This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json) Hash identifier: nCX0oZMM1OHsYX0N4SwXDE0l04DTKAeC7jsW4Yp/hC8= Subject key identifier: 2F:B4:A7:0E:9D:EB:FB:BB:79:12:3F:67:BF:0A:1F:2E:B5:1D:06:20 Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Certificate serial: 019BF3F5B31232223043166829392210E070 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft Manifest number: 1002 Signing time: Sun 25 Jan 2026 07:02:04 +0000 Manifest this update: Sun 25 Jan 2026 07:02:04 +0000 Manifest next update: Mon 26 Jan 2026 07:02:04 +0000 Files and hashes: 1: 6JluXjhm_3nHCCaPoS3TfBvKy-U.roa (hash: o1cOjM+O0qiescaG0asYe3SHOLXy9bPb72S0RHPk1N0=) 2: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: MJQUh2a4O1rX6FTUgpRgjrJs9xjmDGRMR9FaHc8HW/Q=) 3: EXPtgF3pZHjNUJl2LJCVZFox4fI.roa (hash: eBmFuREOuZdP3B6dGKEKnHjrjSuhSyhM471vSjq0eBQ=) 4: EtFx9f4oiCywxFykUSR2QjU7eFQ.roa (hash: b2AfdRFwbg0njOLl9hGqSCvFbx4kUQActP2xft37G50=) 5: GDHsmxtHVdYa1bZaIWOH1_OImP0.roa (hash: 7pk8LdfcytaksybidRQnrYPauwLqusCRjPdg0+T84EQ=) 6: M_AsK8xtgHW--enKh1Fv-0yD_GQ.roa (hash: kvJW1SXagKB0pbzliKf7XR3LeE5GTsMSJYvmlREXthM=) 7: QojlrQ9a8Sf-3OscCFSF9lKZeL0.roa (hash: 5zZB8tcLmgJvpKxRcJyw89w0k3VioDwJSjfpHcGceEg=) 8: _DBibvy1y9JoyoGE-bKCjSoDWyc.roa (hash: tHTDVPFwK8Ocp3huDTizupo9HBbejkSKeT8H3qb/iR8=) 9: jFHWQVied9oZQfm4vhIvSC4eiV0.roa (hash: dr0KfgCKcAC1kV4SsWObX5dDQnEh0pKNGg0bXRatP4I=) 10: u21fpxmmOR9mlnHoRxP6iE7HrmQ.roa (hash: UB+VK364X+iu32GdfVjBn8r1mi4BDsfoTepchYMyQUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:b3:12:32:22:30:43:16:68:29:39:22:10:e0:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Validity Not Before: Jan 25 07:02:04 2026 GMT Not After : Jan 26 07:02:04 2026 GMT Subject: CN=2fb4a70e9debfbbb79123f67bf0a1f2eb51d0620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:dc:34:53:96:86:98:15:db:ab:6d:8d:d3:ed: 3d:33:7b:17:aa:3b:82:b2:62:57:4e:4c:63:47:0d: 22:c5:18:12:ee:93:52:b6:4a:78:06:91:7a:05:20: 9f:3d:78:53:9f:b3:70:70:0d:dd:09:53:3a:0b:d8: cc:ba:00:ad:7c:ea:86:68:de:ab:49:66:6a:38:bd: f9:80:04:dd:06:4c:89:70:73:05:ca:26:26:d0:e5: 52:08:e9:0c:30:95:b4:cd:03:6d:b8:23:e2:ee:e3: 59:c7:bc:b3:3d:cd:11:4e:36:61:5e:ca:a4:53:5c: 9e:a8:be:81:96:01:8b:c1:cd:b5:9b:55:e2:40:3b: ca:ec:76:4c:50:fa:d4:18:9a:41:9e:92:52:1c:b0: 3a:c9:36:34:f4:1f:7d:cf:4c:5c:36:d4:5a:38:60: 64:5a:d3:2d:63:84:81:44:6b:cb:46:e8:81:93:ff: f0:c0:b1:cb:e0:fd:75:77:33:10:b6:ce:07:f1:b3: b5:67:45:6b:47:10:9c:d7:43:72:79:b5:b3:40:f2: 