This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft File: RV9UXiqU8FHOuPgPRGwcthwObI4.mft (raw, json) Hash identifier: 9IX7W54WbGXJ2cl3MhUF6OgaIkUeWAj6Li/ip5fU2bE= Subject key identifier: B3:7A:45:B8:44:70:9E:63:C0:F1:1D:CB:B1:6B:BD:05:56:73:C0:69 Authority key identifier: 45:5F:54:5E:2A:94:F0:51:CE:B8:F8:0F:44:6C:1C:B6:1C:0E:6C:8E Certificate issuer: /CN=455f545e2a94f051ceb8f80f446c1cb61c0e6c8e Certificate serial: 019BF507A22EFD6A045C47101789633B2965 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft Manifest number: 020B Signing time: Sun 25 Jan 2026 12:01:16 +0000 Manifest this update: Sun 25 Jan 2026 12:01:16 +0000 Manifest next update: Mon 26 Jan 2026 12:01:16 +0000 Files and hashes: 1: RV9UXiqU8FHOuPgPRGwcthwObI4.crl (hash: 5ANwqb6IcLpIfzlgbUsRD+ID4UyJUZtni47y+Fpjtz4=) 2: TGnGTCkP1dTeSG5Z0jeGksx2_TM.roa (hash: 4RJjvyKtkRooo1Te20TythHJtDrbG5VCS6d6MKrm0hU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:a2:2e:fd:6a:04:5c:47:10:17:89:63:3b:29:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=455f545e2a94f051ceb8f80f446c1cb61c0e6c8e Validity Not Before: Jan 25 12:01:16 2026 GMT Not After : Jan 26 12:01:16 2026 GMT Subject: CN=b37a45b844709e63c0f11dcbb16bbd055673c069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a8:ba:b7:4e:24:f8:40:1d:43:89:d2:cc:4c: d5:ca:ad:26:61:25:e4:70:7a:1f:91:03:7d:fb:26: 14:9c:a5:09:27:ea:a7:6a:2c:fb:85:39:cd:42:70: 9c:96:47:f5:33:ed:bd:6d:ea:f7:2b:2c:6c:db:db: ce:45:d5:72:b5:bd:95:f4:3c:dd:60:92:7c:06:5d: 08:c9:02:75:12:43:7c:0b:8f:3b:23:22:df:28:58: e4:46:56:97:33:ba:74:32:47:98:57:96:f6:13:33: d1:82:e0:07:34:80:b2:f6:67:c6:2d:dd:e2:98:83: c5:8e:fb:38:26:67:de:c7:02:7a:34:0d:2f:ed:9c: cf:63:26:a3:4b:36:66:3a:c1:2f:65:72:0a:80:b8: 2a:b7:78:4c:3d:95:93:4b:61:e0:f2:21:df:ca:7e: fd:41:0d:c9:e2:ba:e5:2b:10:b7:ea:0e:ef:82:bf: a6:fb:f0:f5:d5:8d:43:e6:97:5e:ab:8a:b7:ab:7f: d8:7b:f8:ec:0d:3f:c7:ed:6f:f7:e1:c9:25:b2:90: 1b:71:ea:cf:00:8b:17:05:1e:23:a8:87:91:53:2d: c4:25:73:64:a7:c8:c5:fb:0f:52:ae:cd:d7:55:0c: 98:54:7e:a9:f4:54:06:a9:30:94:e3:dc:1f:20:5a: 2c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7A:45:B8:44:70:9E:63:C0:F1:1D:CB:B1:6B:BD:05:56:73:C0:69 X509v3 Authority Key Identifier: keyid:45:5F:54:5E:2A:94:F0:51:CE:B8:F8:0F:44:6C:1C:B6:1C:0E:6C:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:d3:c0:22:45:68:95:dc:79:65:df:49:c7:45:6d:f1:37:9f: 