This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft File: B9sjpeJVD_l0yl9BkXrIZ9UONek.mft (raw, json) Hash identifier: J9JI3UWaL6US+2DkbKoQZAzQBmQETRXAm5PdflLSvas= Subject key identifier: C3:AA:DC:5F:BF:D0:C6:94:28:AE:70:F5:21:D0:CD:25:6B:71:C0:CA Authority key identifier: 07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9 Certificate issuer: /CN=07db23a5e2550ff974ca5f41917ac867d50e35e9 Certificate serial: 019BF50771C383431254E908291AD2B5E3EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft Manifest number: 0B23 Signing time: Sun 25 Jan 2026 12:01:04 +0000 Manifest this update: Sun 25 Jan 2026 12:01:04 +0000 Manifest next update: Mon 26 Jan 2026 12:01:04 +0000 Files and hashes: 1: 4ALFa9Jly8V_dKKpJ0k3rphtKqI.roa (hash: FvxfrXpFTEI5fJri2eyNeGvuYRYi/o3NW0uubzMpvBU=) 2: B9sjpeJVD_l0yl9BkXrIZ9UONek.crl (hash: ROtTiap6zKeL67nfFNlIVg1cBBnUtL5kqg0CxiPGYW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:71:c3:83:43:12:54:e9:08:29:1a:d2:b5:e3:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07db23a5e2550ff974ca5f41917ac867d50e35e9 Validity Not Before: Jan 25 12:01:04 2026 GMT Not After : Jan 26 12:01:04 2026 GMT Subject: CN=c3aadc5fbfd0c69428ae70f521d0cd256b71c0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8e:a2:c0:b0:9f:fb:61:e5:71:b0:10:e2:1d: 43:bb:38:ef:78:c5:74:a4:ae:21:2f:65:c9:37:93: 11:98:5b:c7:3f:49:03:d0:e9:cc:2a:37:f3:74:67: 98:9a:d5:25:96:61:f8:6c:bb:21:14:07:10:32:00: 2e:25:c9:54:b3:38:e0:7d:38:1f:ea:49:1a:09:48: b5:ff:46:21:3f:ae:51:97:e2:89:58:43:ed:04:5e: 29:64:89:af:c7:c9:f5:35:4f:3c:16:da:f3:e2:21: b1:62:86:35:bd:ad:2b:12:31:df:14:ef:f2:2e:64: a0:8a:f6:32:be:cc:fe:96:20:94:e0:47:a2:82:ed: 27:dd:e0:20:a4:c7:df:5c:49:37:a8:5a:5c:0d:91: 4d:3c:4b:07:7f:fd:c0:68:ca:b5:95:bb:3a:8a:a4: 12:8f:e8:2c:2d:5b:88:63:8e:9a:79:52:d1:0c:ad: 03:cb:7e:9e:39:83:78:ed:cc:82:e3:3d:7e:0e:cf: af:d0:07:9d:17:78:ee:c2:c0:ac:da:da:4c:7d:5f: 2f:11:72:a3:a5:da:ee:f1:d5:5d:05:c3:62:22:7e: 63:85:ee:60:69:06:ce:e5:59:ac:4d:e0:b9:35:28: 32:79:89:40:28:f1:0d:55:7e:2f:c8:e6:d4:43:74: 6a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AA:DC:5F:BF:D0:C6:94:28:AE:70:F5:21:D0:CD:25:6B:71:C0:CA X509v3 Authority Key Identifier: keyid:07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:de:6d:28:92:4c:b3:51:a0:c9:03:f3:46:4a:48:b0:dc:c3: 05:ea:a5:de:c6:0c:c8:23:1f:f1:16:5c:8a:25:b6:82:64:91: 