This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft File: t09j_Q3Bl-Uq0nInbEDT7kux15k.mft (raw, json) Hash identifier: Du6jskgpirLlBSfTuxua4dI2+Ty5mCqTaHarfRlivWc= Subject key identifier: 57:9E:F2:78:B3:4C:EA:54:37:BB:8E:94:14:FF:28:B1:CE:23:A6:35 Authority key identifier: B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99 Certificate issuer: /CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799 Certificate serial: 019BF87691402642F974473F027ABC96FC81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft Manifest number: 158D Signing time: Mon 26 Jan 2026 04:01:18 +0000 Manifest this update: Mon 26 Jan 2026 04:01:18 +0000 Manifest next update: Tue 27 Jan 2026 04:01:18 +0000 Files and hashes: 1: QkD6kvbjOFF159SqIoxtVy6uYtw.roa (hash: moRNSt3cT3MEpll0Dp7Um5vSYqeXw33T13RgwrHAltU=) 2: t09j_Q3Bl-Uq0nInbEDT7kux15k.crl (hash: coSfbaUQQV8Ur/llPUOJdw2FREKBWt46M+4Y/3KJk5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:91:40:26:42:f9:74:47:3f:02:7a:bc:96:fc:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799 Validity Not Before: Jan 26 04:01:18 2026 GMT Not After : Jan 27 04:01:18 2026 GMT Subject: CN=579ef278b34cea5437bb8e9414ff28b1ce23a635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:28:3d:c3:c6:ad:37:39:a8:b7:17:61:ce:48: 61:84:ed:64:7b:ca:00:9b:b0:15:d8:94:13:76:97: 80:52:4a:dd:55:63:95:68:b2:c2:57:f8:f4:0d:a7: b1:38:c8:7a:29:57:8f:3d:2b:8b:26:57:72:8c:44: 34:3d:7a:a9:b3:8e:32:a6:cd:95:08:bb:71:e1:4c: 51:e3:25:e7:b2:d4:25:c2:e3:15:9c:76:3d:6a:be: dd:ed:82:9e:89:16:d9:cb:12:0f:09:7d:ff:2f:1e: 79:b1:88:43:a9:b8:a8:1d:ab:90:54:5f:e4:80:f1: 57:d6:8c:77:b6:cf:ef:7e:cf:30:4d:48:bf:af:95: 41:bc:b7:86:2a:47:f7:32:4b:d2:e1:52:35:e2:63: d3:b4:15:88:49:84:30:98:04:ec:d3:2c:ee:ab:33: fe:18:3a:a0:61:38:cd:a3:71:c7:95:1e:94:2e:4a: d1:d4:c5:73:90:67:4a:52:54:ee:5e:70:14:9f:37: 5e:77:df:3a:8b:c9:f4:21:4e:46:c2:fb:39:9d:b6: b1:20:75:72:8f:55:a0:96:77:b1:60:ee:fe:2e:67: e0:c0:b8:66:04:0d:2c:62:06:c9:01:27:3a:c3:97: c8:44:b2:17:48:16:3d:f9:54:32:25:58:6f:a6:78: e5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9E:F2:78:B3:4C:EA:54:37:BB:8E:94:14:FF:28:B1:CE:23:A6:35 X509v3 Authority Key Identifier: keyid:B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:48:05:ab:d7:c3:ff:20:e3:b2:e6:3e:53:3d:a6:90:9d:fb: 30:66:eb:d9:63:5d:c7:df:cb:ba:47:6e:ed:c9:3e:69:1f:9a: 