This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft File: 9naIfyLs2o0HSBWgvPkfr4GUKr0.mft (raw, json) Hash identifier: gU0zJmLvWnUIxYP4ovuqvg19940xjXKF+daazMTeTQs= Subject key identifier: 03:27:F1:B0:CE:4A:07:05:D6:07:AB:0F:60:B1:18:4C:23:1A:2F:70 Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd Certificate serial: 019BFA2D914007A9CB0D9E7440107D442E0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft Manifest number: 0AB5 Signing time: Mon 26 Jan 2026 12:00:48 +0000 Manifest this update: Mon 26 Jan 2026 12:00:48 +0000 Manifest next update: Tue 27 Jan 2026 12:00:48 +0000 Files and hashes: 1: 9naIfyLs2o0HSBWgvPkfr4GUKr0.crl (hash: ZAtWB2WFmXtguZ+CHksnze99IR8OAHB5Xqr5cqJ/bpo=) 2: B87mAdd4CvquW6IizfewWsMBYIg.roa (hash: zPZbgJpRYs/sjp3ISOotVNKeFAfB1E/GJqKV02Oq3YM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:91:40:07:a9:cb:0d:9e:74:40:10:7d:44:2e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd Validity Not Before: Jan 26 12:00:48 2026 GMT Not After : Jan 27 12:00:48 2026 GMT Subject: CN=0327f1b0ce4a0705d607ab0f60b1184c231a2f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:98:ac:98:ac:fb:08:4e:27:b1:66:f9:5f: 41:3f:fd:47:6f:5a:e0:fa:b4:4a:19:ca:89:36:d1: 1f:84:66:56:d8:8a:5e:fc:c2:08:65:ff:c1:db:96: 83:c8:16:30:38:96:1e:a7:33:43:60:a2:09:81:6d: 76:59:72:26:5f:95:fe:91:fc:19:4e:e3:52:89:e1: 2e:17:7f:f2:88:2f:76:a3:22:68:b8:98:ea:b0:d6: dc:97:c4:85:fc:39:80:0b:b2:be:8b:63:71:18:51: bb:9c:f3:34:6c:c8:62:8b:bf:7d:94:55:1c:18:ff: 72:b4:a8:a8:5f:6f:35:9c:9f:ae:76:49:25:84:bc: 3e:4c:b6:40:75:e4:61:8a:0b:95:b2:3a:6c:5e:e1: 33:ac:92:71:84:eb:9a:75:69:c5:3f:45:be:62:b5: 8b:f8:34:be:7f:b1:b6:8f:12:0a:60:ae:93:14:8e: 62:fb:2c:7e:86:4e:6e:84:fc:86:ab:1e:5a:83:d5: 82:9a:ac:19:02:95:fd:6d:87:6b:35:21:4d:63:d4: 46:fb:2a:1f:50:3b:53:db:38:c7:59:c9:44:5a:93: 4a:c1:17:fc:87:28:28:de:4b:b4:ae:21:59:a5:b8: 16:8d:ae:b9:3a:9a:4a:d8:28:68:ac:84:df:04:f9: ed:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:27:F1:B0:CE:4A:07:05:D6:07:AB:0F:60:B1:18:4C:23:1A:2F:70 X509v3 Authority Key Identifier: keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:96:52:4f:ac:b4:bb:62:52:6a:dc:ea:70:07:f7:4b:a3:76: ed:11:22:e2:d4:3a:10:17:ed:c9:ca:d5:de:46:1a:b7:75:02: f4:0f:66:d7:cf:86:ae:9d:38:ae:9e:75:45:03:1d:64:f4:99: 1c:89:85:b0:be:85:2a:19:11:29:a9:ee:e2:ac:9b:dc:b2:64: dd:1a:41:5e:5e:3b:ae:70:03:1c:bd:5d:5d:44:e1:09:90:cc: f4:03:fd:a5:69:af:b4:98:cb:7e:5f:b6:06:43:53:e8:c2:07: 16:be:7a:ca:5b:a0:a5:f9:80:a6:db:71:43:d7:b0:e2:ae:26: 1f:2c:ba:b6:0a:12:a4:7c:73:ab:fe:4f:5c:57:34:81:94:33: e4:db:00:da:dd:5d:55:86:27:7b:a2:4c:a6:cf:63:3c:0f:15: 17:f2:0b:ac:ae:d8:0b:62:02:8c:bf:69:1f:10:2b:50:d8:dd: 81:a8:4c:56:27:8e:85:e5:9f:1a:20:7a:b3:c1:dd:7d:d3:28: 8d:21:e3:48:cd:85:7b:81:d2:52:eb:cf:90:61:c6:a4:21:19: d6:68:ab:51:cd:b9:bb:22:bf:13:c4:25:92:56:98:92:d7:d6: 0c:d6:fd:b8:1c:22:ce:f0:96:49:e9:13:80:80:fe:19:1e:65: 48:e1:29:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LZFAB6nLDZ50QBB9RC4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NzY4ODdmMjJlY2RhOGQwNzQ4MTVhMGJjZjkxZmFmODE5 NDJhYmQwHhcNMjYwMTI2MTIwMDQ4WhcNMjYwMTI3MTIwMDQ4WjAzMTEwLwYDVQQD EygwMzI3ZjFiMGNlNGEwNzA1ZDYwN2FiMGY2MGIxMTg0YzIzMWEyZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwumYrJis+whOJ7Fm+V9BP/1Hb1rg +rRKGcqJNtEfhGZW2Ipe/MIIZf/B25aDyBYwOJYepzNDYKIJgW12WXImX5X+kfwZ TuNSieEuF3/yiC92oyJouJjqsNbcl8SF/DmAC7K+i2NxGFG7nPM0bMhii799lFUc GP9ytKioX281nJ+udkklhLw+TLZAdeRhiguVsjpsXuEzrJJxhOuadWnFP0W+YrWL +DS+f7G2jxIKYK6TFI5i+yx+hk5uhPyGqx5ag9WCmqwZApX9bYdrNSFNY9RG+yof UDtT2zjHWclEWpNKwRf8hygo3ku0riFZpbgWja65OppK2ChorITfBPnt+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMn8bDOSgcF1gerD2CxGEwjGi9wMB8GA1UdIwQY MBaAFPZ2iH8i7NqNB0gVoLz5H6+BlCq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEt Y2QyZGNiMzU1NjU1LzEvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEtY2QyZGNiMzU1NjU1 LzEvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4ZZST6y0 u2JSatzqcAf3S6N27REi4tQ6EBftycrV3kYat3UC9A9m18+Grp04rp51RQMdZPSZ HImFsL6FKhkRKanu4qyb3LJk3RpBXl47rnADHL1dXUThCZDM9AP9pWmvtJjLfl+2 BkNT6MIHFr56ylugpfmApttxQ9ew4q4mHyy6tgoSpHxzq/5PXFc0gZQz5NsA2t1d VYYne6JMps9jPA8VF/ILrK7YC2ICjL9pHxArUNjdgahMVieOheWfGiB6s8HdfdMo jSHjSM2Fe4HSUuvPkGHGpCEZ1mirUc25uyK/E8QlklaYktfWDNb9uBwizvCWSekT gID+GR5lSOEpSA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:43 2026 by rpki-client