This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json) Hash identifier: CUEtQ0xspq29fTEICA8DfsKZarqOzVne+MXt2Z5YPfY= Subject key identifier: C1:E3:3B:9D:BB:9A:92:22:49:28:42:D1:76:F5:3E:64:1A:9C:A3:01 Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43 Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043 Certificate serial: 019BF4D07F31717D9F946CBA74EEEC54D0C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft Manifest number: 17E6 Signing time: Sun 25 Jan 2026 11:01:03 +0000 Manifest this update: Sun 25 Jan 2026 11:01:03 +0000 Manifest next update: Mon 26 Jan 2026 11:01:03 +0000 Files and hashes: 1: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: BG+PczDVNQDZuoGoyRU+8I6lKx91QH/76H+RNA35GKs=) 2: d2tSXbQmgx_5joDSWcoPnabG6ts.roa (hash: OeDG3n8yLp+p4vWMH9BV363xFOTnKrmVdLEjiUivNwQ=) 3: ni2pJYsgjdd_PvsJim4HSq8So90.roa (hash: oeFgA//XgCFg9vA4VhOc/9YfMueTyaFUxUNd6kbXTTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:7f:31:71:7d:9f:94:6c:ba:74:ee:ec:54:d0:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4e9d53310243187083fdc9609735465b1089043 Validity Not Before: Jan 25 11:01:03 2026 GMT Not After : Jan 26 11:01:03 2026 GMT Subject: CN=c1e33b9dbb9a9222492842d176f53e641a9ca301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:48:e5:9f:be:a4:ce:05:a8:6d:56:8b:bb:51: 1b:31:18:3f:f0:50:75:5c:8d:f3:fc:e5:91:05:e3: e4:ca:48:44:c6:af:65:4b:ba:4d:6f:b8:9b:f6:9a: ba:b1:3c:71:0e:73:d6:3d:9a:28:d9:f6:84:4f:97: bb:2f:cf:22:4a:d8:fe:d7:c3:d1:e6:d2:14:52:15: 6d:06:b7:64:87:a8:13:03:14:6b:17:95:2c:b2:f1: 64:9b:91:63:74:6f:7c:43:91:8d:16:06:fa:f6:bb: 2b:24:99:77:a6:51:1e:ed:90:ba:41:d0:c6:a9:0e: 7e:c8:49:5a:a4:53:ad:ef:15:d5:75:ed:51:c8:9b: 57:f6:2c:8c:b3:80:d7:c5:6b:34:7c:f3:d0:7c:80: 2f:a4:bb:d1:2f:b8:f6:0e:cf:dd:c6:2f:91:1e:37: d4:0a:1c:49:86:85:85:66:7e:ac:ab:e4:31:32:f9: 68:99:17:2f:18:6c:29:e6:76:f9:69:ee:5f:e6:a9: 64:7f:eb:4b:0b:ff:c6:a6:25:ad:e1:43:01:d8:bd: 93:cf:29:56:d8:ca:cd:ca:88:45:63:eb:47:bf:b8: 06:d4:8b:90:05:29:b0:52:84:51:da:e9:8c:d2:18: 89:aa:f9:02:c4:d8:90:84:2f:82:db:21:fe:bd:3d: d1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E3:3B:9D:BB:9A:92:22:49:28:42:D1:76:F5:3E:64:1A:9C:A3:01 X509v3 Authority Key Identifier: keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d9:86:cb:e0:0c:a2:7d:e3:d0:42:c8:d7:85:f5:7e:82:6e: 1f:8f:d2:0c:ff:bf:2c:9f:51:88:cb:bf:28:3d:4c:27:4d:bc: c6:48:a2:66:7c:75:4c:aa:4b:fb:03:1e:43:06:1d:9c:de:7e: 23:5b:2a:2c:6a:e9:9f:11:33:c7:b7:08:3f:3e:bf:45:ca:73: df:e8:40:63:a1:e3:e6:4e:b2:90:16:3f:4b:91:44:f6:59:96: 63:83:42:5b:2c:4f:bf:98:67:5b:ae:f8:f2:f8:15:3d:9a:33: dc:9e:03:07:25:1a:3e:b3:2b:d1:b4:f1:b4:c9:80:6e:09:c2: 1d:0d:8e:8d:5f:f8:a1:f3:bf:dd:d7:34:09:f2:9a:6c:c1:52: 31:52:bc:06:80:bc:f5:20:7b:af:89:12:e2:23:6b:7b:4b:ab: 25:4f:4d:ad:32:8d:4b:b3:e2:d2:28:a3:33:53:26:4e:ce:ee: 42:a8:db:59:90:f1:69:23:4f:5c:e0:3c:9c:49:3b:85:30:01: c8:af:80:39:78:27:06:7f:08:2a:bb:34:3e:9a:1e:97:8b:d6: 83:a0:8b:ac:d9:3c:a6:7e:6a:02:96:d9:90:b8:73:ad:b2:09: 78:e7:c0:12:06:fb:8e:ba:ac:73:63:97:bf:4a:77:50:f3:1c: 00:b3:4a:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00H8xcX2flGy6dO7sVNDCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZTlkNTMzMTAyNDMxODcwODNmZGM5NjA5NzM1NDY1YjEw ODkwNDMwHhcNMjYwMTI1MTEwMTAzWhcNMjYwMTI2MTEwMTAzWjAzMTEwLwYDVQQD EyhjMWUzM2I5ZGJiOWE5MjIyNDkyODQyZDE3NmY1M2U2NDFhOWNhMzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEjln76kzgWobVaLu1EbMRg/8FB1 XI3z/OWRBePkykhExq9lS7pNb7ib9pq6sTxxDnPWPZoo2faET5e7L88iStj+18PR 5tIUUhVtBrdkh6gTAxRrF5UssvFkm5FjdG98Q5GNFgb69rsrJJl3plEe7ZC6QdDG qQ5+yElapFOt7xXVde1RyJtX9iyMs4DXxWs0fPPQfIAvpLvRL7j2Ds/dxi+RHjfU ChxJhoWFZn6sq+QxMvlomRcvGGwp5nb5ae5f5qlkf+tLC//GpiWt4UMB2L2TzylW 2MrNyohFY+tHv7gG1IuQBSmwUoRR2umM0hiJqvkCxNiQhC+C2yH+vT3RdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHjO527mpIiSShC0Xb1PmQanKMBMB8GA1UdIwQY MBaAFPTp1TMQJDGHCD/clglzVGWxCJBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yODVmMzItMDNlYS00MTZlLTljYjAt N2U2NjY0OGZjMjY0LzEvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yODVmMzItMDNlYS00MTZlLTljYjAtN2U2NjY0OGZjMjY0 LzEvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNmGy+AM on3j0ELI14X1foJuH4/SDP+/LJ9RiMu/KD1MJ028xkiiZnx1TKpL+wMeQwYdnN5+ I1sqLGrpnxEzx7cIPz6/Rcpz3+hAY6Hj5k6ykBY/S5FE9lmWY4NCWyxPv5hnW674 8vgVPZoz3J4DByUaPrMr0bTxtMmAbgnCHQ2OjV/4ofO/3dc0CfKabMFSMVK8BoC8 9SB7r4kS4iNre0urJU9NrTKNS7Pi0iijM1MmTs7uQqjbWZDxaSNPXOA8nEk7hTAB yK+AOXgnBn8IKrs0Ppoel4vWg6CLrNk8pn5qApbZkLhzrbIJeOfAEgb7jrqsc2OX v0p3UPMcALNKrA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:05 2026 by rpki-client