This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft File: 9f3nK_WgC97E0e_dfQICnueeRyA.mft (raw, json) Hash identifier: oe3YzPZ1RS6VotKRwufZooE6auHqZ+WiiEQwuz1Fogw= Subject key identifier: BC:41:B2:6F:D3:C9:F4:CA:9D:C2:60:9A:6C:09:94:D7:C8:9C:0A:1A Authority key identifier: F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20 Certificate issuer: /CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720 Certificate serial: 019BF34FD76149388266329752C4427439E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft Manifest number: 0BB4 Signing time: Sun 25 Jan 2026 04:00:54 +0000 Manifest this update: Sun 25 Jan 2026 04:00:54 +0000 Manifest next update: Mon 26 Jan 2026 04:00:54 +0000 Files and hashes: 1: 9f3nK_WgC97E0e_dfQICnueeRyA.crl (hash: T4fbdyjPbqPYHowaxFyMN8Ek4IrHffqnsIWyr6qsZT8=) 2: IWvsOje1ZxTQJm3iMyMgDBCOgIE.roa (hash: kaYliqjJkqMdXwb3B1wUhcuY3L6iumjr0MlG0shhuGo=) 3: sP7IVsNCNnn_B2GtU6Sg79Zwhew.roa (hash: izWuWKp2wnvE2HYeue8Y8Mj2HM1TQYV8MhNOeFXRVUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:d7:61:49:38:82:66:32:97:52:c4:42:74:39:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fde72bf5a00bdec4d1efdd7d02029ee79e4720 Validity Not Before: Jan 25 04:00:54 2026 GMT Not After : Jan 26 04:00:54 2026 GMT Subject: CN=bc41b26fd3c9f4ca9dc2609a6c0994d7c89c0a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c6:d7:fd:b9:5b:b6:20:cc:ec:4e:db:2b:18: cc:a7:3c:c6:11:de:a4:5f:f2:48:40:e5:3f:fe:16: 88:0b:9a:bf:eb:0f:6d:02:4f:89:c7:e9:c0:04:02: b0:e4:76:67:4d:e3:97:13:bd:be:8c:d7:36:20:e0: 3e:13:f5:21:15:b9:ae:ef:de:7e:77:37:65:9e:43: 2f:59:9c:d3:af:3f:d2:f6:5a:c2:ac:77:b1:f0:76: e7:22:78:1f:ab:19:bc:31:25:d7:c3:bd:8e:90:56: b1:5d:0d:c8:8d:c1:98:ba:a1:78:04:8c:35:48:43: 85:76:fd:02:e1:a1:69:d6:d9:b9:c0:1f:09:cd:a8: 73:a4:fa:b5:44:50:30:e2:7d:3a:ca:e3:32:2f:48: 07:f2:8b:76:91:4b:2f:a5:d2:62:ce:f7:00:d1:d3: 72:3b:0f:86:f2:ed:fb:13:d5:68:ff:70:d7:9c:11: 35:2e:fd:1c:2b:d0:98:a4:dc:8d:ee:6f:1b:64:d1: 70:82:07:a8:b0:4f:45:75:23:92:5f:97:50:eb:6a: 3a:e5:e5:83:9b:73:a8:2b:22:91:42:28:57:f1:ab: b4:aa:10:c0:5b:08:df:d5:e2:ff:09:30:2a:aa:9e: 60:63:c0:e3:6e:0c:1e:3b:ba:49:0f:62:92:df:d8: bf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:41:B2:6F:D3:C9:F4:CA:9D:C2:60:9A:6C:09:94:D7:C8:9C:0A:1A X509v3 Authority Key Identifier: keyid:F5:FD:E7:2B:F5:A0:0B:DE:C4:D1:EF:DD:7D:02:02:9E:E7:9E:47:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f3nK_WgC97E0e_dfQICnueeRyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34c2e4-4e9b-4847-a8ef-0838f78c0259/1/9f3nK_WgC97E0e_dfQICnueeRyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:7d:5a:12:ec:ed:51:02:fe:60:de:3d:09:75:12:78:55:fb: e2:3f:2b:66:c5:95:f8:d5:e8:82:47:3f:81:7c:98:9e:13:9b: 25:37:f9:3f:c4:07:29:11:5c:7c:11:6f:46:06:df:6d:a0:18: e2:56:30:52:2e:cd:15:8a:4f:b6:bc:0a:a8:06:9b:76:12:93: c9:8b:a4:67:30:9d:e3:8d:99:f0:0f:58:d0:9f:72:52:49:00: 70:93:84:f5:61:c4:c7:f2:94:fb:1c:54:ef:bd:39:a2:11:4d: be:fc:79:69:93:f2:42:43:98:d6:c1:73:71:03:81:d9:82:f4: e4:4b:ab:a2:c9:08:26:6e:22:2c:cb:b7:25:2a:d6:18:12:80: 9d:b3:08:3c:93:a6:30:b5:1b:5e:56:61:26:d0:c6:1b:54:ff: 8c:2d:dd:b9:5a:43:7b:83:7c:aa:e7:0d:87:22:91:c8:19:3f: 8e:f7:b3:81:35:a5:50:36:53:64:62:35:2f:e6:1b:35:6e:01: 71:dd:60:df:73:8b:75:98:ba:17:85:ae:5d:15:f4:54:8b:fb: c3:26:17:86:03:80:d4:b0:c0:12:50:bf:73:ba:1c:c9:52:ca: 52:77:74:46:51:14:03:96:f3:ce:81:3f:b5:78:e8:cf:11:60: 8d:ec:ff:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT9dhSTiCZjKXUsRCdDnhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmRlNzJiZjVhMDBiZGVjNGQxZWZkZDdkMDIwMjllZTc5 ZTQ3MjAwHhcNMjYwMTI1MDQwMDU0WhcNMjYwMTI2MDQwMDU0WjAzMTEwLwYDVQQD EyhiYzQxYjI2ZmQzYzlmNGNhOWRjMjYwOWE2YzA5OTRkN2M4OWMwYTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucbX/blbtiDM7E7bKxjMpzzGEd6k X/JIQOU//haIC5q/6w9tAk+Jx+nABAKw5HZnTeOXE72+jNc2IOA+E/UhFbmu795+ dzdlnkMvWZzTrz/S9lrCrHex8HbnIngfqxm8MSXXw72OkFaxXQ3IjcGYuqF4BIw1 SEOFdv0C4aFp1tm5wB8JzahzpPq1RFAw4n06yuMyL0gH8ot2kUsvpdJizvcA0dNy Ow+G8u37E9Vo/3DXnBE1Lv0cK9CYpNyN7m8bZNFwggeosE9FdSOSX5dQ62o65eWD m3OoKyKRQihX8au0qhDAWwjf1eL/CTAqqp5gY8DjbgweO7pJD2KS39i/gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxBsm/TyfTKncJgmmwJlNfInAoaMB8GA1UdIwQY MBaAFPX95yv1oAvexNHv3X0CAp7nnkcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWYzbktfV2dDOTdFMGVfZGZRSUNudWVlUnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zNGMyZTQtNGU5Yi00ODQ3LWE4ZWYt MDgzOGY3OGMwMjU5LzEvOWYzbktfV2dDOTdFMGVfZGZRSUNudWVlUnlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8zNGMyZTQtNGU5Yi00ODQ3LWE4ZWYtMDgzOGY3OGMwMjU5 LzEvOWYzbktfV2dDOTdFMGVfZGZRSUNudWVlUnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASX1aEuzt UQL+YN49CXUSeFX74j8rZsWV+NXogkc/gXyYnhObJTf5P8QHKRFcfBFvRgbfbaAY 4lYwUi7NFYpPtrwKqAabdhKTyYukZzCd442Z8A9Y0J9yUkkAcJOE9WHEx/KU+xxU 7705ohFNvvx5aZPyQkOY1sFzcQOB2YL05EuroskIJm4iLMu3JSrWGBKAnbMIPJOm MLUbXlZhJtDGG1T/jC3duVpDe4N8qucNhyKRyBk/jvezgTWlUDZTZGI1L+YbNW4B cd1g33OLdZi6F4WuXRX0VIv7wyYXhgOA1LDAElC/c7ocyVLKUnd0RlEUA5bzzoE/ tXjozxFgjez/lw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:52:37 2026 by rpki-client