This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft File: 9oXcPBRGS4xAgXUl2aJUtO06ijo.mft (raw, json) Hash identifier: bg0gzVO0qhd1g1FfjDfHluU7S/LosQWs2b4dAXezg+4= Subject key identifier: 38:2E:A4:20:17:15:AB:8C:0B:56:FD:9D:3C:E7:E4:01:26:67:47:F4 Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A Certificate issuer: /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a Certificate serial: 019BF4623FF52A9E48200EE932336122091E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft Manifest number: 0243 Signing time: Sun 25 Jan 2026 09:00:38 +0000 Manifest this update: Sun 25 Jan 2026 09:00:38 +0000 Manifest next update: Mon 26 Jan 2026 09:00:38 +0000 Files and hashes: 1: 9oXcPBRGS4xAgXUl2aJUtO06ijo.crl (hash: xh1ZoMKjYQYMxy2+nvLIOJy2X9tSCu0cTMSo1HPRK9Q=) 2: HSRkhqaXY-J-szKJGb322CNozlI.roa (hash: AvBoZFMkLxLlkN5UUWxsTcEYLDw2vSTiZXKpkSzpzYg=) 3: _KbUElUf-kiJtWzmpDSNHdJCbc0.roa (hash: uVsgENyH2wJmt2BQoXK1ivNHMgsy0rMlEbl/JQCYCdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:3f:f5:2a:9e:48:20:0e:e9:32:33:61:22:09:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a Validity Not Before: Jan 25 09:00:38 2026 GMT Not After : Jan 26 09:00:38 2026 GMT Subject: CN=382ea4201715ab8c0b56fd9d3ce7e401266747f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:73:05:62:47:ad:bb:16:76:15:9d:fb:ad:23: 6b:43:af:ec:d6:bd:7b:3a:f8:fb:6b:c9:3d:e4:62: da:48:1b:ec:a5:95:c2:45:a2:15:f6:7a:d5:92:94: 40:9e:61:62:d6:d9:b2:7a:a3:b1:9f:9f:6d:dd:89: f3:4f:02:f2:a4:9a:16:57:23:39:98:90:da:5b:ca: 58:56:6a:d6:66:dd:f0:98:37:4e:e3:91:33:3b:3a: 49:70:e1:b4:e4:1a:2e:eb:b2:82:65:53:c0:19:1b: 36:da:78:1b:85:9d:9f:83:7a:b9:28:99:fa:3c:0b: 1b:05:fa:39:bf:74:ac:da:99:06:16:3a:0d:6e:38: 05:34:b9:ac:b4:70:dd:02:89:6f:54:92:2a:0b:1a: 25:22:f3:3e:fd:a1:5b:41:37:b5:98:a4:f7:80:36: 2a:2f:85:7b:aa:dd:46:47:04:ce:0b:46:8d:0c:20: eb:97:7d:71:c0:71:86:78:19:05:cf:42:2f:c3:37: a0:6b:97:05:41:1e:79:78:e8:2f:99:79:87:8d:df: 8a:16:8b:b2:f2:86:57:83:27:37:6a:60:1c:69:6c: 16:f8:1d:f0:78:e0:fe:12:9e:7f:c2:2f:e2:96:d9: 59:1c:ef:ba:0d:25:c3:1b:3b:47:ae:45:20:0a:43: 67:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2E:A4:20:17:15:AB:8C:0B:56:FD:9D:3C:E7:E4:01:26:67:47:F4 X509v3 Authority Key Identifier: keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:2c:f9:6d:01:af:df:a1:9f:fd:22:01:a6:01:f5:5a:73:66: 