This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft (raw, json) Hash identifier: RcAwvm0qPYYGOVxXEB1HfXvn6MkljyBEBLUi3JSzLUY= Subject key identifier: 4C:20:62:29:54:3D:D6:C8:E2:9E:39:BF:F5:BD:B2:63:BE:63:55:BF Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20 Certificate issuer: /CN=33d2d885477d0280264e458eb071f45d91691520 Certificate serial: 019BF5AC0791D07CFAE10FA71B538D3A5F62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft Manifest number: 174E Signing time: Sun 25 Jan 2026 15:00:50 +0000 Manifest this update: Sun 25 Jan 2026 15:00:50 +0000 Manifest next update: Mon 26 Jan 2026 15:00:50 +0000 Files and hashes: 1: M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl (hash: ZD3B1Gd61JWiRhSk9LbF1jEfoHW7KgviEqvNIn65oYI=) 2: oY8wzqxSZtFw6pVYs4NFV60daUg.roa (hash: DFgw9sxWQdsrNBj4RrkibFIZhSj9mHDN7Zn+MkePlLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:07:91:d0:7c:fa:e1:0f:a7:1b:53:8d:3a:5f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d2d885477d0280264e458eb071f45d91691520 Validity Not Before: Jan 25 15:00:50 2026 GMT Not After : Jan 26 15:00:50 2026 GMT Subject: CN=4c206229543dd6c8e29e39bff5bdb263be6355bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:33:9a:8e:d0:b3:2e:51:c5:37:e4:39:c8:26: 3e:b1:c2:c7:29:00:c9:51:da:92:4e:cb:90:d8:fa: d1:61:d4:af:60:c7:90:18:37:4f:41:2d:76:ee:21: 77:96:39:36:f7:7c:27:4c:4a:ff:ad:45:22:ad:17: 41:d6:d6:66:c3:d6:21:e9:07:ea:ad:32:f6:6e:e8: 6e:a2:05:6b:f5:ef:5d:18:bc:cb:00:28:db:7f:68: 74:c8:bf:cc:ed:a2:bc:e7:2d:0b:42:18:09:3f:bf: 0a:b3:cf:f9:d0:c4:30:eb:54:df:46:f0:1b:55:6b: 08:80:02:fb:84:96:f5:5b:26:0a:b8:e0:5b:75:4d: 3f:78:f0:ab:50:db:32:82:d6:49:e0:05:ee:6f:95: f2:97:50:91:d5:86:03:87:65:df:82:26:de:1b:40: bd:e7:fd:f6:2e:3f:c9:8b:eb:16:83:4f:59:3a:e9: 52:38:ab:54:22:67:bd:e2:f0:6d:25:51:3f:9a:05: 1d:e2:90:96:4d:d2:2b:05:89:69:12:06:2d:2e:40: f7:38:37:d9:31:ee:19:b6:54:64:e9:99:9a:3b:57: 33:1b:87:46:f2:d1:a1:06:74:a1:f8:c0:1c:79:8f: 03:46:0c:62:ac:d7:81:99:e9:70:33:6a:dd:8e:a2: 46:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:20:62:29:54:3D:D6:C8:E2:9E:39:BF:F5:BD:B2:63:BE:63:55:BF X509v3 Authority Key Identifier: keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a6:06:52:0e:cd:59:ec:69:76:2a:e9:e9:88:15:e2:45:ac: 97:c5:02:11:94:1e:ab:41:12:4f:02:eb:3b:5c:3f:ff:a8:73: 