This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft File: 9rkcLAjwDWdj0unmosRCETDz3b0.mft (raw, json) Hash identifier: jkZCTDX+3oRCl/moPILBaFv+8JXR3GPUgowx2bod4Ic= Subject key identifier: 78:64:16:A4:74:C3:76:52:9C:ED:DD:CE:3F:6A:F9:EC:BA:5F:7F:B7 Authority key identifier: F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD Certificate issuer: /CN=f6b91c2c08f00d6763d2e9e6a2c4421130f3ddbd Certificate serial: 019BF61A4E21855A3153C45BF8A0037D5A11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft Manifest number: 0496 Signing time: Sun 25 Jan 2026 17:01:17 +0000 Manifest this update: Sun 25 Jan 2026 17:01:17 +0000 Manifest next update: Mon 26 Jan 2026 17:01:17 +0000 Files and hashes: 1: 9rkcLAjwDWdj0unmosRCETDz3b0.crl (hash: CAk3NRAt7iOJgUYF26Pg2RpQKQmoICEVSJr9H2gJ010=) 2: O9gvHkG2h2zO-WbCdSfRap-erlk.roa (hash: oEpItWYo36cnFY6gqJseSt67WlSCENpXs7wywbBecHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:4e:21:85:5a:31:53:c4:5b:f8:a0:03:7d:5a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6b91c2c08f00d6763d2e9e6a2c4421130f3ddbd Validity Not Before: Jan 25 17:01:17 2026 GMT Not After : Jan 26 17:01:17 2026 GMT Subject: CN=786416a474c376529cedddce3f6af9ecba5f7fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f3:40:10:80:1e:51:8e:0f:bb:1d:c6:6b:92: 04:c4:11:3c:c9:fb:63:c4:a9:81:16:0d:7b:97:62: 79:dc:0b:31:bf:9c:7a:25:5c:9f:33:ee:83:c8:51: ba:d7:21:40:7b:35:e6:e0:aa:43:4a:3e:ea:4a:c1: 22:14:06:9b:9a:6b:89:41:7b:cd:a3:d2:e2:77:52: 62:0b:a0:d3:14:00:5a:f9:0f:27:e5:56:1a:70:2d: 25:e2:ae:48:4a:6f:99:5d:40:b9:b7:9c:66:a1:95: 87:6b:c5:2e:22:21:0c:02:3c:1b:31:03:aa:d3:e9: 0d:1e:8b:80:cf:ff:30:b2:19:21:30:b3:29:cc:6f: b3:2e:58:4c:53:fd:52:c5:ff:47:0f:9e:f6:51:b6: d4:43:80:83:c7:66:23:f9:4b:83:ff:07:cf:fa:bb: 11:4e:8e:9f:20:ad:2a:dd:14:05:fd:a2:3b:93:f6: 9c:e3:ff:bd:f3:c7:14:e8:f7:12:03:e9:fa:f8:96: e2:79:bd:30:4b:35:49:e2:62:0b:5a:7a:89:ab:64: 9b:38:e9:e2:8c:8b:3b:7f:42:12:c6:d4:6b:67:0d: bf:6f:56:48:95:e0:cb:04:dc:d6:23:4c:c9:34:ee: 47:b1:c7:c6:b7:eb:ba:14:3a:24:bc:f3:c8:b0:c4: 73:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:64:16:A4:74:C3:76:52:9C:ED:DD:CE:3F:6A:F9:EC:BA:5F:7F:B7 X509v3 Authority Key Identifier: keyid:F6:B9:1C:2C:08:F0:0D:67:63:D2:E9:E6:A2:C4:42:11:30:F3:DD:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rkcLAjwDWdj0unmosRCETDz3b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8da5e8-8544-49d9-a83f-8c91f96be625/1/9rkcLAjwDWdj0unmosRCETDz3b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e1:76:25:8e:13:39:31:ee:da:61:29:86:90:08:b5:6c:cf: 