This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft File: m9o0FBNxKfo4psYcSWq4thQJzgI.mft (raw, json) Hash identifier: RkfJhiYorzw0bmqxLe5o/TSBhPd8jgY9haISTiBwejU= Subject key identifier: EF:25:C6:7F:16:A2:1A:87:6C:FD:94:4D:5C:9C:02:8D:3A:1A:4E:8F Authority key identifier: 9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02 Certificate issuer: /CN=9bda3414137129fa38a6c61c496ab8b61409ce02 Certificate serial: 019BF6BEA8CA63EFDCF1B78B04C7E98AF7F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 20:00:48 +0000 Manifest this update: Sun 25 Jan 2026 20:00:48 +0000 Manifest next update: Mon 26 Jan 2026 20:00:48 +0000 Files and hashes: 1: m9o0FBNxKfo4psYcSWq4thQJzgI.crl (hash: cBYW/HdhyyV2iRor3nPCU3FCNMINCLqq4tvevXt01Gg=) 2: oNy7iyROhmf7k1QXS1fyOykVhms.roa (hash: 7ICki/NejOefHux3d5CNCzujTTJwY1H52uKM23OBmV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:a8:ca:63:ef:dc:f1:b7:8b:04:c7:e9:8a:f7:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bda3414137129fa38a6c61c496ab8b61409ce02 Validity Not Before: Jan 25 20:00:48 2026 GMT Not After : Jan 26 20:00:48 2026 GMT Subject: CN=ef25c67f16a21a876cfd944d5c9c028d3a1a4e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1e:61:b0:75:16:0b:4a:a5:44:d4:c1:b2:bc: 14:3f:d4:b6:01:8f:48:b0:c7:80:98:4c:af:3e:7e: 77:0c:79:df:da:23:64:6e:9b:57:29:1e:78:d1:ba: 7e:ee:9b:a4:d0:59:b5:de:5f:8c:15:de:7d:20:1c: d7:bf:30:6f:f2:0b:d3:2c:c9:80:88:8f:52:06:dd: 6b:e1:8d:46:16:76:c1:42:b0:41:ee:6c:cc:c4:7d: e9:cd:4f:5a:d4:01:d9:56:98:ca:b6:c0:a1:c1:ac: 75:32:5f:09:b4:0f:34:54:a9:89:0f:65:b4:dc:61: 2e:10:26:cc:be:d2:ca:8a:2b:b0:dc:fe:7c:55:d3: 5c:79:16:77:85:ea:8e:b1:cc:fd:b7:40:fb:c7:2c: 4b:cc:d8:7e:2a:41:4f:ba:b2:9b:df:b8:b2:b2:bd: 5e:9e:7e:db:48:be:65:de:fc:9a:94:c8:b0:34:5e: 48:68:bd:4f:7d:09:26:ea:e4:de:2f:3b:5a:63:04: e2:61:7e:85:41:da:30:5f:f4:a6:5d:f6:e5:01:64: ef:a8:d1:d1:e0:e6:1c:2c:9b:37:5e:b5:7e:9d:ac: 00:f7:b8:ec:cb:89:4d:f5:ef:c4:ab:34:d2:e2:24: ed:77:51:67:42:36:1f:bb:94:83:b4:55:54:a8:e5: 74:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:25:C6:7F:16:A2:1A:87:6C:FD:94:4D:5C:9C:02:8D:3A:1A:4E:8F X509v3 Authority Key Identifier: keyid:9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:11:d8:6e:2f:da:86:bd:dc:ab:56:a5:4b:ff:99:88:28:d8: af:e2:24:71:e5:06:86:d1:59:0d:5f:ae:a8:d8:81:e2:c1:80: 