This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft File: tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json) Hash identifier: ut+8vtN+r5r4uvRVyPSrmzWn/eBB7uFEMgYp6uKj+Ws= Subject key identifier: 99:78:9F:C2:DD:0D:1B:FF:67:50:EA:9A:20:35:4D:46:37:CC:DA:E7 Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC Certificate issuer: /CN=b71f4868bd409292b56959f35a4c14fcc25472ec Certificate serial: 019BF6BF505D0E816D089982862696ECCB46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft Manifest number: 04D2 Signing time: Sun 25 Jan 2026 20:01:31 +0000 Manifest this update: Sun 25 Jan 2026 20:01:31 +0000 Manifest next update: Mon 26 Jan 2026 20:01:31 +0000 Files and hashes: 1: 1u_M8NexCMfbJPBu1YeQu6IVl_g.roa (hash: BwMwBhzaXT8DSQQSSTdiaTJg9+lyjnhXRSor2+P0WjI=) 2: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: fHCbcu9uRF3X3kVlJTftC877fc+L5GIxfBq3DIKxbNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:50:5d:0e:81:6d:08:99:82:86:26:96:ec:cb:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec Validity Not Before: Jan 25 20:01:31 2026 GMT Not After : Jan 26 20:01:31 2026 GMT Subject: CN=99789fc2dd0d1bff6750ea9a20354d4637ccdae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:05:2c:eb:78:6b:81:b2:56:ce:24:3d:cf: d8:6d:e1:5a:2f:15:96:8d:17:a1:10:a5:09:2b:d1: c6:fb:3e:54:3a:66:94:46:f8:6b:a3:60:b3:15:37: 38:3c:35:d1:92:dc:f7:fc:71:ca:92:14:9e:a6:a1: 20:3e:0c:9c:31:9e:4a:38:da:f5:bf:59:87:fb:80: 3f:7b:21:21:46:d7:13:05:75:0f:d9:f5:8d:a5:65: 55:9b:4d:ce:19:28:7a:55:01:78:2d:94:e9:cb:ab: a8:08:6d:7a:32:80:9e:d0:d9:64:b7:bb:ce:d1:6a: 98:3b:3d:51:69:65:89:b6:42:40:d8:dc:bf:3f:d0: 23:ec:9e:66:9f:01:47:62:a5:7d:3a:5f:bd:c2:b9: 5d:3d:90:3b:b4:96:25:6c:08:72:8b:29:cf:de:0c: 1f:52:fa:6b:b2:7d:1b:6e:b9:1b:6d:9a:37:75:13: d7:c1:c2:47:8b:84:e2:ac:5e:5c:66:c1:a9:ed:8e: 12:6f:8a:8c:62:27:04:3a:fb:c8:6c:cc:91:ab:8d: cd:4c:3f:e2:1d:1f:08:73:79:62:e6:40:20:5d:e3: ed:74:e7:07:f5:9b:b7:18:84:5f:1a:19:6d:1e:84: 8b:8b:82:58:cc:1d:7b:d7:00:ee:c8:80:8d:c3:49: e2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:78:9F:C2:DD:0D:1B:FF:67:50:EA:9A:20:35:4D:46:37:CC:DA:E7 X509v3 Authority Key Identifier: keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:50:dd:2a:c5:3c:fe:17:0f:28:e9:b7:b9:c4:0f:13:ed:db: 93:ed:42:bb:ed:cd:53:d9:b5:f0:7e:c3:dd:7b:07:db:a7:c7: d1:07:87:af:4a:09:60:73:92:df:76:2a:ab:52:d4:00:46:76: 4a:4a:6c:50:b8:e4:da:6d:6a:bc:3a:f7:03:e0:ca:8b:95:1c: 2b:49:02:41:a6:1e:7d:d8:69:11:38:7e:97:f9:f0:18:89:bc: aa:61:d1:04:a6:10:56:e8:26:4e:28:6d:99:01:5d:b7:ea:15: 38:6c:7c:4e:0d:b5:22:d0:0c:5b:21:4b:67:3c:d6:14:56:49: ba:84:40:f4:15:9c:3f:f4:d0:eb:4f:b7:84:bc:bf:ea:ef:63: e6:79:cf:c7:de:ed:9a:17:3f:c5:a7:bc:0a:95:0e:9e:f8:c6: 9e:03:73:f1:a6:39:f8:ba:24:ef:63:2f:ef:cf:b3:04:9f:dc: 70:8a:be:2c:72:0c:2c:c0:e1:24:20:2b:bf:a7:59:d8:0d:c3: 5e:de:42:e5:77:f3:7d:3a:24:de:2e:49:45:f6:be:0f:93:3d: c1:98:18:28:89:78:44:8d:2e:d5:02:43:a6:ee:35:f7:3a:b3: c5:90:b9:af:7b:36:6d:c8:78:6c:2f:87:0c:77:19:85:2f:ea: 70:a3:ef:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v1BdDoFtCJmChiaW7MtGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MWY0ODY4YmQ0MDkyOTJiNTY5NTlmMzVhNGMxNGZjYzI1 NDcyZWMwHhcNMjYwMTI1MjAwMTMxWhcNMjYwMTI2MjAwMTMxWjAzMTEwLwYDVQQD Eyg5OTc4OWZjMmRkMGQxYmZmNjc1MGVhOWEyMDM1NGQ0NjM3Y2NkYWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiIFLOt4a4GyVs4kPc/YbeFaLxWW jRehEKUJK9HG+z5UOmaURvhro2CzFTc4PDXRktz3/HHKkhSepqEgPgycMZ5KONr1 v1mH+4A/eyEhRtcTBXUP2fWNpWVVm03OGSh6VQF4LZTpy6uoCG16MoCe0Nlkt7vO 0WqYOz1RaWWJtkJA2Ny/P9Aj7J5mnwFHYqV9Ol+9wrldPZA7tJYlbAhyiynP3gwf Uvprsn0bbrkbbZo3dRPXwcJHi4TirF5cZsGp7Y4Sb4qMYicEOvvIbMyRq43NTD/i HR8Ic3li5kAgXePtdOcH9Zu3GIRfGhltHoSLi4JYzB171wDuyICNw0ni0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJl4n8LdDRv/Z1DqmiA1TUY3zNrnMB8GA1UdIwQY MBaAFLcfSGi9QJKStWlZ81pMFPzCVHLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMDA5MTktZDk1MS00YTZlLTlmMGMt N2NjYTNhMmU3NDkwLzEvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8xMDA5MTktZDk1MS00YTZlLTlmMGMtN2NjYTNhMmU3NDkw LzEvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsFDdKsU8 /hcPKOm3ucQPE+3bk+1Cu+3NU9m18H7D3XsH26fH0QeHr0oJYHOS33Yqq1LUAEZ2 SkpsULjk2m1qvDr3A+DKi5UcK0kCQaYefdhpETh+l/nwGIm8qmHRBKYQVugmTiht mQFdt+oVOGx8Tg21ItAMWyFLZzzWFFZJuoRA9BWcP/TQ60+3hLy/6u9j5nnPx97t mhc/xae8CpUOnvjGngNz8aY5+Lok72Mv78+zBJ/ccIq+LHIMLMDhJCArv6dZ2A3D Xt5C5XfzfTok3i5JRfa+D5M9wZgYKIl4RI0u1QJDpu419zqzxZC5r3s2bch4bC+H DHcZhS/qcKPvmg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:13:13 2026 by rpki-client