This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft File: t09j_Q3Bl-Uq0nInbEDT7kux15k.mft (raw, json) Hash identifier: y2EiJkWjyIwsbE6+eEgbFvVxcsmriArJ0w1HkunvYAo= Subject key identifier: 0F:12:61:2D:AC:64:3B:96:21:96:BC:FF:E7:0C:B8:C9:7D:DB:61:B2 Authority key identifier: B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99 Certificate issuer: /CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799 Certificate serial: 019BFA64A3D6F4CDCF81BE3F18106FAA1E03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft Manifest number: 158E Signing time: Mon 26 Jan 2026 13:00:58 +0000 Manifest this update: Mon 26 Jan 2026 13:00:58 +0000 Manifest next update: Tue 27 Jan 2026 13:00:58 +0000 Files and hashes: 1: QkD6kvbjOFF159SqIoxtVy6uYtw.roa (hash: moRNSt3cT3MEpll0Dp7Um5vSYqeXw33T13RgwrHAltU=) 2: t09j_Q3Bl-Uq0nInbEDT7kux15k.crl (hash: qR2YCxGjPbJgMheHLp7J7yJjqVa6yM/JTJN431yQFac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:a3:d6:f4:cd:cf:81:be:3f:18:10:6f:aa:1e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799 Validity Not Before: Jan 26 13:00:58 2026 GMT Not After : Jan 27 13:00:58 2026 GMT Subject: CN=0f12612dac643b962196bcffe70cb8c97ddb61b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7c:f8:b2:e0:67:8e:d0:4d:bb:35:57:6f:6d: 6c:fb:2e:27:4d:e7:12:71:0c:2d:94:ee:14:de:56: 08:dd:cd:51:64:eb:c7:0f:21:95:3a:db:44:f6:6d: d7:0a:70:85:2d:75:7f:4a:11:b4:04:ed:94:9c:ff: ef:d7:ba:84:01:af:2c:ac:02:2d:f8:39:ac:b5:f1: 8e:2a:63:0c:a4:ed:d2:da:2a:a7:91:20:0a:3f:73: f1:ae:3b:cc:fd:56:b7:2a:82:32:51:c5:65:a6:2f: 64:85:33:2d:9b:63:01:0d:35:91:ba:89:bf:f9:26: ae:a9:56:30:65:d7:10:05:ec:00:2c:79:e3:84:60: 3a:23:d6:2f:5d:cd:dc:a8:de:68:99:54:2b:c6:9a: b1:2b:a3:77:fa:ea:23:95:61:f4:55:f5:14:63:32: e0:de:04:74:5b:28:30:18:46:fa:e7:85:73:62:73: 8e:0f:2f:42:11:6c:92:62:67:23:b0:14:a4:94:ff: b5:32:6b:9e:a9:19:f1:3b:d0:2b:9b:99:45:b8:fd: 1a:64:b6:8e:e0:e5:9c:96:00:44:af:83:80:95:98: 57:e7:e5:64:bf:64:2e:da:f1:0e:fd:fc:6a:95:31: 7f:e4:e8:88:a1:65:6a:e0:4a:37:0f:c0:bc:5a:6d: 62:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:12:61:2D:AC:64:3B:96:21:96:BC:FF:E7:0C:B8:C9:7D:DB:61:B2 X509v3 Authority Key Identifier: keyid:B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0f:31:b6:5d:0b:ca:c2:40:47:e6:ad:de:2a:70:14:67:f1: 82:d0:f1:2e:b3:cd:de:25:76:6a:23:d5:a8:6b:97:27:fd:e0: 