This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft File: 9aEH8WvGsAt2TDms_WMzY2RtWZY.mft (raw, json) Hash identifier: /7/97Uqvhucn1aBsPzYHumfpKlNw1h+gwqnGWo5kRV0= Subject key identifier: 92:A0:1E:F3:7B:6A:48:6C:30:E7:6F:61:61:6C:B8:3D:A5:22:A7:04 Authority key identifier: F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96 Certificate issuer: /CN=f5a107f16bc6b00b764c39acfd633363646d5996 Certificate serial: 019BF72DA2027D8B4BCDDDF74F35D36B5721 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft Manifest number: 050B Signing time: Sun 25 Jan 2026 22:02:01 +0000 Manifest this update: Sun 25 Jan 2026 22:02:01 +0000 Manifest next update: Mon 26 Jan 2026 22:02:01 +0000 Files and hashes: 1: 9aEH8WvGsAt2TDms_WMzY2RtWZY.crl (hash: JqrM7hu1OSWHs6zwrwF56g+WBCvkGwrVEG1RS7ad70c=) 2: YR9nbJSvjMz22hEhrLxozqfTYpM.roa (hash: gYf5CcRkkh/Fk5/cmxIrFjAzYsJs0D1iQQ35mLjqwnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:a2:02:7d:8b:4b:cd:dd:f7:4f:35:d3:6b:57:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5a107f16bc6b00b764c39acfd633363646d5996 Validity Not Before: Jan 25 22:02:01 2026 GMT Not After : Jan 26 22:02:01 2026 GMT Subject: CN=92a01ef37b6a486c30e76f61616cb83da522a704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ab:7b:05:a8:5b:17:18:fd:34:77:0c:55:59: 44:e0:cb:92:a4:cb:3b:ee:d2:07:bb:6d:c9:18:c4: 1c:95:18:5a:99:f9:eb:cc:4a:31:9c:79:8b:a4:19: bd:67:2b:de:e6:79:77:49:80:81:c0:77:e2:f8:20: 0b:f2:8c:9a:61:f2:8f:27:93:dc:f6:0e:f9:49:55: a1:da:93:80:3d:65:3c:41:2a:aa:dc:eb:3f:7c:f6: 7a:c6:fc:2a:66:99:97:84:1d:26:db:b0:10:ed:4a: f4:e5:3f:3e:f5:ff:15:48:4c:5b:48:20:a6:43:20: 1b:14:44:be:62:90:ba:d1:e9:8b:9d:d0:a8:54:db: b6:65:2a:7d:57:c7:6d:28:e1:d8:5e:21:e6:f9:07: 3d:d3:60:37:ad:3a:7d:ec:9b:99:54:43:60:6a:0c: 37:3b:1e:6d:22:bb:fb:13:55:ce:4d:7e:8d:98:b0: ce:24:21:75:2e:cc:48:0d:75:56:6e:3f:a7:2b:3e: 59:ab:77:fb:31:0d:70:3b:ec:fa:f0:8e:e0:60:46: 2f:fc:b4:de:04:af:75:3a:90:76:e0:65:7c:1d:e0: 68:29:fe:db:a3:44:9b:2a:86:ae:ca:12:6b:29:b3: 5f:dc:cf:87:e4:1c:63:8c:73:e5:32:b1:6e:ea:56: f6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A0:1E:F3:7B:6A:48:6C:30:E7:6F:61:61:6C:B8:3D:A5:22:A7:04 X509v3 Authority Key Identifier: keyid:F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:08:00:16:1b:25:c9:7b:4c:e7:4f:9e:f6:77:71:0a:f4:45: 88:49:4f:7f:03:7e:da:16:16:b7:f0:f7:5e:20:0b:83:27:ed: 