This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json) Hash identifier: Jt2rFYUGrr8CVoAqKKVzeQQ1aN9eHRUCqM1Jh5gKZp0= Subject key identifier: 24:B8:8C:F5:B7:61:75:52:F3:2C:49:6F:01:63:34:51:11:CE:35:CF Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39 Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239 Certificate serial: 019BF5ABED2A59F3FDBE22B187A1BF3FCE6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 15:00:43 +0000 Manifest this update: Sun 25 Jan 2026 15:00:43 +0000 Manifest next update: Mon 26 Jan 2026 15:00:43 +0000 Files and hashes: 1: RxKetbkFR1olWLlhrcubK8yceAM.roa (hash: g3CTp9HnUT7GJeL+1i3uTdVEKFQJlZ/SWysI1PWWzG4=) 2: sxLxAtHZwjLt62bCzACT8k_EKTs.roa (hash: 1l4e9qeUH7lZXuHCARClU98Z9yuYDrKKJQ+J0TPgdsU=) 3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: 6LOklqqQYS0CqKOFUxm409V+c7mikrbw6nGg2uZtVcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:ed:2a:59:f3:fd:be:22:b1:87:a1:bf:3f:ce:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239 Validity Not Before: Jan 25 15:00:43 2026 GMT Not After : Jan 26 15:00:43 2026 GMT Subject: CN=24b88cf5b7617552f32c496f0163345111ce35cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f5:4e:79:02:2a:0b:70:4b:ef:2f:84:13:a0: 92:56:fd:16:88:a4:e0:05:6f:8b:d2:5b:89:ac:bc: cf:0f:65:7c:e3:ce:bc:80:e9:3f:32:5a:cc:4c:91: 61:bf:a2:8c:e0:ca:13:63:dc:fc:38:22:7c:a0:d1: a7:22:ac:02:81:fb:65:79:d9:f4:21:e2:21:03:e8: ef:51:e3:07:30:dd:a4:d8:b1:ff:23:dd:b0:12:8b: 72:11:03:9e:e3:0e:fc:54:b6:8a:a3:23:ef:1b:df: 96:cd:b6:bc:fc:ef:78:17:86:43:d3:0d:ab:b5:75: 45:27:ed:a0:25:ac:04:85:b7:88:a1:ca:2e:88:45: 21:ff:c7:0d:94:d4:0f:49:7d:6c:47:bd:d3:5e:a6: cf:73:5d:dd:58:69:99:a7:40:2c:3b:9c:91:36:54: 65:db:fa:8c:07:1e:4a:57:e6:d7:39:4f:40:fd:99: 4e:e0:a4:cc:b6:43:29:a3:2b:12:1d:05:d4:8a:70: d4:12:13:f3:f9:29:79:00:38:b3:3c:07:a4:2b:f8: d0:92:ab:d8:9c:08:b1:de:93:fa:0a:83:f9:1c:ed: f7:7c:88:ee:42:84:fa:7d:09:78:1e:4a:38:cd:a0: 75:83:ad:45:2f:a4:d6:b7:12:d7:71:96:46:47:d2: 98:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B8:8C:F5:B7:61:75:52:F3:2C:49:6F:01:63:34:51:11:CE:35:CF X509v3 Authority Key Identifier: keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:49:a0:1d:9a:77:26:b8:ad:64:f9:7f:ed:d4:0a:74:de:e7: 57:8c:c9:f8:af:a0:27:5b:17:ae:6e:b2:5c:26:33:36:cb:52: fd:0f:36:20:b2:9f:6b:14:90:37:bd:02:c0:be:f6:f7:ac:ce: d9:b3:be:a9:47:3e:a2:1d:9f:eb:22:0c:20:1e:05:e5:06:a9: 11:e5:cb:d7:ec:2c:8e:2e:65:18:d4:e6:71:81:47:05:46:af: 0c:5d:45:20:7a:6f:b7:92:b3:df:a9:cb:ad:72:44:c7:8f:54: 74:47:87:78:39:5a:1c:1f:3f:d8:73:a0:c3:5c:a0:43:f5:2a: 81:db:18:6b:00:53:b8:73:61:27:6a:a9:b9:83:7e:fd:f9:70: a3:52:e4:fe:79:90:6a:7b:e1:c6:71:18:33:a2:f0:c8:91:eb: 8a:b2:d7:29:68:70:07:38:c0:a0:81:5d:ee:4c:66:75:ad:ce: a1:e6:89:8b:c5:1a:b3:ce:e5:92:a1:f7:ae:b2:ae:ab:98:d4: d5:b0:2f:c9:a9:8d:1c:37:7a:7f:64:eb:51:fc:90:5b:30:9a: fc:47:fb:f0:c1:6c:e5:76:b4:1e:62:74:c8:3e:49:e7:a1:24: 84:2c:7b:2c:b0:9b:d8:01:b1:e9:95:5c:33:ad:f6:09:fa:d1: 09:5c:34:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q+0qWfP9viKxh6G/P85qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDkzMmY3MDY0YjFmZGU5YTEyMjVmMzMyNzc5ZmMyMmU2 NzMyMzkwHhcNMjYwMTI1MTUwMDQzWhcNMjYwMTI2MTUwMDQzWjAzMTEwLwYDVQQD EygyNGI4OGNmNWI3NjE3NTUyZjMyYzQ5NmYwMTYzMzQ1MTExY2UzNWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofVOeQIqC3BL7y+EE6CSVv0WiKTg BW+L0luJrLzPD2V84868gOk/MlrMTJFhv6KM4MoTY9z8OCJ8oNGnIqwCgftledn0 IeIhA+jvUeMHMN2k2LH/I92wEotyEQOe4w78VLaKoyPvG9+Wzba8/O94F4ZD0w2r tXVFJ+2gJawEhbeIocouiEUh/8cNlNQPSX1sR73TXqbPc13dWGmZp0AsO5yRNlRl 2/qMBx5KV+bXOU9A/ZlO4KTMtkMpoysSHQXUinDUEhPz+Sl5ADizPAekK/jQkqvY nAix3pP6CoP5HO33fIjuQoT6fQl4Hko4zaB1g61FL6TWtxLXcZZGR9KYWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCS4jPW3YXVS8yxJbwFjNFERzjXPMB8GA1UdIwQY MBaAFLvZMvcGSx/emhIl8zJ3n8IuZzI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hNThiZGUtYzQ2MS00ODNmLTkxMWIt ZDE3OTg4MWQwNjE4LzEvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9hNThiZGUtYzQ2MS00ODNmLTkxMWItZDE3OTg4MWQwNjE4 LzEvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEmgHZp3 JritZPl/7dQKdN7nV4zJ+K+gJ1sXrm6yXCYzNstS/Q82ILKfaxSQN70CwL7296zO 2bO+qUc+oh2f6yIMIB4F5QapEeXL1+wsji5lGNTmcYFHBUavDF1FIHpvt5Kz36nL rXJEx49UdEeHeDlaHB8/2HOgw1ygQ/UqgdsYawBTuHNhJ2qpuYN+/flwo1Lk/nmQ anvhxnEYM6LwyJHrirLXKWhwBzjAoIFd7kxmda3OoeaJi8Uas87lkqH3rrKuq5jU 1bAvyamNHDd6f2TrUfyQWzCa/Ef78MFs5Xa0HmJ0yD5J56EkhCx7LLCb2AGx6ZVc M632CfrRCVw0XQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:22:15 2026 by rpki-client