0f:ec:c1:a2:fd:8c:65:17:e2:33:f9:9d:b7:f2:8f:80:73:2c: a5:28:6d:ab:e8:1c:c4:25:6f:7c:66:4d:20:10:a8:06:62:24: f7:66:d7:e9:27:75:b8:cd:9b:88:6f:d5:45:d5:02:16:fb:3b: 15:70:09:e9:eb:93:f7:a5:6e:ec:3a:29:68:23:2a:66:cd:af: 49:b0:32:96:3b:9d:e1:cb:a1:a6:e0:f7:46:24:ee:a5:4a:22: a7:ca:b4:5a:39:7f:10:a0:0f:66:4a:60:c5:85:de:39:33:50: 2f:17:38:e4:36:c0:c5:0e:29:38:94:de:cf:d5:b5:42:07:8a: e9:30:a0:04:41:8e:25:40:30:cd:d8:a8:c2:c6:b7:d9:3f:65: ed:43:4a:01:70:c7:c0:c7:04:1f:81:8f:7d:d1:4f:fb:c6:81: 36:55:ac:af:bc:07:fe:f8:80:df:aa:fb:e0:57:11:53:ad:72: 1c:45:3e:88:c9:6e:68:ee:ae:1c:34:dc:ff:5f:e1:fd:a4:6d: 74:03:80:73:14:e8:d4:1e:e7:99:d5:1c:82:ef:36:2e:4a:b5: 1a:75:e3:13:74:29:a6:29:28:b2:08:66:b6:d4:19:ac:33:12: 77:dd:93:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yj/1Kp5IIA7pMjNhIgkeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ODVkYzNjMTQ0NjRiOGM0MDgxNzUyNWQ5YTI1NGI0ZWQz YThhM2EwHhcNMjYwMTI1MDkwMDM4WhcNMjYwMTI2MDkwMDM4WjAzMTEwLwYDVQQD EygzODJlYTQyMDE3MTVhYjhjMGI1NmZkOWQzY2U3ZTQwMTI2Njc0N2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHMFYketuxZ2FZ37rSNrQ6/s1r17 Ovj7a8k95GLaSBvspZXCRaIV9nrVkpRAnmFi1tmyeqOxn59t3YnzTwLypJoWVyM5 mJDaW8pYVmrWZt3wmDdO45EzOzpJcOG05Bou67KCZVPAGRs22ngbhZ2fg3q5KJn6 PAsbBfo5v3Ss2pkGFjoNbjgFNLmstHDdAolvVJIqCxolIvM+/aFbQTe1mKT3gDYq L4V7qt1GRwTOC0aNDCDrl31xwHGGeBkFz0Ivwzega5cFQR55eOgvmXmHjd+KFouy 8oZXgyc3amAcaWwW+B3weOD+Ep5/wi/iltlZHO+6DSXDGztHrkUgCkNnTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgupCAXFauMC1b9nTzn5AEmZ0f0MB8GA1UdIwQY MBaAFPaF3DwURkuMQIF1JdmiVLTtOoo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yMDQyNzUtYTM2OC00MzFiLThmZjYt ZWI2N2Y4ZTYzMmI4LzEvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8yMDQyNzUtYTM2OC00MzFiLThmZjYtZWI2N2Y4ZTYzMmI4 LzEvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyz5bQGv 36Gf/SIBpgH1WnNmD+zBov2MZRfiM/mdt/KPgHMspShtq+gcxCVvfGZNIBCoBmIk 92bX6Sd1uM2biG/VRdUCFvs7FXAJ6euT96Vu7DopaCMqZs2vSbAyljud4cuhpuD3 RiTupUoip8q0Wjl/EKAPZkpgxYXeOTNQLxc45DbAxQ4pOJTez9W1QgeK6TCgBEGO JUAwzdiowsa32T9l7UNKAXDHwMcEH4GPfdFP+8aBNlWsr7wH/viA36r74FcRU61y HEU+iMluaO6uHDTc/1/h/aRtdAOAcxTo1B7nmdUcgu82Lkq1GnXjE3Qppikosghm ttQZrDMSd92T3Q== -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:37 2026 by rpki-client