This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json) Hash identifier: MRHVNOTzQjGwlEDuIPuh9N1EGNtBcK4qMAwv/lyLEj0= Subject key identifier: 9B:6D:A6:9C:D5:B4:3D:14:CD:EC:49:33:42:4D:6B:44:6C:72:0F:B0 Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19 Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519 Certificate serial: 019BF8E4404F3E4BBEEB24E89EF2DDFFE848 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft Manifest number: 17F7 Signing time: Mon 26 Jan 2026 06:01:06 +0000 Manifest this update: Mon 26 Jan 2026 06:01:06 +0000 Manifest next update: Tue 27 Jan 2026 06:01:06 +0000 Files and hashes: 1: D7Zsy3_mNU8-Rm51FRQcQWy9iSc.roa (hash: kXrPaU3rwx6WqBxRjuiwz4FcrTzXvZxG60BJrqQyazs=) 2: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: lI561L5f3sPZcBcjyU6MmxUfW5er/EmmOPJW9AMWu5w=) 3: kPNoJ23SEMgM36-Kve6SFHJ4YQc.roa (hash: 30xbJhQ1SB3jxREvAyTeR9kTXJRiZHorpyWtjMtAYcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:40:4f:3e:4b:be:eb:24:e8:9e:f2:dd:ff:e8:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519 Validity Not Before: Jan 26 06:01:06 2026 GMT Not After : Jan 27 06:01:06 2026 GMT Subject: CN=9b6da69cd5b43d14cdec4933424d6b446c720fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:87:5f:1f:da:14:8a:aa:6e:1a:f7:ce:c8: d0:18:95:96:70:54:d4:9c:9b:7c:d8:ab:99:42:d2: 9b:a2:60:c7:60:22:aa:c2:01:00:c7:9d:ab:9f:8e: f0:0a:ac:f1:ca:b4:df:18:9a:d9:e2:91:fb:8d:21: f4:29:c1:70:6a:b4:48:11:30:11:bb:64:8c:46:30: f6:49:80:11:ba:3a:ec:b1:1d:77:48:f4:98:3f:92: 88:6d:f3:b3:2c:4f:7f:b7:4c:4b:9c:d9:e5:18:fd: 24:16:d2:bc:a1:36:0a:4c:49:32:77:e2:5b:33:fb: c2:71:f4:8e:7e:76:f2:52:b0:aa:9e:bd:82:a4:29: ec:ed:23:e8:c0:65:52:fb:58:54:a3:9a:20:b7:b3: fd:cd:7b:7b:82:ee:11:1a:76:5a:38:05:0e:09:d4: f3:7f:9b:5c:e6:b6:43:f5:ab:de:7a:6e:ee:46:1c: f9:29:0a:8e:0c:73:6d:d0:92:33:04:3a:aa:a5:b1: 24:43:13:25:fa:f4:b9:4b:c8:7a:a2:07:fd:e8:98: 7d:e7:c9:a8:fb:70:06:6c:c8:78:2f:99:a3:7e:c5: e1:45:38:f2:b8:f7:6f:0d:0d:c9:b2:9b:fa:d8:2c: bb:bd:41:b6:dc:e1:63:ec:0b:04:7b:2c:d3:48:2b: 47:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:6D:A6:9C:D5:B4:3D:14:CD:EC:49:33:42:4D:6B:44:6C:72:0F:B0 X509v3 Authority Key Identifier: keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:5e:4a:68:b2:c2:2a:1b:8f:b5:7e:8d:f9:13:0b:0b:d5:39: fe:9b:7b:02:a0:18:22:cd:cb:55:87:b4:af:fc:65:76:7e:07: dc:03:71:45:36:f7:a0:7d:78:35:86:7e:bd:ee:eb:04:a6:23: 64:4f:52:c8:8c:f0:38:80:61:c1:16:04:9b:f6:0b:05:13:ea: 42:49:f4:37:35:48:c0:68:fa:53:ad:53:1c:46:0e:0e:38:c2: 94:94:2f:bb:57:75:c0:5f:cb:93:8c:31:ff:bf:4b:8c:bc:61: e8:2f:31:4a:ab:c9:19:54:74:dd:a9:6c:5a:8d:46:35:96:5d: 03:1a:2d:bb:a3:c1:b0:46:5d:0c:d3:93:16:07:3f:e4:99:c5: 83:90:64:4e:7b:ea:09:89:d5:ac:08:0d:73:c9:b8:ea:4c:17: 7d:06:2a:b5:79:e0:b2:70:ff:2a:46:81:49:16:3a:92:07:17: 56:ab:72:44:6c:cd:1e:c2:a2:61:db:e8:02:8a:2c:25:6b:62: 8c:56:ec:a6:1b:ce:22:cd:09:fa:02:a4:ad:e7:59:e8:70:d4: 7b:3c:8e:8d:b6:9b:f6:39:f3:2f:59:04:2c:66:e9:a2:4a:80: d1:fd:fa:05:8e:2a:0d:eb:e3:16:87:9f:ca:09:08:9b:7f:ba: 50:3c:55:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45EBPPku+6yTonvLd/+hIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZjllMzJmZjZhZjNkNWU1ZDc3YmRiYjk4ZGEzN2QwYjhl NDQ1MTkwHhcNMjYwMTI2MDYwMTA2WhcNMjYwMTI3MDYwMTA2WjAzMTEwLwYDVQQD Eyg5YjZkYTY5Y2Q1YjQzZDE0Y2RlYzQ5MzM0MjRkNmI0NDZjNzIwZmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCiHXx/aFIqqbhr3zsjQGJWWcFTU nJt82KuZQtKbomDHYCKqwgEAx52rn47wCqzxyrTfGJrZ4pH7jSH0KcFwarRIETAR u2SMRjD2SYARujrssR13SPSYP5KIbfOzLE9/t0xLnNnlGP0kFtK8oTYKTEkyd+Jb M/vCcfSOfnbyUrCqnr2CpCns7SPowGVS+1hUo5ogt7P9zXt7gu4RGnZaOAUOCdTz f5tc5rZD9aveem7uRhz5KQqODHNt0JIzBDqqpbEkQxMl+vS5S8h6ogf96Jh958mo +3AGbMh4L5mjfsXhRTjyuPdvDQ3Jspv62Cy7vUG23OFj7AsEeyzTSCtHPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJttppzVtD0UzexJM0JNa0Rscg+wMB8GA1UdIwQY MBaAFEX54y/2rz1eXXe9u5jaN9C45EUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85ZGVmMDgtNzU1Mi00YjVhLTk2NmYt OGVlMGExMmEzNTliLzEvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC85ZGVmMDgtNzU1Mi00YjVhLTk2NmYtOGVlMGExMmEzNTli LzEvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABl5KaLLC KhuPtX6N+RMLC9U5/pt7AqAYIs3LVYe0r/xldn4H3ANxRTb3oH14NYZ+ve7rBKYj ZE9SyIzwOIBhwRYEm/YLBRPqQkn0NzVIwGj6U61THEYODjjClJQvu1d1wF/Lk4wx /79LjLxh6C8xSqvJGVR03alsWo1GNZZdAxotu6PBsEZdDNOTFgc/5JnFg5BkTnvq CYnVrAgNc8m46kwXfQYqtXngsnD/KkaBSRY6kgcXVqtyRGzNHsKiYdvoAoosJWti jFbsphvOIs0J+gKkredZ6HDUezyOjbab9jnzL1kELGbpokqA0f36BY4qDevjFoef ygkIm3+6UDxVzQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:43 2026 by rpki-client