8d:09:b6:18:ce:8e:3f:11:df:d7:db:5f:ee:09:f6:2a:7b:f9: 5c:9c:18:ad:3c:a5:82:73:0a:c5:21:83:2c:43:ba:68:f9:50: eb:43:da:0b:aa:90:1e:45:8a:28:27:cf:c7:c2:70:7b:ae:12: 93:29:56:19:56:2e:31:b4:9f:fa:a2:7a:18:4f:d1:04:fe:5e: 69:af:4b:a7:82:d6:46:7e:11:74:4b:a5:0b:28:dd:c1:e8:18: aa:58:d1:2e:09:95:8f:15:0c:fa:18:65:0f:5f:f6:f0:1c:ab: ae:c7:72:36:cf:f2:6e:e7:67:74:13:1e:a0:c6:f9:7e:26:3e: 16:61:e4:3b:fa:87:c8:c5:1f:1b:b8:b6:09:c7:55:39:7d:0f: a7:9c:79:eb:8f:69:9c:2b:b8:0c:bf:e8:0c:b3:5c:0b:22:76: ed:9d:4d:37:56:04:7e:4e:6d:a7:b7:50:18:1e:0a:92:dc:16: 54:f6:07:5c:3b:a8:8e:a7:24:ad:bc:c8:3e:f1:0c:c3:47:ee: c7:ae:db:12:80:9c:5b:ac:e4:3f:35:3f:cd:6f:b2:aa:40:ca: 64:f5:c4:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dpFAJkL5dEc/Anq8lvyBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NGY2M2ZkMGRjMTk3ZTUyYWQyNzIyNzZjNDBkM2VlNGJi MWQ3OTkwHhcNMjYwMTI2MDQwMTE4WhcNMjYwMTI3MDQwMTE4WjAzMTEwLwYDVQQD Eyg1NzllZjI3OGIzNGNlYTU0MzdiYjhlOTQxNGZmMjhiMWNlMjNhNjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCg9w8atNzmotxdhzkhhhO1ke8oA m7AV2JQTdpeAUkrdVWOVaLLCV/j0DaexOMh6KVePPSuLJldyjEQ0PXqps44yps2V CLtx4UxR4yXnstQlwuMVnHY9ar7d7YKeiRbZyxIPCX3/Lx55sYhDqbioHauQVF/k gPFX1ox3ts/vfs8wTUi/r5VBvLeGKkf3MkvS4VI14mPTtBWISYQwmATs0yzuqzP+ GDqgYTjNo3HHlR6ULkrR1MVzkGdKUlTuXnAUnzded986i8n0IU5Gwvs5nbaxIHVy j1WglnexYO7+LmfgwLhmBA0sYgbJASc6w5fIRLIXSBY9+VQyJVhvpnjlawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFee8nizTOpUN7uOlBT/KLHOI6Y1MB8GA1UdIwQY MBaAFLdPY/0NwZflKtJyJ2xA0+5LsdeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDA5al9RM0JsLVVxMG5JbmJFRFQ3a3V4MTVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85ODExNzYtNGQxMC00ODU5LWJhMGYt MWQyMmIwMmI5YjFiLzEvdDA5al9RM0JsLVVxMG5JbmJFRFQ3a3V4MTVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS85ODExNzYtNGQxMC00ODU5LWJhMGYtMWQyMmIwMmI5YjFi LzEvdDA5al9RM0JsLVVxMG5JbmJFRFQ3a3V4MTVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUgFq9fD /yDjsuY+Uz2mkJ37MGbr2WNdx9/Lukdu7ck+aR+ajQm2GM6OPxHf19tf7gn2Knv5 XJwYrTylgnMKxSGDLEO6aPlQ60PaC6qQHkWKKCfPx8Jwe64SkylWGVYuMbSf+qJ6 GE/RBP5eaa9Lp4LWRn4RdEulCyjdwegYqljRLgmVjxUM+hhlD1/28ByrrsdyNs/y budndBMeoMb5fiY+FmHkO/qHyMUfG7i2CcdVOX0Pp5x5649pnCu4DL/oDLNcCyJ2 7Z1NN1YEfk5tp7dQGB4KktwWVPYHXDuojqckrbzIPvEMw0fux67bEoCcW6zkPzU/ zW+yqkDKZPXETw== -----END CERTIFICATE-----Generated at Mon Jan 26 12:36:40 2026 by rpki-client