9d:31:87:93:4c:11:ec:3a:a0:6d:1d:13:e8:88:82:fc:98:76: 87:5a:93:52:57:78:18:95:6f:7a:f3:62:d9:40:a0:25:97:32: 82:57:d8:c3:19:23:fa:b7:14:2b:b3:87:de:e5:96:fd:6c:8a: 87:b4:a0:0e:94:6a:bc:c6:16:b4:63:0e:13:46:c8:99:d8:67: 09:0e:a1:ab:65:e7:46:1e:2b:a0:6c:55:e4:e3:a7:41:6c:af: 30:29:25:b6:b5:f9:e0:98:81:7a:57:ac:71:e9:e5:5a:fa:2f: 46:bd:aa:22:3b:4f:d9:ed:f3:dc:00:83:3c:4b:6c:77:2a:ab: 18:2e:25:4c:f3:fa:fb:f4:3c:e8:81:3d:18:63:c3:9f:2e:d6: 5e:92:65:63:43:5c:59:9e:d3:b4:6e:c8:f0:4e:47:54:02:0f: 30:ec:c4:f6:55:97:6f:9e:ec:64:6e:26:0a:35:e3:40:3b:0d: b0:d0:4e:49:44:aa:42:87:5c:26:12:72:47:5e:52:40:5a:d5: c2:29:d5:01:0e:64:de:cb:e7:75:33:9d:58:36:d3:9b:22:ac: c0:e3:41:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vqjKY+/c8beLBMfpivf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZGEzNDE0MTM3MTI5ZmEzOGE2YzYxYzQ5NmFiOGI2MTQw OWNlMDIwHhcNMjYwMTI1MjAwMDQ4WhcNMjYwMTI2MjAwMDQ4WjAzMTEwLwYDVQQD EyhlZjI1YzY3ZjE2YTIxYTg3NmNmZDk0NGQ1YzljMDI4ZDNhMWE0ZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R5hsHUWC0qlRNTBsrwUP9S2AY9I sMeAmEyvPn53DHnf2iNkbptXKR540bp+7puk0Fm13l+MFd59IBzXvzBv8gvTLMmA iI9SBt1r4Y1GFnbBQrBB7mzMxH3pzU9a1AHZVpjKtsChwax1Ml8JtA80VKmJD2W0 3GEuECbMvtLKiiuw3P58VdNceRZ3heqOscz9t0D7xyxLzNh+KkFPurKb37iysr1e nn7bSL5l3vyalMiwNF5IaL1PfQkm6uTeLztaYwTiYX6FQdowX/SmXfblAWTvqNHR 4OYcLJs3XrV+nawA97jsy4lN9e/EqzTS4iTtd1FnQjYfu5SDtFVUqOV0+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8lxn8WohqHbP2UTVycAo06Gk6PMB8GA1UdIwQY MBaAFJvaNBQTcSn6OKbGHElquLYUCc4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTlvMEZCTnhLZm80cHNZY1NXcTR0aFFKemdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yOTk1Y2QtNDY1Zi00YjQwLWE0NTUt MTZkM2NkMzUyZjJlLzEvbTlvMEZCTnhLZm80cHNZY1NXcTR0aFFKemdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yOTk1Y2QtNDY1Zi00YjQwLWE0NTUtMTZkM2NkMzUyZjJl LzEvbTlvMEZCTnhLZm80cHNZY1NXcTR0aFFKemdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRHYbi/a hr3cq1alS/+ZiCjYr+IkceUGhtFZDV+uqNiB4sGAnTGHk0wR7DqgbR0T6IiC/Jh2 h1qTUld4GJVvevNi2UCgJZcyglfYwxkj+rcUK7OH3uWW/WyKh7SgDpRqvMYWtGMO E0bImdhnCQ6hq2XnRh4roGxV5OOnQWyvMCkltrX54JiBelescenlWvovRr2qIjtP 2e3z3ACDPEtsdyqrGC4lTPP6+/Q86IE9GGPDny7WXpJlY0NcWZ7TtG7I8E5HVAIP MOzE9lWXb57sZG4mCjXjQDsNsNBOSUSqQodcJhJyR15SQFrVwinVAQ5k3svndTOd WDbTmyKswONB0g== -----END CERTIFICATE-----Generated at Mon Jan 26 02:14:42 2026 by rpki-client