4a:35:5d:1e:db:ee:02:35:43:b8:92:9c:ef:11:9c: db:75:36:45:37:ef:a5:e6:86:af:84:69:dd:3c:86: 61:da:c1:3d:64:01:15:a7:eb:f3:52:23:2f:2b:99: b3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B4:A7:0E:9D:EB:FB:BB:79:12:3F:67:BF:0A:1F:2E:B5:1D:06:20 X509v3 Authority Key Identifier: keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:80:ec:8b:d1:d6:d8:bd:a7:6c:5c:5d:63:19:f7:41:33:8a: 89:5e:66:39:a9:18:28:a4:e3:61:d3:61:7d:23:7c:7c:6d:33: ba:df:11:73:a1:8d:c9:3f:02:ea:28:77:7a:cc:1a:3c:f5:b6: c4:8b:11:76:20:cc:ba:9d:0b:b4:a6:ee:d4:d6:3e:5a:b2:31: 95:22:21:72:7e:07:3d:55:4b:5d:1a:46:5f:ea:78:29:a8:d5: 09:e4:9b:c0:d7:4e:3a:09:68:37:55:28:d7:73:da:7b:58:e6: 01:00:8e:e0:e0:f6:19:b9:1b:94:27:e8:ab:35:cf:7f:4a:c3: 90:85:ce:bb:f5:bd:b1:37:fa:bf:48:af:96:7b:83:ff:13:52: 3d:7c:eb:81:c9:16:24:c8:e6:e7:7e:23:b2:e0:87:1f:23:15: 4a:55:93:f6:53:62:65:e8:32:dc:31:b4:37:36:a8:2a:47:3d: 77:74:1c:99:d8:a0:ef:52:0d:f7:3a:76:ba:86:31:87:f2:69: 24:8a:60:14:ed:b4:f0:70:6f:57:59:80:e0:c6:7a:01:c4:00: f9:dd:46:e5:74:e2:bd:8d:23:77:34:e0:87:a4:00:29:67:0d: 34:92:b5:1c:62:14:80:7b:c6:5f:53:c6:4c:ca:bd:d7:7e:9d: 0a:61:ba:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9bMSMiIwQxZoKTkiEOBwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1 ZWI1NmYwHhcNMjYwMTI1MDcwMjA0WhcNMjYwMTI2MDcwMjA0WjAzMTEwLwYDVQQD EygyZmI0YTcwZTlkZWJmYmJiNzkxMjNmNjdiZjBhMWYyZWI1MWQwNjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Nw0U5aGmBXbq22N0+09M3sXqjuC smJXTkxjRw0ixRgS7pNStkp4BpF6BSCfPXhTn7NwcA3dCVM6C9jMugCtfOqGaN6r SWZqOL35gATdBkyJcHMFyiYm0OVSCOkMMJW0zQNtuCPi7uNZx7yzPc0RTjZhXsqk U1yeqL6BlgGLwc21m1XiQDvK7HZMUPrUGJpBnpJSHLA6yTY09B99z0xcNtRaOGBk WtMtY4SBRGvLRuiBk//wwLHL4P11dzMQts4H8bO1Z0VrRxCc10NyebWzQPJKNV0e 2+4CNUO4kpzvEZzbdTZFN++l5oavhGndPIZh2sE9ZAEVp+vzUiMvK5mzMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+0pw6d6/u7eRI/Z78KHy61HQYgMB8GA1UdIwQY MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt MzU2YzRkN2JiNDUyLzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYDsi9HW 2L2nbFxdYxn3QTOKiV5mOakYKKTjYdNhfSN8fG0zut8Rc6GNyT8C6ih3eswaPPW2 xIsRdiDMup0LtKbu1NY+WrIxlSIhcn4HPVVLXRpGX+p4KajVCeSbwNdOOgloN1Uo 13Pae1jmAQCO4OD2GbkblCfoqzXPf0rDkIXOu/W9sTf6v0ivlnuD/xNSPXzrgckW JMjm534jsuCHHyMVSlWT9lNiZegy3DG0NzaoKkc9d3Qcmdig71IN9zp2uoYxh/Jp JIpgFO208HBvV1mA4MZ6AcQA+d1G5XTivY0jdzTgh6QAKWcNNJK1HGIUgHvGX1PG TMq9136dCmG6LQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:31 2026 by rpki-client