This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json) Hash identifier: 0k0MwbTElcBjixZJ7PEUphA8NZzY6jqQmvkcBcx9hC8= Subject key identifier: 46:A3:C7:5D:6E:50:1B:FC:E1:66:24:6A:4A:E2:41:F8:68:26:88:B4 Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Certificate serial: 019BF6BE91F91D3FB20B429E707515194D0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft Manifest number: 17FF Signing time: Sun 25 Jan 2026 20:00:42 +0000 Manifest this update: Sun 25 Jan 2026 20:00:42 +0000 Manifest next update: Mon 26 Jan 2026 20:00:42 +0000 Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=) 2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=) 3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=) 4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=) 5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=) 6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: WWp684N2xBd8CXqPDyXuaBfo6rlKzpUiobXqUG3e+tM=) 7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:91:f9:1d:3f:b2:0b:42:9e:70:75:15:19:4d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Validity Not Before: Jan 25 20:00:42 2026 GMT Not After : Jan 26 20:00:42 2026 GMT Subject: CN=46a3c75d6e501bfce166246a4ae241f8682688b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7d:88:85:d7:db:52:c2:4b:60:11:e1:75:8f: 6e:b1:ad:a0:2f:a5:5f:65:b1:0e:98:b3:6b:72:51: 93:4c:18:79:2c:8e:8d:96:e5:1f:bd:98:0d:8c:d6: 07:49:49:d4:74:aa:94:4e:e4:1e:14:1e:1d:48:42: e9:4a:5d:42:62:58:90:94:3f:99:f9:46:68:89:2c: 55:bb:17:87:87:1d:93:2d:c0:7c:14:4b:82:0b:87: 37:b6:40:1c:84:85:1c:d2:a7:7a:0c:0d:a5:15:0c: cd:b8:f0:1e:d3:6e:4e:e3:06:1f:5e:33:df:29:31: 3f:84:f2:4f:38:02:03:dd:ea:38:3f:2e:a4:89:a0: e3:ef:94:48:67:40:73:27:7f:7f:ab:14:6c:3e:c9: 19:46:e5:27:9e:89:f8:f8:77:57:53:57:99:da:c4: 9b:52:0a:25:eb:ed:89:21:6b:14:64:67:45:a5:77: 7e:b2:e9:04:a1:1b:78:75:28:ab:41:af:ac:16:59: 52:16:d9:97:6b:8a:c1:1a:00:8c:54:c3:1f:97:d9: d8:fd:28:3c:d1:fb:aa:17:bd:79:83:55:51:02:d9: 0b:6d:b8:51:0b:a7:c8:df:9e:0a:47:49:2a:bb:df: 5e:38:bf:a1:07:6d:35:17:77:d5:81:ef:87:2e:94: fc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A3:C7:5D:6E:50:1B:FC:E1:66:24:6A:4A:E2:41:F8:68:26:88:B4 X509v3 Authority Key Identifier: keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:30:66:34:0c:fb:f2:dd:54:b5:49:22:4a:23:ce:ef:44:5f: 10:99:8f:ac:d6:a9:7e:23:7d:61:67:95:28:21:ae:6e:7d:bb: 7e:eb:16:1a:e7:16:70:5c:38:46:c2:2b:5e:31:24:45:8d:3b: f2:31:b6:83:30:20:94:36:7c:3e:26:a4:58:2b:4f:20:ba:65: f9:3c:21:5e:24:b6:19:f9:96:98:07:42:99:15:dd:38:69:d0: c0:77:a4:cf:68:96:35:64:ae:66:09:7f:30:59:5c:01:33:90: fd:36:62:76:0a:0a:e9:69:18:f3:1f:c9:94:c5:68:d2:8f:04: c9:50:2f:2d:cd:1b:7d:74:a6:f7:25:01:b2:9a:6e:50:47:e3: a1:62:9b:a2:31:1c:8a:9e:d7:a1:bf:3a:43:63:28:0c:a9:4a: 83:c3:98:be:ca:21:ae:e2:45:73:b7:eb:e9:f9:1d:ef:0c:b7: 00:a7:ca:c4:db:8f:77:ce:eb:a3:0c:c1:6a:cc:4e:7c:3e:5b: f3:e9:68:7d:4a:09:70:4b:95:36:45:e7:bd:bd:9d:0c:88:da: ce:3e:10:b1:a8:cf:0d:85:4d:e3:0d:9b:1b:39:56:e5:67:8d: f6:e7:23:d5:84:2b:e2:f2:12:55:65:0c:6c:cc:3c:21:9f:34: 14:52:3d:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vpH5HT+yC0KecHUVGU0KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2 ZjcxNWEwHhcNMjYwMTI1MjAwMDQyWhcNMjYwMTI2MjAwMDQyWjAzMTEwLwYDVQQD Eyg0NmEzYzc1ZDZlNTAxYmZjZTE2NjI0NmE0YWUyNDFmODY4MjY4OGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy32IhdfbUsJLYBHhdY9usa2gL6Vf ZbEOmLNrclGTTBh5LI6NluUfvZgNjNYHSUnUdKqUTuQeFB4dSELpSl1CYliQlD+Z +UZoiSxVuxeHhx2TLcB8FEuCC4c3tkAchIUc0qd6DA2lFQzNuPAe025O4wYfXjPf KTE/hPJPOAID3eo4Py6kiaDj75RIZ0BzJ39/qxRsPskZRuUnnon4+HdXU1eZ2sSb Ugol6+2JIWsUZGdFpXd+sukEoRt4dSirQa+sFllSFtmXa4rBGgCMVMMfl9nY/Sg8 0fuqF715g1VRAtkLbbhRC6fI354KR0kqu99eOL+hB201F3fVge+HLpT8EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEajx11uUBv84WYkakriQfhoJoi0MB8GA1UdIwQY MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5 LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTBmNAz7 8t1UtUkiSiPO70RfEJmPrNapfiN9YWeVKCGubn27fusWGucWcFw4RsIrXjEkRY07 8jG2gzAglDZ8PiakWCtPILpl+TwhXiS2GfmWmAdCmRXdOGnQwHekz2iWNWSuZgl/ MFlcATOQ/TZidgoK6WkY8x/JlMVo0o8EyVAvLc0bfXSm9yUBsppuUEfjoWKbojEc ip7Xob86Q2MoDKlKg8OYvsohruJFc7fr6fkd7wy3AKfKxNuPd87rowzBasxOfD5b 8+lofUoJcEuVNkXnvb2dDIjazj4QsajPDYVN4w2bGzlW5WeN9ucj1YQr4vISVWUM bMw8IZ80FFI98Q== -----END CERTIFICATE-----Generated at Mon Jan 26 01:11:34 2026 by rpki-client