This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft File: 9vHFba9wXxLpXUL0d_jgo9hvOZY.mft (raw, json) Hash identifier: JlTHztwMUwq60GO6k7FiwLN+k0hwJc41miZF2mN/2l8= Subject key identifier: 94:ED:9C:E8:DF:00:02:3B:D4:56:EC:6A:F5:E7:FE:14:B1:D0:14:A6 Authority key identifier: F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96 Certificate issuer: /CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996 Certificate serial: 019BF50712D06802890D0D5EE2B08E6A4152 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 12:00:40 +0000 Manifest this update: Sun 25 Jan 2026 12:00:40 +0000 Manifest next update: Mon 26 Jan 2026 12:00:40 +0000 Files and hashes: 1: 9vHFba9wXxLpXUL0d_jgo9hvOZY.crl (hash: X3kMw0ha7vr11glGoj5Y1PkCUIg6YgJ1WnHYZ5BHwWs=) 2: _nZKD9ZTGWn3ixeAqRkUR8-oFdY.roa (hash: E+dKSGK3CToMIv6bsluEab6asnsTgpRJX/4wcKUB3No=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:12:d0:68:02:89:0d:0d:5e:e2:b0:8e:6a:41:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996 Validity Not Before: Jan 25 12:00:40 2026 GMT Not After : Jan 26 12:00:40 2026 GMT Subject: CN=94ed9ce8df00023bd456ec6af5e7fe14b1d014a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:99:ae:e5:2f:c1:86:a7:33:e0:85:43:bb:ea: 6c:59:bc:22:ae:40:63:6d:73:9a:27:d3:99:51:49: 9a:a6:49:d1:24:14:73:13:39:ba:2a:82:96:e9:31: 01:bb:ef:f9:9f:94:35:3f:92:87:63:dc:9f:9c:b7: b7:69:38:c3:cf:4c:84:02:d3:66:70:8e:0d:4e:3a: 18:9e:af:b9:6a:c7:4f:50:f2:76:c4:4e:8c:ba:82: ed:5d:1c:15:61:66:50:d5:d7:a6:52:ff:a1:92:9a: 6d:6b:94:d5:82:fb:e1:77:e4:d4:18:12:d3:53:5d: 8d:d1:90:1d:06:28:c5:42:6b:ce:d8:ee:d3:74:04: e6:3f:5f:f1:4e:da:5e:81:76:4c:8c:9d:6f:ec:e7: 49:80:28:1e:a7:e3:08:f3:4a:16:35:7a:d2:aa:c6: 6b:51:ae:06:4f:be:0f:9b:4a:3b:c9:df:13:34:9d: ef:25:52:5f:36:e5:70:b6:11:54:6e:10:d7:c0:d4: 55:28:6d:df:ad:ca:2d:1c:86:2f:5e:9d:b8:87:82: 21:47:08:5c:ad:c9:d9:32:8e:39:11:65:0c:83:78: 14:bc:34:a2:db:70:2e:d9:1d:ba:ca:07:7b:70:d5: ff:03:06:8a:7d:40:af:e9:9d:6b:77:0c:b0:08:b6: fb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:ED:9C:E8:DF:00:02:3B:D4:56:EC:6A:F5:E7:FE:14:B1:D0:14:A6 X509v3 Authority Key Identifier: keyid:F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f3:2f:e3:23:e4:17:a8:56:41:89:cf:b1:2f:5e:b7:49:b7: eb:be:9f:b1:72:9a:99:6b:3d:18:59:52:1f:ce:90:c3:05:51: 