This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft File: 9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json) Hash identifier: 7wFmoer7KmSwH7ZKGvFTSuYiq8622eNsmj7Z8sW6AV4= Subject key identifier: A0:23:32:1A:A2:0C:AF:53:74:56:16:9F:C9:F3:CF:2C:7D:87:88:13 Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64 Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64 Certificate serial: 019BF808003EA6F6FD45F8A0F82D28EC2C87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 02:00:32 +0000 Manifest this update: Mon 26 Jan 2026 02:00:32 +0000 Manifest next update: Tue 27 Jan 2026 02:00:32 +0000 Files and hashes: 1: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: D/0WYvUVWqVEFGrwGd/B7i7qjomLAGZFyCcgugoGvLY=) 2: kseNmYdhBq1K_noazDOmBmDbF5s.roa (hash: ATubQciMVM4Jml+pZxIMMSnD/6uFD6UKEHkdr+OIXB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:00:3e:a6:f6:fd:45:f8:a0:f8:2d:28:ec:2c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Jan 27 02:00:32 2026 GMT Subject: CN=a023321aa20caf537456169fc9f3cf2c7d878813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e5:6b:9a:60:15:62:41:b8:0c:1a:23:63:05: 2c:33:65:ab:5c:b0:76:fb:fb:f3:63:3e:56:1c:cf: 3a:e4:c4:76:dd:f6:8c:c9:78:26:db:a1:59:0a:f2: c8:44:e4:1d:da:ee:0c:73:19:06:bd:9b:1c:d5:3e: 40:e1:80:b5:ae:c2:72:87:f5:15:7d:30:cb:b2:cf: 20:9f:b0:4c:f7:f9:87:31:56:e7:b5:48:6b:be:e8: 79:e2:54:dc:cc:c9:18:31:70:87:12:28:2c:d1:9b: ce:16:1a:78:c1:7c:55:cf:58:3b:ab:13:28:63:7a: 2e:e5:91:99:06:ac:09:9c:c4:8e:9e:fb:b0:d5:f5: 0e:44:3a:c2:ef:b5:c9:13:e5:3d:b5:a8:43:a5:d7: 4d:b4:96:35:22:a6:c9:a7:ee:75:5d:5c:9f:b2:27: ed:f5:df:c4:09:a9:a6:09:60:d0:28:16:2f:6e:3a: 15:45:d4:c6:8a:d8:14:05:aa:01:c0:df:6d:3c:0d: 88:36:4b:a6:73:f9:65:34:7a:e2:79:0b:53:15:2c: b3:ce:8f:15:66:4f:9d:18:6d:af:a8:a7:77:bf:f0: 6b:5b:8b:c4:6b:cd:ad:b7:70:33:e5:78:83:d2:07: 53:e6:22:21:a9:2e:92:93:f4:ad:6e:7d:b8:f3:b6: 54:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:23:32:1A:A2:0C:AF:53:74:56:16:9F:C9:F3:CF:2C:7D:87:88:13 X509v3 Authority Key Identifier: keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:32:91:a5:e4:9b:a4:e2:db:ac:5c:f2:6c:95:2a:2d:27:f5: 9a:6b:e2:f1:d2:72:b6:d1:22:08:2d:74:01:b1:58:46:67:c2: 89:00:a4:b8:04:99:2b:ef:b9:34:15:1a:6c:ac:cd:59:93:a0: 16:13:9a:32:56:c0:51:00:82:07:ce:6a:2d:29:30:ca:a2:34: dd:91:f7:bd:6b:c4:f7:90:17:ba:0b:00:31:85:f9:15:c3:b6: e6:03:5e:6a:8c:bf:96:3d:9d:41:2a:e0:20:cc:f2:41:ad:4e: 2f:d9:4c:8e:df:a9:8e:fb:22:45:d2:35:69:82:f2:cb:df:5b: e8:8c:82:da:b9:df:c3:cd:12:22:9c:7e:c0:3f:96:25:25:49: a6:20:ed:ed:36:f3:91:5a:e1:31:b3:a9:8e:09:1a:26:98:16: bf:b6:7b:b8:d4:f9:ea:aa:3b:76:1c:2e:cd:2a:d7:59:28:77: 4f:a1:b9:48:aa:23:0e:54:1a:bc:fe:f7:27:7f:a6:93:36:a0: 1c:84:b5:85:a1:98:13:8c:f0:ac:2a:97:a1:c0:04:3a:9e:96: 50:59:7b:28:46:8c:96:d3:98:c4:39:b7:79:9b:4f:68:a8:b2: 2a:93:6e:ef:80:22:fe:0e:a7:60:94:f2:35:ed:10:35:96:61: 0f:0a:9f:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CAA+pvb9Rfig+C0o7CyHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YjlkZDllMzRmZTY2ZDc1MTM4OTAzNzA4ZjhjZTFmYmQz NDJkNjQwHhcNMjYwMTI2MDIwMDMyWhcNMjYwMTI3MDIwMDMyWjAzMTEwLwYDVQQD EyhhMDIzMzIxYWEyMGNhZjUzNzQ1NjE2OWZjOWYzY2YyYzdkODc4ODEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OVrmmAVYkG4DBojYwUsM2WrXLB2 +/vzYz5WHM865MR23faMyXgm26FZCvLIROQd2u4McxkGvZsc1T5A4YC1rsJyh/UV fTDLss8gn7BM9/mHMVbntUhrvuh54lTczMkYMXCHEigs0ZvOFhp4wXxVz1g7qxMo Y3ou5ZGZBqwJnMSOnvuw1fUORDrC77XJE+U9tahDpddNtJY1IqbJp+51XVyfsift 9d/ECammCWDQKBYvbjoVRdTGitgUBaoBwN9tPA2INkumc/llNHrieQtTFSyzzo8V Zk+dGG2vqKd3v/BrW4vEa82tt3Az5XiD0gdT5iIhqS6Sk/Stbn2487ZUlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAjMhqiDK9TdFYWn8nzzyx9h4gTMB8GA1UdIwQY MBaAFPS53Z40/mbXUTiQNwj4zh+9NC1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lY2FmNDQtMDhjYy00MWJiLTgxZDMt MjYyYmVjNzE3YjE3LzEvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9lY2FmNDQtMDhjYy00MWJiLTgxZDMtMjYyYmVjNzE3YjE3 LzEvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTKRpeSb pOLbrFzybJUqLSf1mmvi8dJyttEiCC10AbFYRmfCiQCkuASZK++5NBUabKzNWZOg FhOaMlbAUQCCB85qLSkwyqI03ZH3vWvE95AXugsAMYX5FcO25gNeaoy/lj2dQSrg IMzyQa1OL9lMjt+pjvsiRdI1aYLyy99b6IyC2rnfw80SIpx+wD+WJSVJpiDt7Tbz kVrhMbOpjgkaJpgWv7Z7uNT56qo7dhwuzSrXWSh3T6G5SKojDlQavP73J3+mkzag HIS1haGYE4zwrCqXocAEOp6WUFl7KEaMltOYxDm3eZtPaKiyKpNu74Ai/g6nYJTy Ne0QNZZhDwqf4Q== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:35 2026 by rpki-client