82:5a:8b:5e:64:ae:54:5d:ca:7c:fb:80:04:de:bb:63:5e:86: 97:86:a9:65:82:89:50:5c:25:42:b6:2c:46:6f:5c:03:d2:87: 7c:ee:68:27:6c:48:47:f6:a3:09:f3:12:74:43:a8:81:1a:8f: 22:01:16:e0:5d:4b:be:3c:26:b1:05:fa:bc:e9:8c:e1:ed:48: a9:c8:69:b0:24:01:04:52:ca:10:c6:93:c2:4f:65:53:c3:6d: 2e:35:4d:02:70:e0:c6:59:71:01:f2:03:c7:f8:df:e9:91:ca: 64:9a:b2:71:b6:3c:0b:88:9d:f6:11:5c:06:4b:d6:74:ba:e3: 48:06:69:5e:dd:ac:5b:eb:ec:3c:45:d9:b5:db:e2:23:ac:82: 84:2f:f3:c7:1b:cc:b0:f6:bf:62:f0:14:62:84:f6:92:73:f9: 82:52:e6:66:c8:61:a7:a0:ff:f1:45:7a:e4:83:e1:71:93:f8: ec:0f:6f:7b:e2:1a:dd:b5:75:c3:d0:7c:fa:48:93:dc:d9:4e: 41:c8:e1:56:b7:ce:12:32:7f:60:0e:72:3a:cf:aa:9e:47:4c: a7:d2:3f:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B3HDg0MSVOkIKRrStePrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZGIyM2E1ZTI1NTBmZjk3NGNhNWY0MTkxN2FjODY3ZDUw ZTM1ZTkwHhcNMjYwMTI1MTIwMTA0WhcNMjYwMTI2MTIwMTA0WjAzMTEwLwYDVQQD EyhjM2FhZGM1ZmJmZDBjNjk0MjhhZTcwZjUyMWQwY2QyNTZiNzFjMGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp46iwLCf+2HlcbAQ4h1DuzjveMV0 pK4hL2XJN5MRmFvHP0kD0OnMKjfzdGeYmtUllmH4bLshFAcQMgAuJclUszjgfTgf 6kkaCUi1/0YhP65Rl+KJWEPtBF4pZImvx8n1NU88Ftrz4iGxYoY1va0rEjHfFO/y LmSgivYyvsz+liCU4Eeigu0n3eAgpMffXEk3qFpcDZFNPEsHf/3AaMq1lbs6iqQS j+gsLVuIY46aeVLRDK0Dy36eOYN47cyC4z1+Ds+v0AedF3juwsCs2tpMfV8vEXKj pdru8dVdBcNiIn5jhe5gaQbO5VmsTeC5NSgyeYlAKPENVX4vyObUQ3Rq8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOq3F+/0MaUKK5w9SHQzSVrccDKMB8GA1UdIwQY MBaAFAfbI6XiVQ/5dMpfQZF6yGfVDjXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlzanBlSlZEX2wweWw5QmtYcklaOVVPTmVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wMzA1Y2QtMGQ3MS00MjBhLWJlMzgt NWNjZDVlOWNlMDA0LzEvQjlzanBlSlZEX2wweWw5QmtYcklaOVVPTmVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wMzA1Y2QtMGQ3MS00MjBhLWJlMzgtNWNjZDVlOWNlMDA0 LzEvQjlzanBlSlZEX2wweWw5QmtYcklaOVVPTmVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc95tKJJM s1GgyQPzRkpIsNzDBeql3sYMyCMf8RZciiW2gmSRglqLXmSuVF3KfPuABN67Y16G l4apZYKJUFwlQrYsRm9cA9KHfO5oJ2xIR/ajCfMSdEOogRqPIgEW4F1LvjwmsQX6 vOmM4e1IqchpsCQBBFLKEMaTwk9lU8NtLjVNAnDgxllxAfIDx/jf6ZHKZJqycbY8 C4id9hFcBkvWdLrjSAZpXt2sW+vsPEXZtdviI6yChC/zxxvMsPa/YvAUYoT2knP5 glLmZshhp6D/8UV65IPhcZP47A9ve+Ia3bV1w9B8+kiT3NlOQcjhVrfOEjJ/YA5y Os+qnkdMp9I/Mg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:45:11 2026 by rpki-client