This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft File: r9rCQfMBCxrkhLwx9YStD50gZzQ.mft (raw, json) Hash identifier: d+iP5TajD72sO0ToUsZMc2tyK+DiiO4IsDZUYEjnNIg= Subject key identifier: 25:E1:50:2B:9D:33:D8:81:E3:B0:60:DC:AD:C9:76:3C:A4:5D:D6:13 Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34 Certificate issuer: /CN=afdac241f3010b1ae484bc31f584ad0f9d206734 Certificate serial: 019BF650CB8E062FF8F48360673557AC5BEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft Manifest number: 0DAF Signing time: Sun 25 Jan 2026 18:00:48 +0000 Manifest this update: Sun 25 Jan 2026 18:00:48 +0000 Manifest next update: Mon 26 Jan 2026 18:00:48 +0000 Files and hashes: 1: NYQTyqXhO5SfIKalilF-9jPbRJo.roa (hash: 5lrctU6hrWDAzuX+vKa0ZLHPNzNKbXOgcE47QemStpE=) 2: r9rCQfMBCxrkhLwx9YStD50gZzQ.crl (hash: DRT6R8OQNQmvgKGIEqryyt3rCpr32YiKa2FsGSm/XB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:cb:8e:06:2f:f8:f4:83:60:67:35:57:ac:5b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734 Validity Not Before: Jan 25 18:00:48 2026 GMT Not After : Jan 26 18:00:48 2026 GMT Subject: CN=25e1502b9d33d881e3b060dcadc9763ca45dd613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d4:0f:e4:ae:f2:e3:18:0f:90:93:f6:fc:b8: 02:d5:57:3c:4f:34:34:24:e5:31:32:5d:8b:7f:83: c1:7e:3a:67:a0:78:0e:81:f0:6c:d1:2e:6d:48:26: f1:19:f4:60:25:4d:62:23:18:21:15:db:18:2e:22: 28:f3:4b:9d:b6:29:11:6f:24:bb:c2:f1:50:36:5e: f0:b7:a9:11:5e:aa:cb:a8:af:ae:8e:62:d5:da:7b: 86:43:3b:9a:bf:0f:0f:30:a5:94:e5:71:41:99:09: 4f:1c:e2:12:0f:1e:87:f2:32:b3:f6:38:72:4e:98: 5e:17:75:1c:1e:c1:04:82:e8:3b:40:a6:5b:07:f5: 28:86:c8:ac:0a:a1:34:5c:b0:43:89:92:ae:8a:96: c3:27:81:86:69:b9:4e:1f:f2:fc:bb:a2:09:bd:fc: e2:20:f9:96:e8:dc:b4:35:33:a3:ce:41:c7:31:81: 68:c0:b4:41:69:f4:da:be:13:fe:cd:ba:c1:3b:a9: 5b:3e:7d:c0:b0:5c:ec:c0:79:a5:a3:9e:75:e4:aa: ff:5e:c4:0d:54:8c:4f:f5:04:e4:66:70:a4:79:98: d1:0e:bc:77:56:db:24:4a:65:19:5c:5d:7d:83:b4: ae:3a:53:90:85:1c:bc:08:06:eb:f0:5f:6f:d9:cd: 51:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E1:50:2B:9D:33:D8:81:E3:B0:60:DC:AD:C9:76:3C:A4:5D:D6:13 X509v3 Authority Key Identifier: keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d2:e4:b5:c3:8d:59:90:b2:22:55:25:ae:7e:15:b5:3e:f4: 26:5f:9f:19:1a:59:3c:4d:eb:73:ae:2b:11:04:7a:56:4e:4d: