This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft File: 9O9duhAKkrJETz5RLQGlksAZUcI.mft (raw, json) Hash identifier: ITNqbE6nkPrgErKS2CuLy9NjB1OFLSZieDOpQXFTk7s= Subject key identifier: 84:9B:03:49:0B:4A:EB:E3:8D:DB:59:01:BF:D8:3A:20:74:67:8D:50 Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2 Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2 Certificate serial: 019BFC1BFDD0DEA6A961FB2B68EB75B90B7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft Manifest number: 0A58 Signing time: Mon 26 Jan 2026 21:00:51 +0000 Manifest this update: Mon 26 Jan 2026 21:00:51 +0000 Manifest next update: Tue 27 Jan 2026 21:00:51 +0000 Files and hashes: 1: 3FkzAPl5dDeXfEEMRSwLpvP5dBw.roa (hash: qThiWbhOm4MVwzcc4QS1C0KW/Cr2nD4QzMpn3VG/nII=) 2: 9O9duhAKkrJETz5RLQGlksAZUcI.crl (hash: ldT7Kc2JdzujGQJj5X2B89v38bm2mxITnvONTEAC+cE=) 3: GvMwO11Qb_MZ3FmpbZFa_YHcQEw.roa (hash: HHH3HBau0CenEM488oLj5N8VnZu9hoi/hHRUfx5gvaA=) 4: vAGwaiC2Bp1wYYYgaEDGo4Uiqpc.roa (hash: kDL6yMpm7SXuYLlIMpKeyi5R+9DyzeTyoxzQraFeyqU=) 5: yXsRkQTNVDsj9z8xG-aM4CEyin8.roa (hash: ts64cc9kwijL/HlxdE2LWSMe9OcM5b1Rlyuz3fR2RTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1b:fd:d0:de:a6:a9:61:fb:2b:68:eb:75:b9:0b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2 Validity Not Before: Jan 26 21:00:51 2026 GMT Not After : Jan 27 21:00:51 2026 GMT Subject: CN=849b03490b4aebe38ddb5901bfd83a2074678d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:53:a0:94:bd:16:df:85:ee:38:cd:be:32:65: f9:c2:9b:61:dd:91:2c:0c:91:d9:1a:32:b2:5e:dc: 2c:b1:a3:11:3f:41:07:12:d0:b7:ff:c2:59:9a:e5: 65:16:70:bf:b1:5f:6b:01:03:87:a8:ca:1c:b5:25: bb:29:4e:d5:36:6a:b7:22:d3:f2:98:37:85:70:fa: 18:69:09:98:1d:6b:d9:40:5d:00:4e:32:66:a2:3e: ab:fb:af:7f:ca:7a:8a:2a:b5:31:56:99:d5:68:bd: f5:eb:c6:3b:26:b3:a8:11:f8:c1:ec:ba:8f:29:a4: 6b:57:c4:be:21:fc:00:9d:60:24:c3:39:42:82:70: 33:c6:c5:d1:89:8b:7e:74:ab:5c:98:20:78:0a:59: b9:ef:0d:0d:70:58:ba:08:f7:63:f4:f8:20:72:b2: ea:41:71:1c:7f:f5:1b:25:54:cf:02:c7:5d:05:17: 6e:87:7b:c4:46:8b:5e:1f:fb:0c:26:3a:07:2d:47: d2:44:71:e6:36:e0:35:d3:36:04:58:f5:ed:74:62: f2:af:7c:d6:5c:d9:bb:45:71:6b:79:8d:58:b8:00: d4:5f:d6:25:f8:bd:17:08:b0:29:f9:85:c7:2d:b7: 7e:d5:fc:97:75:a2:4b:6c:df:84:7d:aa:f4:6b:0f: e3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9B:03:49:0B:4A:EB:E3:8D:DB:59:01:BF:D8:3A:20:74:67:8D:50 