This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json) Hash identifier: Uqh3tvPH0GBP9WoICHQveN/7Nf5uujn/5x17yvkWu3c= Subject key identifier: 55:65:9F:65:55:DD:40:10:20:F6:F5:D8:C6:09:25:E7:14:70:72:AA Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b Certificate serial: 019BF318CC28C6D7305F5E414840B3B24531 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 03:00:47 +0000 Manifest this update: Sun 25 Jan 2026 03:00:47 +0000 Manifest next update: Mon 26 Jan 2026 03:00:47 +0000 Files and hashes: 1: 8Ae2bQe1uFjZZo0F1tnzO2BTYdM.roa (hash: 5M5PrQ6jblQ4c8/6XrFcJktYLAM5nwbgehPaHFmA10E=) 2: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: G51FsMi01+gYwAJGA/tAMvBUH5HUWETWOQLz8r5L6CA=) 3: wHRMABRpMiyEtjejskYT70NitKw.roa (hash: uaVh9YOmPZr43rpaKkgfhS6YH1UUI05Pvf24DvQSZqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:cc:28:c6:d7:30:5f:5e:41:48:40:b3:b2:45:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b Validity Not Before: Jan 25 03:00:47 2026 GMT Not After : Jan 26 03:00:47 2026 GMT Subject: CN=55659f6555dd401020f6f5d8c60925e7147072aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:85:a2:d5:35:3a:83:bf:9c:74:e3:99:d7:d0: 91:ec:3f:c4:82:f9:91:39:b1:4c:17:bd:34:79:c4: 56:51:71:fd:52:7e:ed:e9:ca:dd:ce:cf:58:93:7f: 84:ac:1b:a2:27:e1:74:cf:43:b8:df:d9:5e:9c:08: 90:1a:15:b1:3d:4d:6d:3e:5a:34:af:4c:98:42:db: 79:35:e9:4c:38:95:00:07:68:40:93:95:bc:02:89: b6:6b:ed:bc:72:d7:19:69:93:d1:c2:d3:7a:a4:b5: 38:95:41:32:ff:9b:3a:91:b8:1f:4a:64:98:12:44: da:71:b4:0f:ed:52:04:33:5f:70:8f:88:ed:ce:bc: de:5a:92:f3:90:44:84:f2:58:3a:a7:22:76:67:dc: 19:ee:47:3a:62:3c:f9:2a:b3:25:26:ba:a6:cc:bb: 56:58:40:fc:16:ef:ca:74:70:ae:70:ea:11:ca:75: 57:7d:0a:1a:c0:ad:d7:72:a3:71:07:7a:bf:25:2c: 59:b2:df:2f:2e:9b:6c:e7:a5:ab:7f:ef:fb:08:3c: 83:d4:60:79:a0:4f:c1:cc:15:43:eb:9c:02:26:e5: 48:1e:6a:46:90:2a:c2:27:cb:94:5d:5c:64:8a:72: e5:a2:35:93:14:14:90:60:d1:a7:ec:d5:5b:ca:83: 6f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:65:9F:65:55:DD:40:10:20:F6:F5:D8:C6:09:25:E7:14:70:72:AA X509v3 Authority Key Identifier: keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:8d:6b:17:57:ab:81:f6:65:7c:c6:dc:f4:14:b7:1d:03:0a: 80:fb:9e:9e:8b:a3:2f:94:dd:1b:fd:86:be:d7:40:b9:bf:25: 42:03:1e:b8:4e:20:ea:bc:38:cd:59:38:ed:c2:ea:c1:4c:9d: 7b:5c:0a:24:a8:37:4e:0b:e9:7a:25:4b:09:45:e9:d8:5c:ef: b1:b4:0e:b6:95:93:58:69:c9:8d:a0:7e:8c:39:34:e7:e2:d6: 3f:43:78:c3:c9:73:23:74:af:9b:78:9f:b0:e0:03:f0:71:ec: 20:bf:c5:91:f7:cb:20:5b:39:43:2b:66:b6:78:af:ed:4a:ff: c4:0e:11:db:d3:59:23:31:26:74:20:f1:e3:92:ee:36:02:bf: 6f:9e:41:29:03:6c:38:1a:aa:56:52:80:a6:c8:0d:10:60:85: c7:e1:21:46:8a:67:2b:b1:ff:a5:43:72:7c:ce:27:95:17:ff: 07:b0:5b:5a:32:e9:98:85:ad:18:ec:b1:ea:b8:e7:4d:35:f5: 5a:f2:21:0b:c2:b4:f4:5b:d7:95:b7:29:c6:87:d9:bf:75:d1: 0a:71:f1:ee:e7:1f:4d:14:d1:45:34:ad:a8:ea:cb:98:45:7d: 71:24:a0:3a:71:d6:fc:32:73:ee:1f:c7:93:92:65:51:02:24: 6c:bd:63:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGMwoxtcwX15BSECzskUxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OGY0MWFmZGM2MDk1NjhmYjIzMzhmZGIyMGIyZDBjNDIy YjcyM2IwHhcNMjYwMTI1MDMwMDQ3WhcNMjYwMTI2MDMwMDQ3WjAzMTEwLwYDVQQD Eyg1NTY1OWY2NTU1ZGQ0MDEwMjBmNmY1ZDhjNjA5MjVlNzE0NzA3MmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4Wi1TU6g7+cdOOZ19CR7D/EgvmR ObFMF700ecRWUXH9Un7t6crdzs9Yk3+ErBuiJ+F0z0O439lenAiQGhWxPU1tPlo0 r0yYQtt5NelMOJUAB2hAk5W8Aom2a+28ctcZaZPRwtN6pLU4lUEy/5s6kbgfSmSY EkTacbQP7VIEM19wj4jtzrzeWpLzkESE8lg6pyJ2Z9wZ7kc6Yjz5KrMlJrqmzLtW WED8Fu/KdHCucOoRynVXfQoawK3XcqNxB3q/JSxZst8vLpts56Wrf+/7CDyD1GB5 oE/BzBVD65wCJuVIHmpGkCrCJ8uUXVxkinLlojWTFBSQYNGn7NVbyoNvGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVln2VV3UAQIPb12MYJJecUcHKqMB8GA1UdIwQY MBaAFLSPQa/cYJVo+yM4/bILLQxCK3I7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYt OGVjNjhlNzg4NmUyLzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS80ODU3NjktNTgzNS00N2Y0LWE5ZmYtOGVjNjhlNzg4NmUy LzEvdEk5QnI5eGdsV2o3SXpqOXNnc3RERUlyY2pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaI1rF1er gfZlfMbc9BS3HQMKgPuenoujL5TdG/2GvtdAub8lQgMeuE4g6rw4zVk47cLqwUyd e1wKJKg3TgvpeiVLCUXp2FzvsbQOtpWTWGnJjaB+jDk05+LWP0N4w8lzI3Svm3if sOAD8HHsIL/FkffLIFs5Qytmtniv7Ur/xA4R29NZIzEmdCDx45LuNgK/b55BKQNs OBqqVlKApsgNEGCFx+EhRopnK7H/pUNyfM4nlRf/B7BbWjLpmIWtGOyx6rjnTTX1 WvIhC8K09FvXlbcpxofZv3XRCnHx7ucfTRTRRTStqOrLmEV9cSSgOnHW/DJz7h/H k5JlUQIkbL1j3w== -----END CERTIFICATE-----Generated at Sun Jan 25 14:14:48 2026 by rpki-client