This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft File: 9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft (raw, json) Hash identifier: 1rOBdux6zZTHYQgzUXDrwsWs+vUTWTF0dZ5xsBNoK6E= Subject key identifier: A3:CF:EA:CD:7E:B6:33:69:BD:F4:9C:89:B0:8E:7F:E5:BD:51:C0:95 Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13 Certificate issuer: /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413 Certificate serial: 019BF42BBAA774064CA838C3E898A307F7D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 08:01:04 +0000 Manifest this update: Sun 25 Jan 2026 08:01:04 +0000 Manifest next update: Mon 26 Jan 2026 08:01:04 +0000 Files and hashes: 1: 9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl (hash: p3dvKlFDbtFA1eiWj9NdAD6urzyezqoF2o9d7dPzmqc=) 2: PYWU_RF9KCEHExOcrGZnBOpnB-4.roa (hash: f0fVXG/hovvTJl8KzpzSKb0MupU8bmPJlIET0byULUM=) 3: iPVWn7SaJupNY5vib7S58Yw-EZA.roa (hash: fPFHftYHhWb/RM8qpACz7tOWNLv4QdaQl0/39hYUSJM=) 4: m1AMEfz2rq9UYyTrv-YyIrpi3OE.roa (hash: Gy2fPWkA44bEyqmTq2kzpwyTOHR1dG7Fs+P1u7NBrmQ=) 5: zRYCcQ03Zo7Mtjwf5o0jfcWViDY.roa (hash: hObMfSwMh57HZlCx8OTlbluNMpET5Cy14GAtqwnhGDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:ba:a7:74:06:4c:a8:38:c3:e8:98:a3:07:f7:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413 Validity Not Before: Jan 25 08:01:04 2026 GMT Not After : Jan 26 08:01:04 2026 GMT Subject: CN=a3cfeacd7eb63369bdf49c89b08e7fe5bd51c095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d0:9d:fe:b9:26:8a:5d:eb:68:ee:c0:32:8c: 27:26:2b:78:8e:ae:4a:96:87:f9:0b:e4:97:54:54: 8b:15:9a:29:e4:c3:f8:3b:ef:41:25:3e:78:81:9f: 56:c6:82:e9:86:05:4f:e7:e3:c6:2d:d3:1c:3b:8c: 78:0c:91:3d:05:22:f9:98:a4:e8:92:23:e1:63:7c: 85:3f:24:05:c0:c5:c0:8c:4e:46:be:37:96:e6:2b: 85:56:65:7c:46:c5:73:cb:df:74:76:74:bc:a3:08: ac:74:e2:5f:c0:25:d3:8c:cd:18:8c:74:18:5e:8d: 8d:04:96:58:0a:1e:21:9c:82:8b:3f:2b:fe:2d:b6: c8:fb:ed:ca:3f:6f:cf:f5:2d:53:8d:58:65:db:01: 8a:3c:dc:d5:7e:c0:3b:e9:c0:98:b9:78:f5:fa:9c: 1a:3f:8e:1f:9c:6e:2d:fb:25:87:57:e2:ce:20:e7: ac:ff:ed:3a:ed:6a:1d:18:6e:1e:aa:21:22:7f:45: f5:99:05:32:57:0a:7c:0f:a0:62:70:8f:e0:cd:77: 4d:c6:64:36:64:2c:4e:3c:38:97:3e:30:4c:01:89: 60:f3:c9:be:d2:e8:40:f4:92:06:2a:e8:1d:97:f8: 63:98:36:8d:a0:ec:b3:ea:ce:e5:b5:93:91:68:bb: d9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CF:EA:CD:7E:B6:33:69:BD:F4:9C:89:B0:8E:7F:E5:BD:51:C0:95 X509v3 Authority Key Identifier: keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ba:25:e7:cb:37:7b:72:41:89:47:de:00:c4:21:c4:14:2e: dc:14:1a:39:87:0d:36:c3:e3:7c:2a:de:b4:4a:52:88:91:d0: b3:3a:f3:dc:30:e9:80:2b:54:24:8b:5c:c7:ed:58:c9:a1:ec: 8f:f6:e6:66:5c:d4:4f:c8:e6:fb:b3:a3:2e:f0:7f:eb:6b:85: 66:7a:81:54:c1:66:59:88:f2:15:28:f2:e0:b9:60:2e:58:40: 5b:71:d0:c2:0e:3e:44:ac:3a:64:53:27:42:7e:19:48:3e:03: e0:61:07:52:af:d3:8d:38:ba:49:59:44:56:fd:bb:f5:63:ab: 9a:1a:c4:48:ee:fc:90:d3:9d:69:66:7e:7e:d3:76:b5:cb:b1: 88:7d:d0:c4:74:49:3f:24:9d:0e:ec:e1:2f:7b:57:9a:55:2d: 70:58:b8:52:83:08:b0:1f:d6:c9:17:54:73:15:0e:6b:02:be: 0d:94:78:88:2e:d5:5c:d0:a0:ee:cf:02:7c:f0:f3:b2:46:bc: e4:51:fb:fd:75:11:02:42:92:22:64:ba:b7:e8:10:1c:03:ba: ba:a5:76:a8:92:2c:93:01:45:d4:4f:b7:a9:73:3e:ce:7c:0a: ef:a1:4e:73:2c:33:a4:dd:f2:8b:f0:21:d9:0b:e3:fd:19:5a: 61:4a:70:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K7qndAZMqDjD6JijB/fYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MGJhZTYwOTcwYTJkZmM4NmRkNjA3YzViOTE1YWQ1YzUz NGI0MTMwHhcNMjYwMTI1MDgwMTA0WhcNMjYwMTI2MDgwMTA0WjAzMTEwLwYDVQQD EyhhM2NmZWFjZDdlYjYzMzY5YmRmNDljODliMDhlN2ZlNWJkNTFjMDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNCd/rkmil3raO7AMownJit4jq5K lof5C+SXVFSLFZop5MP4O+9BJT54gZ9WxoLphgVP5+PGLdMcO4x4DJE9BSL5mKTo kiPhY3yFPyQFwMXAjE5GvjeW5iuFVmV8RsVzy990dnS8owisdOJfwCXTjM0YjHQY Xo2NBJZYCh4hnIKLPyv+LbbI++3KP2/P9S1TjVhl2wGKPNzVfsA76cCYuXj1+pwa P44fnG4t+yWHV+LOIOes/+067WodGG4eqiEif0X1mQUyVwp8D6BicI/gzXdNxmQ2 ZCxOPDiXPjBMAYlg88m+0uhA9JIGKugdl/hjmDaNoOyz6s7ltZORaLvZ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPP6s1+tjNpvfScibCOf+W9UcCVMB8GA1UdIwQY MBaAFPULrmCXCi38ht1gfFuRWtXFNLQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVF1dVlKY0tMZnlHM1dCOFc1RmExY1UwdEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9mNzFkY2ItOWU5Mi00NGU3LWIwNDIt MzY2NTA2N2RiMjU2LzEvOVF1dVlKY0tMZnlHM1dCOFc1RmExY1UwdEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9mNzFkY2ItOWU5Mi00NGU3LWIwNDItMzY2NTA2N2RiMjU2 LzEvOVF1dVlKY0tMZnlHM1dCOFc1RmExY1UwdEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7ol58s3 e3JBiUfeAMQhxBQu3BQaOYcNNsPjfCretEpSiJHQszrz3DDpgCtUJItcx+1YyaHs j/bmZlzUT8jm+7OjLvB/62uFZnqBVMFmWYjyFSjy4LlgLlhAW3HQwg4+RKw6ZFMn Qn4ZSD4D4GEHUq/TjTi6SVlEVv279WOrmhrESO78kNOdaWZ+ftN2tcuxiH3QxHRJ PySdDuzhL3tXmlUtcFi4UoMIsB/WyRdUcxUOawK+DZR4iC7VXNCg7s8CfPDzska8 5FH7/XURAkKSImS6t+gQHAO6uqV2qJIskwFF1E+3qXM+znwK76FOcywzpN3yi/Ah 2Qvj/RlaYUpwXg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:26 2026 by rpki-client