This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json) Hash identifier: aA7RPA7pelrRkObrjzi5nQ68YAiEeSA8M2CZvXzVMKA= Subject key identifier: 8A:5D:56:EE:88:5D:ED:C4:F6:86:67:BF:9F:B9:47:1A:ED:04:09:5E Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2 Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2 Certificate serial: 019BF87602C2DA9518A37B29617FBD39010C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft Manifest number: 17E8 Signing time: Mon 26 Jan 2026 04:00:42 +0000 Manifest this update: Mon 26 Jan 2026 04:00:42 +0000 Manifest next update: Tue 27 Jan 2026 04:00:42 +0000 Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: Mh0KU2iNOpu8/vu9DROwHU8h0UbTPTrT4FCVY5vdqb8=) 2: dV9_aq3p8K8kgKb1hMk0ifWQtfM.roa (hash: Y2dgJ4DWPL8fkVQXpK7L7O/MdaqkPR462UIcleTQtzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:02:c2:da:95:18:a3:7b:29:61:7f:bd:39:01:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2 Validity Not Before: Jan 26 04:00:42 2026 GMT Not After : Jan 27 04:00:42 2026 GMT Subject: CN=8a5d56ee885dedc4f68667bf9fb9471aed04095e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b3:18:31:b5:3c:4b:c7:96:f2:1b:ad:95:c7: e0:e4:95:1d:48:40:20:16:d6:78:84:ae:39:82:47: fb:4c:29:25:15:08:c9:a8:e8:70:15:c0:d7:75:f7: 72:15:57:82:62:c0:62:18:a9:3a:74:e0:ad:34:52: 8e:2c:64:d4:da:43:16:67:f8:17:73:18:4a:b8:bc: ab:39:c4:35:b2:b3:cd:f5:2a:f1:69:3d:d7:44:7c: 53:62:42:d5:7e:f1:19:d5:4d:a4:b8:8e:2e:81:d8: d0:53:7a:0d:c7:45:57:02:81:6f:bf:2a:3b:43:fb: e0:6c:b0:47:46:5d:44:ae:07:85:5d:ad:73:b5:25: c0:54:d2:81:5c:1b:1c:bb:10:c3:9e:90:8e:50:a6: 3e:9a:3b:6a:01:ca:ea:76:3b:38:a4:b4:3d:5c:42: 12:d3:6c:24:f0:d8:97:8e:29:d0:4a:b8:c0:00:89: ca:d4:36:cb:dd:55:c9:14:30:3f:d6:c4:76:ae:7a: c8:d1:1e:16:cf:31:6e:e2:8f:5a:a0:65:24:78:50: d7:61:ed:18:4e:f6:35:f5:3c:ef:e0:69:fd:57:86: 99:bc:a2:dd:52:8b:c5:5d:c5:42:14:9c:88:0d:25: 7e:c5:7d:a4:c9:2e:be:8e:c5:a1:04:44:95:21:fd: 39:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5D:56:EE:88:5D:ED:C4:F6:86:67:BF:9F:B9:47:1A:ED:04:09:5E X509v3 Authority Key Identifier: keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:64:35:a3:37:2e:85:6b:0d:11:47:63:74:d6:88:ee:bd:85: 35:d5:25:eb:0e:40:b1:f3:2e:32:f1:ab:0a:d4:5f:23:37:76: 8c:a1:aa:f8:fb:e4:eb:19:66:12:a3:4d:57:f5:76:2a:62:b9: 4e:05:c4:a6:f2:52:f8:51:d7:59:a9:07:30:f6:e3:bb:7f:78: 89:c8:55:16:a8:f1:36:09:2f:3b:5b:1e:d1:fd:dc:70:59:c6: 12:9a:b7:d2:66:7c:56:f6:cd:df:96:d4:16:72:61:81:b8:7d: e5:e5:61:75:77:80:be:33:41:29:97:ab:5f:ab:7a:40:38:b4: 48:5e:31:87:8d:02:22:73:d3:32:bb:60:98:9f:61:5e:1f:70: dc:6d:33:25:26:89:59:06:15:ea:68:22:80:91:73:98:aa:bd: 06:73:dc:b0:26:21:a7:9f:b7:0d:2d:88:ce:09:7e:f3:e0:ef: 11:1a:48:79:99:05:bb:73:0d:e1:8a:46:f2:a3:29:76:7a:72: 5b:35:91:48:5a:cc:3b:17:3f:02:54:65:7d:6e:e0:15:c4:ba: db:47:9a:64:44:9b:9e:58:13:95:e2:d1:d3:77:b6:91:8e:0b: 1c:83:fa:f0:0d:7c:16:4d:99:e7:23:86:0b:ed:39:ed:13:d5: 68:ae:b3:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dgLC2pUYo3spYX+9OQEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZDdlNzBjMDA1ZjU1NmE4MjU0ZTdiMTJiMGViM2QzMzE0 ZDQ1ZTIwHhcNMjYwMTI2MDQwMDQyWhcNMjYwMTI3MDQwMDQyWjAzMTEwLwYDVQQD Eyg4YTVkNTZlZTg4NWRlZGM0ZjY4NjY3YmY5ZmI5NDcxYWVkMDQwOTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bMYMbU8S8eW8hutlcfg5JUdSEAg FtZ4hK45gkf7TCklFQjJqOhwFcDXdfdyFVeCYsBiGKk6dOCtNFKOLGTU2kMWZ/gX cxhKuLyrOcQ1srPN9SrxaT3XRHxTYkLVfvEZ1U2kuI4ugdjQU3oNx0VXAoFvvyo7 Q/vgbLBHRl1ErgeFXa1ztSXAVNKBXBscuxDDnpCOUKY+mjtqAcrqdjs4pLQ9XEIS 02wk8NiXjinQSrjAAInK1DbL3VXJFDA/1sR2rnrI0R4WzzFu4o9aoGUkeFDXYe0Y TvY19Tzv4Gn9V4aZvKLdUovFXcVCFJyIDSV+xX2kyS6+jsWhBESVIf05kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpdVu6IXe3E9oZnv5+5RxrtBAleMB8GA1UdIwQY MBaAFAvX5wwAX1VqglTnsSsOs9MxTUXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80Y2ZmZWYtOWE5Ny00NTQ2LWJkZGQt YmIzY2M3Yzk0NGFkLzEvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80Y2ZmZWYtOWE5Ny00NTQ2LWJkZGQtYmIzY2M3Yzk0NGFk LzEvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGQ1ozcu hWsNEUdjdNaI7r2FNdUl6w5AsfMuMvGrCtRfIzd2jKGq+Pvk6xlmEqNNV/V2KmK5 TgXEpvJS+FHXWakHMPbju394ichVFqjxNgkvO1se0f3ccFnGEpq30mZ8VvbN35bU FnJhgbh95eVhdXeAvjNBKZerX6t6QDi0SF4xh40CInPTMrtgmJ9hXh9w3G0zJSaJ WQYV6mgigJFzmKq9BnPcsCYhp5+3DS2Izgl+8+DvERpIeZkFu3MN4YpG8qMpdnpy WzWRSFrMOxc/AlRlfW7gFcS620eaZESbnlgTleLR03e2kY4LHIP68A18Fk2Z5yOG C+057RPVaK6zCA== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:42 2026 by rpki-client