X509v3 Authority Key Identifier: keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:f4:aa:e0:45:08:aa:18:e7:e3:83:d6:a5:72:b9:0c:51:ac: 24:6f:d0:b4:2f:c6:31:e1:6d:df:92:77:8e:05:f1:99:af:90: 82:c6:17:bd:e8:f1:89:a4:eb:df:22:99:a8:02:0e:7a:c5:34: 9f:8e:c5:10:23:d1:6e:2c:31:8b:2c:c8:e4:e2:a8:69:dd:2b: 64:f0:92:b2:fd:69:e7:34:7a:99:cc:64:e8:1c:d5:af:4b:9f: 42:27:8a:c5:40:20:26:22:c8:54:fb:c8:7e:30:89:0a:22:2a: e1:7f:b0:86:f9:5f:50:d9:f6:c0:c6:59:1f:60:d3:29:d9:4b: 7f:ae:78:f1:f8:92:37:03:8b:40:95:5c:21:78:96:14:4a:f6: 39:7f:f1:7e:35:f9:7f:28:cd:17:84:ba:d3:ad:75:84:07:83: 56:ab:27:92:0e:43:73:33:a8:61:a8:95:4f:cb:79:9d:12:ff: af:dc:03:f4:8d:5f:a9:63:96:b3:3d:7e:1c:f9:d4:86:dd:69: bf:df:79:f8:21:34:f8:23:44:4b:12:b2:7e:b5:fa:58:24:67: 65:14:c2:57:71:3c:85:41:2d:87:77:d0:09:9b:01:bb:08:c2: 5c:86:5c:b9:2b:26:05:9c:4a:7e:6e:27:15:37:fc:96:36:51: e5:8f:4c:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8G/3Q3qapYfsraOt1uQt/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZWY1ZGJhMTAwYTkyYjI0NDRmM2U1MTJkMDFhNTkyYzAx OTUxYzIwHhcNMjYwMTI2MjEwMDUxWhcNMjYwMTI3MjEwMDUxWjAzMTEwLwYDVQQD Eyg4NDliMDM0OTBiNGFlYmUzOGRkYjU5MDFiZmQ4M2EyMDc0Njc4ZDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlOglL0W34XuOM2+MmX5wpth3ZEs DJHZGjKyXtwssaMRP0EHEtC3/8JZmuVlFnC/sV9rAQOHqMoctSW7KU7VNmq3ItPy mDeFcPoYaQmYHWvZQF0ATjJmoj6r+69/ynqKKrUxVpnVaL3168Y7JrOoEfjB7LqP KaRrV8S+IfwAnWAkwzlCgnAzxsXRiYt+dKtcmCB4Clm57w0NcFi6CPdj9PggcrLq QXEcf/UbJVTPAsddBRduh3vERoteH/sMJjoHLUfSRHHmNuA10zYEWPXtdGLyr3zW XNm7RXFreY1YuADUX9Yl+L0XCLAp+YXHLbd+1fyXdaJLbN+Efar0aw/jRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISbA0kLSuvjjdtZAb/YOiB0Z41QMB8GA1UdIwQY MBaAFPTvXboQCpKyRE8+US0BpZLAGVHCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDct YWQwMjdlOTVjNWM3LzEvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDctYWQwMjdlOTVjNWM3 LzEvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxPSq4EUI qhjn44PWpXK5DFGsJG/QtC/GMeFt35J3jgXxma+QgsYXvejxiaTr3yKZqAIOesU0 n47FECPRbiwxiyzI5OKoad0rZPCSsv1p5zR6mcxk6BzVr0ufQieKxUAgJiLIVPvI fjCJCiIq4X+whvlfUNn2wMZZH2DTKdlLf6548fiSNwOLQJVcIXiWFEr2OX/xfjX5 fyjNF4S60611hAeDVqsnkg5DczOoYaiVT8t5nRL/r9wD9I1fqWOWsz1+HPnUht1p v995+CE0+CNESxKyfrX6WCRnZRTCV3E8hUEth3fQCZsBuwjCXIZcuSsmBZxKfm4n FTf8ljZR5Y9MVQ== -----END CERTIFICATE-----Generated at Mon Jan 26 23:48:32 2026 by rpki-client