94:df:fe:96:8f:ce:f8:bb:16:21:94:01:aa:a8:9e:51:be:ff: 8d:d5:26:71:59:53:d8:24:9d:3f:59:cd:8f:5e:5e:25:af:9d: 26:e6:a3:22:7d:d0:6c:23:a8:81:0f:d7:3c:e3:2a:d7:44:f0: f3:02:5b:af:c1:32:f9:72:41:97:6f:1a:79:6d:b5:d7:76:24: 4e:31:e7:e5:40:49:20:a5:1f:83:5d:27:84:2c:6c:ca:1f:31: b4:c6:0e:64:d1:50:92:6c:bd:7a:4f:ef:bd:d0:20:16:2a:7f: e9:5d:94:81:f9:aa:17:b2:05:08:c4:a7:26:7f:18:74:b7:d9: 3c:be:12:5b:68:50:b6:06:3a:b8:08:19:8b:12:e7:11:94:96: c8:cf:0c:20:d2:65:b9:34:f4:5d:9a:00:6e:31:58:f3:2b:78: be:a3:e3:89:c3:f2:2d:dc:bc:6c:1e:d7:15:b6:ed:31:e3:ab: 0b:b9:03:1e:de:4f:94:24:37:dc:20:f5:ea:b5:89:69:4d:08: 67:fd:28:04:15:3a:ff:01:1c:28:f3:6b:fc:68:71:71:68:f4: 89:9a:ac:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BxLQaAKJDQ1e4rCOakFSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZjFjNTZkYWY3MDVmMTJlOTVkNDJmNDc3ZjhlMGEzZDg2 ZjM5OTYwHhcNMjYwMTI1MTIwMDQwWhcNMjYwMTI2MTIwMDQwWjAzMTEwLwYDVQQD Eyg5NGVkOWNlOGRmMDAwMjNiZDQ1NmVjNmFmNWU3ZmUxNGIxZDAxNGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Zmu5S/Bhqcz4IVDu+psWbwirkBj bXOaJ9OZUUmapknRJBRzEzm6KoKW6TEBu+/5n5Q1P5KHY9yfnLe3aTjDz0yEAtNm cI4NTjoYnq+5asdPUPJ2xE6MuoLtXRwVYWZQ1demUv+hkppta5TVgvvhd+TUGBLT U12N0ZAdBijFQmvO2O7TdATmP1/xTtpegXZMjJ1v7OdJgCgep+MI80oWNXrSqsZr Ua4GT74Pm0o7yd8TNJ3vJVJfNuVwthFUbhDXwNRVKG3frcotHIYvXp24h4IhRwhc rcnZMo45EWUMg3gUvDSi23Au2R26ygd7cNX/AwaKfUCv6Z1rdwywCLb7NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTtnOjfAAI71FbsavXn/hSx0BSmMB8GA1UdIwQY MBaAFPbxxW2vcF8S6V1C9Hf44KPYbzmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXZIRmJhOXdYeExwWFVMMGRfamdvOWh2T1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9jMjBhZDUtZmRmYy00NDU4LTg1YjEt YmZhY2JiMWExNzdkLzEvOXZIRmJhOXdYeExwWFVMMGRfamdvOWh2T1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9jMjBhZDUtZmRmYy00NDU4LTg1YjEtYmZhY2JiMWExNzdk LzEvOXZIRmJhOXdYeExwWFVMMGRfamdvOWh2T1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/Mv4yPk F6hWQYnPsS9et0m3676fsXKamWs9GFlSH86QwwVRlN/+lo/O+LsWIZQBqqieUb7/ jdUmcVlT2CSdP1nNj15eJa+dJuajIn3QbCOogQ/XPOMq10Tw8wJbr8Ey+XJBl28a eW2113YkTjHn5UBJIKUfg10nhCxsyh8xtMYOZNFQkmy9ek/vvdAgFip/6V2Ugfmq F7IFCMSnJn8YdLfZPL4SW2hQtgY6uAgZixLnEZSWyM8MINJluTT0XZoAbjFY8yt4 vqPjicPyLdy8bB7XFbbtMeOrC7kDHt5PlCQ33CD16rWJaU0IZ/0oBBU6/wEcKPNr /GhxcWj0iZqshg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:45:14 2026 by rpki-client