cb:55:5f:75:14:6f:69:68:56:a2:58:ee:a5:2b:eb:33:b7:e6: 41:ff:a9:b5:70:d0:d4:84:86:30:dc:6a:75:84:76:36:25:78: 79:42:d3:a8:8d:a7:8b:de:b1:f1:08:8d:b4:ba:48:74:ff:43: ed:c8:d6:93:2e:f3:a6:e6:83:7c:c8:7b:cd:1f:85:38:dd:66: f3:69:ec:82:78:58:51:50:55:47:4e:d4:af:e8:ad:91:26:bf: e3:b4:ea:b6:bc:48:de:f4:56:0e:40:c8:f7:c1:b9:85:0e:79: 42:a3:40:a7:70:73:0b:7d:5b:e0:85:25:89:c0:c3:92:34:94: 8d:28:a9:03:4a:56:27:02:92:2e:44:e0:a2:4f:ca:a1:53:4b: 60:41:46:53:47:e6:87:44:9d:92:a3:b1:08:b8:3d:cc:f4:52: 36:62:7c:9e:bd:b3:f0:27:7a:f4:4e:30:7a:c7:24:ba:5f:59: 33:c7:06:bc:32:ea:17:1b:f0:8f:ce:ee:47:b2:17:ac:2b:42: 9a:d6:2c:9d:b2:9b:42:bb:44:e2:f6:a4:46:e1:0c:57:22:eb: 7b:fe:36:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UMuOBi/49INgZzVXrFvuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZGFjMjQxZjMwMTBiMWFlNDg0YmMzMWY1ODRhZDBmOWQy MDY3MzQwHhcNMjYwMTI1MTgwMDQ4WhcNMjYwMTI2MTgwMDQ4WjAzMTEwLwYDVQQD EygyNWUxNTAyYjlkMzNkODgxZTNiMDYwZGNhZGM5NzYzY2E0NWRkNjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NQP5K7y4xgPkJP2/LgC1Vc8TzQ0 JOUxMl2Lf4PBfjpnoHgOgfBs0S5tSCbxGfRgJU1iIxghFdsYLiIo80udtikRbyS7 wvFQNl7wt6kRXqrLqK+ujmLV2nuGQzuavw8PMKWU5XFBmQlPHOISDx6H8jKz9jhy TpheF3UcHsEEgug7QKZbB/UohsisCqE0XLBDiZKuipbDJ4GGablOH/L8u6IJvfzi IPmW6Ny0NTOjzkHHMYFowLRBafTavhP+zbrBO6lbPn3AsFzswHmlo5515Kr/XsQN VIxP9QTkZnCkeZjRDrx3VtskSmUZXF19g7SuOlOQhRy8CAbr8F9v2c1R4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXhUCudM9iB47Bg3K3JdjykXdYTMB8GA1UdIwQY MBaAFK/awkHzAQsa5IS8MfWErQ+dIGc0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjlyQ1FmTUJDeHJraEx3eDlZU3RENTBnWnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lYjdhNjUtZjllNi00Nzg0LThmZjct NGI0ZjBmNmY3NTIyLzEvcjlyQ1FmTUJDeHJraEx3eDlZU3RENTBnWnpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9lYjdhNjUtZjllNi00Nzg0LThmZjctNGI0ZjBmNmY3NTIy LzEvcjlyQ1FmTUJDeHJraEx3eDlZU3RENTBnWnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndLktcON WZCyIlUlrn4VtT70Jl+fGRpZPE3rc64rEQR6Vk5Ny1VfdRRvaWhWoljupSvrM7fm Qf+ptXDQ1ISGMNxqdYR2NiV4eULTqI2ni96x8QiNtLpIdP9D7cjWky7zpuaDfMh7 zR+FON1m82nsgnhYUVBVR07Ur+itkSa/47TqtrxI3vRWDkDI98G5hQ55QqNAp3Bz C31b4IUlicDDkjSUjSipA0pWJwKSLkTgok/KoVNLYEFGU0fmh0SdkqOxCLg9zPRS NmJ8nr2z8Cd69E4wesckul9ZM8cGvDLqFxvwj87uR7IXrCtCmtYsnbKbQrtE4vak RuEMVyLre/42YA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:22:03 2026 by rpki-client