This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft File: 9MCqez48v_iCYq3ZKzOeNQUc4aA.mft (raw, json) Hash identifier: S9Q/U4qFc2O41PKQ82pqU0UA61FJhwai0aUmH1rrECE= Subject key identifier: 1D:04:CA:E2:0E:AF:E6:7E:EF:2D:BB:AB:70:D5:57:67:58:B7:A7:3C Authority key identifier: F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0 Certificate issuer: /CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0 Certificate serial: 019BF23D8FA212317D972FA8314476F13CE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft Manifest number: 17F5 Signing time: Sat 24 Jan 2026 23:01:19 +0000 Manifest this update: Sat 24 Jan 2026 23:01:19 +0000 Manifest next update: Sun 25 Jan 2026 23:01:19 +0000 Files and hashes: 1: 0_QYSKDM1E8AIeaj5A3-e2-IZDQ.roa (hash: iSrziuFWhwGiTIYynmk/3TshTVjLewHwXF7ynz9OoD4=) 2: 1R40RwSkegC_HsL5IAb308RJy7c.roa (hash: NUiWWxJmf6nBjZL7nemqUuYwgnn2w0RTzkdB/U1hYno=) 3: 9MCqez48v_iCYq3ZKzOeNQUc4aA.crl (hash: KzqmKv1MTxuI6MaioEJjR9fTJCBiu1S7+zSOuQ8n5MA=) 4: EqS1nZtD5q3-hD6eGWo79wyXkPI.roa (hash: EvlZqUb0IshNQRyxXXr64YjbLkvNa5sXZ6G8L2JNtcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:3d:8f:a2:12:31:7d:97:2f:a8:31:44:76:f1:3c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4c0aa7b3e3cbff88262add92b339e35051ce1a0 Validity Not Before: Jan 24 23:01:19 2026 GMT Not After : Jan 25 23:01:19 2026 GMT Subject: CN=1d04cae20eafe67eef2dbbab70d5576758b7a73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e2:8c:19:3f:b3:e4:22:ca:f5:5d:77:e9:e8: 0d:95:d1:aa:9b:86:f6:bf:99:ba:48:e8:33:b3:c5: a3:80:65:30:9a:02:07:f8:43:af:4f:aa:21:25:f3: e4:7e:6c:e8:79:c1:d4:e6:a7:85:9b:03:f9:42:b0: 17:d1:8c:b8:be:82:0f:bd:4f:7a:8c:87:07:a3:0d: e3:b1:23:a6:d7:ae:1c:a1:3e:36:05:49:09:3e:fc: 26:48:45:1c:9e:6f:99:57:56:98:5b:65:ff:20:89: bd:12:08:ad:83:25:96:dc:7b:24:b2:6f:a6:65:ba: f8:a1:f6:e7:e3:fc:91:fc:a6:54:17:85:5c:9c:4d: 38:51:17:e3:0a:4b:83:53:dd:c3:30:58:d8:8d:78: 6d:bd:52:c3:a1:c2:2c:6c:d8:d7:3b:66:6d:49:23: c5:b2:8a:b1:2b:48:ae:49:e4:a1:fb:2a:1c:8c:f8: 7e:a3:7d:96:96:2a:88:6f:28:eb:fc:28:89:96:45: 02:53:61:c0:ca:60:d1:32:ba:23:92:3f:87:ef:93: 8e:0b:c6:be:8e:4a:36:db:80:0c:fa:fe:59:a0:10: 4f:fd:97:8c:e7:16:0f:6b:dc:bb:0e:14:0b:cc:df: 0c:0c:c4:a3:f9:09:f4:fc:1b:56:eb:d0:7a:3e:bb: d2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:04:CA:E2:0E:AF:E6:7E:EF:2D:BB:AB:70:D5:57:67:58:B7:A7:3C X509v3 Authority Key Identifier: keyid:F4:C0:AA:7B:3E:3C:BF:F8:82:62:AD:D9:2B:33:9E:35:05:1C:E1:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MCqez48v_iCYq3ZKzOeNQUc4aA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9e2b1a-163b-4854-961a-ea75ddf47b4a/1/9MCqez48v_iCYq3ZKzOeNQUc4aA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d1:83:a3:36:2f:86:b1:f4:f9:a5:af:68:fc:06:a9:4d:64: d5:f8:54:ac:af:47:f4:61:76:32:72:49:d4:67:43:ab:e8:cf: 1c:1c:de:90:c9:24:a1:97:38:ad:5b:c6:d8:4f:fe:0e:20:46: 73:58:61:38:ff:63:93:91:e6:11:29:ff:ff:a5:e0:90:d3:98: c6:54:00:b8:9f:ff:59:35:b1:f4:28:3e:f8:01:df:ea:e6:db: 08:1d:8b:5e:0f:43:71:d2:50:9f:8a:c4:4c:b1:7b:5b:6e:47: d0:ab:78:46:60:35:32:6a:4a:cb:3b:3a:2d:e3:88:e0:3a:bd: 45:e8:6f:0a:bc:61:cc:c6:bb:66:a9:fb:6e:83:9e:ee:49:2f: d5:5b:d7:f1:46:6d:00:72:43:8c:08:8c:2a:b7:65:3d:fa:67: 24:fa:34:a5:e1:d3:d1:a9:05:91:5a:e8:44:f7:25:d6:b8:d5: a6:5b:29:0d:e4:5d:00:29:1d:fa:e3:d2:27:a5:90:2e:5d:98: b2:96:ba:62:01:8e:c4:30:f4:1d:32:60:33:a3:7b:4d:7d:09: 6a:e6:ef:f4:da:e2:28:0c:ff:19:04:ad:02:da:bc:99:0f:b5: d3:91:63:2f:17:43:2b:16:26:47:f3:76:59:96:eb:ab:1d:cc: ba:99:27:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyPY+iEjF9ly+oMUR28TzhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YzBhYTdiM2UzY2JmZjg4MjYyYWRkOTJiMzM5ZTM1MDUx Y2UxYTAwHhcNMjYwMTI0MjMwMTE5WhcNMjYwMTI1MjMwMTE5WjAzMTEwLwYDVQQD EygxZDA0Y2FlMjBlYWZlNjdlZWYyZGJiYWI3MGQ1NTc2NzU4YjdhNzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneKMGT+z5CLK9V136egNldGqm4b2 v5m6SOgzs8WjgGUwmgIH+EOvT6ohJfPkfmzoecHU5qeFmwP5QrAX0Yy4voIPvU96 jIcHow3jsSOm164coT42BUkJPvwmSEUcnm+ZV1aYW2X/IIm9EgitgyWW3Hsksm+m Zbr4ofbn4/yR/KZUF4VcnE04URfjCkuDU93DMFjYjXhtvVLDocIsbNjXO2ZtSSPF soqxK0iuSeSh+yocjPh+o32WliqIbyjr/CiJlkUCU2HAymDRMrojkj+H75OOC8a+ jko224AM+v5ZoBBP/ZeM5xYPa9y7DhQLzN8MDMSj+Qn0/BtW69B6PrvSuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0EyuIOr+Z+7y27q3DVV2dYt6c8MB8GA1UdIwQY MBaAFPTAqns+PL/4gmKt2SsznjUFHOGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU1DcWV6NDh2X2lDWXEzWkt6T2VOUVVjNGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85ZTJiMWEtMTYzYi00ODU0LTk2MWEt ZWE3NWRkZjQ3YjRhLzEvOU1DcWV6NDh2X2lDWXEzWkt6T2VOUVVjNGFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85ZTJiMWEtMTYzYi00ODU0LTk2MWEtZWE3NWRkZjQ3YjRh LzEvOU1DcWV6NDh2X2lDWXEzWkt6T2VOUVVjNGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNGDozYv hrH0+aWvaPwGqU1k1fhUrK9H9GF2MnJJ1GdDq+jPHBzekMkkoZc4rVvG2E/+DiBG c1hhOP9jk5HmESn//6XgkNOYxlQAuJ//WTWx9Cg++AHf6ubbCB2LXg9DcdJQn4rE TLF7W25H0Kt4RmA1MmpKyzs6LeOI4Dq9RehvCrxhzMa7Zqn7boOe7kkv1VvX8UZt AHJDjAiMKrdlPfpnJPo0peHT0akFkVroRPcl1rjVplspDeRdACkd+uPSJ6WQLl2Y spa6YgGOxDD0HTJgM6N7TX0Jaubv9NriKAz/GQStAtq8mQ+105FjLxdDKxYmR/N2 WZbrqx3MupknAA== -----END CERTIFICATE-----Generated at Sun Jan 25 06:14:36 2026 by rpki-client