3b:e3:53:39:66:0f:fe:21:6f:f7:e4:ec:7f:8a:01:fc:a7:fb: 90:9f:59:28:f6:ac:33:d4:c1:c0:2e:d9:f5:5b:17:ec:76:e8: f4:bc:ed:ad:90:5f:43:e6:ac:0d:db:14:46:a1:24:a6:75:52: 85:19:ff:8d:df:c1:59:68:4f:b1:db:aa:7c:75:b0:34:8e:75: f2:e3:04:0a:04:e8:54:ea:8a:dc:ca:04:27:d3:5c:5f:62:e9: 27:46:e4:30:3c:2f:80:c3:48:55:9c:b0:94:42:c4:1e:52:22: 87:71:75:99:1d:1e:26:c4:e7:2b:05:d3:2c:30:da:0a:cc:1f: 1a:fe:c9:0c:88:22:c5:83:fe:81:e4:1b:a1:b3:cc:64:35:b7: 8c:8b:4c:93:b6:cb:2d:6a:5e:77:65:07:da:2d:a6:0b:83:8a: b1:20:d2:df:09:53:25:f1:b2:27:ed:ed:91:b3:1e:95:c3:09: af:b6:da:f0:cb:cd:12:84:f3:fe:4f:9d:7e:b5:8a:a7:78:0f: a3:8f:13:04:c8:02:8e:a5:8e:8f:0b:ad:71:f9:da:e2:22:64: 03:c9:1b:54:a4:40:83:23:be:69:58:b2:d0:91:a9:b1:1c:b6: e0:30:dc:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B6Iu/WoEXEcQF4ljOyllMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NWY1NDVlMmE5NGYwNTFjZWI4ZjgwZjQ0NmMxY2I2MWMw ZTZjOGUwHhcNMjYwMTI1MTIwMTE2WhcNMjYwMTI2MTIwMTE2WjAzMTEwLwYDVQQD EyhiMzdhNDViODQ0NzA5ZTYzYzBmMTFkY2JiMTZiYmQwNTU2NzNjMDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6i6t04k+EAdQ4nSzEzVyq0mYSXk cHofkQN9+yYUnKUJJ+qnaiz7hTnNQnCclkf1M+29ber3Kyxs29vORdVytb2V9Dzd YJJ8Bl0IyQJ1EkN8C487IyLfKFjkRlaXM7p0MkeYV5b2EzPRguAHNICy9mfGLd3i mIPFjvs4JmfexwJ6NA0v7ZzPYyajSzZmOsEvZXIKgLgqt3hMPZWTS2Hg8iHfyn79 QQ3J4rrlKxC36g7vgr+m+/D11Y1D5pdeq4q3q3/Ye/jsDT/H7W/34cklspAbcerP AIsXBR4jqIeRUy3EJXNkp8jF+w9Srs3XVQyYVH6p9FQGqTCU49wfIFospwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLN6RbhEcJ5jwPEdy7FrvQVWc8BpMB8GA1UdIwQY MBaAFEVfVF4qlPBRzrj4D0RsHLYcDmyOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlY5VVhpcVU4RkhPdVBnUFJHd2N0aHdPYkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lODQ0OWEtYTc5Ny00NTJiLWJkZmEt OWM0MjExZGRhNTQxLzEvUlY5VVhpcVU4RkhPdVBnUFJHd2N0aHdPYkk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lODQ0OWEtYTc5Ny00NTJiLWJkZmEtOWM0MjExZGRhNTQx LzEvUlY5VVhpcVU4RkhPdVBnUFJHd2N0aHdPYkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdPAIkVo ldx5Zd9Jx0Vt8TefO+NTOWYP/iFv9+Tsf4oB/Kf7kJ9ZKPasM9TBwC7Z9VsX7Hbo 9LztrZBfQ+asDdsURqEkpnVShRn/jd/BWWhPsduqfHWwNI518uMECgToVOqK3MoE J9NcX2LpJ0bkMDwvgMNIVZywlELEHlIih3F1mR0eJsTnKwXTLDDaCswfGv7JDIgi xYP+geQbobPMZDW3jItMk7bLLWped2UH2i2mC4OKsSDS3wlTJfGyJ+3tkbMelcMJ r7ba8MvNEoTz/k+dfrWKp3gPo48TBMgCjqWOjwutcfna4iJkA8kbVKRAgyO+aViy 0JGpsRy24DDc/A== -----END CERTIFICATE-----Generated at Sun Jan 25 20:12:04 2026 by rpki-client