67:96:30:15:8f:95:b6:34:77:0f:a8:1b:d8:38:53: ed:95:84:f9:66:b4:32:37:d6:c6:8d:38:81:3d:62:51:f9:31: a4:6c:4e:52:a8:f6:99:9c:1d:cf:e6:e3:e4:42:4f:89:5d:e5: ba:cf:bb:45:fa:b5:fe:60:78:c1:e5:7a:d3:be:3d:81:23:84: e2:e4:26:a9:97:f8:a8:72:17:95:1c:1c:4a:f3:9a:30:34:8b: b6:0c:d3:77:a2:ae:ff:81:f5:73:c4:e2:e4:f5:00:a2:22:f8: 7c:0c:73:b0:31:f9:02:39:54:64:4f:49:c4:43:c6:63:2b:08: ac:c7:ad:1e:cc:2f:a3:54:41:86:fa:54:21:cc:84:c1:5f:ed: fc:15:d3:26:df:ac:82:41:9c:50:ea:9b:9f:16:1c:20:b7:fe: 5e:10:f8:85:ab:b6:5c:62:ba:f8:8c:c9:0b:aa:c2:88:47:0c: 8b:e6:78:f7:e1:79:87:e0:a9:d0:da:cf:92:60:cc:65:1b:a4: 18:a8:99:39:cd:3b:bd:05:d0:37:6c:8e:a6:86:cf:84:d5:08: dc:7f:6b:7f:b3:a4:34:cb:d6:14:b1:b1:ff:a3:32:e5:9f:b7: 49:47:39:fd:d7:de:d8:85:00:21:d9:c3:16:bb:97:af:87:23: fa:70:06:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dOiuYMKY/UYxf/VtpmC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MzE0YzFmOWUxMTkzYzIwMjVjYjY3MmI1MjM1NzM5Nzhk MjU0ZDkwHhcNMjYwMTI1MTQwMDM4WhcNMjYwMTI2MTQwMDM4WjAzMTEwLwYDVQQD Eyg1YzNhMzQzZGJlMGY5NWVhZTdjNDhiMDFmOTA2ZjYyNTdiMjM4YzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCh0SLUek1bJNhfBOJSIDwcrzLlv +gSoCgDUPWlNtYakmozE7o1UBoDE9mKSY0MHCtVlHgn4BkgXxHE1RKaTjtBTCKJD O4PYfWxJK6b6uJg59Lm6eFS4jRe61CclkQUeVDcwOx3hNu5f8/FpLgPxdgx9d0rx q6q7CB8oSmwSnGrTrVyV4NQn8qeyg1gGekvpIdgpepoZXeq1e4voAmdygX/yPR0b DuZL8dy+IBg5dNwvY/wohgQbI4NrZroLjNgR/YK2vZWy/IPPNEjXKGkAO1G4KoyO NkPyzeRONXRBC6lMbKva+8oQX8nc9f5AHV5vXdxH2GwSUGTRVsaXw87yywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFw6ND2+D5Xq58SLAfkG9iV7I4wyMB8GA1UdIwQY MBaAFPUxTB+eEZPCAly2crUjVzl40lTZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8xZDA5ZTYtYWU3Yi00MzRjLTk5ZWMt NzM4Yzc0OTJmNzY4LzEvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8xZDA5ZTYtYWU3Yi00MzRjLTk5ZWMtNzM4Yzc0OTJmNzY4 LzEvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdelZ5Yw FY+VtjR3D6gb2DhT7ZWE+Wa0MjfWxo04gT1iUfkxpGxOUqj2mZwdz+bj5EJPiV3l us+7Rfq1/mB4weV60749gSOE4uQmqZf4qHIXlRwcSvOaMDSLtgzTd6Ku/4H1c8Ti 5PUAoiL4fAxzsDH5AjlUZE9JxEPGYysIrMetHswvo1RBhvpUIcyEwV/t/BXTJt+s gkGcUOqbnxYcILf+XhD4hau2XGK6+IzJC6rCiEcMi+Z49+F5h+Cp0NrPkmDMZRuk GKiZOc07vQXQN2yOpobPhNUI3H9rf7OkNMvWFLGx/6My5Z+3SUc5/dfe2IUAIdnD FruXr4cj+nAGUg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:19:22 2026 by rpki-client