This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft File: 9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json) Hash identifier: ArNmbOAlS6xbO1TQ/TklPoA4jQ4bcxeNkPWXnpgGlEk= Subject key identifier: A4:18:8B:5A:28:5E:C7:A1:FE:87:69:4B:4C:CC:69:D0:0B:05:AA:BA Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15 Certificate issuer: /CN=f56403bc1c874eef09b8a1344155abc3f0575b15 Certificate serial: 019BFA2DF5340CE32CB4347AD0572497636C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft Manifest number: 115F Signing time: Mon 26 Jan 2026 12:01:14 +0000 Manifest this update: Mon 26 Jan 2026 12:01:14 +0000 Manifest next update: Tue 27 Jan 2026 12:01:14 +0000 Files and hashes: 1: 1BAPBEHZ2kSoCDAM5eDbrIA1dgo.roa (hash: 1vCNqRI8XEb7PjtGyd1pWNMKL00lL0ojPCYN9P6eYI4=) 2: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: E1Av/ZLxQYp7Tb+e5qAyXRbFMD1tpk4mGce8oKGtkwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:f5:34:0c:e3:2c:b4:34:7a:d0:57:24:97:63:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15 Validity Not Before: Jan 26 12:01:14 2026 GMT Not After : Jan 27 12:01:14 2026 GMT Subject: CN=a4188b5a285ec7a1fe87694b4ccc69d00b05aaba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:25:01:b5:d5:ca:8f:e4:64:20:f4:50:af:c3: 44:ef:5f:a9:27:03:07:78:85:3f:88:e3:ef:09:64: 81:c9:8f:d1:46:92:d4:4b:6c:e9:af:4b:70:73:02: 8f:3b:c1:3f:5b:7c:79:d0:4d:4f:21:c7:1c:9d:e1: 53:bb:14:37:d4:5e:17:64:2c:be:c4:e3:6d:37:83: 81:9d:c1:a9:09:6f:b0:8e:8d:5f:f4:05:5f:1e:46: 4a:5f:1c:ae:e3:16:a1:ee:86:53:cb:f7:f2:71:95: b5:af:f9:71:5c:e8:5a:e1:95:ac:e9:47:83:65:33: 21:d1:2e:d1:9e:66:92:3f:93:87:71:d7:17:ce:58: ed:96:36:ce:73:35:77:20:49:8e:86:1e:ec:6b:d6: 1f:98:6c:bf:67:89:61:d5:9e:c7:2f:e3:82:c2:03: 30:a9:90:1c:ee:46:95:77:ab:a6:c9:f4:e6:29:d7: 86:83:13:48:8b:22:f3:9e:2a:02:c1:60:df:08:26: 3f:97:bd:e0:b7:b5:7b:6a:ee:15:e5:e0:4c:47:c6: 89:07:da:4e:40:82:fe:44:b8:6c:d4:9d:55:62:a4: 63:53:91:a7:68:1d:3c:c0:ac:4e:5c:d0:64:e5:02: b9:69:75:2f:30:d1:87:b0:1c:55:5c:1a:ba:b2:56: f5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:18:8B:5A:28:5E:C7:A1:FE:87:69:4B:4C:CC:69:D0:0B:05:AA:BA X509v3 Authority Key Identifier: keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:36:83:46:fa:be:06:21:09:c3:1a:78:fe:10:92:38:5d:e9: 8e:be:0d:c3:3f:be:5d:2b:54:44:f2:8a:a8:6b:67:20:e9:3e: fb:b8:de:a5:56:ff:02:25:54:ff:14:cb:cc:5d:7e:71:5c:22: 53:3d:2b:93:94:a7:df:92:78:b9:ef:4d:b2:4e:a2:d8:2b:6d: 66:df:bd:a9:d5:80:bf:b3:1b:b7:ba:09:c1:79:ec:49:57:cb: e2:91:bb:4b:42:26:96:86:7e:e8:b5:b3:dc:e8:72:fc:41:37: f7:12:41:b5:42:be:52:4d:d4:24:b1:87:61:13:9c:a9:a7:69: 28:1c:d7:61:15:51:48:05:4c:97:b5:26:9a:34:a5:d1:89:20: 84:23:c9:38:7f:2e:50:52:ed:7e:b6:e6:24:b6:fc:71:df:e8: e9:b6:2a:ee:68:20:47:e7:4c:78:82:e0:a5:52:55:ed:ce:3e: f8:81:a6:73:d1:80:8c:a1:7b:69:af:70:d6:ce:ec:01:5d:a7: 50:ab:ba:75:68:5a:66:72:19:aa:16:f4:70:2a:c8:15:61:ea: 97:06:0d:3a:3a:f8:60:25:1f:17:d4:40:c7:61:a3:57:38:cd: 32:9f:d7:1f:ef:c3:e3:7b:2c:c0:6f:bb:52:90:7c:e2:80:43: 3b:fd:d7:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LfU0DOMstDR60Fckl2NsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NjQwM2JjMWM4NzRlZWYwOWI4YTEzNDQxNTVhYmMzZjA1 NzViMTUwHhcNMjYwMTI2MTIwMTE0WhcNMjYwMTI3MTIwMTE0WjAzMTEwLwYDVQQD EyhhNDE4OGI1YTI4NWVjN2ExZmU4NzY5NGI0Y2NjNjlkMDBiMDVhYWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCUBtdXKj+RkIPRQr8NE71+pJwMH eIU/iOPvCWSByY/RRpLUS2zpr0twcwKPO8E/W3x50E1PIcccneFTuxQ31F4XZCy+ xONtN4OBncGpCW+wjo1f9AVfHkZKXxyu4xah7oZTy/fycZW1r/lxXOha4ZWs6UeD ZTMh0S7RnmaSP5OHcdcXzljtljbOczV3IEmOhh7sa9YfmGy/Z4lh1Z7HL+OCwgMw qZAc7kaVd6umyfTmKdeGgxNIiyLznioCwWDfCCY/l73gt7V7au4V5eBMR8aJB9pO QIL+RLhs1J1VYqRjU5GnaB08wKxOXNBk5QK5aXUvMNGHsBxVXBq6slb1mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQYi1ooXseh/odpS0zMadALBaq6MB8GA1UdIwQY MBaAFPVkA7wch07vCbihNEFVq8PwV1sVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xNzQ4NjAtMGM1YS00NGYwLTk3ZTct ZmFiODVlZTU3MDJhLzEvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8xNzQ4NjAtMGM1YS00NGYwLTk3ZTctZmFiODVlZTU3MDJh LzEvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjaDRvq+ BiEJwxp4/hCSOF3pjr4Nwz++XStURPKKqGtnIOk++7jepVb/AiVU/xTLzF1+cVwi Uz0rk5Sn35J4ue9Nsk6i2CttZt+9qdWAv7Mbt7oJwXnsSVfL4pG7S0ImloZ+6LWz 3Ohy/EE39xJBtUK+Uk3UJLGHYROcqadpKBzXYRVRSAVMl7UmmjSl0YkghCPJOH8u UFLtfrbmJLb8cd/o6bYq7mggR+dMeILgpVJV7c4++IGmc9GAjKF7aa9w1s7sAV2n UKu6dWhaZnIZqhb0cCrIFWHqlwYNOjr4YCUfF9RAx2GjVzjNMp/XH+/D43sswG+7 UpB84oBDO/3XAg== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:44 2026 by rpki-client