This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft File: 9_38M32M4OBe9_e3KvJ-thzUcDc.mft (raw, json) Hash identifier: gsmXrVzeJoh7wrO46bpMVRwvEk9yuAKdD5Vn925FIOo= Subject key identifier: CB:68:DE:59:CF:D2:E5:09:8E:26:8B:E7:28:0B:81:8A:AD:18:F6:CA Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37 Certificate issuer: /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037 Certificate serial: 019BF5ABD04203D09FCFED94BF066C009224 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 15:00:36 +0000 Manifest this update: Sun 25 Jan 2026 15:00:36 +0000 Manifest next update: Mon 26 Jan 2026 15:00:36 +0000 Files and hashes: 1: 9_38M32M4OBe9_e3KvJ-thzUcDc.crl (hash: Sj7K5w+GYqwaauTMxWoc61RDFhn0+HIFZyUQ2yL2Rl8=) 2: IRtOc9xNuHtN4zmsWWnKZRqgKMs.roa (hash: jkPYQDPHDAj2YZTZO0wQGRdV29/MSC+GrpeiHVDq/M4=) 3: Jomyc4HWtnITYsIDG8BVeLdHId4.roa (hash: klQBrykZJDAdf4GMS1JWIpprMsc/7rY9pUPlh5dkvXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:d0:42:03:d0:9f:cf:ed:94:bf:06:6c:00:92:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037 Validity Not Before: Jan 25 15:00:36 2026 GMT Not After : Jan 26 15:00:36 2026 GMT Subject: CN=cb68de59cfd2e5098e268be7280b818aad18f6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8f:18:92:6b:7d:a4:3d:c8:40:24:05:9b:18: f9:7f:e2:7a:25:a1:17:e7:82:a1:23:44:c0:cc:de: 15:d4:61:0c:5a:73:d0:e9:03:1e:02:a4:b1:16:52: ec:0d:71:9d:b7:85:4d:b6:3c:84:76:84:78:cf:9a: a9:88:3c:2b:69:c6:45:b2:23:72:7f:dc:6b:c9:2f: 1b:04:ef:91:0e:52:c3:29:ae:8f:d1:ee:96:86:23: fc:1f:49:9d:3a:fc:64:30:ab:25:fe:2b:a6:69:f2: e6:ea:e3:01:58:c0:73:53:43:6d:b6:3e:21:c2:9f: 78:4f:e3:3c:f0:bc:2f:fb:ef:16:d3:c4:89:05:d0: ad:c0:a2:19:e1:6f:b0:48:21:7e:9d:59:4f:4d:bc: 2e:79:8b:5e:75:70:88:fd:1f:a0:89:e3:23:35:69: ef:e3:40:3e:9b:74:25:10:f2:19:8d:97:5c:99:78: 01:9d:04:40:c2:30:6b:c0:d6:78:e2:6f:85:b5:d5: d7:91:61:31:4b:9a:28:33:af:a3:f7:38:93:7a:52: 8d:53:74:97:8f:11:6f:4a:a3:bf:8e:cb:35:11:0c: 3e:d7:01:5c:5e:8f:0e:9a:ff:84:d6:e8:49:1f:0e: fe:d4:ce:04:b3:11:b6:27:05:10:53:6e:4b:6d:ef: cc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:68:DE:59:CF:D2:E5:09:8E:26:8B:E7:28:0B:81:8A:AD:18:F6:CA X509v3 Authority Key Identifier: keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:8e:4d:b3:ea:7a:b6:4c:50:a2:0a:eb:4b:ea:dd:e6:e3:f8: 