This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json) Hash identifier: mWNfPfB0ddLji1H9hrpbfBKCSzfvm0SHSWgm437iCK8= Subject key identifier: 80:3A:70:22:87:63:7A:64:F9:88:46:B4:AC:A9:C2:07:82:6D:EF:9B Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14 Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14 Certificate serial: 019BF7D21CD13A6657BD2A674D1CD697FAD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft Manifest number: 0FDF Signing time: Mon 26 Jan 2026 01:01:40 +0000 Manifest this update: Mon 26 Jan 2026 01:01:40 +0000 Manifest next update: Tue 27 Jan 2026 01:01:40 +0000 Files and hashes: 1: GrWdLzpEnFrX5dE_lL87GZBWS0Q.roa (hash: De8tMuGB3XCmy/s1ykUZW1VzzkeEHv3PMSHCSrgc7Ts=) 2: Ma_amKjqYIBpQdC-wusEIcHfGU4.roa (hash: SHrfGHQ73qO4QBjlreGJFwjq4iu5HnmL2CcIyBPW32k=) 3: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: a15BR1MZMVUVAxOS43P2Cqm+7zfSrnVIYmzRtKTj8sU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:1c:d1:3a:66:57:bd:2a:67:4d:1c:d6:97:fa:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14 Validity Not Before: Jan 26 01:01:40 2026 GMT Not After : Jan 27 01:01:40 2026 GMT Subject: CN=803a702287637a64f98846b4aca9c207826def9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b4:04:f0:e5:ad:57:8c:f7:aa:8b:27:07:a9: 96:12:85:29:a1:8b:db:a9:85:bf:81:3e:0d:07:fe: a0:1f:f0:7b:4c:17:c3:a3:26:74:e4:7f:5d:6a:cf: 70:76:dc:0c:f4:7e:97:21:5e:77:b9:05:0f:d4:24: a1:e2:52:df:ec:34:f5:0a:7d:27:a6:ac:86:73:d7: 7a:ac:34:99:e5:da:92:0f:e1:c0:af:00:b1:f3:2f: a1:be:1d:ef:ed:54:50:23:1d:41:bd:5c:3f:4b:4a: 0b:a4:fc:dd:2b:c5:5f:c9:44:3f:7e:6e:2b:da:a3: d2:20:5b:31:42:5b:8f:6e:5e:b3:3d:49:d6:52:40: 87:31:db:a6:ee:51:3b:3a:45:7d:23:b4:2f:36:4b: 20:eb:d1:7f:32:e7:e0:4e:ff:0b:ed:03:50:86:13: ef:0e:e1:c8:54:12:da:d4:5b:6b:a4:e0:17:49:9e: 7e:c8:41:c4:db:c5:38:ea:d3:f7:93:53:b4:ff:70: 26:b7:c8:8c:60:86:81:96:af:d9:0f:37:21:40:74: 2e:61:9e:c8:39:e2:d6:50:b5:4c:71:24:5f:24:d6: de:a6:3b:b9:06:dd:31:bd:da:78:1b:3f:44:c9:12: 18:79:6c:7d:f3:a7:3e:bd:e5:22:25:b5:c9:65:2b: 09:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3A:70:22:87:63:7A:64:F9:88:46:B4:AC:A9:C2:07:82:6D:EF:9B X509v3 Authority Key Identifier: keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:82:04:5f:3b:44:e8:aa:71:81:79:f0:50:1f:0c:ce:41:86: a7:61:c4:40:80:7d:a7:2a:3d:44:e8:88:22:9d:61:d3:0e:39: cf:88:dc:ea:00:4c:7d:3b:2c:f4:c2:6c:e8:0e:94:2e:c3:7d: 7e:4e:22:ea:b0:3a:a0:cc:78:95:2b:67:0c:ba:d4:2b:50:98: dc:3f:dd:47:ea:ec:91:2c:a8:ad:38:76:39:04:c9:b0:07:08: c9:67:50:5f:d3:71:51:94:8e:d7:4b:3f:f9:50:48:06:00:d9: e9:5f:f6:fb:d9:96:a0:17:5e:45:c2:4a:cb:93:e6:36:4c:70: 3e:3c:6b:02:24:96:37:75:aa:c2:8e:14:3c:d8:52:d6:aa:db: 0b:24:01:d9:e1:ed:08:8f:88:82:20:1d:e6:72:27:41:58:0a: 74:37:aa:20:fc:70:41:b7:61:67:b9:d4:98:6a:a7:6f:90:1d: 1b:a9:8c:bd:fd:68:9d:88:86:a6:34:bf:7f:93:51:94:2b:e1: 1c:4a:51:8d:75:27:fe:8a:3e:bd:ab:f5:4d:b3:00:eb:aa:eb: 6c:ad:0e:bb:ba:05:2a:a5:18:7e:2b:88:9c:8b:e0:b1:15:cf: 51:c2:20:71:13:64:61:67:c1:5d:c6:d0:e6:05:02:3b:5a:b8: 0b:32:9a:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30hzROmZXvSpnTRzWl/rWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZDQ0NGM4NjRlOWU4NWQzNTM3NmUwZjY4MjgxNzk5ZjYy ODFmMTQwHhcNMjYwMTI2MDEwMTQwWhcNMjYwMTI3MDEwMTQwWjAzMTEwLwYDVQQD Eyg4MDNhNzAyMjg3NjM3YTY0Zjk4ODQ2YjRhY2E5YzIwNzgyNmRlZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLQE8OWtV4z3qosnB6mWEoUpoYvb qYW/gT4NB/6gH/B7TBfDoyZ05H9das9wdtwM9H6XIV53uQUP1CSh4lLf7DT1Cn0n pqyGc9d6rDSZ5dqSD+HArwCx8y+hvh3v7VRQIx1BvVw/S0oLpPzdK8VfyUQ/fm4r 2qPSIFsxQluPbl6zPUnWUkCHMdum7lE7OkV9I7QvNksg69F/MufgTv8L7QNQhhPv DuHIVBLa1FtrpOAXSZ5+yEHE28U46tP3k1O0/3Amt8iMYIaBlq/ZDzchQHQuYZ7I OeLWULVMcSRfJNbepju5Bt0xvdp4Gz9EyRIYeWx986c+veUiJbXJZSsJ+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIA6cCKHY3pk+YhGtKypwgeCbe+bMB8GA1UdIwQY MBaAFEvURMhk6ehdNTduD2goF5n2KB8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80YTBjZGMtZTdmZS00NTBlLTk3ZWMt MjkwOTVhZDFjY2VkLzEvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS80YTBjZGMtZTdmZS00NTBlLTk3ZWMtMjkwOTVhZDFjY2Vk LzEvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIIEXztE 6KpxgXnwUB8MzkGGp2HEQIB9pyo9ROiIIp1h0w45z4jc6gBMfTss9MJs6A6ULsN9 fk4i6rA6oMx4lStnDLrUK1CY3D/dR+rskSyorTh2OQTJsAcIyWdQX9NxUZSO10s/ +VBIBgDZ6V/2+9mWoBdeRcJKy5PmNkxwPjxrAiSWN3Wqwo4UPNhS1qrbCyQB2eHt CI+IgiAd5nInQVgKdDeqIPxwQbdhZ7nUmGqnb5AdG6mMvf1onYiGpjS/f5NRlCvh HEpRjXUn/oo+vav1TbMA66rrbK0Ou7oFKqUYfiuInIvgsRXPUcIgcRNkYWfBXcbQ 5gUCO1q4CzKabQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:54 2026 by rpki-client