22:61:ee:e6:69:bb:88:c7:87:8b:be:53:c4:0c:c8:54:7d:26: 2f:74:cb:d4:a6:c6:f6:a8:d8:e9:4f:16:22:86:d6:ab:6d:3c: 10:59:5c:c0:98:0c:42:00:9e:13:e1:6e:be:83:a2:43:e7:29: 8c:02:8c:5f:d5:e5:49:85:96:d6:10:95:bf:9a:7f:08:5d:5a: 60:fd:13:e5:10:cd:4c:75:c3:28:c2:3d:48:db:ba:35:6d:0b: 1c:cb:a9:cd:d8:96:13:98:57:b0:17:c1:fc:5e:18:a0:7d:4d: 6e:5a:1d:d4:c6:da:d0:60:6b:46:fa:5b:24:fc:6e:d9:cb:ed: 28:97:04:14:1e:ff:ac:1d:46:72:87:c1:79:5a:8d:e5:ab:b5: b8:ff:64:a5:76:d5:22:0f:98:77:46:4e:8f:b6:82:f6:a2:eb: f7:26:02:98:05:ad:1a:2c:08:b8:33:df:33:df:42:8b:5e:36: 06:9a:c4:bd:5a:9f:1c:a2:8c:e2:e8:16:72:30:be:e5:f7:be: 16:fe:1c:88:a3:b4:3d:38:ac:15:e1:88:c9:84:fd:65:32:7f: 30:f7:56:2e:26:4c:3d:06:09:7b:64:8a:dd:78:dd:13:f7:a1: c2:bc:cc:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gk4hhVoxU8Rb+KADfVoRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YjkxYzJjMDhmMDBkNjc2M2QyZTllNmEyYzQ0MjExMzBm M2RkYmQwHhcNMjYwMTI1MTcwMTE3WhcNMjYwMTI2MTcwMTE3WjAzMTEwLwYDVQQD Eyg3ODY0MTZhNDc0YzM3NjUyOWNlZGRkY2UzZjZhZjllY2JhNWY3ZmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/NAEIAeUY4Pux3Ga5IExBE8yftj xKmBFg17l2J53Asxv5x6JVyfM+6DyFG61yFAezXm4KpDSj7qSsEiFAabmmuJQXvN o9Lid1JiC6DTFABa+Q8n5VYacC0l4q5ISm+ZXUC5t5xmoZWHa8UuIiEMAjwbMQOq 0+kNHouAz/8wshkhMLMpzG+zLlhMU/1Sxf9HD572UbbUQ4CDx2Yj+UuD/wfP+rsR To6fIK0q3RQF/aI7k/ac4/+988cU6PcSA+n6+Jbieb0wSzVJ4mILWnqJq2SbOOni jIs7f0ISxtRrZw2/b1ZIleDLBNzWI0zJNO5HscfGt+u6FDokvPPIsMRzWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhkFqR0w3ZSnO3dzj9q+ey6X3+3MB8GA1UdIwQY MBaAFPa5HCwI8A1nY9Lp5qLEQhEw8929MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXJrY0xBandEV2RqMHVubW9zUkNFVER6M2IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84ZGE1ZTgtODU0NC00OWQ5LWE4M2Yt OGM5MWY5NmJlNjI1LzEvOXJrY0xBandEV2RqMHVubW9zUkNFVER6M2IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS84ZGE1ZTgtODU0NC00OWQ5LWE4M2YtOGM5MWY5NmJlNjI1 LzEvOXJrY0xBandEV2RqMHVubW9zUkNFVER6M2IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+F2JY4T OTHu2mEphpAItWzPImHu5mm7iMeHi75TxAzIVH0mL3TL1KbG9qjY6U8WIobWq208 EFlcwJgMQgCeE+FuvoOiQ+cpjAKMX9XlSYWW1hCVv5p/CF1aYP0T5RDNTHXDKMI9 SNu6NW0LHMupzdiWE5hXsBfB/F4YoH1Nblod1Mba0GBrRvpbJPxu2cvtKJcEFB7/ rB1GcofBeVqN5au1uP9kpXbVIg+Yd0ZOj7aC9qLr9yYCmAWtGiwIuDPfM99Ci142 BprEvVqfHKKM4ugWcjC+5fe+Fv4ciKO0PTisFeGIyYT9ZTJ/MPdWLiZMPQYJe2SK 3XjdE/ehwrzMlA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:30 2026 by rpki-client