04:a5:24:44:5b:0e:84:f6:f2:7d:3b:13:23:92:a5:17:36:4d: 15:a0:d1:fb:d3:ff:c2:8a:ff:9a:92:c4:bd:4b:0f:ce:bb:7e: 82:6a:c0:a3:c8:0a:17:15:e3:8d:d4:06:1c:26:f2:43:4c:70: 07:ab:c3:e0:a6:62:f5:16:e3:83:45:86:db:fa:80:63:2e:e2: 51:9d:70:00:82:6e:c3:f3:ce:11:24:f1:d2:6c:7f:b7:b4:af: 94:56:6a:f9:20:f3:b7:82:18:3f:e5:dc:d7:29:7a:be:1b:95: 7d:a1:35:c4:2e:82:76:a5:cb:51:de:1e:c2:a6:9f:99:83:be: 31:9b:03:aa:dd:7f:c8:8a:8e:f0:d1:2e:67:97:fe:7f:31:a7: d6:79:81:27:0f:50:16:50:1b:db:a1:6b:b7:92:9e:5e:18:1f: 31:f5:89:5a:ab:50:b2:9d:d3:ec:21:ca:65:bc:97:ab:56:44: c6:d2:20:0c:28:a0:06:d6:4f:8b:17:e2:63:60:06:6c:8f:6f: 21:05:54:7d:1b:75:4a:e9:d3:f8:16:73:60:20:83:74:63:a5: 0c:52:8d:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZKPW9M3Pgb4/GBBvqh4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NGY2M2ZkMGRjMTk3ZTUyYWQyNzIyNzZjNDBkM2VlNGJi MWQ3OTkwHhcNMjYwMTI2MTMwMDU4WhcNMjYwMTI3MTMwMDU4WjAzMTEwLwYDVQQD EygwZjEyNjEyZGFjNjQzYjk2MjE5NmJjZmZlNzBjYjhjOTdkZGI2MWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Hz4suBnjtBNuzVXb21s+y4nTecS cQwtlO4U3lYI3c1RZOvHDyGVOttE9m3XCnCFLXV/ShG0BO2UnP/v17qEAa8srAIt +DmstfGOKmMMpO3S2iqnkSAKP3PxrjvM/Va3KoIyUcVlpi9khTMtm2MBDTWRuom/ +SauqVYwZdcQBewALHnjhGA6I9YvXc3cqN5omVQrxpqxK6N3+uojlWH0VfUUYzLg 3gR0WygwGEb654VzYnOODy9CEWySYmcjsBSklP+1MmueqRnxO9Arm5lFuP0aZLaO 4OWclgBEr4OAlZhX5+Vkv2Qu2vEO/fxqlTF/5OiIoWVq4Eo3D8C8Wm1iUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8SYS2sZDuWIZa8/+cMuMl922GyMB8GA1UdIwQY MBaAFLdPY/0NwZflKtJyJ2xA0+5LsdeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDA5al9RM0JsLVVxMG5JbmJFRFQ3a3V4MTVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85ODExNzYtNGQxMC00ODU5LWJhMGYt MWQyMmIwMmI5YjFiLzEvdDA5al9RM0JsLVVxMG5JbmJFRFQ3a3V4MTVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS85ODExNzYtNGQxMC00ODU5LWJhMGYtMWQyMmIwMmI5YjFi LzEvdDA5al9RM0JsLVVxMG5JbmJFRFQ3a3V4MTVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASw8xtl0L ysJAR+at3ipwFGfxgtDxLrPN3iV2aiPVqGuXJ/3gBKUkRFsOhPbyfTsTI5KlFzZN FaDR+9P/wor/mpLEvUsPzrt+gmrAo8gKFxXjjdQGHCbyQ0xwB6vD4KZi9Rbjg0WG 2/qAYy7iUZ1wAIJuw/POESTx0mx/t7SvlFZq+SDzt4IYP+Xc1yl6vhuVfaE1xC6C dqXLUd4ewqafmYO+MZsDqt1/yIqO8NEuZ5f+fzGn1nmBJw9QFlAb26Frt5KeXhgf MfWJWqtQsp3T7CHKZbyXq1ZExtIgDCigBtZPixfiY2AGbI9vIQVUfRt1SunT+BZz YCCDdGOlDFKNOg== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:44 2026 by rpki-client