44:0d:b3:0d:13:83:1d:66:cc:88:98:24:9b:05:bc:95:09:d3: 3a:ed:f7:8c:a4:34:98:55:92:66:7a:0e:ac:94:b0:d3:eb:8e: dd:39:d9:c6:ea:94:a9:09:b8:25:37:b9:4a:46:82:b9:0c:74: 51:3f:1a:6e:d7:a4:99:74:49:e2:6d:70:44:ef:84:bf:b1:e7: 8e:b7:d8:10:5d:4d:e8:65:d7:17:e1:9a:22:54:77:28:7b:25: 9f:60:95:31:b1:8b:f5:ed:88:34:93:2a:6a:63:ee:5d:4f:21: b1:2a:8d:a5:eb:47:1c:f0:82:ab:22:d5:e0:f9:7d:38:8d:a8: 2d:05:2f:db:39:ff:7a:92:a0:fa:c4:7e:ad:f1:88:4e:29:25: a1:ac:26:17:07:c2:fb:e9:7a:fb:ff:f4:00:46:b8:1a:be:2c: 1f:ca:76:38:96:39:d8:97:0e:66:55:64:f1:a2:e8:ec:96:9c: 01:5d:ae:79:6b:33:30:2b:cd:90:00:a5:6e:5d:c3:d3:44:3a: 23:88:44:b1:b1:01:72:4c:24:14:3c:7f:46:b6:a4:b1:f6:b7: a8:b6:4e:31:05:ce:f0:7f:40:69:3d:80:35:1a:3e:ff:16:9f: 7a:85:6c:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q9BCA9Cfz+2UvwZsAJIkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZmRmYzMzN2Q4Y2UwZTA1ZWY3ZjdiNzJhZjI3ZWI2MWNk NDcwMzcwHhcNMjYwMTI1MTUwMDM2WhcNMjYwMTI2MTUwMDM2WjAzMTEwLwYDVQQD EyhjYjY4ZGU1OWNmZDJlNTA5OGUyNjhiZTcyODBiODE4YWFkMThmNmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY8Ykmt9pD3IQCQFmxj5f+J6JaEX 54KhI0TAzN4V1GEMWnPQ6QMeAqSxFlLsDXGdt4VNtjyEdoR4z5qpiDwracZFsiNy f9xryS8bBO+RDlLDKa6P0e6WhiP8H0mdOvxkMKsl/iumafLm6uMBWMBzU0Nttj4h wp94T+M88Lwv++8W08SJBdCtwKIZ4W+wSCF+nVlPTbwueYtedXCI/R+gieMjNWnv 40A+m3QlEPIZjZdcmXgBnQRAwjBrwNZ44m+FtdXXkWExS5ooM6+j9ziTelKNU3SX jxFvSqO/jss1EQw+1wFcXo8Omv+E1uhJHw7+1M4EsxG2JwUQU25Lbe/MaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMto3lnP0uUJjiaL5ygLgYqtGPbKMB8GA1UdIwQY MBaAFPf9/DN9jODgXvf3tyryfrYc1HA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYTA2NmUtOGRjYS00ZDI4LTk0NGIt Zjk1OWQ0ZTFmMjg5LzEvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jYTA2NmUtOGRjYS00ZDI4LTk0NGItZjk1OWQ0ZTFmMjg5 LzEvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQI5Ns+p6 tkxQogrrS+rd5uP4RA2zDRODHWbMiJgkmwW8lQnTOu33jKQ0mFWSZnoOrJSw0+uO 3TnZxuqUqQm4JTe5SkaCuQx0UT8abtekmXRJ4m1wRO+Ev7HnjrfYEF1N6GXXF+Ga IlR3KHsln2CVMbGL9e2INJMqamPuXU8hsSqNpetHHPCCqyLV4Pl9OI2oLQUv2zn/ epKg+sR+rfGITikloawmFwfC++l6+//0AEa4Gr4sH8p2OJY52JcOZlVk8aLo7Jac AV2ueWszMCvNkAClbl3D00Q6I4hEsbEBckwkFDx/Rraksfa3qLZOMQXO8H9AaT2A NRo+/xafeoVsSw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:11:55 2026 by rpki-client