5e:32:9f:49:21:7f:d3:dd:36:67:86:73:68:15:e2:b1:44:05: 9d:65:83:68:82:e5:01:11:3d:f8:72:74:7b:39:14:cf:7e:40: e7:1e:04:0b:31:a7:15:23:56:39:4b:69:21:bf:92:b9:89:69: 83:46:b9:54:98:c1:82:dc:7d:68:1a:eb:77:5a:a5:69:db:62: 12:9b:85:73:77:6d:26:34:3f:5f:2a:6f:31:15:75:69:4f:dd: 84:a3:a1:ea:e6:95:4d:5a:4f:fc:2d:fb:38:1a:17:a2:01:f3: 18:3d:de:49:f1:26:1a:8b:66:8d:1f:57:8f:f1:9f:68:ee:1d: 2f:d6:e1:2b:de:35:37:ba:20:9a:34:90:91:0a:12:49:0b:64: 02:c4:06:4e:e9:2f:0e:3c:51:65:e5:c5:e3:66:65:3d:ff:d8: 95:f7:75:76:44:fa:c3:1c:26:27:1b:cb:6c:46:1b:70:1f:22: 09:82:db:0a:c5:1d:63:c7:98:3f:0f:61:11:50:ad:9e:ae:aa: e4:0d:76:49:fc:97:3c:ce:00:6e:ab:02:b8:de:a5:38:8a:94: 29:eb:dc:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rAeR0Hz64Q+nG1ONOl9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZDJkODg1NDc3ZDAyODAyNjRlNDU4ZWIwNzFmNDVkOTE2 OTE1MjAwHhcNMjYwMTI1MTUwMDUwWhcNMjYwMTI2MTUwMDUwWjAzMTEwLwYDVQQD Eyg0YzIwNjIyOTU0M2RkNmM4ZTI5ZTM5YmZmNWJkYjI2M2JlNjM1NWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzOajtCzLlHFN+Q5yCY+scLHKQDJ UdqSTsuQ2PrRYdSvYMeQGDdPQS127iF3ljk293wnTEr/rUUirRdB1tZmw9Yh6Qfq rTL2buhuogVr9e9dGLzLACjbf2h0yL/M7aK85y0LQhgJP78Ks8/50MQw61TfRvAb VWsIgAL7hJb1WyYKuOBbdU0/ePCrUNsygtZJ4AXub5Xyl1CR1YYDh2XfgibeG0C9 5/32Lj/Ji+sWg09ZOulSOKtUIme94vBtJVE/mgUd4pCWTdIrBYlpEgYtLkD3ODfZ Me4ZtlRk6ZmaO1czG4dG8tGhBnSh+MAceY8DRgxirNeBmelwM2rdjqJG+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwgYilUPdbI4p45v/W9smO+Y1W/MB8GA1UdIwQY MBaAFDPS2IVHfQKAJk5FjrBx9F2RaRUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTlMWWhVZDlBb0FtVGtXT3NISDBYWkZwRlNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83MTU5ZWItZGQzNy00NGFkLTgzZTIt YjI2NDEyYWViM2FlLzEvTTlMWWhVZDlBb0FtVGtXT3NISDBYWkZwRlNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS83MTU5ZWItZGQzNy00NGFkLTgzZTItYjI2NDEyYWViM2Fl LzEvTTlMWWhVZDlBb0FtVGtXT3NISDBYWkZwRlNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6YGUg7N Wexpdirp6YgV4kWsl8UCEZQeq0ESTwLrO1w//6hzXjKfSSF/0902Z4ZzaBXisUQF nWWDaILlARE9+HJ0ezkUz35A5x4ECzGnFSNWOUtpIb+SuYlpg0a5VJjBgtx9aBrr d1qladtiEpuFc3dtJjQ/XypvMRV1aU/dhKOh6uaVTVpP/C37OBoXogHzGD3eSfEm GotmjR9Xj/GfaO4dL9bhK941N7ogmjSQkQoSSQtkAsQGTukvDjxRZeXF42ZlPf/Y lfd1dkT6wxwmJxvLbEYbcB8iCYLbCsUdY8eYPw9hEVCtnq6q5A12SfyXPM4AbqsC uN6lOIqUKevc/Q== -----END CERTIFICATE-----Generated at Sun Jan 25 22:56:49 2026 by rpki-client