This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json) Hash identifier: fODKcJBnbY82m4uFOJPQcbcCdAt83z/4zEij3Ohb//M= Subject key identifier: B7:33:1C:18:AC:7E:C6:0B:55:3B:62:B1:4F:C0:F2:D8:22:35:E5:8E Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9 Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9 Certificate serial: 019BF6BE9913DF65BB62C252B0D9D1010A0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 20:00:44 +0000 Manifest this update: Sun 25 Jan 2026 20:00:44 +0000 Manifest next update: Mon 26 Jan 2026 20:00:44 +0000 Files and hashes: 1: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: en/Yf048wLA3ryjpbFxFzpk+9QoKztHjAzbEeOV9jhA=) 2: EUgLAWtAQkj2b81EVNaYNI21B8Q.roa (hash: YH1yRF3btNqvfXvDOf+ohxslhwH0GDsrS4U4ZZBSNxE=) 3: PEehES5SpZnr6s-nLTRBCvh0KiA.roa (hash: KLNyhN+bpOs8kGrk8EPysrLFKdZzU9fW9CEvBaXVGAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:99:13:df:65:bb:62:c2:52:b0:d9:d1:01:0a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9 Validity Not Before: Jan 25 20:00:44 2026 GMT Not After : Jan 26 20:00:44 2026 GMT Subject: CN=b7331c18ac7ec60b553b62b14fc0f2d82235e58e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e0:d6:a2:07:96:5b:19:6a:21:6a:2a:75:d1: d0:b0:3d:ca:fa:97:a1:47:de:1e:78:a6:ac:3e:5f: d8:ce:4b:c4:75:4b:73:87:47:70:b2:2a:2b:e2:12: ad:56:0d:76:7e:c1:f7:03:e0:a6:82:36:8f:22:8c: 51:d8:7c:55:61:21:ff:68:28:64:f3:4b:74:f1:c0: 3b:2f:7e:b1:6c:13:7b:c0:74:91:8a:ea:9a:e8:1e: 94:b9:80:b9:97:f9:14:6f:42:ea:e0:37:c6:94:15: 8f:1c:f1:33:b9:05:43:aa:17:29:c9:30:fb:4e:cf: ca:53:9a:2d:05:38:bf:62:da:db:fb:f3:85:41:5d: 46:f9:21:ff:84:91:9e:a0:56:3c:b1:84:3e:5e:88: e1:ba:20:07:1e:d9:0d:b8:75:49:5e:5b:0c:fa:3d: 0a:24:93:05:65:d9:f3:af:40:ea:97:48:cd:34:4c: ec:52:c6:9d:da:90:b7:21:ac:9b:9b:56:d2:2f:1f: 06:11:45:fa:56:25:67:17:1f:ea:11:bf:fe:55:29: af:15:79:b0:c2:10:fe:61:b7:2f:f8:11:dc:e3:2e: 8c:a4:63:0e:12:df:52:3e:e5:2c:c9:9e:55:6c:08: e4:36:7b:ee:cc:4a:b0:d3:40:39:12:67:73:3e:f3: 15:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:33:1C:18:AC:7E:C6:0B:55:3B:62:B1:4F:C0:F2:D8:22:35:E5:8E X509v3 Authority Key Identifier: keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:33:e5:f9:47:e5:1d:f5:09:de:a7:dd:9d:f7:e0:21:80:74: f3:4e:e3:98:62:4f:62:39:77:5a:6f:ea:c1:fd:1b:db:5f:06: 32:e6:f2:c9:d2:c5:70:84:6e:3b:74:53:a1:75:70:5b:3b:1c: 65:db:34:6b:4c:74:e5:09:ec:df:42:ae:43:48:21:9e:47:71: ab:20:50:d5:16:2b:b5:f9:51:3b:13:cf:0b:e2:9d:03:7c:3e: 38:af:12:23:c9:34:ad:a6:00:b8:03:ed:76:a2:11:3f:bc:15: d7:63:86:52:3f:7e:d5:66:f3:95:78:b1:4b:81:5c:3f:65:95: ae:ee:35:25:12:65:ab:be:dc:1b:15:d7:06:56:31:ba:44:05: 0a:39:41:ff:5b:82:e6:d6:60:67:38:c6:53:a0:b0:ab:28:5b: dd:dd:45:87:61:17:d3:cd:00:e4:43:58:0a:c7:ba:8c:c7:a3: 96:de:56:b5:41:af:3f:a1:42:ff:b8:0c:11:06:47:c5:d2:41: 17:64:25:ae:33:a3:bb:d9:48:56:08:6f:a8:a2:75:da:42:fc: 1f:ec:55:3d:2d:c6:7b:c6:3d:55:59:df:81:2a:db:56:cd:ff: dc:b0:98:84:d4:85:96:f4:64:a8:ae:9f:fa:41:87:9d:12:d9: c2:5f:32:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vpkT32W7YsJSsNnRAQoOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NmIyMDQ5YjNhOWFhNmYyMzY4ZTZlZWI0YmZjZDE2Nzk1 M2E1ZTkwHhcNMjYwMTI1MjAwMDQ0WhcNMjYwMTI2MjAwMDQ0WjAzMTEwLwYDVQQD EyhiNzMzMWMxOGFjN2VjNjBiNTUzYjYyYjE0ZmMwZjJkODIyMzVlNThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkODWogeWWxlqIWoqddHQsD3K+peh R94eeKasPl/YzkvEdUtzh0dwsior4hKtVg12fsH3A+CmgjaPIoxR2HxVYSH/aChk 80t08cA7L36xbBN7wHSRiuqa6B6UuYC5l/kUb0Lq4DfGlBWPHPEzuQVDqhcpyTD7 Ts/KU5otBTi/Ytrb+/OFQV1G+SH/hJGeoFY8sYQ+XojhuiAHHtkNuHVJXlsM+j0K JJMFZdnzr0Dql0jNNEzsUsad2pC3Iaybm1bSLx8GEUX6ViVnFx/qEb/+VSmvFXmw whD+Ybcv+BHc4y6MpGMOEt9SPuUsyZ5VbAjkNnvuzEqw00A5EmdzPvMVmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLczHBisfsYLVTtisU/A8tgiNeWOMB8GA1UdIwQY MBaAFPVrIEmzqapvI2jm7rS/zRZ5U6XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEt MjQwMWI3NDIwNmYzLzEvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEtMjQwMWI3NDIwNmYz LzEvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTPl+Ufl HfUJ3qfdnffgIYB0807jmGJPYjl3Wm/qwf0b218GMubyydLFcIRuO3RToXVwWzsc Zds0a0x05Qns30KuQ0ghnkdxqyBQ1RYrtflROxPPC+KdA3w+OK8SI8k0raYAuAPt dqIRP7wV12OGUj9+1WbzlXixS4FcP2WVru41JRJlq77cGxXXBlYxukQFCjlB/1uC 5tZgZzjGU6Cwqyhb3d1Fh2EX080A5ENYCse6jMejlt5WtUGvP6FC/7gMEQZHxdJB F2QlrjOju9lIVghvqKJ12kL8H+xVPS3Ge8Y9VVnfgSrbVs3/3LCYhNSFlvRkqK6f +kGHnRLZwl8yvA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:04 2026 by rpki-client