6e:ab:55:c5:ac:ee:2a:ed:85:55:70:b9:aa:76:15:07:ee:8a: bd:96:c6:31:50:52:8a:87:73:3f:8b:1a:89:34:b8:b5:69:7e: a6:fb:0f:05:bc:9c:24:28:2a:83:f9:2f:d6:c5:12:1c:c9:24: aa:a2:29:1f:b3:84:cf:0e:a3:df:17:d9:c5:25:f6:df:7e:5a: 0d:76:c0:ad:40:82:73:4b:f6:9c:81:1e:7a:8c:43:55:a6:3d: c4:0c:40:db:d3:c2:c1:7f:f8:ca:f2:74:50:a9:a2:cb:3e:0a: f3:f5:89:f3:37:6e:a7:9c:26:e2:33:04:97:d9:35:17:e4:8b: b2:53:8f:64:a8:87:7d:79:ab:ac:c1:b6:fb:aa:4b:35:fe:09: 3b:0d:26:d4:f5:ce:b3:95:23:52:cb:e3:36:1b:04:47:72:ee: 46:7f:fc:82:09:cf:47:d4:89:8d:fa:9b:52:4c:10:27:4b:19: c2:c1:87:e1:e8:11:53:f0:eb:9c:86:f1:9f:2c:03:2c:db:93: 25:45:01:ce:1e:b2:c2:b0:af:61:df:f3:ed:f0:3a:ce:42:4b: 3f:fe:3f:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LaICfYtLzd33TzXTa1chMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YTEwN2YxNmJjNmIwMGI3NjRjMzlhY2ZkNjMzMzYzNjQ2 ZDU5OTYwHhcNMjYwMTI1MjIwMjAxWhcNMjYwMTI2MjIwMjAxWjAzMTEwLwYDVQQD Eyg5MmEwMWVmMzdiNmE0ODZjMzBlNzZmNjE2MTZjYjgzZGE1MjJhNzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Kt7BahbFxj9NHcMVVlE4MuSpMs7 7tIHu23JGMQclRhamfnrzEoxnHmLpBm9Zyve5nl3SYCBwHfi+CAL8oyaYfKPJ5Pc 9g75SVWh2pOAPWU8QSqq3Os/fPZ6xvwqZpmXhB0m27AQ7Ur05T8+9f8VSExbSCCm QyAbFES+YpC60emLndCoVNu2ZSp9V8dtKOHYXiHm+Qc902A3rTp97JuZVENgagw3 Ox5tIrv7E1XOTX6NmLDOJCF1LsxIDXVWbj+nKz5Zq3f7MQ1wO+z68I7gYEYv/LTe BK91OpB24GV8HeBoKf7bo0SbKoauyhJrKbNf3M+H5BxjjHPlMrFu6lb2awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKgHvN7akhsMOdvYWFsuD2lIqcEMB8GA1UdIwQY MBaAFPWhB/FrxrALdkw5rP1jM2NkbVmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWFFSDhXdkdzQXQyVERtc19XTXpZMlJ0V1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMGJhNWUtNmJiMy00ODU4LThiMmIt OWYxY2ZiOGQxNDI4LzEvOWFFSDhXdkdzQXQyVERtc19XTXpZMlJ0V1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mMGJhNWUtNmJiMy00ODU4LThiMmItOWYxY2ZiOGQxNDI4 LzEvOWFFSDhXdkdzQXQyVERtc19XTXpZMlJ0V1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYggAFhsl yXtM50+e9ndxCvRFiElPfwN+2hYWt/D3XiALgyftbqtVxazuKu2FVXC5qnYVB+6K vZbGMVBSiodzP4saiTS4tWl+pvsPBbycJCgqg/kv1sUSHMkkqqIpH7OEzw6j3xfZ xSX2335aDXbArUCCc0v2nIEeeoxDVaY9xAxA29PCwX/4yvJ0UKmiyz4K8/WJ8zdu p5wm4jMEl9k1F+SLslOPZKiHfXmrrMG2+6pLNf4JOw0m1PXOs5UjUsvjNhsER3Lu Rn/8ggnPR9SJjfqbUkwQJ0sZwsGH4egRU/DrnIbxnywDLNuTJUUBzh6ywrCvYd/z 7fA6zkJLP/4/6w== -----END CERTIFICATE-----Generated at Mon Jan 26 05:09:00 2026 by rpki-client