This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json) Hash identifier: a5HsySFKER+wY5KBKU812oBcFDsX4hmoCv8jABLzWyc= Subject key identifier: 8B:2C:58:1D:46:9B:75:86:4F:96:2C:FA:DA:7F:4B:5F:BC:06:2A:11 Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86 Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386 Certificate serial: 019BF83F787066AE7FB700562DD861165A53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft Manifest number: 0AE8 Signing time: Mon 26 Jan 2026 03:01:07 +0000 Manifest this update: Mon 26 Jan 2026 03:01:07 +0000 Manifest next update: Tue 27 Jan 2026 03:01:07 +0000 Files and hashes: 1: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: /6oaYcHaFFeoKCiLDssUhTuOvKe/mcLULDYFPYXQ0gA=) 2: QBd5Wpp5kWkoCSM4_95uiC5JDV0.roa (hash: flLVepDAjYfRnttnJvSS11YgDPxXUtJLpwyzAOjne3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:78:70:66:ae:7f:b7:00:56:2d:d8:61:16:5a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386 Validity Not Before: Jan 26 03:01:07 2026 GMT Not After : Jan 27 03:01:07 2026 GMT Subject: CN=8b2c581d469b75864f962cfada7f4b5fbc062a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:92:5c:f7:26:27:73:62:12:fb:74:86:8d:d1: 9d:03:f8:35:7b:6c:0e:81:02:49:2d:e4:49:59:1c: 30:dd:ee:e7:f1:9e:84:c6:35:7f:b8:c2:6a:2e:ce: 6e:44:8c:48:75:6e:10:0d:1a:99:b4:31:d6:ca:52: 8b:14:b3:e1:90:e4:75:92:5e:78:ed:0a:b6:a1:a0: ba:af:a8:44:1a:32:67:a8:d7:49:b3:b7:58:73:9a: 37:6e:fc:b8:37:b2:e0:a2:15:12:92:b4:6e:c4:c2: 69:6b:0e:cf:e4:ac:d6:39:84:dc:7d:0d:d6:71:79: 90:4a:27:8b:ee:57:d7:00:8b:e5:23:b1:dc:53:29: 19:f9:ba:f5:2b:f7:28:22:84:63:8c:d1:f9:42:bd: 3b:39:03:fb:9e:0c:8e:ea:2d:74:0c:43:4b:ab:a5: 5a:18:bc:9b:42:be:d6:1f:54:99:74:34:47:30:59: f8:7f:b2:bd:ae:4b:c6:d8:d9:3e:d1:3b:ea:6a:ff: 6a:60:9c:41:64:31:10:3f:20:35:ad:6b:c8:53:0c: 34:17:ad:3a:d2:8d:5b:3d:cb:7f:01:14:05:d9:8a: 1c:11:e7:2d:60:f4:da:51:a1:f3:56:8e:13:7e:42: fa:8f:26:14:92:6a:4b:bb:6e:ed:18:44:40:58:93: 52:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2C:58:1D:46:9B:75:86:4F:96:2C:FA:DA:7F:4B:5F:BC:06:2A:11 X509v3 Authority Key Identifier: keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:73:7d:b8:1f:e2:ad:a1:e3:c0:d7:95:09:7b:df:06:09:c2: 7c:87:c7:84:df:61:90:f9:af:27:5b:8f:b5:34:e3:c9:f3:45: 4c:0c:0f:ff:c0:c2:c2:9b:f9:b0:a3:e5:c0:f2:c8:9a:90:2f: ef:84:fc:4b:bc:fa:93:80:2b:23:eb:69:b7:f3:7d:a4:9c:17: d0:c0:80:b0:25:2d:dc:2b:60:b1:7a:f9:55:21:86:7d:76:0d: 32:56:fc:cc:1a:d6:3e:c0:60:b8:bf:2c:e3:72:8e:10:62:3e: 57:97:1a:bc:fa:e4:5c:27:94:e6:e0:b7:58:ef:54:6f:83:6a: 23:f9:80:ac:f9:ba:92:94:b1:b2:bd:c3:95:e1:29:dd:aa:29: a9:ba:50:ba:71:71:6f:3a:42:86:b0:1c:f8:b2:0f:32:5b:3d: 9f:bb:73:e7:b1:b4:c5:1e:72:f3:f0:f9:f2:92:0b:61:b9:bb: 57:e0:5d:45:2a:9c:f5:a2:46:7b:1f:d2:16:26:20:46:74:35: 1e:83:36:3d:e6:24:8b:31:bf:b5:8d:78:00:d7:fb:1e:60:b6: d5:13:3d:3a:c6:09:8f:93:cc:7f:81:73:68:99:e7:99:6a:45: 8c:ca:d0:eb:cd:8d:d5:b3:3a:92:2b:39:a6:8f:c7:28:dd:d7: 2f:30:aa:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P3hwZq5/twBWLdhhFlpTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0OWJhOTkxMTRlYmRhYmQ2ZTRjYmQzNmY2Y2Q0NzViMzNj ZjEzODYwHhcNMjYwMTI2MDMwMTA3WhcNMjYwMTI3MDMwMTA3WjAzMTEwLwYDVQQD Eyg4YjJjNTgxZDQ2OWI3NTg2NGY5NjJjZmFkYTdmNGI1ZmJjMDYyYTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJJc9yYnc2IS+3SGjdGdA/g1e2wO gQJJLeRJWRww3e7n8Z6ExjV/uMJqLs5uRIxIdW4QDRqZtDHWylKLFLPhkOR1kl54 7Qq2oaC6r6hEGjJnqNdJs7dYc5o3bvy4N7LgohUSkrRuxMJpaw7P5KzWOYTcfQ3W cXmQSieL7lfXAIvlI7HcUykZ+br1K/coIoRjjNH5Qr07OQP7ngyO6i10DENLq6Va GLybQr7WH1SZdDRHMFn4f7K9rkvG2Nk+0Tvqav9qYJxBZDEQPyA1rWvIUww0F606 0o1bPct/ARQF2YocEectYPTaUaHzVo4TfkL6jyYUkmpLu27tGERAWJNSsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIssWB1Gm3WGT5Ys+tp/S1+8BioRMB8GA1UdIwQY MBaAFPSbqZEU69q9bky9NvbNR1szzxOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUp1cGtSVHIycjF1VEwwMjlzMUhXelBQRTRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82ZTRkYjctNDVhOC00OTkzLWIzODQt OWE2ZWU0ODZlZmY3LzEvOUp1cGtSVHIycjF1VEwwMjlzMUhXelBQRTRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS82ZTRkYjctNDVhOC00OTkzLWIzODQtOWE2ZWU0ODZlZmY3 LzEvOUp1cGtSVHIycjF1VEwwMjlzMUhXelBQRTRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXN9uB/i raHjwNeVCXvfBgnCfIfHhN9hkPmvJ1uPtTTjyfNFTAwP/8DCwpv5sKPlwPLImpAv 74T8S7z6k4ArI+tpt/N9pJwX0MCAsCUt3CtgsXr5VSGGfXYNMlb8zBrWPsBguL8s 43KOEGI+V5cavPrkXCeU5uC3WO9Ub4NqI/mArPm6kpSxsr3DleEp3aopqbpQunFx bzpChrAc+LIPMls9n7tz57G0xR5y8/D58pILYbm7V+BdRSqc9aJGex/SFiYgRnQ1 HoM2PeYkizG/tY14ANf7HmC21RM9OsYJj5PMf4FzaJnnmWpFjMrQ682N1bM6kis5 po/HKN3XLzCqKA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:02 2026 by rpki-client