This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json) Hash identifier: Epny0idjmxqtLzcmt7xs3TYcGPb/+Bv63kjEhD4HMBI= Subject key identifier: 6F:2C:A7:48:15:27:B5:69:62:48:EC:E9:5D:0C:30:CA:58:3D:9C:34 Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68 Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68 Certificate serial: 019BF3509E308FF28C81ED2C9B0C5B193344 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft Manifest number: 13D3 Signing time: Sun 25 Jan 2026 04:01:45 +0000 Manifest this update: Sun 25 Jan 2026 04:01:45 +0000 Manifest next update: Mon 26 Jan 2026 04:01:45 +0000 Files and hashes: 1: HWGUebs3EWNszWIfhL8txyJZ4Wc.roa (hash: Kkv1FkwV95pLZojGSMytjvxl12xKvZhsibGSapIvxNM=) 2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: 12/J2KNoCfNTp4MpXXpFjaABtw5XD6PBahlKcq4XYTU=) 3: yU97JpL8vhtzjZItL8jC7MTVyrI.roa (hash: k7fKEhbHDybB05NhQDugPbENccrkTCNpahczLkbCDd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:9e:30:8f:f2:8c:81:ed:2c:9b:0c:5b:19:33:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68 Validity Not Before: Jan 25 04:01:45 2026 GMT Not After : Jan 26 04:01:45 2026 GMT Subject: CN=6f2ca7481527b5696248ece95d0c30ca583d9c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:aa:26:ee:a9:8f:88:29:54:10:ed:2d:6b:f6: 51:1c:5f:ee:f2:6c:47:24:45:f0:05:fc:78:39:9b: 40:0f:46:08:b6:65:b5:5c:4c:68:3e:1b:ec:48:6f: de:70:07:3f:45:c4:be:b7:c0:1f:6d:c8:1d:52:9d: 48:d7:7b:51:f7:1f:98:25:b5:89:4f:03:73:17:4f: ab:1c:45:fa:37:f2:ca:29:c4:5d:b0:84:14:9a:0b: 90:c6:23:95:8d:d8:c0:19:19:05:ba:4c:75:20:a6: 84:18:ee:18:b2:62:31:e1:d4:55:96:18:df:03:0b: e6:31:0f:37:93:a1:b3:36:a0:c2:cf:71:ee:97:37: ab:d4:5f:7e:78:1b:d1:d7:c3:fe:d7:0a:88:02:b8: 64:10:3e:12:ba:da:d5:47:35:76:94:f2:8e:d3:10: d2:66:3b:5b:ec:88:98:86:00:47:c9:47:c2:2a:6f: af:ff:67:42:71:03:d1:83:02:bb:c6:d4:86:9a:f2: 4a:64:16:f5:2f:59:c4:76:f5:23:4d:6c:56:d6:17: 06:29:21:59:ac:ea:4b:06:81:ba:bd:e9:c4:62:71: 0f:29:22:ff:99:66:13:f5:0a:77:bf:c7:89:0e:0e: cc:df:3e:07:23:8e:8f:35:1f:5b:8b:91:b7:68:03: ed:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2C:A7:48:15:27:B5:69:62:48:EC:E9:5D:0C:30:CA:58:3D:9C:34 X509v3 Authority Key Identifier: keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:de:5e:3d:7d:de:a0:fb:ca:95:6a:69:e0:fa:28:5c:a9:7d: 14:31:ca:15:e8:dc:fe:8b:dc:94:99:7c:c5:d0:21:5e:bd:b8: 0f:ad:9f:5b:ba:0f:9d:03:2a:16:7f:86:70:cc:39:c3:a7:ad: 5b:86:c8:60:1f:2e:91:9d:f8:47:e3:a7:cb:c0:5d:15:ea:bb: 80:d6:0b:44:53:c6:2d:04:cd:1d:ab:9e:8f:bc:5d:36:43:91: 29:e8:da:12:d4:21:fc:01:80:68:a7:ba:94:09:57:67:22:0a: a1:b6:53:e0:f2:eb:8f:3f:00:51:b0:81:3d:14:4c:cf:02:ec: b4:94:21:93:c9:11:64:ac:4a:48:8d:ee:f5:c2:31:48:8a:81: 6d:e4:d1:8a:93:26:a3:0a:33:6e:c8:37:2e:54:db:b7:c6:8c: 39:ab:49:24:12:1a:33:2f:d6:47:78:34:a9:0b:6c:7f:c6:29: 48:dd:48:45:e8:38:72:dc:a1:d3:b3:0a:dc:65:6f:41:f8:4c: 78:ad:8b:63:61:27:56:fa:ae:b3:13:de:27:2d:53:04:3e:10: 3f:85:78:ab:59:9c:eb:5e:4f:c3:2d:4a:84:e4:55:a9:cd:fd: 34:3c:7a:13:1d:5b:8f:52:ed:a0:f5:17:66:28:3c:b9:f6:36: eb:30:5e:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUJ4wj/KMge0smwxbGTNEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZDhmNjIwOTk5NTA2Y2M4NmQ3NTQ4ZWE3MjgyYmIxMjlm MDJkNjgwHhcNMjYwMTI1MDQwMTQ1WhcNMjYwMTI2MDQwMTQ1WjAzMTEwLwYDVQQD Eyg2ZjJjYTc0ODE1MjdiNTY5NjI0OGVjZTk1ZDBjMzBjYTU4M2Q5YzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6om7qmPiClUEO0ta/ZRHF/u8mxH JEXwBfx4OZtAD0YItmW1XExoPhvsSG/ecAc/RcS+t8AfbcgdUp1I13tR9x+YJbWJ TwNzF0+rHEX6N/LKKcRdsIQUmguQxiOVjdjAGRkFukx1IKaEGO4YsmIx4dRVlhjf AwvmMQ83k6GzNqDCz3Hulzer1F9+eBvR18P+1wqIArhkED4SutrVRzV2lPKO0xDS Zjtb7IiYhgBHyUfCKm+v/2dCcQPRgwK7xtSGmvJKZBb1L1nEdvUjTWxW1hcGKSFZ rOpLBoG6venEYnEPKSL/mWYT9Qp3v8eJDg7M3z4HI46PNR9bi5G3aAPt8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8sp0gVJ7VpYkjs6V0MMMpYPZw0MB8GA1UdIwQY MBaAFCPY9iCZlQbMhtdUjqcoK7Ep8C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2Et NGZkYzQ4ZGE4ZjMzLzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2EtNGZkYzQ4ZGE4ZjMz LzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKd5ePX3e oPvKlWpp4PooXKl9FDHKFejc/ovclJl8xdAhXr24D62fW7oPnQMqFn+GcMw5w6et W4bIYB8ukZ34R+Ony8BdFeq7gNYLRFPGLQTNHauej7xdNkORKejaEtQh/AGAaKe6 lAlXZyIKobZT4PLrjz8AUbCBPRRMzwLstJQhk8kRZKxKSI3u9cIxSIqBbeTRipMm owozbsg3LlTbt8aMOatJJBIaMy/WR3g0qQtsf8YpSN1IReg4ctyh07MK3GVvQfhM eK2LY2EnVvqusxPeJy1TBD4QP4V4q1mc615Pwy1KhORVqc39NDx6Ex1bj1LtoPUX Zig8ufY26zBepQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:27 2026 by rpki-client