This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft File: A9yMYjke_dTdGORoGeF3gAKpoYc.mft (raw, json) Hash identifier: xjX9+R0iG+/s0X2nkIyAkh2AqYTNDtmPCNY/2dp9ISs= Subject key identifier: 32:7B:11:19:BF:79:2B:CD:B3:3F:5D:33:46:DA:D1:F4:51:22:27:E3 Authority key identifier: 03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87 Certificate issuer: /CN=03dc8c62391efdd4dd18e46819e1778002a9a187 Certificate serial: 019BF61A3A1DFEE5F47A2F423E32B6F72F07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft Manifest number: 05A8 Signing time: Sun 25 Jan 2026 17:01:12 +0000 Manifest this update: Sun 25 Jan 2026 17:01:12 +0000 Manifest next update: Mon 26 Jan 2026 17:01:12 +0000 Files and hashes: 1: 1-eoC_GN2YbYe4XqCQ3dQUDWLMGU.roa (hash: CCW99WT+qJ1fktgS1Nv1Xts5RljXDXbC1tmqj4HW2vI=) 2: A9yMYjke_dTdGORoGeF3gAKpoYc.crl (hash: qMynjaCePEUn86aALSbLQhCknIegU5JYwYnc4d6HPdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:3a:1d:fe:e5:f4:7a:2f:42:3e:32:b6:f7:2f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03dc8c62391efdd4dd18e46819e1778002a9a187 Validity Not Before: Jan 25 17:01:12 2026 GMT Not After : Jan 26 17:01:12 2026 GMT Subject: CN=327b1119bf792bcdb33f5d3346dad1f4512227e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f0:1a:10:8b:d3:00:d7:da:36:fd:8c:21:ab: 3e:d7:de:17:2a:26:47:1e:d6:3e:8e:67:b6:b4:a3: 99:7c:9e:3c:fc:7e:72:ee:88:77:27:37:2a:14:bb: 3a:28:93:40:3e:f7:7b:5f:6c:78:88:f7:6a:26:13: be:9f:1d:c5:95:16:1d:3a:56:d2:8e:07:cf:09:be: 68:20:e4:9b:85:e2:2f:c4:cd:78:b9:f7:54:d6:1b: ee:9f:21:b6:c2:09:73:9d:d9:e6:ce:f5:43:5f:00: e3:e4:bb:65:47:92:d2:36:96:2e:0c:cc:9f:fc:f8: 21:2c:5a:07:1b:4d:dc:c4:8d:6d:e3:96:ab:21:a2: 40:bb:3c:35:63:2f:41:d5:81:5a:d3:d5:ff:44:06: ae:71:4a:65:77:5f:18:79:2b:b8:ee:94:61:48:92: 1e:50:e8:72:4f:ec:8b:a4:f2:20:77:d8:40:d8:49: a9:bf:79:fa:b3:b8:e5:07:9a:1f:a1:80:bc:c5:cc: bf:29:ec:0d:90:86:09:a9:bf:7e:ee:3f:32:b1:c4: 7b:92:6f:e0:16:18:c7:c8:66:88:b4:c6:2c:75:01: 38:ff:35:f6:60:11:ee:cc:4f:7e:ef:8c:6b:23:3c: 31:40:d1:f5:86:be:cb:6e:a5:32:c5:63:85:cb:f9: 29:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7B:11:19:BF:79:2B:CD:B3:3F:5D:33:46:DA:D1:F4:51:22:27:E3 X509v3 Authority Key Identifier: keyid:03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:b6:52:e8:a1:a1:ff:f3:4a:96:43:c0:9b:5a:35:21:c8:ea: 9d:3d:57:9f:c1:37:03:b1:c4:2b:a0:b3:04:d8:c7:1f:bc:85: ba:d7:f9:26:2b:62:3f:59:d3:04:1f:e1:f5:3a:dc:7c:c9:ff: 64:0f:38:ba:49:f5:37:6f:cb:a9:c9:d8:1f:32:78:6d:55:c9: 38:ce:8d:7a:2b:64:21:d9:79:54:77:e2:3b:da:fa:43:7c:93: 3e:3e:96:02:a0:6e:47:22:86:3e:c1:0e:41:6c:2e:47:40:27: 46:8d:98:57:0b:2e:52:bf:59:73:73:c1:48:45:53:f8:e0:bf: 68:2e:14:2c:a0:42:f5:29:30:b7:c1:ec:5d:d5:5e:6e:ce:f2: ec:40:9b:8b:fc:75:49:47:0d:25:3e:6b:66:cd:66:e5:44:d3: ab:78:4a:ef:6c:7b:28:3d:51:f6:7d:8d:d1:b8:5b:a6:fe:d2: 71:ae:dd:49:55:b6:ce:fd:26:eb:14:85:6d:2e:d9:ee:3d:90: f5:bc:52:ef:5a:48:f6:c3:72:e7:64:9e:6a:75:c8:c8:e1:8b: 09:0e:e1:0e:c6:ff:01:a6:2d:54:05:5c:2e:a5:34:47:06:31: 2f:ee:64:b5:c1:9a:f6:1f:73:57:d5:92:ff:36:49:f5:65:61: 7c:57:9f:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gjod/uX0ei9CPjK29y8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZGM4YzYyMzkxZWZkZDRkZDE4ZTQ2ODE5ZTE3NzgwMDJh OWExODcwHhcNMjYwMTI1MTcwMTEyWhcNMjYwMTI2MTcwMTEyWjAzMTEwLwYDVQQD EygzMjdiMTExOWJmNzkyYmNkYjMzZjVkMzM0NmRhZDFmNDUxMjIyN2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/AaEIvTANfaNv2MIas+194XKiZH HtY+jme2tKOZfJ48/H5y7oh3JzcqFLs6KJNAPvd7X2x4iPdqJhO+nx3FlRYdOlbS jgfPCb5oIOSbheIvxM14ufdU1hvunyG2wglzndnmzvVDXwDj5LtlR5LSNpYuDMyf /PghLFoHG03cxI1t45arIaJAuzw1Yy9B1YFa09X/RAaucUpld18YeSu47pRhSJIe UOhyT+yLpPIgd9hA2Empv3n6s7jlB5ofoYC8xcy/KewNkIYJqb9+7j8yscR7km/g FhjHyGaItMYsdQE4/zX2YBHuzE9+74xrIzwxQNH1hr7LbqUyxWOFy/kpHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJ7ERm/eSvNsz9dM0ba0fRRIifjMB8GA1UdIwQY MBaAFAPcjGI5Hv3U3RjkaBnhd4ACqaGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTl5TVlqa2VfZFRkR09Sb0dlRjNnQUtwb1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kMDgwYzctY2VlNi00YjQxLThjMWMt MGVmOGMwMzZiNjE2LzEvQTl5TVlqa2VfZFRkR09Sb0dlRjNnQUtwb1ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9kMDgwYzctY2VlNi00YjQxLThjMWMtMGVmOGMwMzZiNjE2 LzEvQTl5TVlqa2VfZFRkR09Sb0dlRjNnQUtwb1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs7ZS6KGh //NKlkPAm1o1IcjqnT1Xn8E3A7HEK6CzBNjHH7yFutf5JitiP1nTBB/h9TrcfMn/ ZA84ukn1N2/LqcnYHzJ4bVXJOM6NeitkIdl5VHfiO9r6Q3yTPj6WAqBuRyKGPsEO QWwuR0AnRo2YVwsuUr9Zc3PBSEVT+OC/aC4ULKBC9Skwt8HsXdVebs7y7ECbi/x1 SUcNJT5rZs1m5UTTq3hK72x7KD1R9n2N0bhbpv7Sca7dSVW2zv0m6xSFbS7Z7j2Q 9bxS71pI9sNy52SeanXIyOGLCQ7hDsb/AaYtVAVcLqU0RwYxL+5ktcGa9h9zV9WS /zZJ9WVhfFefTw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:17 2026 by rpki-client